CVE Alert: CVE-2024-53617
Vulnerability Summary: CVE-2024-53617
A Cross Site Scripting vulnerability in LibrePhotos before commit 32237 allows attackers to takeover any account via uploading an HTML file on behalf of the admin user using IDOR in file upload.
Affected Endpoints:
No affected endpoints listed.
Published Date:
12/2/2024, 7:15:10 PM
⚠️ CVSS Score:
Exploit Status:
Not ExploitedReferences:
- https://github.com/LibrePhotos/librephotos/commit/32237ddc0b6293a69b983a07b5ad462fcdd6c929
- https://github.com/LibrePhotos/librephotos/pull/1476
- https://github.com/ii5mai1/CVE-2024-53617
Recommended Action:
No proposed action available. Please refer to vendor documentation for updates.
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.
If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below
To keep up to date follow us on the below channels.
