CVE-2024-35242 vulnerabilities

Vulnerabilities for packages: composer...

CVE-2024-35242

Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the composer install command running inside a git/hg repository which has specially crafted branch names can lead to command injection. This requires cloning untrusted repositories. Patches are availab...

CVE-2024-35242

CVE-2024-35242 affects Composer, a PHP dependency manager. The issue occurs on the 2.x branch before versions 2.2.24 (2.2 LTS) and 2.7.7 (mainline) when running the command composer install inside a git/hg repository that uses specially crafted branch names, which can lead to command injection af...

CVE-2024-35242 Composer vulnerable to command injection via malicious git/hg branch names

Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the composer install command running inside a git/hg repository which has specially crafted branch names can lead to command injection. This requires cloning untrusted repositories. Patches are availab...

CVE-2024-35242 Composer vulnerable to command injection via malicious git/hg branch names

Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the composer install command running inside a git/hg repository which has specially crafted branch names can lead to command injection. This requires cloning untrusted repositories. Patches are availab...

CVE-2024-35242

Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the composer install command running inside a git/hg repository which has specially crafted branch names can lead to command injection. This requires cloning untrusted repositories. Patches are availab...

CVE-2022-35242

CVE-2022-35242 affects the WordPress plugin 59sec LITE (THE Leads Management System) version

CVE-2021-35242

creationtimestamp| type| source ---|---|--- 2021-12-06 20:20:51+00:00| seen| https://t.me/cibsecurity/33394...

CVE-2021-35242

Serv-U server responds with valid CSRFToken when the request contains only Session...

CVE-2021-35242

Serv-U server responds with valid CSRFToken when the request contains only Session...

CVE-2021-35242

Serv-U server responds with valid CSRFToken when the request contains only Session...

CVE-2021-35242

CVE-2021-35242 affects SolarWinds Serv-U: the vulnerability arises because the Serv-U server responds with a valid CSRF token even when a request contains only a Session, enabling CSRF-like abuse. The public records show CVSS data indicating network attack vector with high impact on confidentiali...

CVE-2021-35242 A valid CSRF token is present in response to an invalid request

Serv-U server responds with valid CSRFToken when the request contains only Session...

CVE-2020-35242

Flamingo (aka FlamingoIM) prior to 2020-09-29 contains a SQL injection in UserManager::updateUserTeamInfoInDbAndMemory. The CVE entry lists impacted product as Flamingo/FlamingoIM with a vulnerability that enables database/memory info manipulation via user-team info updates. From the initial data...