CVE-2024-4304: Vulnerability on SWAL platform from GT3 Soluciones

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-04-29 · updated 2026-06-17
Weakness: CWE-79

Description

A Cross-Site Scripting XSS vulnerability has been detected on GT3 Soluciones SWAL. This vulnerability consists in a reflected XSS in the Titular parameter inside Gestion 'Documental > Seguimiento de Expedientes > Alta de Expedientes'.

Affected products

Huawei Gt3: 2.0(r2301)

References

https://www.incibe.es/en/incibe-cert/notices/aviso/vulnerability-swal-platform-gt3-soluciones
https://www.incibe.es/en/incibe-cert/notices/aviso/vulnerability-swal-platform-gt3-soluciones

Get alerted when CVE-2024-4304 or the next vulnerability affects your stack