CVE-2024-41809

Summary

CVE-2024-41809 is a newly disclosed cross-site scripting (XSS) vulnerability affecting OpenObserve, an open-source observability platform. This issue, present in versions 0.4.4 and earlier than 0.10.0, can be exploited by injecting malicious scripts into the application through user input. Specifically, line 32 of `openobserve/web/src/views/MemberSubscription.vue` is the source of the vulnerability. Version 0.10.0 has addressed this issue by implementing proper HTML sanitization to prevent such attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.