CVE-2024-49505

Summary

CVE-2024-49505 is a Cross-Site Scripting (XSS) vulnerability affecting openSUSE Tumbleweed MirrorCache. This issue resides in the improper neutralization of user input during web page generation. An attacker can exploit this flaw by injecting malicious JavaScript code in the REGEX and P parameters, which are used in the MirrorCache web interface. Successful exploitation allows the attacker to execute arbitrary code in the victim's browser, potentially leading to data theft or unauthorized account access. MirrorCache versions prior to 1.083 are susceptible to this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.