CVE-2024-49505
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-49505
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-49505.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-49505
- Published
- 2024-11-13T15:15:07Z
- Modified
- 2024-11-19T00:52:02.009158Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumbleweed MirrorCache allows the execution of arbitrary JS via reflected XSS in the REGEX and P parameters. This issue affects MirrorCache before 1.083.
- References
Affected packages
Git / github.com/opensuse/mirrorcache
Affected ranges
- Type
- GIT
- Repo
- https://github.com/opensuse/mirrorcache
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
0.*
0.1
0.2
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.*
1.0
1.001
1.002
1.003
1.004
1.005
1.006
1.007
1.008
1.009
1.010
1.011
1.012
1.014
1.015
1.016
1.017
1.018
1.019
1.020
1.021
1.022
1.023
1.024
1.025
1.026
1.027
1.028
1.029
1.030
1.031
1.032
1.033
1.034
1.035
1.036
1.037
1.038
1.039
1.040
1.041
1.042
1.043
1.044
1.045
1.046
1.047
1.048
1.049
1.050
1.051
1.052
1.053
1.054
1.055
1.056
1.057
1.058
1.059
1.060
1.061
1.062
1.063
1.064
1.065
1.066
1.067
1.068
1.069
1.070
1.071
1.072
1.073
1.074
1.075
1.076
1.077
1.078
1.079
1.080
1.081
1.082