Lucene search

CVE-2024-41961

🗓️ 01 Aug 2024 15:14:15Reported by GitHub_MType

Elektra web app has code injection vuln in live search. Auth user crafts search term with Ruby code, leading to code executio

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
veracode	Code Injection	5 Aug 202403:46	–	veracode
osv	CVE-2024-41961	1 Aug 202415:15	–	osv
cvelist	CVE-2024-41961 Elektra vulnerable to remote code execution in universal search	1 Aug 202414:33	–	cvelist
nvd	CVE-2024-41961	1 Aug 202415:15	–	nvd
vulnrichment	CVE-2024-41961 Elektra vulnerable to remote code execution in universal search	1 Aug 202414:33	–	vulnrichment

Vulners

Vulnrichment

Node

sapcc elektraRange<8bce00be93b95a6512ff68fe86bf9554e486bc02

[
  {
    "vendor": "sapcc",
    "product": "elektra",
    "versions": [
      {
        "version": "< 8bce00be93b95a6512ff68fe86bf9554e486bc02",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/sapcc/elektra/security/advisories/GHSA-6j2h-486h-487q
github	www.github.com/sapcc/elektra/commit/8bce00be93b95a6512ff68fe86bf9554e486bc02
github	www.github.com/sapcc/elektra/commit/49aea3b365082681558bf3bf7bf4a51766cfc44d

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Aug 2024 15:15Current

7.3High risk

Vulners AI Score7.3

CVSS39.6

EPSS0.00169

SSVC

CWE-94