CVE-2024-49505

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-49505

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-49505.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-49505

Published

2024-11-13T14:21:00.317Z

Modified

2026-08-12T03:51:29.329142518Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

XSS vulnerability found in OpenSuse MirrorCache

Details

A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumbleweed MirrorCache allows the execution of arbitrary JS via reflected XSS in the REGEX and P parameters. This issue affects MirrorCache before 1.083.

Database specific

{
    "cwe_ids": [
        "CWE-79"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49505.json",
    "cna_assigner": "suse",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "fixed": "1.083"
                }
            ],
            "source": "AFFECTED_FIELD"
        },
        {
            "source": "DESCRIPTION",
            "extracted_events": [
                {
                    "fixed": "1.083"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/opensuse/mirrorcache

Affected ranges

Type

GIT

Repo

https://github.com/opensuse/mirrorcache

Events

Introduced

Fixed

5153dc35e2cc2d87c264bc9a0437244cee81a827

Database specific

Show details

{
    "cpe": "cpe:2.3:a:opensuse:mirrorcache:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.083"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

0.*

0.1

0.2

0.3

0.4

0.5

0.6

0.7

0.8

0.9

1.*

1.0

1.001

1.002

1.003

1.004

1.005

1.006

1.007

1.008

1.009

1.010

1.011

1.012

1.014

1.015

1.016

1.017

1.018

1.019

1.020

1.021

1.022

1.023

1.024

1.025

1.026

1.027

1.028

1.029

1.030

1.031

1.032

1.033

1.034

1.035

1.036

1.037

1.038

1.039

1.040

1.041

1.042

1.043

1.044

1.045

1.046

1.047

1.048

1.049

1.050

1.051

1.052

1.053

1.054

1.055

1.056

1.057

1.058

1.059

1.060

1.061

1.062

1.063

1.064

1.065

1.066

1.067

1.068

1.069

1.070

1.071

1.072

1.073

1.074

1.075

1.076

1.077

1.078

1.079

1.080

1.081

1.082

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-49505.json"