Skip to content
OpenAdvisories
High · 8.7 CVE-2024-47140 EUVD-2024-42869GHSA-q473-3jgq-vvhm

A cross-site scripting (xss) vulnerability exists in the add_alert_check page of Observium CE 24.4.13528. A specially crafted HTTP request …

Published Jan 15, 2025 · Updated Jan 15, 2025 · Assigned by talos

Description

A cross-site scripting (xss) vulnerability exists in the add_alert_check page of Observium CE 24.4.13528. A specially crafted HTTP request can lead to a arbitrary javascript code execution. An authenticated user would need to click a malicious link provided by the attacker.

Affected products

VendorProductAffectedFixed
Observium Observium CE 24.4.13528 —

References