Vulnerability Description
Improper Neutralization of Input During Web Page Generation vulnerability in SOKRATES-software SOWA OPAC allows a Reflected Cross-Site Scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects SOWA OPAC software in versions from 4.0 before 4.9.10, from 5.0 before 6.2.12.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sokrates | Sowa Opac | >= 4.0, < 4.9.10 |
Related Weaknesses (CWE)
References
- https://cert.pl/en/posts/2024/07/CVE-2024-6050/Third Party Advisory
- https://cert.pl/posts/2024/07/CVE-2024-6050/Third Party Advisory
- https://cert.pl/en/posts/2024/07/CVE-2024-6050/Third Party Advisory
- https://cert.pl/posts/2024/07/CVE-2024-6050/Third Party Advisory
FAQ
What is CVE-2024-6050?
CVE-2024-6050 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Improper Neutralization of Input During Web Page Generation vulnerability in SOKRATES-software SOWA OPAC allows a Reflected Cross-Site Scripting (XSS). An attacker might trick somebody into using a cr...
How severe is CVE-2024-6050?
CVE-2024-6050 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-6050?
Check the references section above for vendor advisories and patch information. Affected products include: Sokrates Sowa Opac.