Lucene search
GoogleOSV:CVE-2024-43799HistorySep 10, 2024 - 3:15 p.m.
CVE-2024-43799
2024-09-1015:15:17
Google
osv.dev
1
cve-2024-43799
send library
untrusted input
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
6.6
Confidence
Low
Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0.19.0.
Related
vulnrichment
vulnrichment
CVE-2024-43799 send vulnerable to template injection that can lead to XSS
2024-09-10 14:45:06
debiancve
debiancve
CVE-2024-43799
2024-09-10 15:15:17
osv
osv
send vulnerable to template injection that can lead to XSS
2024-09-10 19:42:41
CGA-9cw3-8w4j-827w
2024-09-16 12:20:24
nvd
nvd
CVE-2024-43799
2024-09-10 15:15:17
redhatcve
redhatcve
CVE-2024-43799
2024-09-10 16:44:20
github
github
send vulnerable to template injection that can lead to XSS
2024-09-10 19:42:41
cvelist
cvelist
CVE-2024-43799 send vulnerable to template injection that can lead to XSS
2024-09-10 14:45:06
cve
cve
CVE-2024-43799
2024-09-10 15:15:17
wolfi
wolfi
CVE-2024-43799 vulnerabilities
2024-09-20 03:31:48
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
6.6
Confidence
Low
Related for OSV:CVE-2024-43799