CVE-2024-11441
CVSS 3.0 Score 6.1 of 10 (medium)
Details
Published Mar 20, 2025
CWE ID 79
Summary
CVE-2024-11441 is a stored cross-site scripting (XSS) vulnerability affecting Serge version 0.9.0. This issue arises from insufficient input validation during the generation of chat prompts. An attacker can exploit this flaw by injecting malicious HTML/JavaScript code into a chat message. The code is then stored and executed whenever the chat is accessed, potentially leading to the display of unintended content and enabling phishing attacks on unsuspecting users.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Serge