Cross-site scripting vulnerability for Sandboxels 1.9 - 1.9.5 (Q3408): Difference between revisions

From R74n Wikibase
Jump to navigation Jump to search
(‎Changed claim: exact match (P169): https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-39828)
(‎Changed claim: Multiplane planecode (P164): R13300)
 
(12 intermediate revisions by the same user not shown)
Property / about page URL
 
Property / about page URL: https://www.cisa.gov/news-events/bulletins/sb24-183 / rank
Normal rank
 
Property / exact match
 
Property / exact match: https://www.secualive.jp/en/feed/nvd/vulnerability/detailinfo/CVE-2024-39828/ / rank
 
Normal rank
Property / exact match: https://www.secualive.jp/en/feed/nvd/vulnerability/detailinfo/CVE-2024-39828/ / reference
 
Property / exact match: https://www.secualive.jp/en/feed/nvd/vulnerability/detailinfo/CVE-2024-39828/ / reference
 
Property / exact match
 
Property / exact match: https://www.vulncode-db.com/CVE-2024-39828 / rank
 
Normal rank
Property / mentioned at URL
 
Property / mentioned at URL: https://www.mail-archive.com/search?l=debian-security-tracker-commits@alioth-lists.debian.net&q=subject:%22%5C%5BGit%5C%5D%5C%5Bsecurity%5C-tracker%5C-team%5C%2Fsecurity%5C-tracker%5C%5D%5C%5Bmaster%5C%5D+automatic+update%22&o=newest&f=1 / rank
 
Normal rank
Property / mentioned at URL: https://www.mail-archive.com/search?l=debian-security-tracker-commits@alioth-lists.debian.net&q=subject:%22%5C%5BGit%5C%5D%5C%5Bsecurity%5C-tracker%5C-team%5C%2Fsecurity%5C-tracker%5C%5D%5C%5Bmaster%5C%5D+automatic+update%22&o=newest&f=1 / qualifier
 
quotation: + TODO: check +CVE-2024-39828 (R74n Sandboxels 1.9 through 1.9.5 allows XSS via a message in a modifi ...) (English)
Property / mentioned at URL
 
Property / mentioned at URL: https://www.cisa.gov/news-events/bulletins/sb24-183 / rank
 
Normal rank
Property / mentioned at URL
 
Property / mentioned at URL: https://www.mail-archive.com/search?l=debian-security-tracker-commits@alioth-lists.debian.net&q=subject:%22%5C%5BGit%5C%5D%5C%5Bsecurity%5C-tracker%5C-team%5C%2Fsecurity%5C-tracker%5C%5D%5C%5Bmaster%5C%5D+Process+some+NFUs%22&o=newest&f=1 / rank
 
Normal rank
Property / mentioned at URL: https://www.mail-archive.com/search?l=debian-security-tracker-commits@alioth-lists.debian.net&q=subject:%22%5C%5BGit%5C%5D%5C%5Bsecurity%5C-tracker%5C-team%5C%2Fsecurity%5C-tracker%5C%5D%5C%5Bmaster%5C%5D+Process+some+NFUs%22&o=newest&f=1 / qualifier
 
quotation: + NOT-FOR-US: R74n Sandboxels CVE-2024-39828 (R74n Sandboxels 1.9 through 1.9.5 allows XSS via a message in a modifi ...) (English)
Property / mentioned at URL
 
Property / mentioned at URL: https://t.me/cveNotify/84855 / rank
 
Normal rank
Property / mentioned at URL: https://t.me/cveNotify/84855 / reference
 
Property / mentioned at URL
 
Property / mentioned at URL: https://raw.githubusercontent.com/trickest/cve/main/2024/CVE-2024-39828.md / rank
 
Normal rank
Property / mentioned at URL: https://raw.githubusercontent.com/trickest/cve/main/2024/CVE-2024-39828.md / qualifier
 
Property / Multiplane planecode
 
Property / Multiplane planecode: R13300 / rank
 
Normal rank
Property / Multiplane planecode: R13300 / qualifier
 
start date: 19 July 2024
Timestamp+2024-07-19T00:00:00Z
Timezone+00:00
CalendarGregorian
Precision1 day
Before0
After0

Latest revision as of 04:20, 19 July 2024

Sandboxels XSS vulnerability
  • CVE-2024-39828
  • GHSA-837w-cqm8-gx58
Language Label Description Also known as
English
Cross-site scripting vulnerability for Sandboxels 1.9 - 1.9.5
Sandboxels XSS vulnerability
  • CVE-2024-39828
  • GHSA-837w-cqm8-gx58

Statements

instance of
vulnerability
0 references
part of
Sandboxels 1.9
0 references
Sandboxels 1.9.1
0 references
Sandboxels 1.9.2
0 references
Sandboxels 1.9.3
0 references
Sandboxels 1.9.4
0 references
Sandboxels 1.9.4.1
0 references
Sandboxels 1.9.5
0 references
uses
<pixel>.clone
0 references
Sandboxels save
0 references
.SBXLS
0 references
Prop
0 references
start date
13 October 2023
0 references
end date
29 June 2024
0 references
date of discovery
25 June 2024
0 references
idea by
ggod
0 references
exact match
https://nvd.nist.gov/vuln/detail/CVE-2024-39828
start date
28 June 2024
quotation
ADP: CISA-ADP (English)
Base Score: 6.1 MEDIUM (English)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (English)
1 reference
URL
https://nvd.nist.gov/vuln/search/results?query=xss&startIndex=20
https://github.com/advisories/GHSA-837w-cqm8-gx58
quotation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (English)
start date
29 June 2024
0 references
https://vuldb.com/?id.269996
identifier
269996
quotation
CVSS Meta Temp Score: 5.7 (English)
VulDB Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R (English)
CNA Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X (English)
VulDB Meta Base Score: 5.8 (English)
VulDB Meta Temp Score: 5.7 (English)
VulDB Base Score: 5.2 (CVSS2#AV:A/AC:L/Au:S/C:P/I:P/A:P) (English)
VulDB Temp Score: 4.9 (CVSS2#E:ND/RL:ND/RC:UR) (English)
Cache ID: 172:360:117 (English)
Changes: 06/29/2024 04:50 AM (50), 06/30/2024 04:49 AM (2), 07/01/2024 11:41 PM (1), 07/12/2024 12:28 AM (11) (English)
start date
29 June 2024
0 references
https://avd.aliyun.com/detail?id=AVD-2024-39828
identifier
AVD-2024-39828
start date
29 June 2024
0 references
https://ioc.one/auth/attribute/dea2c192-674c-4b40-a159-db5df8524bfc
identifier
dea2c192-674c-4b40-a159-db5df8524bfc
0 references
Multiplane planecode
R13300
start date
19 July 2024
0 references
CVE Identifier
CVE-2024-39828
start date
28 June 2024
0 references
GHSA ID
GHSA-837w-cqm8-gx58
start date
29 June 2024
0 references
tweet ID
1806813138836238382
creator string
CVEnew
0 references
1806849098546348398
creator string
VulmonFeeds
0 references
 
Retrieved from "https://data.r74n.com/w/index.php?title=Item:Q3408&oldid=19276"