CVE-2024-51320

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p31

Published

Mar 11, 2025 (Mar 11, 2025)

Modified

Jun 17, 2026

Description

Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /servlet/gsdm_fsave_htmltmp, /servlet/gsdm_btlk_openfile components

Vendors: zucchetti
Products: ad hoc infinity
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.