Lucene search
CVE-2024-34706
Security issue in Valtimo platform. Exposure of user access token allows retrieval of personal information and execution of requests via misconfigured Form.io component.
Show more
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | JWT Exposure | 14 May 202404:32 | – | veracode |
 | CVE-2024-34706 | 14 May 202415:39 | – | nvd |
 | GHSA-XCP4-62VJ-CQ3R @valtimo/components exposes access token to form.io | 13 May 202416:04 | – | osv |
| CVE-2024-34706 | 14 May 202415:39 | – | osv |
 | CVE-2024-34706 | 5 Feb 202511:20 | – | redhatcve |
 | CVE-2024-34706 @valtimo/components exposes access token to form.io | 13 May 202416:02 | – | cvelist |
 | CVE-2024-34706 @valtimo/components exposes access token to form.io | 13 May 202416:02 | – | vulnrichment |
 | @valtimo/components exposes access token to form.io | 13 May 202416:04 | – | github |
Node
OROR
[
{
"vendor": "valtimo-platform",
"product": "valtimo-frontend-libraries",
"versions": [
{
"version": "< 10.8.4",
"status": "affected"
},
{
"version": ">= 11.0.0, < 11.1.6",
"status": "affected"
},
{
"version": ">= 11.2.0, < 11.2.2",
"status": "affected"
}
]
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo14 May 2024 15:39Current
6.6Medium risk
Vulners AI Score6.6
CVSS39.8
EPSS0.00412
SSVC