VulnerabilityModified
CVE-2024-6369
A vulnerability classified as problematic has been found in LabVantage LIMS 2017.
MEDIUM 5.3EPSS 0.41%
Does this matter?
Lower severity and a low EPSS score (0.41%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability classified as problematic has been found in LabVantage LIMS 2017. Affected is an unknown function of the file /labvantage/rc?command=page&sdcid=LV_ReagentLot of the component POST Request Handler. The manipulation of the argument mode leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-269802 is the identifier assigned to this vulnerability.
- CVSS 4.0
- 5.3 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.41% probability · 35th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- labvantage/laboratory information management system
- Source
- cna@vuldb.com
References
- https://gentle-khaan-c53.notion.site/Reflected-XSS-in-Labvantage-LIMS-960bf61d35124c858e3360785cfe40b3?pvs=4Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.269802Permissions Required
- https://vuldb.com/?id.269802Third Party Advisory
- https://vuldb.com/?submit.359373Third Party Advisory
- https://gentle-khaan-c53.notion.site/Reflected-XSS-in-Labvantage-LIMS-960bf61d35124c858e3360785cfe40b3?pvs=4Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.269802Permissions Required
- https://vuldb.com/?id.269802Third Party Advisory
- https://vuldb.com/?submit.359373Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.