Medium severity4.8NVD Advisory· Published Jun 14, 2024· Updated Jun 17, 2026
CVE-2024-31159
CVE-2024-31159
Description
The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrative privilege can insert JavaScript code to the parameter for Reflected Cross-site scripting attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:asus:download_master:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:asus:download_master:*:*:*:*:*:*:*:*range: <3.1.0.114
- (no CPE)
- (no CPE)range: earlier
Patches
Vulnerability mechanics
References
2- www.twcert.org.tw/en/cp-139-7862-e43e4-2.htmlnvdThird Party Advisory
- www.twcert.org.tw/tw/cp-132-7861-1a06f-1.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.