6 matches found
CVE-2024-55500
Cross-Site Request Forgery CSRF in Avenwu Whistle v.2.9.90 and before allows attackers to perform malicious API calls, resulting in the execution of arbitrary code on the victim's machine...
@nohost/server (>=0.0.1-beta2, <=0.3.6) potentially affected by CVE-2024-55500 via whistle (>=2.3.7, <=2.9.85-beta)
whistle NPM version =2.3.7, =0.0.1-beta2, =0.3.6 Source cves: CVE-2024-55500 Source advisory: OSV:GHSA-GG6X-448Q-PQQM...
CVE-2024-55500
Cross-Site Request Forgery CSRF in Avenwu Whistle v.2.9.90 and before allows attackers to perform malicious API calls, resulting in the execution of arbitrary code on the victim's machine...
CVE-2024-55500
Cross-Site Request Forgery CSRF in Avenwu Whistle v.2.9.90 and before allows attackers to perform malicious API calls, resulting in the execution of arbitrary code on the victim's machine...
CVE-2024-55500
CVE-2024-55500 concerns CSRF in Avenwu Whistle (v2.9.90 and earlier). Affected component: the Avenwu Whistle API surface where requests lack proper origin/validation, enabling attackers to craft requests that trigger arbitrary code execution on the victim’s machine. Root cause, as described acros...
