Back to Database
Status published
Medium
CVE-2024-6450
Reflected XSS in HyperView Geoportal Toolkit
Vulnerability Description
HyperView Geoportal Toolkit in versions lower than 8.5.0 is vulnerable to Reflected Cross-Site Scripting (XSS). An unauthenticated attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-6450
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Dariusz Gońda
References
Affected Vendor
HyperView
View all reports →Affected Software
Geoportal Toolkit
Vulnerable Versions:
0
Timeline
Official Publish:
August 28th, 2024
Last Modified:
January 9th, 2025
Added to House:
July 22nd, 2026