by Kastro
Paper/Archive/CVE-2024-12641

CVE-2024-12641

Chunghwa Telecom TenderDocTransfer — Chunghwa Telecom TenderDocTransfer - Reflected Cross-site Scripting to RCE

EPSS 1%CVSS 9.6
critical.is priorityof 100
43
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 73.0.730 × 2014.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

TenderDocTransfer from Chunghwa Telecom has a Reflected Cross-site scripting vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenticated remote attackers could use specific APIs through phishing to execute arbitrary JavaScript code in the user’s browser. Since the web server set by the application supports Node.Js features, attackers can further leverage this to run OS commands.

Affected

ProductAffectedFixed inSource
TenderDocTransfer0.41.151 – 0.41.156–CNA

Scores by source

twcert (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

writeuptwcert.org.tw/tw/cp-132-8292-4fd98-1.htmlwriteuptwcert.org.tw/en/cp-139-8299-42168-2.html