CVE-2024-9016

man-group dtale version = 3.13.1 contains a vulnerability where the query parameters from the request are directly passed into the runquery function without proper sanitization. This allows for unauthenticated remote command execution via the df.query method when the query engine is set to 'pytho...

CVE-2024-9016

creationtimestamp| type| source ---|---|--- 2025-03-20 12:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194835893560530 2025-04-15 15:54:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11847...

CVE-2024-9016

Rejected reason: REJECT DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-45595. Notes: All CVE users should reference CVE-2024-45595 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2024-9016

...

CVE-2024-9016

...