CVE-2024-12021 | THREATINT

Description

Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting (XSS) in various administrative interfaces. The impact of exploitation may result in the compromise of local accounts managed by the Coverity platform as well as other standard impacts resulting from cross-site scripting.

Reserved 2024-12-02 | Published 2025-03-31 | Updated 2025-03-31 | Assigner BlackDuck

HIGH: 8.5CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Product status

Default status

unaffected

Any version before 2024.9.0

affected

Credits

Jozef Frantisek Stefanovic finder

References

community.blackduck.com/...-Security-Advisory-CVE-2024-12021 vendor-advisory

cve.org (CVE-2024-12021)

nvd.nist.gov (CVE-2024-12021)

Download JSON