CVE-2024-52583 WesHacks code includes links to Leostop tracking spyware infested files
The website source code included links to malicious JavaScript files, allowing attackers to execute code or track users via supply chain compromise.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-52583?
CVE-2024-52583 is a high-severity vulnerability in DefinetlyNotAI WesHacks, published on 18 Nov 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The WesHacks GitHub repository provides the official Hackathon competition website source code for the Muweilah Wesgreen Hackathon. The page `schedule.html` before 17 November 2024 or commit 93dfb83 contains links to `Leostop`, a site that hosts a malicious injected JavaScript file that occurs when bootstrap is run as well as jquery. `Leostop` may be a tracking malware and creates 2 JavaScript files, but little else is known about it. The WesHacks website remove all references to `Leostop` as of 17 November 2024.
Weakness: CWE-494
Which versions are affected by CVE-2024-52583?
How do I fix CVE-2024-52583?
No fix has been published for CVE-2024-52583 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-52583 being exploited?
There is no known exploitation of CVE-2024-52583 in the wild and no public exploit code.
Sources
Also known as GHSA-462m-5c66-4pmh.