CVE-2024-24571

    Dashboard / Vulnerabilities / CVE-2024-24571

    CVE-2024-24571

    Published: 31 Jan 2024Last Modified: 28 Oct 2026

    Summary: facileManager Systemic Cross-Site Scripting (XSS)

    Details: facileManager is a modular suite of web apps built with the sysadmin in mind. For the facileManager web application versions 4.5.0 and earlier, we have found that XSS was present in almost all of the input fields as there is insufficient input validation.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/24xxx/CVE-2024-24571.json, https://github.com/WillyXJ/facileManager/security/advisories/GHSA-h7w3-xv88-2xqj, https://nvd.nist.gov/vuln/detail/CVE-2024-24571, https://github.com/WillyXJ/facileManager/commit/0aa850d4b518f10143a4c675142b15caa5872877

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -0aa850d4b518f10143a4c675142b15caa5872877

    Affected versions

    v4.5.0-complete

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2024-24571 | CVE-DB