32 matches found
CVE-2024-43799 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, argo-workflows, sqlpad, kubeflow-pipelines, thingsboard...
AZL-49123 CVE-2024-43799 affecting package reaper for versions less than 3.1.1-13
Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect which executes untrusted code. This issue is patched in send 0.19.0...
CVE-2024-43799 send vulnerable to template injection that can lead to XSS
Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect which executes untrusted code. This issue is patched in send 0.19.0...
CVE-2024-43799
Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect which executes untrusted code. This issue is patched in send 0.19.0...
CVE-2024-43799
CVE-2024-43799 is a vulnerability in the Send library used to stream files as HTTP responses. The issue occurs because untrusted input is passed to SendStream.redirect(), which can cause execution of untrusted code. The description notes this leads to code execution and that the fix is in send 0....
CVE-2024-43799 send vulnerable to template injection that can lead to XSS
Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect which executes untrusted code. This issue is patched in send 0.19.0...
CVE-2023-43799
creationtimestamp| type| source ---|---|--- 2023-10-05 00:13:31+00:00| seen| https://t.me/cibsecurity/71637...
CVE-2023-43799
CVE-2023-43799 affects the Altair GraphQL Client Desktop Application (macOS, Windows, Linux). Prior to version 5.2.5, it does not sanitize external URLs before handing them to the underlying system and does not isolate the renderer context, enabling potential local impact with high severity per N...
CVE-2023-43799 The Altair Desktop Client Does Not Sanitize External URLs before passing them to the underlying system
Altair is a GraphQL Client. Prior to version 5.2.5, the Altair GraphQL Client Desktop Application does not sanitize external URLs before passing them to the underlying system. Moreover, Altair GraphQL Client also does not isolate the context of the renderer process. This affects versions of the...
CVE-2023-43799 The Altair Desktop Client Does Not Sanitize External URLs before passing them to the underlying system
Altair is a GraphQL Client. Prior to version 5.2.5, the Altair GraphQL Client Desktop Application does not sanitize external URLs before passing them to the underlying system. Moreover, Altair GraphQL Client also does not isolate the context of the renderer process. This affects versions of the...