CVE-2024-50585 Reflected Cross-Site Scripting
Reflected XSS in Numerix License Server allows attackers to execute arbitrary JavaScript via crafted HTTP POST requests, potentially leading to session hijacking.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-50585?
CVE-2024-50585 is a medium-severity cross-site scripting vulnerability in Numerix LLC License Server Administration System, published on 11 Dec 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Users who click on a malicious link or visit a website under the control of an attacker can be infected with arbitrary JavaScript which is running in the context of the "Numerix License Server Administration System Login" (nlslogin.jsp) page. The vulnerability can be triggered by sending a specially crafted HTTP POST request.
The vendor was unresponsive during multiple attempts to contact them via various channels, hence there is no solution available. In case you are using this software, be sure to restrict access and monitor logs. Try to reach out to your contact person for this vendor and request a patch.
Weakness: CWE-79
Which versions are affected by CVE-2024-50585?
How do I fix CVE-2024-50585?
No fix has been published for CVE-2024-50585 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2024-50585 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-50585 exists.
Sources
Also known as GHSA-4gff-x4ff-9qq7.