CVE-2024-36076
Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information when a logged-in Sys…
Published: 2024-05-19 · CVSS: 8.8 · CVSS 3.1
Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information when a logged-in SysReptor user visits a malicious same-site subdomain in the same browser session.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7