CVE-2024-53617

—

CVSS 3.1

4.8 medium

EPSS

<1%p44

Published

Dec 2, 2024 (Dec 2, 2024)

Modified

Jun 17, 2026

Description

A Cross Site Scripting vulnerability in LibrePhotos before commit 32237 allows attackers to takeover any account via uploading an HTML file on behalf of the admin user using IDOR in file upload.

Weakness: CWE-79, CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.