CVE-2024-22780: CA17 TeamsACS Cross Site Scripting vulnerability

April 2, 2024

Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter.

References

fuo.fi/CVE-2024-22780
github.com/CA17/TeamsACS
github.com/CA17/TeamsACS/issues/26
github.com/advisories/GHSA-hwvw-gh23-qpvq
nvd.nist.gov/vuln/detail/CVE-2024-22780

Detect and mitigate CVE-2024-22780 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →