PT-2024-21388 · Unknown · Jstrieb/Urlpages

Published 2024-02-26 · Updated 2025-06-02 · CVE-2024-26468

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions jstrieb/urlpages versions before commit 035b647

Description A DOM based cross-site scripting (XSS) vulnerability in the component index.html of jstrieb/urlpages allows attackers to execute arbitrary Javascript via sending a crafted URL.

Recommendations For versions before commit 035b647, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the index.html component to minimize the risk of exploitation. Avoid using crafted URLs that could trigger the execution of arbitrary Javascript until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-26468

Affected Products

Jstrieb/Urlpages

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-26468 · Security Note
• https://osv.dev/vulnerability/CVE-2024-26468 · Vendor Advisory
• https://t.me/cvenotify/100819 · Telegram Post
• https://t.me/cvenotify/124337 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1762173282835378470 · Twitter Post
• https://twitter.com/CVEnew/status/1762113378011447383 · Twitter Post
• https://gist.github.com/cd80/87b41cf58ba04564d55f4a26152bf0a9 · Note