Skip to content
OpenAdvisories
High · 8.5 CVE-2024-12021 EUVD-2024-54338GHSA-wgw2-48jp-77f3

Stored Cross-Site Scripting

Published Mar 31, 2025 · Updated Mar 31, 2025 · Assigned by BlackDuck

Description

Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting (XSS) in various administrative interfaces. The impact of exploitation may result in the compromise of local accounts managed by the Coverity platform as well as other standard impacts resulting from cross-site scripting.

Affected products

VendorProductAffectedFixed
Black Duck Coverity < 2024.9.0 2024.9.0

References