Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2024-12021

Stored Cross-Site Scripting

Description

Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting (XSS) in various administrative interfaces. The impact of exploitation may result in the compromise of local accounts managed by the Coverity platform as well as other standard impacts resulting from cross-site scripting.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Black Duck Coverity

Default version status: unaffected

  • 0 to < 2024.9.0affected

References