CVE-2024-50344

CVE-2024-50344 is a medium-severity vulnerability affecting I, Librarian, an open-source PDF managing SaaS. It allows for client-side code execution due to improper MIME type validation for supplemental files, enabling an authenticated attacker to upload and execute malicious JavaScript within the application context. The CVSS score of 4.6 indicates a network-based attack with low privileges and user interaction required, potentially leading to limited impact on confidentiality and integrity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.