CVE-2024-39703

In ThreatQuotient ThreatQ before 5.29.3, authenticated users are able to execute arbitrary commands by sending a crafted request to an API endpoint...

CVE-2024-39703

In ThreatQuotient ThreatQ before 5.29.3, authenticated users are able to execute arbitrary commands by sending a crafted request to an API endpoint...

CVE-2024-39703

ThreatQuotient ThreatQ platforms prior to version 5.29.3 contain a command-injection vulnerability in an API endpoint that authenticated users can exploit to execute arbitrary commands, effectively enabling remote code execution. Affected software: ThreatQ/ThreatQuotient before 5.29.3. Root cause...

CVE-2024-39703

In ThreatQuotient ThreatQ before 5.29.3, authenticated users are able to execute arbitrary commands by sending a crafted request to an API endpoint...

ThreatQuotient ThreatQ 安全漏洞

ThreatQuotient ThreatQ is a threat intelligence platform from ThreatQuotient, Inc. A security vulnerability exists in ThreatQuotient ThreatQ versions prior to 5.29.3 that originates from an authenticated user being able to execute arbitrary commands by sending a crafted request to an API endpoint...

CVE-2024-39703

In ThreatQuotient ThreatQ before 5.29.3, authenticated users are able to execute arbitrary commands by sending a crafted request to an API endpoint...

CVE-2024-39703: Improper Neutralization of Special Elements used in a Command

In ThreatQuotient ThreatQ before 5.29.3, authenticated users are able to execute arbitrary commands by sending a crafted request to an API endpoint...

PT-2024-28642 · Threatquotient · Threatq

Name of the Vulnerable Software and Affected Versions: ThreatQuotient ThreatQ versions prior to 5.29.3 Description: The issue allows authenticated users to execute arbitrary commands by sending a crafted request to an API endpoint. Recommendations: For versions prior to 5.29.3, update to version...