Lucene search

CVE-2024-35184 paperless-ngx's remote user auth via header works even when disabling it for API

🗓️ 15 May 2024 21:33:29Reported by GitHub_MType

Paperless-ngx remote user auth bypass vulnerability

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
NVD	CVE-2024-35184	15 May 202422:15	–	nvd
CVE	CVE-2024-35184	15 May 202422:15	–	cve
Vulnrichment	CVE-2024-35184 paperless-ngx's remote user auth via header works even when disabling it for API	15 May 202421:29	–	vulnrichment
OSV	CVE-2024-35184	15 May 202422:15	–	osv

[
  {
    "vendor": "paperless-ngx",
    "product": "paperless-ngx",
    "versions": [
      {
        "version": ">= 2.5.0, < 2.8.6",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/paperless-ngx/paperless-ngx/pull/6739
github	www.github.com/paperless-ngx/paperless-ngx/commit/ed05b40ba461641b1b59b0a92f51f3f6a66ce180
github	www.github.com/paperless-ngx/paperless-ngx/releases/tag/v2.8.6
github	www.github.com/paperless-ngx/paperless-ngx/security/advisories/GHSA-72w4-hxqq-c256

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 May 2024 21:29Current

5.7Medium risk

Vulners AI Score5.7

CVSS35.5

EPSS0.00278

CWE-287