Approved changes feed: RSS · Atom

cpe:2.3:a:steve-community:steve:3.7.0:*:*:*:*:*:*:*

part: a version: 3.7.0 update: *

VendorSteve Community (cee97242-3e9c-5344-9d35-c81d365ae71d)
ProductSteve (d524a90c-1761-5ea9-89bc-109612fee67b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/steve-community/steve purl2cpe 2026-06-01 10:11:14.964107

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-21550 vulnerable 2026-06-08 06:27:35.537918 Details available
MEDIUM (6.1)
SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, acting as a central server for management of registered charge points. Attackers can inject arbitrary HTML and Javascript code via WebSockets leading to persistent Cross-Site Scripting in the SteVe management interface.
Published: 2024-08-12T14:54:36.075Z
Updated: 2024-08-12T15:20:03.103Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.