Lucene search
K

4 matches found

OSV
OSV
added 2024/03/14 8:37 p.m.18 views

GHSA-HH2Q-QV66-JCQG Whoogle Search Path Traversal vulnerability

Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limited file write vulnerability when the configuration options in Whoogle are enabled. The config function in app/routes.py does not validate the user-controlled name variable on line 447 and configdata variable o...

5.3CVSS5.2AI score0.00192EPSS
Exploits1References9
NVD
NVD
added 2024/01/23 6:15 p.m.16 views

CVE-2024-22204

Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limited file write vulnerability when the configuration options in Whoogle are enabled. The config function in app/routes.py does not validate the user-controlled name variable on line 447 and configdata variable o...

5.3CVSS5.3AI score0.00192EPSS
Exploits1References6
OSV
OSV
added 2024/01/23 6:15 p.m.17 views

PYSEC-2024-23

Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limited file write vulnerability when the configuration options in Whoogle are enabled. The config function in app/routes.py does not validate the user-controlled name variable on line 447 and configdata variable o...

5.3CVSS7.2AI score0.00192EPSS
Exploits1References8
OSV
OSV
added 2024/01/23 5:20 p.m.187 views

CVE-2024-22204 Whoogle Search Limited File Write vulnerability

Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limited file write vulnerability when the configuration options in Whoogle are enabled. The config function in app/routes.py does not validate the user-controlled name variable on line 447 and configdata variable o...

5.3CVSS5.4AI score0.00192EPSS
Exploits1References8
Rows per page
Query Builder