Lucene search
+L

405 matches found

Github Security Blog
Github Security Blog
•added 2022/05/06 12:00 a.m.•35 views

Server-Side Request Forgery in scout-browser

Pypi package scout-browser GitHub repository clinical-genomics/scout prior to v4.52 is vulnerable to server-side request forgery. An attacker could make the application perform arbitrary requests to steal cookies, request access to private areas, or lead to cross-site scripting...

9.4CVSS2.2AI score0.01187EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2022/05/06 12:00 a.m.•82 views

GHSA-G53G-Q539-93CV Server-Side Request Forgery in scout-browser

Pypi package scout-browser GitHub repository clinical-genomics/scout prior to v4.52 is vulnerable to server-side request forgery. An attacker could make the application perform arbitrary requests to steal cookies, request access to private areas, or lead to cross-site scripting...

8.2CVSS7.8AI score0.01187EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2022/05/05 11:15 a.m.•13 views

CVE-2022-1592

Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...

9.4CVSS7.4AI score0.01187EPSS
SaveExploits1References3
Mend
Mend
•added 2022/05/05 10:20 a.m.•3 views

CVE-2022-1592

Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...

9.4CVSS0.01187EPSS
SaveExploits1References9
OSV
OSV
•added 2022/05/05 10:20 a.m.•26 views

CVE-2022-1592 Server-Side Request Forgery in scout in clinical-genomics/scout

Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...

9.4CVSS9AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2022/05/05 10:20 a.m.•38 views

CVE-2022-1592 Server-Side Request Forgery in scout in clinical-genomics/scout

Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...

9.4CVSS8.5AI score0.01187EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/05/05 12:00 a.m.•11 views

PT-2022-13989

Name of the Vulnerable Software and Affected Versions scout versions prior to 4.42 Description The issue allows an attacker to make the application perform arbitrary requests, potentially leading to the theft of cookies, access to private areas, or cross-site scripting xss. Recommendations For...

9.4CVSS7.1AI score0.01187EPSS
SaveExploits1References15
CNNVD
CNNVD
•added 2022/05/05 12:00 a.m.•19 views

Clinical-Genomics Scout 代码问题漏洞

Scout is a platform for analyzing VCFs and enabling collaboration to solve rare diseases faster. A security vulnerability exists in Clinical-Genomics Scout versions prior to 4.42 that stems from the presence of server-side request forgery in the application. An attacker exploiting this...

9.4CVSS8.1AI score0.01187EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/05 12:00 a.m.•4 views

CVE-2022-1592: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...

9.4CVSS8.1AI score0.01187EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2022/05/04 12:00 a.m.•42 views

Path Traversal in scout-browser

Scout is a Variant Call Format VCF visualization interface. The Pypi package scout-browser is vulnerable to path traversal due to sendfile call in versions prior to 4.52...

7.5CVSS4.2AI score0.01366EPSS
SaveExploits1References7Affected Software1
OSV
OSV
•added 2022/05/04 12:00 a.m.•60 views

GHSA-694V-63FQ-FMR4 Path Traversal in scout-browser

Scout is a Variant Call Format VCF visualization interface. The Pypi package scout-browser is vulnerable to path traversal due to sendfile call in versions prior to 4.52...

6.8CVSS7.4AI score0.01366EPSS
SaveExploits1References7
Huntr
Huntr
•added 2022/05/03 2:25 p.m.•22 views

Server-Side Request Forgery in scout

Description Server-Side Request Forgery in remotecors Proof of Concept GET /remote/cors/http://:8888 HTTP/1.1 Host: localhost:8000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:100.0 Gecko/20100101 Firefox/100.0 Accept:...

6.4CVSS0.5AI score0.01187EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/05/03 9:15 a.m.•11 views

CVE-2022-1554

Path Traversal due to sendfile call in GitHub repository clinical-genomics/scout prior to 4.52...

7.5CVSS6.8AI score0.01366EPSS
SaveExploits1References3
NVD
NVD
•added 2022/05/03 9:15 a.m.•27 views

CVE-2022-1554

Path Traversal due to sendfile call in GitHub repository clinical-genomics/scout prior to 4.52...

7.5CVSS0.01366EPSS
SaveExploits1References2
Prion
Prion
•added 2022/05/03 9:15 a.m.•17 views

Path traversal

Path Traversal due to sendfile call in GitHub repository clinical-genomics/scout prior to 4.52...

5CVSS7.5AI score0.01366EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2022/05/03 8:20 a.m.•2 views

CVE-2022-1554

Path Traversal due to sendfile call in GitHub repository clinical-genomics/scout prior to 4.52...

7.5CVSS0.01366EPSS
SaveExploits1References10
OSV
OSV
•added 2022/05/03 8:20 a.m.•13 views

CVE-2022-1554 Path Traversal due to `send_file` call in clinical-genomics/scout

Path Traversal due to sendfile call in GitHub repository clinical-genomics/scout prior to 4.52...

6.8CVSS6.8AI score
SaveExploits0References4
CVE
CVE
•added 2022/05/03 8:20 a.m.•117 views

CVE-2022-1554

CVE-2022-1554 affects the Python package scout (clinical-genomics/scout) prior to version 4.52. The underlying issue is a path traversal vulnerability caused by a send_file/end_file usage, exposing potential unauthorized access to files. Exploitation or real-world details are not provided in the ...

7.5CVSS6.9AI score0.01366EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/05/03 12:00 a.m.•9 views

PT-2022-13954

Name of the Vulnerable Software and Affected Versions clinical-genomics/scout versions prior to 4.52 Description The issue is related to a Path Traversal vulnerability due to a send file call in the clinical-genomics/scout GitHub repository. This vulnerability affects the Scout software, which is...

7.5CVSS6.7AI score0.01366EPSS
SaveExploits1References15
CNNVD
CNNVD
•added 2022/05/03 12:00 a.m.•14 views

scout 路径遍历漏洞

scout is analyzing VCF and collaborating to solve rare diseases faster. A security vulnerability exists in versions prior to scout version 4.52 that stems from an endfile call that can lead to path traversal...

7.5CVSS6.7AI score0.01366EPSS
SaveExploits1References3
Rows per page
Query Builder