Autore: Angelo Barbosa

CVE-2024-29892 | Zitadel up to 2.48.2 Login UI authorization

A vulnerability was found in Zitadel up to 2.48.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Login UI. The manipulation leads to incorrect authorization. This vulnerability is known as CVE-2024-29892. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-29886 | Serverpod up to 1.2.5 Password weak password hash (GHSA-r75m-26cq-mjxc)

A vulnerability has been found in Serverpod up to 1.2.5 and classified as problematic. This vulnerability affects unknown code of the component Password Handler. The manipulation leads to password hash with insufficient computational effort. This vulnerability was named CVE-2024-29886. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-29888 | Saleor up to 3.19.14 Pickup unknown vulnerability (GHSA-mrj3-f2h4-7w45)

A vulnerability, which was classified as problematic, was found in Saleor up to 3.19.14. This affects an unknown part of the component Pickup Handler. The manipulation leads to exposure of private personal information to an unauthorized actor. This vulnerability is uniquely identified as CVE-2024-29888. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più