CVE-2024-37846

Description

MangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection (CSTI) vulnerability via the Platform Management Edit page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/herombey/Disclosures/tree/main ↗
• https://github.com/herombey/Disclosures/blob/main/CVE-2024-37846-CSTI.pdf ↗