What is CVE-2024-53617?

CVE-2024-53617 is a medium-severity vulnerability in N/a, classified under Cross-site Scripting. CVSS score: 4.8/10. Published 2024-12-02.

How severe is CVE-2024-53617?

Medium severity. CVSS v3 base score is 4.8 out of 10.

Is CVE-2024-53617 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in N/a

CVE-2024-53617

A Cross Site Scripting vulnerability in LibrePhotos before commit 32237 allows attackers to takeover any account via uploading an HTML file on behalf of the admin user using IDOR in file upload.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.005 (41.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting
CWE-639 — Authorization Bypass Through User-Controlled Key

Public proof-of-concept exploits

ii5mai1/CVE-2024-53617
nomi-sec/PoC-in-GitHub

References

cve@mitre.org
cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2024-53617?: CVE-2024-53617 is a medium-severity vulnerability in N/a, classified under Cross-site Scripting. CVSS score: 4.8/10. Published 2024-12-02.
How severe is CVE-2024-53617?: Medium severity. CVSS v3 base score is 4.8 out of 10.
Is CVE-2024-53617 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.