CVE-2024-45745 - CVE House

Status published Medium CVE-2024-45745

TopQuadrant TopBraid EDG JavaScript console XXE

5 CVSS

Vulnerability Description

TopQuadrant TopBraid EDG before version 8.0.1 allows an authenticated attacker to upload an XML DTD file and execute JavaScript to read local files or access URLs (XXE). Fixed in 8.0.1 (bug fix: TBS-6721).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-45745

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from TopQuadrant

View All →

CVE-2024-45744

TopQuadrant TopBraid EDG password manager stores external credentials insecurely

Low 3

Affected Vendor

TopQuadrant

View all reports →

Affected Software

TopBraid EDG

Vulnerable Versions:

0, 8.0.1

Timeline

Official Publish: September 27th, 2024

Last Modified: September 27th, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Weaknesses (CWE)

CWE-611

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1005 Data from Local System

Collection

T1040 Network Sniffing