Lucene search

K
nvdBbf0bd87-ece2-41be-b873-96928ee8fab9NVD:CVE-2024-6891
HistoryAug 08, 2024 - 12:15 a.m.

CVE-2024-6891

2024-08-0800:15:40
CWE-95
CWE-94
bbf0bd87-ece2-41be-b873-96928ee8fab9
web.nvd.nist.gov
11
python code injection
login vulnerability
cve-2024-6891

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

18.9%

Attackers with a valid username and password can exploit a python code injection vulnerability during the natural login flow.

Affected configurations

Nvd
Node
journyxjournyxMatch11.5.4linux
VendorProductVersionCPE
journyxjournyx11.5.4cpe:2.3:a:journyx:journyx:11.5.4:*:*:*:*:linux:*:*

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

18.9%