Critical · 9.8 CVE-2024-23168 EUVD-2024-20687GHSA-8jv6-9x2j-w49p

Vulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious commands to the WebSocket API, resulting …

Published Aug 15, 2024 · Updated Aug 15, 2024 · Assigned by mitre

Description

Vulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious commands to the WebSocket API, resulting in the arbitrary code execution.

References

https://github.com/Xiexe/XSOverlay-Issue-Tracker
https://vuln.ryotak.net/advisories/70
https://store.steampowered.com/news/app/1173510?emclan=103582791465938574&emgid=7792991106417394332