CVE-2024-47184
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Published Sep 27, 2024
Updated: Oct 4, 2024
CWE ID 79
Summary
CVE-2024-47184 is a stored cross-site scripting vulnerability affecting version 6.5 and older of Ampache, an open-source audio/video streaming application and file manager. Maliciously crafted Democratic Playlist Names can be exploited to inject malicious scripts, potentially leading to unauthorized user actions or data theft. The latest version, 6.6.0, includes a patch to mitigate this risk. Users are urged to upgrade as soon as possible to protect their systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Ampache
Affected Vendors
- Ampache