Lucene search

CVE-2024-26140

🗓️ 20 Feb 2024 22:08:15Reported by GoogleType

osv🔗 osv.dev👁 7 Views

Security patch released for Yet Analytics Core LRS Library to fix malicious xAPI statement vulnerability

Reporter	Title	Published	Views	Family All 7
NVD	CVE-2024-26140	20 Feb 202422:15	–	nvd
Prion	Design/Logic Flaw	20 Feb 202422:15	–	prion
Cvelist	CVE-2024-26140 com.yetanalytics/lrs has Cross-site Scripting Vulnerability in Statement Browser	20 Feb 202421:47	–	cvelist
OSV	Cross-site Scripting Vulnerability in Statement Browser	21 Feb 202400:24	–	osv
CVE	CVE-2024-26140	20 Feb 202422:15	–	cve
Vulnrichment	CVE-2024-26140 com.yetanalytics/lrs has Cross-site Scripting Vulnerability in Statement Browser	20 Feb 202421:47	–	vulnrichment
Github Security Blog	Cross-site Scripting Vulnerability in Statement Browser	21 Feb 202400:24	–	github

Source	Link
github	www.github.com/yetanalytics/lrs/security/advisories/GHSA-7rw2-3hhp-rc46
github	www.github.com/yetanalytics/lrs/commit/d7f4883bc2252337d25e8bba2c7f9d172f5b0621
clojars	www.clojars.org/com.yetanalytics/lrs/versions/1.2.17
github	www.github.com/yetanalytics/lrs/releases/tag/v1.2.17
github	www.github.com/yetanalytics/lrsql/releases/tag/v0.7.5

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Feb 2024 22:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS34.6

EPSS0.0004

SSVC