Lucene search
HistoryJul 30, 2024 - 7:15 p.m.
CVE-2024-3930
akana api platform
2024.1.0
xxe vulnerability
xml external entity
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.6%
In versions of Akana API Platform prior to 2024.1.0 a flaw resulting in XML External Entity (XXE) was discovered.
Affected configurations
Node
perforceakana_apiRange<2024.1.0
Related
cve
cve
CVE-2024-3930
2024-07-30 19:15:10
cvelist
cvelist
CVE-2024-3930 XML External Entity in Akana
2024-07-30 18:36:18
vulnrichment
vulnrichment
CVE-2024-3930 XML External Entity in Akana
2024-07-30 18:36:18
nessus
nessus
Fedora 39 : python-django (2024-82547e3e16)
2024-07-25 00:00:00
Fedora 40 : python-django4.2 (2024-d05d37ead7)
2024-07-25 00:00:00
Fedora 40 : python-django (2024-7dac82a14e)
2024-07-25 00:00:00
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-82547e3e16)
2024-08-06 00:00:00
Fedora: Security Advisory (FEDORA-2024-a7eef0ca7b)
2024-08-06 00:00:00
Fedora: Security Advisory (FEDORA-2024-7dac82a14e)
2024-08-06 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: python-django-4.2.14-2.fc39
2024-07-19 02:22:02
[SECURITY] Fedora 39 Update: python-django4.2-4.2.14-1.fc39
2024-07-19 02:22:03
[SECURITY] Fedora 40 Update: python-django-4.2.14-2.fc40
2024-07-19 01:46:40
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.6%
Related for NVD:CVE-2024-3930