Critical severity9.6NVD Advisory· Published Mar 5, 2024· Updated Jun 17, 2026

CVE-2024-24276

Description

Cross Site Scripting (XSS) vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the chat name, message preview, username and group name components.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Teamwire/Teamwire2 versions
cpe:2.3:a:teamwire:teamwire:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:teamwire:teamwire:*:*:*:*:*:*:*:*range: >=2.0.1,<2.3.0
- (no CPE)range: 2.0.1 - 2.4.0

Patches

Vulnerability mechanics

References

research.hisolutions.com/2020/08/web-vulnerabilities-are-coming-to-the-desktop-again-rces-and-other-vulnerabilities-in-teamwire/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.624
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000