Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to jsonpath-plus (CVE-2024-21534) and cookie (CVE-2024-47764)

Summary IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to jsonpath-plus CVE-2024-21534 and cookie CVE-2024-47764. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2024-21534 DESCRIPTION: Versions of the package...

Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to bypassing security restrictions [CVE-2024-47764]

Summary Node.js module cookie is used by IBM App Connect Enterprise Certified Container for parsing HTTP cookies. IBM App Connect Enterprise Certified Container operands are vulnerable to security restrictions bypass. This bulletin provides patch information to address the reported vulnerability ...

CVE-2023-47764 WordPress Ditty plugin <= 3.1.24 - Broken Access Control vulnerability

Missing Authorization vulnerability in metaphorcreations Ditty ditty-news-ticker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ditty: from n/a through = 3.1.24...

CVE-2023-47764 WordPress Ditty plugin <= 3.1.24 - Broken Access Control vulnerability

Missing Authorization vulnerability in metaphorcreations Ditty ditty-news-ticker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ditty: from n/a through = 3.1.24...

CVE-2023-47764

CVE-2023-47764 is a Missing Authorization vulnerability in the WordPress Ditty Ditty-news-ticker plugin. Affected versions are

CBL Mariner 2.0 Security Update: reaper (CVE-2024-47764)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47764 advisory. - cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set...

CVE-2024-47764 affecting package reaper for versions less than 3.1.1-13

CVE-2024-47764 affecting package reaper for versions less than 3.1.1-13. A patched version of the package is available...

CVE-2024-47764

creationtimestamp| type| source ---|---|--- 2024-10-04 22:43:39+00:00| seen| https://t.me/cvedetector/7021 2025-02-01 06:22:08+00:00| seen| https://gist.github.com/ton77v/932a3f8b5d57d2625b31328796a3cf30 2025-06-23 12:01:38+00:00| seen|...

CVE-2024-47764

A flaw was found in the Cookie Node.js module, a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter oth...

AZL-50073 CVE-2024-47764 affecting package js-jquery 3.5.0-4

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to...

DEBIAN-CVE-2024-47764

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to...

AZL-50085 CVE-2024-47764 affecting package js-jquery 3.5.0-4

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to...

CVE-2024-47764 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kubeflow-katib, argo-workflows, kubeflow-pipelines, thingsboard, sqlpad, kubeflow-centraldashboard...

WordPress Ditty Plugin <= 3.1.24 is vulnerable to Broken Access Control

Software Ditty Type Plugin Vulnerable versions = 3.1.24 Fixed in 3.1.25 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47764 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID 94d027594d7c Credits Abdi Pranata Required privilege...