CVE-2024-58394mediumobserved exploitationCWE-79

CVE-2024-58394: medium-severity vulnerability in Retool

Retool < 3.88.0 XSS via /api/imageProxy SVG Proxying

Published · Updated

Follow this CVE+ Monitor Retool

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

35Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendcvss 5.1epss 0.2%
from disclosure to weapon
Published on NVDOct 22
VulnCheckOct 22
Retool before 3.88.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to execute scripts by proxying malicious SVG files through /api/imageProxy. Attackers can supply an attacker-hosted SVG in the url parameter, which is served from the Retool origin without a Content Security Policy, executing JavaScript in victims' sessions. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-10-15.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Affected products
Retool · Retool
Related CVEs — Retool

In the same product, most dangerous first.

CVE-2025-47424HIGHCVE-2025-47424EPSS 0.2%