CVE-2024-50859
The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly formatted file, the content may be reflected in the HTML respo…
Published: 2025-01-14 · CVSS: 4.8 · CVSS 3.1
The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly formatted file, the content may be reflected in the HTML response, allowing the attacker to execute malicious scripts or exfiltrate data.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7