CVE-2024-4336

ALTO 7.4CVE-2024-4336 · Published 30/04/2024 · updated 17/06/2026

En resumen

CVE-2024-4336 es una vulnerabilidad ALTO (CVSS 7.4) que afecta a framework (adive).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.38%, mayor que el 32.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
framework adive	`= 2.0.8`	No fix yet

Description

Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripting (XSS) vulnerability via the /adive/admin/tables/add, in multiple parameters. An attacker could retrieve the session details of an authenticated user.

References

incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-adive-framework · Third Party Advisory

Más vulnerabilidades de framework

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free