XSS in Meddiff Technologies Instarispacs
CVE-2024-2259
This vulnerability exists in InstaRISPACS software due to insufficient validation of user supplied input for the loginTo parameter in user login module of the web interface of the application. A remote attacker could exploit this vulnerability by sending a specially crafted input to the vulnerable parameter to perform reflected Cross Site Scripting (XSS) attacks on the targeted system.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.005 (40.8th percentile) — read the EPSS interpretation.
Affected products
- Meddiff Technologies Instarispacs — versions 3.0.0, <=4.0.0 Build 29, <=5.0.0 Build 19
Weakness classification (CWE)
References
- vdisclose@cert-in.org.in (third-party-advisory)