CVE-2024-52426 describes a DOM-based Cross-site Scripting vulnerability in Linear Oy Linear's product Linear, affecting versions up to 2.8.0. The issue is caused by improper neutralization of input during web page generation, which can lead to execution of malicious scripts in the user's browser. The vulnerability has a CVSS 3.1 base score of 6.5 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L), indicating network attack vector, low attack complexity, requiring privileges and user interaction, with partial impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available, and no known exploits have been reported.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to partial compromise of confidentiality, integrity, and availability of user data within the affected application. The attack requires user interaction and some level of privileges. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor vendor communications for updates. Until a patch is available, consider limiting user privileges and exercising caution with untrusted input to reduce exposure.