CVE-2024-2068
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2024-2068 is a newly disclosed vulnerability affecting SourceCodester Computer Inventory System 1.0. This issue is rated as problematic and allows for cross-site scripting (XSS) attacks. The vulnerability is located in the processing of the file /endpoint/update-computer.php. An attacker can manipulate argument models to execute malicious scripts in a user's browser. The attack can be initiated remotely, making it a significant security concern. The exploit for this vulnerability has been made public, increasing the risk of exploitation. The associated identifier for this vulnerability is VDB-255383.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.