CVE-2024-53617

Description

A Cross Site Scripting vulnerability in LibrePhotos before commit 32237 allows attackers to takeover any account via uploading an HTML file on behalf of the admin user using IDOR in file upload.

References

https://github.com/ii5mai1/CVE-2024-53617

https://github.com/LibrePhotos/librephotos/pull/1476

https://github.com/LibrePhotos/librephotos/commit/32237ddc0b6293a69b983a07b5ad462fcdd6c929

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3