40 matches found
CBL Mariner 2.0 Security Update: python-tensorboard / reaper (CVE-2024-43796)
The version of python-tensorboard / reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43796 advisory. - Express.js minimalist web framework for node. In express 4.20.0, passing untrusted user...
CVE-2024-43796 affecting package reaper for versions less than 3.1.1-12
CVE-2024-43796 affecting package reaper for versions less than 3.1.1-12. A patched version of the package is available...
01-numacert (>=1.0.0, <=3.0.0), 10by10-react-app (1.2.1) +12391 more potentially affected by CVE-2024-43796 via express (>=4.0.0, <=4.19.2)
express NPM version =4.0.0, =1.0.0, =1.0.1, =1.0.3, =0.2.0, =1.0.2, =1.0.0, =2.0.0, =0.2.0, =0.2.0, =0.0.28, =0.0.36 and more Source cves: CVE-2024-43796 Source advisory: OSV:GHSA-QW6H-VGH9-J6WX...
CVE-2024-43796
creationtimestamp| type| source ---|---|--- 2024-09-10 18:25:13+00:00| seen| https://t.me/cvedetector/5243 2025-06-20 13:44:02+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ls26axz56c2q 2026-01-21 21:18:16+00:00| seen|...
CVE-2024-43796
Express.js minimalist web framework for node. In express 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect may execute untrusted code. This issue is patched in express 4.20.0...
CVE-2024-43796 vulnerabilities
Vulnerabilities for packages: sqlpad, kubeflow-pipelines, kubeflow-centraldashboard, argo-workflows...
CVE-2024-43796
Express.js minimalist web framework for node. In express 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect may execute untrusted code. This issue is patched in express 4.20.0...
CVE-2024-43796 express vulnerable to XSS via response.redirect()
Express.js minimalist web framework for node. In express 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect may execute untrusted code. This issue is patched in express 4.20.0...
CVE-2024-43796
CVE-2024-43796 : Express.js (Node) vulnerable in versions prior to 4.20.0 where untrusted input passed to response.redirect() can lead to execution of untrusted code. This is mitigated by upgrading to Express.js 4.20.0 or newer; the issue is categorized under a cross-site scripting concern in the...
Fedora: Security Advisory for matrix-synapse (FEDORA-2023-f8d216faed)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 39 : matrix-synapse (2023-957972e77c)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-957972e77c advisory. Update to 1.95.1 CVE-2023-43796 ---- Update to v1.95.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
Fedora 38 : matrix-synapse (2023-f8d216faed)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-f8d216faed advisory. Update to 1.95.1 CVE-2023-43796 ---- Update to v1.95.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
SUSE CVE-2023-43796
Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver. System administrators are encouraged to upgrade to Synapse 1.95.1 or...
CVE-2023-43796
creationtimestamp| type| source ---|---|--- 2023-10-31 19:22:26+00:00| seen| https://t.me/cibsecurity/73258...
CVE-2023-43796
Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver. System administrators are encouraged to upgrade to Synapse 1.95.1 or...
CVE-2023-43796
Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver. System administrators are encouraged to upgrade to Synapse 1.95.1 or...
CVE-2023-43796
Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver. System administrators are encouraged to upgrade to Synapse 1.95.1 or...
CVE-2023-43796 Synapse vulnerable to leak of remote user device information
Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver. System administrators are encouraged to upgrade to Synapse 1.95.1 or...
