CVE-2024-6585: XSS
Multiple stored cross-site scripting (“XSS”) vulnerabilities in the markdown dashboard and dashboard comment functionality of Lightdash version 0.1024.6 allows remote authenticated threat actors to inject malicious scripts into vulnerable web pages. A threat actor could potentially exploit this vulnerability to store malicious JavaScript which executes in the context of a user’s session with the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6585?
CVE-2024-6585 has been classified as a high severity vulnerability due to its potential for remote exploitation through stored XSS attacks.
How do I fix CVE-2024-6585?
To mitigate CVE-2024-6585, you should upgrade to the latest version of Lightdash that addresses these XSS vulnerabilities.
What are the potential impacts of CVE-2024-6585?
Exploitation of CVE-2024-6585 could allow authenticated attackers to inject malicious scripts into web pages, potentially compromising user data.
Who is affected by CVE-2024-6585?
Users of Lightdash version 0.1024.6 are vulnerable to CVE-2024-6585 and should take immediate action to secure their systems.
Is CVE-2024-6585 a known issue in Lightdash?
Yes, CVE-2024-6585 is a recognized issue in Lightdash, specifically affecting its markdown dashboard and comment functionality.