CVE-2024-9427

{"id": "CVE-2024-9427", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 2.8}]}, "published": "2024-12-24T04:15:07.360", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2024-9427", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2316047", "source": "secalert@redhat.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-116"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XSS protections in the code"}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad en Koji. Una entrada no desinfectada permite un ataque XSS. El c\u00f3digo Javascript de un enlace malicioso podr\u00eda reflejarse en la p\u00e1gina web resultante. No se espera poder enviar una acci\u00f3n o realizar un cambio en Koji debido a las protecciones XSS existentes en el c\u00f3digo."}], "lastModified": "2025-02-07T05:15:12.130", "sourceIdentifier": "secalert@redhat.com"}