CVE-2024-37773

MediumCVSS 4.8

Published: 16/12/2024(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows authenticated attackers with administrator privileges to inject arbitrary HTML code in an admin screen.

Risk Assessment

An attacker can alter the appearance of the admin panel, embed malicious content, or conduct phishing attacks against other administrators.

Recommendation

It is recommended to update to the latest version of Sunbird DCIM dcTrack and restrict access to the admin panel to trusted users only.

Original NVD description (English source)

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen.