CVE-2024-49505
No fix known EPSS <1%CVSS 5.3
A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumbleweed MirrorCache allows the execution of arbitrary JS via reflected XSS in the REGEX and P parameters. This issue affects MirrorCache before 1.083.
Products: opensuse tumbleweed, openSUSE Tumbleweed