Detections
Analytics
CVE-2024-10033
medium
Description
A vulnerability was found in aap-gateway. A Cross-site Scripting (XSS) vulnerability exists in the gateway component. This flaw allows a malicious user to perform actions that impact users by using the "?next=" in a URL, which can lead to redirecting, injecting malicious script, stealing sessions and data.
References
https://bugzilla.redhat.com/show_bug.cgi?id=2319162