CVE-2024-40508

HIGH 7.3CVE-2024-40508 · Published 26/09/2024 · updated 17/06/2026

In short

CVE-2024-40508 is a HIGH (CVSS 7.3) vulnerability affecting openpetra (openpetra).
Chance of exploitation in the next 30 days (EPSS): 0.75%, higher than 55.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openpetra openpetra	`= 2023.02`	No fix yet

Description

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMConference.asmx function.

References

Jansen-C-Moreira/CVE-2024-40508 · Exploit
openpetra/openpetra · Product

More vulnerabilities in openpetra

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openpetra

= 2023.02

No fix yet

More vulnerabilities in openpetra

See all →