CVE-2024-50859

4.8 mediumEPSS 0.9%

Medium (4.8) in gestioip gestioip. EPSS 0.9% chance of exploitation in the next 30 days.

The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly formatted file, the content may be reflected in the HTML response, allowing the attacker to execute malicious scripts or exfiltrate data.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-01-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gestioip:gestioip

References

http://www.gestioip.net
https://github.com/maxibelino/CVEs/tree/main/CVE-2024-50859
https://github.com/muebel/gestioip-docker-compose
https://github.com/maxibelino/CVEs/tree/main/CVE-2024-50859

Check your stack JSON