LabVantage LIMS 2017 Remote XSS via FilesEmbedded.jsp
CVE-2024-6181 Published on June 20, 2024
LabVantage LIMS cross site scripting
A vulnerability was found in LabVantage LIMS 2017. It has been declared as problematic. This vulnerability affects unknown code of the file /labvantage/rc?command=file&file=WEB-CORE/elements/files/filesembedded.jsp&size=32. The manipulation of the argument height/width leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269152. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Timeline
Advisory disclosed
VulDB entry created
VulDB entry last update
Weakness Type
What is a XSS Vulnerability?
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVE-2024-6181 has been classified to as a XSS vulnerability or weakness.
Products Associated with CVE-2024-6181
Want to know whenever a new CVE is published for Labvantage Lims? stack.watch will email you.
Affected Versions
LabVantage LIMS Version 2017 is affected by CVE-2024-6181Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.