VYPR
← All advisories
Medium severity4.8OSV Advisory· Published Dec 2, 2024· Updated Apr 15, 2026

CVE-2024-53617

CVE-2024-53617

Description

A Cross Site Scripting vulnerability in LibrePhotos before commit 32237 allows attackers to takeover any account via uploading an HTML file on behalf of the admin user using IDOR in file upload.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Librephotos/LibrephotosOSV2 versions
    0.2.0-rc, v0.1+ 1 more
    • (no CPE)range: 0.2.0-rc, v0.1
    • (no CPE)range: < commit 32237 (fix commit)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.