Vulnerability details
CVE-2024-12641
Chunghwa Telecom TenderDocTransfer
Chunghwa Telecom TenderDocTransfer - Reflected Cross-site Scripting to RCE
CVSS 3.1
9.6Critical
Official description
TenderDocTransfer from Chunghwa Telecom has a Reflected Cross-site scripting vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenticated remote attackers could use specific APIs through phishing to execute arbitrary JavaScript code in the user’s browser. Since the web server set by the application supports Node.Js features, attackers can further leverage this to run OS commands.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.6Critical | 3.1 | CVEProject cvelistV5 (CNA) (twcert) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Chunghwa Telecom | TenderDocTransfer | 0.41.151 ≤ v ≤ 0.41.156 | CVEProject cvelistV5 (CNA) |
References and advisories
2- https://www.twcert.org.tw/tw/cp-132-8292-4fd98-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-8299-42168-2.html third-party-advisory
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2024-12-16
- Last updated
- 2024-12-16
- State
- Published
- Assigner (CNA)
- twcert
Exploit prediction (EPSS)
1.42%
Probability of exploitation in 30 days
73.1%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-79Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')