CVE-2024-55342

Description

A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This PDF can contain malicious JavaScript code, which is executed when a victim user opens or interacts with the PDF in their web browser, leading to a XSS vulnerability.

Risk Information

Base Score

4.7

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.082

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2024-55342,CVE-2024-55341 are affected in Nuget - Piranha 11.1.0	Windows
Vulnerabilities CVE-2024-55342,CVE-2024-55341 are affected in Nuget - Piranha for Linux 11.1.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234