CVE-2024-34089

An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. 6.14 P3 (6.14.0.3) is also a fixed release.

• CWE-79
• CWE-79

• https://archerirm.comProduct
• https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963Vendor Advisory
• https://archerirm.comProduct
• https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963Vendor Advisory

Published

May 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-34083aiosmptd is a reimplementation of the Python stdlib smtpd.p…5.4
• CVE-2024-34084Minder's `HandleGithubWebhook` is susceptible to a denial of…7.5
• CVE-2024-34085A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2024-34086A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2024-34087An SEH-based buffer overflow in the BPQ32 HTTP Server in BPQ…9.8
• CVE-2024-34088In FRRouting (FRR) through 9.1, it is possible for the get_e…7.5
• CVE-2024-34090An issue was discovered in Archer Platform 6 before 2024.04.…5.4
• CVE-2024-34091An issue was discovered in Archer Platform 6 before 2024.04.…5.4
• CVE-2024-34092An issue was discovered in Archer Platform 6 before 2024.04.…8.8
• CVE-2024-34093An issue was discovered in Archer Platform 6 before 2024.03.…5.3
• CVE-2024-34094Acrobat Reader versions 20.005.30574, 24.002.20736 and earli…7.8
• CVE-2024-34095Acrobat Reader versions 20.005.30574, 24.002.20736 and earli…7.8