Author: Angelo Barbosa

CVE-2024-29886 | Serverpod up to 1.2.5 Password weak password hash (GHSA-r75m-26cq-mjxc)

A vulnerability has been found in Serverpod up to 1.2.5 and classified as problematic. This vulnerability affects unknown code of the component Password Handler. The manipulation leads to password hash with insufficient computational effort. This vulnerability was named CVE-2024-29886. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2024-29888 | Saleor up to 3.19.14 Pickup unknown vulnerability (GHSA-mrj3-f2h4-7w45)

A vulnerability, which was classified as problematic, was found in Saleor up to 3.19.14. This affects an unknown part of the component Pickup Handler. The manipulation leads to exposure of private personal information to an unauthorized actor. This vulnerability is uniquely identified as CVE-2024-29888. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2024-29887 | Serverpod up to 1.2.5 serverpod_client certificate validation (GHSA-h6x7-r5rg-x5fw)

A vulnerability, which was classified as problematic, has been found in Serverpod up to 1.2.5. Affected by this issue is some unknown functionality of the component serverpod_client. The manipulation leads to improper certificate validation. This vulnerability is handled as CVE-2024-29887. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More