CVE-2024-6370 | LabVantage LIMS 2017 POST Request bulletinbody cross site scripting

A vulnerability classified as problematic was found in LabVantage LIMS 2017. Affected by this vulnerability is an unknown functionality of the file /labvantage/rc?command=file&file=WEB-OPAL/pagetypes/bulletins/sendbulletin.jsp of the component POST Request Handler. The manipulation of the argument bulletinbody leads to cross site scripting.

This vulnerability is known as CVE-2024-6370. The attack can be launched remotely. Furthermore, there is an exploit available.