EUVD-2024-54857

Malicious code in bioql PyPI...

CVE-2024-42048

OpenOrange Business Framework version 1.15.5 installs to a directory with overly permissive access control, allowing all authenticated users to write to the installation path. In combination with the application's behavior of loading DLLs from this location, this allows for DLL hijacking and may...

CVE-2024-42048

OpenOrange Business Framework version 1.15.5 installs to a directory with overly permissive access control, allowing all authenticated users to write to the installation path. In combination with the application's behavior of loading DLLs from this location, this allows for DLL hijacking and may...

CVE-2024-42048: Improper Access Control

OpenOrange Business Framework version 1.15.5 installs to a directory with overly permissive access control, allowing all authenticated users to write to the installation path. In combination with the application's behavior of loading DLLs from this location, this allows for DLL hijacking and may...

CVE-2024-42048

OpenOrange Business Framework version 1.15.5 is vulnerable to DLL hijacking due to overly permissive access controls on its installation directory. The flaw allows all authenticated users to write to the installation path, where the application subsequently loads DLLs. This condition can lead to ...

CVE-2024-42048

OpenOrange Business Framework version 1.15.5 installs to a directory with overly permissive access control, allowing all authenticated users to write to the installation path. In combination with the application's behavior of loading DLLs from this location, this allows for DLL hijacking and may...

PT-2025-32284

Name of the Vulnerable Software and Affected Versions OpenOrange Business Framework version 1.15.5 Description OpenOrange Business Framework versions 1.15.5 allows unprivileged users to write to the installation directory. Recommendations Restrict write access to the installation directory for...

CVE-2024-42048

OpenOrange Business Framework version 1.15.5 installs to a directory with overly permissive access control, allowing all authenticated users to write to the installation path. In combination with the application's behavior of loading DLLs from this location, this allows for DLL hijacking and may...

OpenOrange Business Framework 安全漏洞

OpenOrange Business Framework is a business application framework from OpenOrange, Inc. A security vulnerability exists in OpenOrange Business Framework version 1.15.5 that originates from providing write access to the installation directory to an unprivileged user...