CVE-2024-27728: XSS

Published Aug 15, 2024

Updated

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature.

Affected Software

2 affected components

Friendica Friendica

Friendica Friendica=2023.12

Remediation

Patch Available

https://github.com/friendica/friendica/pull/13927

Event History

Aug 15, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-27728?

CVE-2024-27728 has a medium severity rating due to its potential to expose sensitive information through Cross Site Scripting.

How do I fix CVE-2024-27728?

To fix CVE-2024-27728, update Friendica to the latest version where the vulnerability is patched.

What impact does CVE-2024-27728 have on Friendica users?

CVE-2024-27728 allows remote attackers to exploit the vulnerability and potentially access sensitive information using crafted inputs.

Is CVE-2024-27728 a type of Cross Site Scripting vulnerability?

Yes, CVE-2024-27728 is classified as a Cross Site Scripting vulnerability affecting the babel debug feature in Friendica.

Who is affected by CVE-2024-27728?

Any Friendica user on version 2023.12 is potentially affected by CVE-2024-27728 due to the Cross Site Scripting flaw.