CVE-2024-45061

A cross-site scripting (xss) vulnerability exists in the weather map editor functionality of Observium CE 24.4.13528. A specially crafted HTTP request can lead to a arbitrary javascript code execution. An authenticated user would need to click a malicious link provided by the attacker.

• CWE-79

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2092Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2092Exploit, Third Party Advisory

Published

Jan 15, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45056zksolc is a Solidity compiler for ZKsync. All LLVM versions …5.9
• CVE-2024-45057i-Educar is free, fully online school management software th…6.1
• CVE-2024-45058i-Educar is free, fully online school management software th…8.1
• CVE-2024-45059i-Educar is free, fully online school management software th…8.8
• CVE-2024-4506A vulnerability has been found in Ruijie RG-UAC up to 202404…7.2
• CVE-2024-45060PHPSpreadsheet is a pure PHP library for reading and writing…6.1
• CVE-2024-45062A stack based buffer overflow vulnerability is present in Op…6.8
• CVE-2024-45063The function ctl_write_buffer incorrectly set a flag which r…8.8
• CVE-2024-45064A buffer overflow vulnerability exists in the FileX Internal…9.8
• CVE-2024-45065Rejected reason: This candidate was in a CNA pool that was n…
• CVE-2024-45066A specially crafted POST request to the ProGauge MAGLINK LX …9.8
• CVE-2024-45067Incorrect default permissions in some Intel(R) Gaudi(R) soft…8.2