CVE-2024-29644

MediumCVSS 6.1

Published: 26/03/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.63%

46th percentile - higher than 46% of all known CVEs

Summary

A Cross-Site Scripting (XSS) vulnerability exists in dcat-admin version 2.1.3 and earlier. A remote attacker can inject a malicious script via the user login box to execute arbitrary code.

Risk Assessment

An attacker could hijack an administrator session, steal credentials, or spread malware within the organization.

Recommendation

Immediately upgrade dcat-admin to a version later than 2.1.3 and apply input filtering on the login field.

Original NVD description (English source)

Cross Site Scripting vulnerability in dcat-admin v.2.1.3 and before allows a remote attacker to execute arbitrary code via a crafted script to the user login box.