CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

RedhatCVE•added 2025/05/23 8:47 a.m.•3 views

CVE-2024-35184

Paperless-ngx is a document management system that transforms physical documents into a searchable online archive. Starting in version 2.5.0 and prior to version 2.8.6, remote user authentication allows API access even if API access is explicitly disabled. Version 2.8.6 contains a patchc for the...

5.5CVSS6.8AI score0.00564EPSS

Exploits0References1

NVD•added 2024/05/15 10:15 p.m.•9 views

CVE-2024-35184

5.5CVSS5.5AI score0.00564EPSS

Exploits0References4

Vulnrichment•added 2024/05/15 9:29 p.m.•18 views

CVE-2024-35184 paperless-ngx's remote user auth via header works even when disabling it for API

5.5CVSS6.9AI score0.00564EPSS

Exploits0References4

OSV•added 2024/05/15 9:29 p.m.•12 views

CVE-2024-35184 paperless-ngx's remote user auth via header works even when disabling it for API

5.5CVSS6.8AI score0.00564EPSS

Exploits0References6

CVE•added 2024/05/15 9:29 p.m.•76 views

CVE-2024-35184

CVE-2024-35184 affects Paperless-ngx before 2.8.6. Evidence from PT-2024-26365 and ongoing CVE records shows that versions 2.5.0 through 2.8.5 expose remote API access via authentication that can be used even when API access is disabled. The root cause per the advisory is improper enforcement of ...

5.5CVSS6.8AI score0.00564EPSS

Exploits0References4

Cvelist•added 2024/05/15 9:29 p.m.•12 views

CVE-2024-35184 paperless-ngx's remote user auth via header works even when disabling it for API

5.5CVSS5.7AI score0.00564EPSS

Exploits0References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by