Reflected Cross-Site Scripting (XSS)
Vulnerability Description
There is a reflected cross-site scripting (XSS) within JSP files used to control application appearance. An unauthenticated attacker could deceive a user into clicking a crafted link to trigger the vulnerability. Stealing the session cookie is not possible due to cookie security flags, however the XSS may be used to induce a victim to perform on-site requests without their knowledge. This vulnerability only affects LogicalDOC Enterprise.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-12020
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Scott Tolley
More from LogicalDOC
View All →Affected Vendor
LogicalDOC
View all reports →