WEB NorthStar C2 login.php agent registration requests Cross Site Scripting (CVE-2024-28741)

Rule ID

1234943

Severity

Critical

Description

Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code via the login.php component.

Impact

Cross-site scripting

Recommendation

Update vendor's patch.

IPS Category

Web threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A