Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-5408

Cross-site Scripting vulnerability in RhinOS from SaltOS

Description

Vulnerability in RhinOS 3.0-1190 consisting of an XSS through the "search" parameter of /portal/search.htm. This vulnerability could allow a remote attacker to steal details of a victim's user session by submitting a specially crafted URL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SaltOS RhinOS

Default version status: unaffected

  • 3.0-1190affected

References