CVE-2024-35545: XSS
Published Jun 26, 2024
·Updated
MAP-OS v4.45.0 and earlier was discovered to contain a cross-site scripting (XSS) vulnerability.
Affected Software
2 affected components
MAP-OS MAP-OS<4.45.0
Mapos Map-os<=4.45.0
Remediation
Event History
Jun 26, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-35545?
CVE-2024-35545 is a critical cross-site scripting (XSS) vulnerability that can lead to unauthorized actions performed on behalf of a user.
2
How do I fix CVE-2024-35545?
To fix CVE-2024-35545, upgrade MAP-OS to version 4.45.1 or later where the vulnerability is patched.
3
What versions of MAP-OS are affected by CVE-2024-35545?
CVE-2024-35545 affects MAP-OS version 4.45.0 and earlier.
4
Could CVE-2024-35545 allow remote code execution?
CVE-2024-35545 does not directly allow remote code execution, but it can be leveraged for other attacks through XSS.
5
Is user data at risk due to CVE-2024-35545?
Yes, CVE-2024-35545 can lead to the compromise of user data by exploiting XSS to execute malicious scripts.