Cyber Resilience

CVE-2024-24571

MediumPublic PoC

Published: 31 January 2024

Published
31 January 2024
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS Score 0.0036 58.7th percentile
Risk Priority 11 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-24571 is a medium-severity Basic XSS (CWE-80) vulnerability in Facilemanager Facilemanager. Its CVSS base score is 5.4 (Medium).

Operationally, ranked in the top 41.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability details

facileManager is a modular suite of web apps built with the sysadmin in mind. For the facileManager web application versions 4.5.0 and earlier, we have found that XSS was present in almost all of the input fields as there is…

more

insufficient input validation.

CWE(s)
CWE-80

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

facilemanager
facilemanager
≤ 4.5.1

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References