{"id":"CVE-2024-49505","summary":"XSS vulnerability found in OpenSuse MirrorCache","details":"A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumbleweed MirrorCache allows the execution of arbitrary JS via reflected XSS in the  REGEX and P parameters.\nThis issue affects MirrorCache before 1.083.","modified":"2026-08-12T03:51:29.329142518Z","published":"2024-11-13T14:21:00.317Z","database_specific":{"cwe_ids":["CWE-79"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49505.json","unresolved_ranges":[{"extracted_events":[{"fixed":"1.083"}],"source":"AFFECTED_FIELD"},{"source":"DESCRIPTION","extracted_events":[{"fixed":"1.083"}]}],"cna_assigner":"suse"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49505.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49505"},{"type":"REPORT","url":"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-49505"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/opensuse/mirrorcache","events":[{"introduced":"0"},{"fixed":"5153dc35e2cc2d87c264bc9a0437244cee81a827"}],"database_specific":{"cpe":"cpe:2.3:a:opensuse:mirrorcache:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.083"}],"source":"CPE_RANGE"}}],"versions":["1.082","1.081","1.080","1.079","1.078","1.077","1.076","1.075","1.074","1.073","1.072","1.071","1.070","1.069","1.068","1.067","1.066","1.065","1.064","1.063","1.062","1.061","1.060","1.059","1.058","1.057","1.056","1.055","1.054","1.053","1.052","1.051","1.050","1.049","1.048","1.047","1.046","1.045","1.044","1.043","1.042","1.041","1.040","1.039","1.038","1.037","1.036","1.035","1.034","1.033","1.032","1.031","1.030","1.029","1.028","1.027","1.026","1.025","1.024","1.023","1.022","1.021","1.020","1.019","1.018","1.017","1.016","1.015","1.014","1.012","1.011","1.010","1.009","1.008","1.007","1.006","1.005","1.004","1.003","1.002","1.001","1.0","0.9","0.8","0.7","0.6","0.5","0.4","0.3","0.2","0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-49505.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}]}