CVE-2024-3930

CVE-2024-3930 is an XML External Entity (XXE) vulnerability in Akana API Platform prior to 2024.1.0. The NVD entry cites CVSS v3.1: Base score 9.8 (CRITICAL) with network attack vector, no privileges or user interaction required, and impacts to confidentiality, integrity, and availability. Other ...

CVE-2024-5250

CVE-2024-5250 affects Akana API Platform versions prior to 2024.1.0, where SAML integration error messages are overly verbose. The issue is documented across multiple feeds (NVD/Red Hat/Son to ENISA and PT Security) and centers on verbose SAML error reporting rather than a runtime compromise vect...

CVE-2024-5249

CVE-2024-5249 affects Akana API Platform versions prior to 2024.1.0. The vulnerability allows SAML tokens to be replayed, which can enable an unauthorized party to reuse previously valid tokens. Public documentation across multiple sources confirms affected product/version and its remediation: up...