Erick Fernando

**Name of the Vulnerable Software and Affected Versions** openSUSE Tumbleweed MirrorCache versions prior to 1.083 **Description** A Cross-site Scripting vulnerability exists in openSUSE Tumbleweed MirrorCache, allowing the execution of arbitrary JavaScript via reflected XSS in the `REGEX` and `P` parameters. This issue affects versions before 1.083. **Recommendations** For versions prior to 1.083, update to version 1.083 or later to resolve the issue. As a temporary workaround, consider restricting access to the `REGEX` and `P` parameters in the affected API endpoint until a patch is available.