CVE-2024-51317: Command Injection
Published Nov 3, 2025
·Updated
An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the domnodenormalize function
Affected Software
2 affected components
NetSurf NetSurf
Netsurf-browser Netsurf=3.11
Event History
Nov 3, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-51317?
CVE-2024-51317 has been classified as a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2024-51317?
To fix CVE-2024-51317, users should update to the latest version of NetSurf that addresses this vulnerability.
3
What exploitation methods are associated with CVE-2024-51317?
CVE-2024-51317 can be exploited by a remote attacker through the dom_node_normalize function to execute arbitrary code.
4
Who is affected by CVE-2024-51317?
CVE-2024-51317 affects all users of NetSurf version 3.11 and potentially earlier versions.
5
Is there a workaround for CVE-2024-51317?
Currently, there are no known workarounds for CVE-2024-51317, and the best mitigation is to apply the software update.