CVE-2024-47002

Medium · 5.4

CVSS

5.4

EPSS

15.6%

Published

Jan 15, 2025

CISA due date

—

The record

A html code injection vulnerability exists in the vlan management part of Observium CE 24.4.13528. A specially crafted HTTP request can lead to an arbitrary html code. An authenticated user would need to click a malicious link provided by the attacker.

Affected packages

Ecosystem	Package	Introduced	Fixed