CVE-2024-22780

MediumCVSS 6.1

Published: 02/04/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.57%

43th percentile - higher than 43% of all known CVEs

Summary

A Cross Site Scripting (XSS) vulnerability in CA17 TeamsACS version 1.0.1 allows a remote attacker to execute arbitrary code via a crafted script in the errmsg parameter.

Risk Assessment

An attacker can steal user sessions, redirect users to malicious sites, or infect the system, leading to data confidentiality and integrity breaches.

Recommendation

Immediately update CA17 TeamsACS to the latest version and implement input filtering and validation for the errmsg parameter.

Original NVD description (English source)

Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter.