Skip to content
OpenAdvisories
High · 8.7 CVE-2024-47002 EUVD-2024-42868GHSA-m7m4-xr7w-gpv4

A html code injection vulnerability exists in the vlan management part of Observium CE 24.4.13528. A specially crafted HTTP request can lea…

Published Jan 15, 2025 · Updated Jan 15, 2025 · Assigned by talos

Vendor: Observium Product: Observium

Description

A html code injection vulnerability exists in the vlan management part of Observium CE 24.4.13528. A specially crafted HTTP request can lead to an arbitrary html code. An authenticated user would need to click a malicious link provided by the attacker.

Affected products

VendorProductAffectedFixed
Observium Observium CE 24.4.13528 —

References