CVE-2024-6585

Lightdash version 0.1024.6 is affected by multiple stored cross-site scripting (XSS) vulnerabilities within its markdown dashboard and dashboard comment functionality. This flaw allows a remote authenticated threat actor to inject malicious JavaScript into web pages, which then executes within th...

CVE-2024-6585: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting “XSS” vulnerabilities in the markdown dashboard and dashboard comment functionality of Lightdash version 0.1024.6 allows remote authenticated threat actors to inject malicious scripts into vulnerable web pages. A threat actor could potentially exploit this...