CVE-2024-28852

Summary

CVE-2024-28852: Ampache, a web-based audio/video streaming application, has multiple reflective Cross-Site Scripting (XSS) vulnerabilities. These vulnerabilities affect forms in Ampache that utilize the `rule` variable, which can be found during song and podcast queries, among others. This issue arises due to insecure handling of user input. Affected versions include those prior to 6.3.1, and users are advised to upgrade to the patched version to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.