
CVE-2024-25831
- Reference to the description:
- Description:
- F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization. An authenticated, remote attacker can execute arbitrary JavaScript code in the web management interface.
- Last updated date:
- 01/16/2025
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 01/16/2025
- Reference url to background
https://neroteam.com/blog/f-logic-datacube3-vulnerability-report