Description

OpenRASP is a RASP solution that directly integrates its protection engine into the application server by instrumentation. There exists a reflected XSS in the /login page due to a reflection of the redirect parameter. This allows an attacker to execute arbitrary javascript with the permissions of a user after the user logins with their account.

INFO

Published Date :

2024-04-19T15:52:31.666Z

Last Modified :

2024-08-02T01:10:54.101Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2024-29183 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-29183.

URL Resource
https://github.com/baidu/openrasp/commit/240fde3901c7a36aaade3683ffd5c89140a535fb cve-icon cve-icon cve-icon
https://securitylab.github.com/advisories/GHSL-2023-253_openrasp cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact