CVE-2024-49505

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-49505
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-49505.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-49505
Published
2024-11-13T15:15:07.860Z
Modified
2026-03-12T11:18:00.551769Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumbleweed MirrorCache allows the execution of arbitrary JS via reflected XSS in the  REGEX and P parameters. This issue affects MirrorCache before 1.083.

References

Affected packages

Git / github.com/opensuse/mirrorcache

Affected ranges

Type
GIT
Repo
https://github.com/opensuse/mirrorcache
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
5153dc35e2cc2d87c264bc9a0437244cee81a827
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.083"
        }
    ]
}

Affected versions

0.*
0.1
0.2
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.*
1.0
1.001
1.002
1.003
1.004
1.005
1.006
1.007
1.008
1.009
1.010
1.011
1.012
1.014
1.015
1.016
1.017
1.018
1.019
1.020
1.021
1.022
1.023
1.024
1.025
1.026
1.027
1.028
1.029
1.030
1.031
1.032
1.033
1.034
1.035
1.036
1.037
1.038
1.039
1.040
1.041
1.042
1.043
1.044
1.045
1.046
1.047
1.048
1.049
1.050
1.051
1.052
1.053
1.054
1.055
1.056
1.057
1.058
1.059
1.060
1.061
1.062
1.063
1.064
1.065
1.066
1.067
1.068
1.069
1.070
1.071
1.072
1.073
1.074
1.075
1.076
1.077
1.078
1.079
1.080
1.081
1.082

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-49505.json"