CVE-2024-10965

Vulnerability summary (CVE-2024-10965): EMQX Neuron up to version 2.10.0 is affected by an information disclosure issue in the JSON File Handler, specifically the vulnerable function at /api/v2/schema. Exploitation is possible remotely through manipulation of this endpoint due to an unknown funct...

CVE-2024-10964

CVE-2024-10964 affects EMQX Neuron up to 2.10.0. The vulnerability is in the function handle_add_plugin in the library file plugins/restful/plugin_handle.c , where a manipulation leads to a buffer overflow . The issue is exploitable remotely, per the provided CVE descriptions. A patch is recommen...