← Database

CVE-2024-50857

MEDIUM CVSS: 4.8 Published: 2025-01-14 Modified: 2026-06-17

Description

The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It allows data exfiltration and enables CSRF attacks. The vulnerability requires specific user permissions within the application to exploit successfully.

Affected Platforms

Gestioip Gestioip

Weakness Type

CWE-79

References