A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "tz" parameter.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Ganglia
  • Ganglia-web

Configuration 1 [-]

cpe:2.3:a:ganglia:ganglia-web:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://github.com/ganglia/ganglia-web/issues/382 cve-icon cve-icon
History

Fri, 29 Nov 2024 21:30:00 +0000

Type Values Removed Values Added
First Time appeared Ganglia
Ganglia ganglia-web
CPEs cpe:2.3:a:ganglia:ganglia-web:*:*:*:*:*:*:*:*
Vendors & Products Ganglia
Ganglia ganglia-web

Wed, 20 Nov 2024 20:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-79
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 19 Nov 2024 20:30:00 +0000

Type Values Removed Values Added
Description A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "tz" parameter.
References
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-11-20T19:25:19.566Z

Reserved: 2024-11-15T00:00:00

Link: CVE-2024-52762

cve-icon Vulnrichment

Updated: 2024-11-20T19:24:59.851Z

cve-icon NVD

Status : Analyzed

Published: 2024-11-19T21:15:06.580

Modified: 2024-11-29T21:00:39.843

Link: CVE-2024-52762

cve-icon Redhat

No data.