{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-17T21:59:41.847","vulnerabilities":[{"cve":{"id":"CVE-2024-47617","sourceIdentifier":"security-advisories@github.com","published":"2024-10-03T15:15:14.937","lastModified":"2024-10-08T14:23:38.597","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Sulu is a PHP content management system. This vulnerability allows an attacker to inject arbitrary HTML/JavaScript code through the media download URL in Sulu CMS. It affects the SuluMediaBundle component. The vulnerability is a Reflected Cross-Site Scripting (XSS) issue, which could potentially allow attackers to steal sensitive information, manipulate the website's content, or perform actions on behalf of the victim. This vulnerability is fixed in 2.6.5 and 2.5.21."},{"lang":"es","value":"Sulu es un sistema de gestión de contenido PHP. Esta vulnerabilidad permite a un atacante inyectar código HTML/JavaScript arbitrario a través de la URL de descarga de medios en Sulu CMS. Afecta al componente SuluMediaBundle. La vulnerabilidad es un problema de Cross-Site Scripting (XSS) Reflejado, que podría permitir a los atacantes robar información confidencial, manipular el contenido del sitio web o realizar acciones en nombre de la víctima. Esta vulnerabilidad se ha corregido en las versiones 2.6.5 y 2.5.21."}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sulu:sulu:2.5.20:*:*:*:*:*:*:*","matchCriteriaId":"E7EFCD27-01AC-4C20-9F92-E1F1F0D9DFE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sulu:sulu:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"C2DEEB21-3616-43D0-935D-95FDCFC361F7"}]}]}],"references":[{"url":"https://github.com/sulu/sulu/commit/a5a5ae555d282e88ff8559d38cfb46dea7939bda","source":"security-advisories@github.com","tags":["Product"]},{"url":"https://github.com/sulu/sulu/commit/eeacd14b6cf55f710084788140d40ebb00314b29","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/sulu/sulu/security/advisories/GHSA-6784-9c82-vr85","source":"security-advisories@github.com","tags":["Vendor Advisory"]}]}}]}