CVE-2024-52283 - Missing sanitation of inputs allowed arbitrary users to conduct a stored XSS attack that triggers for users that view a certain project

Back Back to CVE browser

MEDIUM

Missing sanitation of inputs allowed arbitrary users to conduct a stored XSS attack that triggers for users that view a certain project

Published Nov 28, 2024

5.7

MEDIUM

CVSS 3.1

EPSS 0.36%

Description

Missing sanitation of inputs allowed arbitrary users to conduct a stored XSS attack that triggers for users that view a certain project

Affected products

Vendor SUSE Product Hackweek Default
unaffected
- Version
  0
  Status
  affected
  Constraints

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SUSE

Hackweek

unaffected

Version	Status	Constraints
0	affected

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

Link	Providers	Tags
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-52283
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-46079		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner suse

Published Nov 28, 2024

Updated Nov 28, 2024

Reserved Nov 6, 2024

Link CVE-2024-52283

CISA Vulnrichment

Updated Nov 28, 2024

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2024-52283

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-52283

ENISA EUVD

Assigner suse

Published Nov 28, 2024

Updated Nov 28, 2024

Exploited since n/a

Link EUVD-2024-46079

EUVD-2024-46079