Lucene search
K

7 matches found

NVD
NVD
added 2024/09/10 4:15 p.m.17 views

CVE-2024-44677

eladmin v2.7 and before is vulnerable to Server-Side Request Forgery SSRF which allows an attacker to execute arbitrary code via the DatabaseController.java component...

9.8CVSS0.00196EPSS
Exploits1References3
NVD
NVD
added 2024/09/10 4:15 p.m.18 views

CVE-2024-44676

eladmin v2.7 and before is vulnerable to Cross Site Scripting XSS which allows an attacker to execute arbitrary code via LocalStoreController. java...

6.1CVSS0.0094EPSS
Exploits1References3
CVE
CVE
added 2024/09/10 12:0 a.m.60 views

CVE-2024-44677

Summary (CVE-2024-44677) eladmin v2.7 and earlier is vulnerable to Server-Side Request Forgery (SSRF) via the DatabaseController.java component, enabling an attacker to execute arbitrary code. This aligns with Red Hat and CVE records describing a high-severity, network-based impact with no privil...

9.8CVSS7.9AI score0.00196EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/10 12:0 a.m.22 views

CVE-2024-44676

eladmin v2.7 and before is vulnerable to Cross Site Scripting XSS which allows an attacker to execute arbitrary code via LocalStoreController. java...

6.9AI score0.0094EPSS
Exploits1References3
CVE
CVE
added 2024/09/10 12:0 a.m.82 views

CVE-2024-44676

CVE-2024-44676 affects eladmin v2.7 and earlier. The vulnerability is described as a Cross Site Scripting (XSS) flaw that allows an attacker to execute arbitrary code via LocalStoreController.java. Public documents provide multiple attestations of this issue (NVD/NVD-derived metrics and Red Hat/O...

6.1CVSS6.7AI score0.0094EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/10 12:0 a.m.15 views

CVE-2024-44677

eladmin v2.7 and before is vulnerable to Server-Side Request Forgery SSRF which allows an attacker to execute arbitrary code via the DatabaseController.java component...

7.9AI score0.00196EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/09/10 12:0 a.m.15 views

CVE-2024-44677

eladmin v2.7 and before is vulnerable to Server-Side Request Forgery SSRF which allows an attacker to execute arbitrary code via the DatabaseController.java component...

0.0094EPSS
Exploits2References3
Rows per page
Query Builder