3 matches found
EUVD-2024-3323
Malicious code in bioql PyPI...
8.7CVSS7.9AI score0.00458EPSS
SaveExploits0References4
CVE-2024-51735
Osmedeus is a Workflow Engine for Offensive Security. Cross-site Scripting XSS occurs on the Osmedues web server when viewing results from the workflow, allowing commands to be executed on the server. When using a workflow that contains the summary module, it generates reports in HTML and Markdow...
8.7CVSS6AI score0.00458EPSS
SaveExploits0References1
Osmedeus Workflow XSS
The vulnerability of the Workflow framework’s module summary component is related to the failure to remove specific elements from web pages when generating reports based on the general-template.md template. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting...
10CVSS5.3AI score0.00458EPSS
SaveExploits0References6Affected Software1
20