Medium · 6.5 CVE-2024-27609 EUVD-2024-1165GHSA-8vj9-5v5q-fhch

Bonita cross-site scripting vulnerability

Published Mar 31, 2024 · Updated Nov 8, 2024 · Assigned by mitre

Description

Bonita before 2023.2-u2 allows stored XSS via a UI screen in the administration panel.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.bonitasoft.console:bonita-web-server	< 10.1.0.W11	10.1.0.W11	GHSA-8vj9-5v5q-fhch
Maven	org.bonitasoft.platform:platform-resources	< 10.1.0.W11	10.1.0.W11	GHSA-8vj9-5v5q-fhch