AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-25676

MEDIUM · CVSS 4.7 EPSS 0.33%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-05-01 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.7. See the original NVD description below for full technical details.

CVE
CVE-2024-25676
Severity
MEDIUM
CVSS
4.7
EPSS
0.33%

Original NVD Description

An issue was discovered in ViewerJS 0.5.8. A script from the component loads content via URL TAGs without properly sanitizing it. This leads to both open redirection and out-of-band resource loading.