Author: Angelo Barbosa

CVE-2024-29886 | Serverpod up to 1.2.5 Password weak password hash (GHSA-r75m-26cq-mjxc)

A vulnerability has been found in Serverpod up to 1.2.5 and classified as problematic. This vulnerability affects unknown code of the component Password Handler. The manipulation leads to password hash with insufficient computational effort. This vulnerability was named CVE-2024-29886. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2024-29888 | Saleor up to 3.19.14 Pickup unknown vulnerability (GHSA-mrj3-f2h4-7w45)

A vulnerability, which was classified as problematic, was found in Saleor up to 3.19.14. This affects an unknown part of the component Pickup Handler. The manipulation leads to exposure of private personal information to an unauthorized actor. This vulnerability is uniquely identified as CVE-2024-29888. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2024-29887 | Serverpod up to 1.2.5 serverpod_client certificate validation (GHSA-h6x7-r5rg-x5fw)

A vulnerability, which was classified as problematic, has been found in Serverpod up to 1.2.5. Affected by this issue is some unknown functionality of the component serverpod_client. The manipulation leads to improper certificate validation. This vulnerability is handled as CVE-2024-29887. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2024-29891 | Zitadel up to 2.48.2 Avatar Image unrestricted upload

A vulnerability classified as critical was found in Zitadel up to 2.48.2. Affected by this vulnerability is an unknown functionality of the component Avatar Image Handler. The manipulation leads to unrestricted upload. This vulnerability is known as CVE-2024-29891. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More