Cross-site scripting vulnerability for Sandboxels 1.9 - 1.9.5 (Q3408)

https://nvd.nist.gov/vuln/detail/CVE-2024-39828

28 June 2024

0 references

28 June 2024

ADP: CISA-ADP (English)

Base Score: 6.1 MEDIUM (English)

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (English)

1 reference

https://nvd.nist.gov/vuln/search/results?query=xss&startIndex=20

https://www.cve.org/CVERecord?id=CVE-2024-39828

https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-39828

28 June 2024

0 references

2 references

https://vulmon.com/searchpage?page=1&q=Cisco%20Nx-os%204.0%5C%5C(1a%5C%5C)n2%5C%5C(1%5C%5C)&sortby=bydate&scoretype=cvssv2

https://vulmon.com/searchpage?page=1&q=Cisco%20Unified%20Communications%20Manager%20Im%20%5C%5C&%20Presence%20Service%2010.5%5C%5C(2%5C%5C)&sortby=bydate

https://cvefeed.io/vuln/detail/CVE-2024-39828

0 references

https://cveawg.mitre.org/api/cve/CVE-2024-39828

file format

JSON

0 references

https://cvefeed.io/vuln/detail/CVE-2024-39828

0 references

https://github.com/advisories/GHSA-837w-cqm8-gx58

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (English)

https://avd.aquasec.com/nvd/2024/cve-2024-39828/

29 June 2024

0 references

1 reference

https://avd.aquasec.com/nvd/2024/

https://vuldb.com/?id.269996

269996

CVSS Meta Temp Score: 5.7 (English)

VulDB Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R (English)

CNA Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X (English)

VulDB Meta Base Score: 5.8 (English)

VulDB Meta Temp Score: 5.7 (English)

VulDB Base Score: 5.2 (CVSS2#AV:A/AC:L/Au:S/C:P/I:P/A:P) (English)

VulDB Temp Score: 4.9 (CVSS2#E:ND/RL:ND/RC:UR) (English)

Cache ID: 172:360:117 (English)

Changes: 06/29/2024 04:50 AM (50), 06/30/2024 04:49 AM (2), 07/01/2024 11:41 PM (1), 07/12/2024 12:28 AM (11) (English)

https://vuldb.com/?json.269996

29 June 2024

0 references

file format

JSON

https://vulners.com/cve/CVE-2024-39828

269996

0 references

0 references

https://cxsecurity.com/cveshow/CVE-2024-39828/

0 references

https://debricked.com/vulnerability-database/vulnerability/CVE-2024-39828

0 references

https://cyber.vumetric.com/vulns/CVE-2024-39828/

0 references

https://www.cvedetails.com/cve/CVE-2024-39828/

1 reference

https://www.cvedetails.com/vulnerability-list/year-2024/month-6/June.html

https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2024-39828

0 references

https://www.opencve.io/cve/CVE-2024-39828

1 reference

https://www.opencve.io/cve?cwe=CWE-79&cvss=&search=sandboxels

https://exchange.xforce.ibmcloud.com/vulnerabilities/296041

https://avd.aliyun.com/detail?id=AVD-2024-39828

296041

0 references

AVD-2024-39828

https://ioc.one/auth/attribute/dea2c192-674c-4b40-a159-db5df8524bfc

29 June 2024

0 references

https://www.secualive.jp/en/feed/nvd/vulnerability/detailinfo/CVE-2024-39828/

dea2c192-674c-4b40-a159-db5df8524bfc

0 references

2 references

https://www.secualive.jp/en/feed/vulnerability/?search_display_number=10&page_jvn=18&page_nvd=236

https://secualive.jp/en/feed/vulnerability/?search_display_number=10&page_jvn=17637&page_nvd=22

https://www.vulncode-db.com/CVE-2024-39828

0 references

about page URL

https://github.com/ggod2/sandboxels_xss_test/tree/main/README.md

0 references

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39828

https://www.cve.org/CVERecord?id=CVE-2024-39828

28 June 2024

0 references

https://github.com/ggod2/sandboxels_xss_test

28 June 2024

creator string

MITRE Corporation

0 references

source code repo URL

0 references

mentioned at URL

https://www.mail-archive.com/search?l=debian-security-tracker-commits@alioth-lists.debian.net&q=subject:%22%5C%5BGit%5C%5D%5C%5Bsecurity%5C-tracker%5C-team%5C%2Fsecurity%5C-tracker%5C%5D%5C%5Bmaster%5C%5D+automatic+update%22&o=newest&f=1

https://www.cisa.gov/news-events/bulletins/sb24-183

+ TODO: check +CVE-2024-39828 (R74n Sandboxels 1.9 through 1.9.5 allows XSS via a message in a modifi ...) (English)

0 references

0 references

https://www.mail-archive.com/search?l=debian-security-tracker-commits@alioth-lists.debian.net&q=subject:%22%5C%5BGit%5C%5D%5C%5Bsecurity%5C-tracker%5C-team%5C%2Fsecurity%5C-tracker%5C%5D%5C%5Bmaster%5C%5D+Process+some+NFUs%22&o=newest&f=1

+ NOT-FOR-US: R74n Sandboxels CVE-2024-39828 (R74n Sandboxels 1.9 through 1.9.5 allows XSS via a message in a modifi ...) (English)

0 references

CVE Identifier

CVE-2024-39828

28 June 2024

0 references

GHSA ID

GHSA-837w-cqm8-gx58