CVE-2024-38432

Matrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File...

CVE-2024-38430

Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-38431

Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...

CVE-2024-38432

Matrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File...

CVE-2024-38429

Matrix Tafnit v8 - CWE-552: Files or Directories Accessible to External Parties...

CVE-2024-38429

Matrix Tafnit v8 - CWE-552: Files or Directories Accessible to External Parties...

CVE-2024-38432 Matrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied File

Matrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File...

CVE-2024-38432 Matrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied File

Matrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File...

CVE-2024-38432

Matrix Tafnit v8 is identified as the affected product for CVE-2024-38432, with the root cause described as CWE-646: Reliance on the file name or extension of externally-supplied files. The NVD entry assigns a high overall impact (CVSSv3.1: 9.8 CRITICAL) with network attack vector, no user intera...

CVE-2024-38431

CVE-2024-38431 relates to Matrix Tafnit v8 and CWE-204: Observable Response Discrepancy. The available documents identify Matrix Tafnit version 8 as affected, with the underlying issue described as an observable response discrepancy. Exploitation status is not documented in the provided sources. ...

CVE-2024-38431 Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy

Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...

CVE-2024-38430 Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-38430 Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-38430

The CVE-2024-38430 entry describes a Cross-site Scripting (XSS) vulnerability in Matrix software (Matrix Tafnit). The root cause is improper neutralization of input during web page generation. CNNVD associates this with Matrix Tafnit version v8, indicating the issue affects Matrix Tafnit and is e...

CVE-2024-38429 Matrix - CWE-552: Files or Directories Accessible to External Parties

Matrix Tafnit v8 - CWE-552: Files or Directories Accessible to External Parties...

CVE-2024-38429 Matrix - CWE-552: Files or Directories Accessible to External Parties

Matrix Tafnit v8 - CWE-552: Files or Directories Accessible to External Parties...

PT-2024-27999 · Matrix · Matrix

Name of the Vulnerable Software and Affected Versions: Matrix affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. This allows attackers to inject malicious scripts into web pages...

CVE-2024-38432: Reliance on File Name or Extension of Externally-Supplied File

Matrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File...

CVE-2024-38431: Observable Response Discrepancy

Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...

CVE-2024-38430: Improper Neutralization of Input During Web Page Generation

Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...