CVE Catalog
CVE-2024-34335
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.29%
21th percentile - higher than 21% of all known CVEs
Summary
ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected XSS vulnerability on the login page. An attacker can inject malicious script via a crafted request.
Risk Assessment
The risk includes session hijacking, redirection to malicious sites, or unauthorized actions performed in the victim's context.
Recommendation
Immediately update ORDAT FOSS-Online to version 2.24.01 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login page.