CVE-2024-49705 XSS in iKSORIS
Attackers can cause persistent denial of service in iKSORIS by tricking users into visiting URLs with invalid parameters that corrupt session cookies.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-49705?
CVE-2024-49705 is a medium-severity denial of service vulnerability in SoftCOM iKSORIS, published on 14 Apr 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to client-side Denial of Servise (DoS) attacks. An attacker might trick a user into using an URL with a d parameter set to an unhandled value. All the subsequent requests will not be accepted as the server returns an error message. Since this parameter is sent as part of a session cookie, the issue persists until the session expires or the user deletes cookies manually. Similar effect might be achieved when a user tries to change platform language to an unimplemented one. This vulnerability has been patched in version 79.0
Weakness: CWE-248
Which versions are affected by CVE-2024-49705?
It affects 1 product.
Products include Softcom.wroc Iksoris.
How do I fix CVE-2024-49705?
No fix has been published for CVE-2024-49705 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-49705 being exploited?
There is no known exploitation of CVE-2024-49705 in the wild and no public exploit code.
Other vulnerabilities in SoftCOM iKSORIS
Sources
Also known as GHSA-mhgm-r3r5-6cwp.