CVE-2023-24081

MEDIO 5.4CVE-2023-24081 · Published 21/02/2023 · updated 17/06/2026

In breve

CVE-2023-24081 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda tutortrac (go-redrock).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.54%, superiore al 45.6% delle vulnerabilità.
Correzione: aggiornare a 4.2.170210 o successiva.

Package	Affected versions	Patched versions
tutortrac go-redrock	`< 4.2.170210`	`4.2.170210`

Description

Multiple stored cross-site scripting (XSS) vulnerabilities in Redrock Software TutorTrac before v4.2.170210 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the reason and location fields of the visits listing page.

References

brackish.io/tutortrac-multiple-stored-xss · Exploit
wiki.go-redrock.com/index.php/4.0_Recent_Changes · Release Notes
go-redrock.com/solutions/tutortrac · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free