从这个网页截图中,可以获取到以下关于漏洞的关键信息: 1. 漏洞编号:CVE-2024-52283 2. 漏洞描述:SUSE/hackweek: stored XSS in hackweek.opensuse.org 3. 报告日期:2024-11-19 16:27 UTC 4. 报告者:Emanuele Cappello 5. 修复状态:RESOLVED FIXED 6. 优先级:P3 - Medium 7. 严重性:Normal 8. 产品:SUSE Security Incidents 9. 组件:Incidents (show other bugs) 10. 版本:unspecified 11. 硬件:Other Other 12. 目标里程碑:--- 13. 负责人:Security Team bot 14. 白板:HTML syntax is evaluated both in a new project description and in project's comment section, leading to stored XSS. Session cookies are set as httpOnly, therefore are not impacted. Main malicious use cases might be to like/join/delete a project unintentionally. 15. CVSS评分:3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N - 5.7 16. 作者:Emanuele Cappello and Andrea Mattiazzo 17. 修复日期:2024-11-20 13:15 UTC 18. 修复者:Security Team bot 19. 相关链接:https://github.com/SUSE/hackweek/pull/1696 这些信息可以帮助了解漏洞的详细情况、修复过程以及相关的技术细节。