CVE Catalog
CVE-2024-37673
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.46%
36th percentile - higher than 36% of all known CVEs
Summary
A Cross Site Scripting (XSS) vulnerability in Tessi Docubase Document Management product version 5.x allows a remote attacker to execute arbitrary code via the filename parameter.
Risk Assessment
An attacker can inject malicious scripts, leading to user session theft, account takeover, or malware propagation within the organization.
Recommendation
Immediately update Tessi Docubase to the latest version and implement input filtering and validation for the filename parameter.
Original NVD description (English source)
Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the filename parameter.