CVE-2024-35224

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-35224
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-35224.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-35224
Aliases
  • GHSA-h26c-j8wg-frjc
Published
2024-05-23T12:53:04.336Z
Modified
2026-04-10T05:14:02.580448Z
Severity
  • 7.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N CVSS Calculator
Summary
Stored Cross-Site Scripting (XSS) in OpenProject
Details

OpenProject is the leading open source project management software. OpenProject utilizes tablesorter inside of the Cost Report feature. This dependency, when misconfigured, can lead to Stored XSS via {icon} substitution in table header values. This attack requires the permissions "Edit work packages" as well as "Add attachments". A project admin could attempt to escalate their privileges by sending this XSS to a System Admin. Otherwise, if a full System Admin is required, then this attack is significantly less impactful. By utilizing a ticket's attachment, you can store javascript in the application itself and bypass the application's CSP policy to achieve Stored XSS. This vulnerability has been patched in version(s) 14.1.0, 14.0.2 and 13.4.2.

Database specific 
{
    "cwe_ids": [
        "CWE-80"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35224.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/opf/openproject

Affected ranges

Type
GIT
Repo
https://github.com/opf/openproject
Events
Introduced
f8d6a196a180155d69998d73f796fa1f177b16bb
Fixed
540f21f479f0c76e08e7d9e335ba41490c6eb4a2
Database specific 
{
    "versions": [
        {
            "introduced": "13.4.0"
        },
        {
            "fixed": "13.4.2"
        }
    ]
}
Type
GIT
Repo
https://github.com/opf/openproject
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
4e5f609f07c05a82f62e66766a1d841a6121205d
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "14.1.0"
        }
    ]
}
Type
GIT
Repo
https://github.com/opf/openproject
Events
Introduced
aa7a72a913cb619b3f976ff5f411ef7af97b6caa
Fixed
462d76a2a9ffe83f2cbee74bdbe3e756cfd6a646
Database specific 
{
    "versions": [
        {
            "introduced": "14.0.0"
        },
        {
            "fixed": "14.0.2"
        }
    ]
}

Affected versions

v13.*
v13.4.0
v13.4.1
v14.*
v14.0.0
v14.0.1
v14.0.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-35224.json"