CVE-2024-37672

MediumCVSS 5.4

Published: 21/06/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

36th percentile - higher than 36% of all known CVEs

Summary

A Cross Site Scripting (XSS) vulnerability in Tessi Docubase Document Management product version 5.x allows a remote attacker to execute arbitrary code via the idactivity parameter.

Risk Assessment

An attacker can inject malicious scripts, leading to session hijacking, website defacement, or administrator account takeover.

Recommendation

Immediately update Tessi Docubase to the latest version and apply input filtering and validation on the idactivity parameter.

Original NVD description (English source)

Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the idactivity parameter.