CVE-2024-49505mediumCWE-79

CVE-2024-49505: fallo de gravedad media en openSUSE Tumbleweed

XSS vulnerability found in OpenSuse MirrorCache

Publicada el

Seguir esta CVE+ Monitorear Tumbleweed

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.4%
A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumbleweed MirrorCache allows the execution of arbitrary JS via reflected XSS in the  REGEX and P parameters. This issue affects MirrorCache before 1.083.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
openSUSE · Tumbleweed
CVEs relacionadas — openSUSE Tumbleweed

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-25315CRITICALsalt-api unauthenticated remote code executionEPSS 2.3%CVE-2022-31250HIGHkeylime %post scriplet allows for privilege escalation from keylime user to rootEPSS 0.3%CVE-2023-32183HIGHCVE-2023-32183EPSS 0.2%CVE-2025-53881MEDIUMSUSE-specific logrotate configuration allows escalation from mail user/group to rootEPSS 0.2%CVE-2025-46810HIGHCVE-2025-46810EPSS 0.2%CVE-2026-104618MEDIUMsdbootutil: world-readable debug logEPSS 0.1%