CVE-2024-49210 describes a reflected Cross-Site Scripting (XSS) vulnerability in Archer Platform 6.x before version 2024.09, specifically within an iView List Archer Platform UX page. This medium-severity vulnerability (CVSS 6.1) allows an unauthenticated attacker to inject malicious HTML or JavaScript by tricking a victim user, leading to code execution in the user's browser with limited impact on confidentiality and integrity. While no active exploitation, public exploit code, or significant community discussion has been observed, the vulnerability is straightforward to exploit due to low attack complexity and no authentication requirements.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.3.0.0, < 2024.09CPE matchmatch criteria | cpe:2.3:a:archerirm:archer:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.