Autore: Angelo Barbosa

CVE-2024-29202 | JumpServer up to 3.10.6 Jinja2 Template code injection (GHSA-2vvr-vmvx-73ch)

A vulnerability classified as critical was found in JumpServer up to 3.10.6. This vulnerability affects unknown code of the component Jinja2 Template Handler. The manipulation leads to code injection. This vulnerability was named CVE-2024-29202. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-23539 | Apache Fineract up to 1.8.4 sql injection

A vulnerability was found in Apache Fineract up to 1.8.4. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to sql injection. This vulnerability is handled as CVE-2024-23539. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-3091 | PHPGurukul Emergency Ambulance Hiring Portal 1.0 Search Request Page /admin/search.php cross site scripting

A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/search.php of the component Search Request Page. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-3091. It is possible to launch the attack remotely. Furthermore, there is an exploit...

Per saperne di più