Lucene search

K
nvd[email protected]NVD:CVE-2024-29151
HistoryMar 18, 2024 - 6:15 a.m.

CVE-2024-29151

2024-03-1806:15:05
CWE-311
web.nvd.nist.gov
1
rocket.chat.audit
5ad78e8
filecachetools
pypi
non-existent

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.6

Confidence

High

EPSS

0

Percentile

9.0%

Rocket.Chat.Audit through 5ad78e8 depends on filecachetools, which does not exist in PyPI.

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.6

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-29151