What is GHSA-8vj9-5v5q-fhch?

GHSA-8vj9-5v5q-fhch is a security advisory published by GitHub Security Advisories with Medium severity. Bonita cross-site scripting vulnerability

Which CVE IDs does GHSA-8vj9-5v5q-fhch cover?

GHSA-8vj9-5v5q-fhch covers the following CVE IDs: CVE-2024-27609. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8vj9-5v5q-fhch?

GHSA-8vj9-5v5q-fhch has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-8vj9-5v5q-fhch?

GHSA-8vj9-5v5q-fhch affects 2 products, including: maven/org.bonitasoft.console:bonita-web-server:\u003c 10.1.0.W11; maven/org.bonitasoft.platform:platform-resources:\u003c 10.1.0.W11.

GHSA-8vj9-5v5q-fhchMediumCVSS 6.1

Bonita cross-site scripting vulnerability

Vendor

GitHub Security Advisories

Published

April 1, 2024

Last Modified

November 8, 2024

🔗 CVE IDs covered (1)

CVE-2024-27609 →

📋 Description

Bonita before 10.1.0.W11 allows stored XSS via a UI screen in the administration panel.

🎯 Affected products2

maven/org.bonitasoft.console:bonita-web-server:< 10.1.0.W11
maven/org.bonitasoft.platform:platform-resources:< 10.1.0.W11

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2024-27609
https://documentation.bonitasoft.com/bonita/latest/release-notes#_fixes_in_bonita_runtime_including_bonita_applications_2
https://github.com/bonitasoft/bonita-engine/commit/15dc60a99d97f9407b5089ba26f792cf3bd87f6b
https://github.com/bonitasoft/bonita-engine/commit/26b24690a80dce11c0a4fa38ea54aeb35ca1e541
https://github.com/bonitasoft/bonita-engine/commit/2c84ea1a76f7e7f345c334645e46428e9376b0c9
https://github.com/bonitasoft/bonita-engine/commit/90469adf2b0ebf33f4c65b583f5c96284c8c1086
https://github.com/advisories/GHSA-8vj9-5v5q-fhch