Autore: Angelo Barbosa

CVE-2024-29202 | JumpServer up to 3.10.6 Jinja2 Template code injection (GHSA-2vvr-vmvx-73ch)

A vulnerability classified as critical was found in JumpServer up to 3.10.6. This vulnerability affects unknown code of the component Jinja2 Template Handler. The manipulation leads to code injection. This vulnerability was named CVE-2024-29202. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-23539 | Apache Fineract up to 1.8.4 sql injection

A vulnerability was found in Apache Fineract up to 1.8.4. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to sql injection. This vulnerability is handled as CVE-2024-23539. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più