CVE-2024-13196

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-13196

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-13196.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-13196

Published

2025-01-09T00:00:15.649Z

Modified

2026-07-15T01:49:14.357998660Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

donglight bookstore电商书城系统说明 BookInfoController.java BookSearchList cross site scripting

Details

A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been declared as problematic. This vulnerability affects the function BookSearchList of the file src/main/java/org/zdd/bookstore/web/controller/BookInfoController.java. The manipulation of the argument keywords leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Database specific

{
    "cwe_ids": [
        "CWE-79",
        "CWE-94"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13196.json"
}

References

Affected packages

Git / github.com/donglight/bookstore

Affected ranges

Type

GIT

Repo

https://github.com/donglight/bookstore

Events

Introduced

7018d7b2c1cc8ca9e0ee986af1d1b73944136067

Last affected

7018d7b2c1cc8ca9e0ee986af1d1b73944136067

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ],
    "cpe": "cpe:2.3:a:donglight:bookstore:1.0.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.0.0"
        },
        {
            "last_affected": "1.0.0"
        }
    ]
}

Affected versions

1.*

1.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-13196.json"