Skip to content

CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-24060

springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/user.

Read JSON ↗CVE.org ↗

Status: Published
Published: 2024-02-01
Updated: 2025-06-12
Assigning organization: mitre

Description

springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a n/a

n/aaffected

References

https://github.com/By-Yexing/Vulnerability_JAVA/blob/main/2024/springboot-manager.md#11-stored-cross-site-scripting-sysuser ↗