CVE-2024-24275: Teamwire

Critical severity, CVSS 9.6. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the global search function.

Affected products

• Teamwire Teamwire: from 2.0.1, before 2.4.0 (fixed in 2.4.0)

Published 2024-03-05. Last modified 2026-06-17.