What’s Vulnerable › Vulnerabilities

CVE-2024-49211

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-22 · updated 2026-06-17
• Weakness: CWE-79

Description

Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.08. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web application; the malicious code is then reflected back to the victim and executed by the web browser in the context of the vulnerable web application.

Affected products

• Archer: from 6.3.0.0 before 2024.09 — fixed in 2024.09

How to fix

Upgrade to a fixed version: Archer 2024.09. Check the vendor advisory for mitigations.

References

• https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/747545
• https://www.archerirm.community/t5/platform-announcements/tkb-p/product-advisories-tkb

Get alerted when CVE-2024-49211 or the next vulnerability affects your stack