CVE-2024-24275

CVE-2024-24275 is a critical Cross-Site Scripting (XSS) vulnerability affecting Teamwire Windows desktop client versions 2.0.1 through 2.4.0. A remote attacker can exploit this by injecting a crafted payload into the global search function, leading to the potential compromise of sensitive information. With a CVSS score of 9.6 (CRITICAL), this vulnerability is easily exploitable over the network with low attack complexity, requiring user interaction, and can result in high impacts to confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.