CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-26140

com.yetanalytics/lrs is the Yet Analytics Core LRS Library. Prior to version 1.2.17 of the LRS library and version 0.7.5 of SQL LRS, a maliciously crafted xAPI statement could be used to perform script or other tag injection in the LRS Statement Browser. The problem is patched in version 1.2.17 of the LRS library and version 0.7.5 of SQL LRS. No known workarounds exist.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 38.4%

CVSS Severity

CVSS v3 Score 4.6

References

Products affected by CVE-2024-26140

Yetanalytics » Lrs » Version: N/A

cpe:2.3:a:yetanalytics:lrs:-
Yetanalytics » Lrs » Version: 1.0.0

cpe:2.3:a:yetanalytics:lrs:1.0.0
Yetanalytics » Lrs » Version: 1.0.1

cpe:2.3:a:yetanalytics:lrs:1.0.1
Yetanalytics » Lrs » Version: 1.1.0

cpe:2.3:a:yetanalytics:lrs:1.1.0
Yetanalytics » Lrs » Version: 1.1.1

cpe:2.3:a:yetanalytics:lrs:1.1.1
Yetanalytics » Lrs » Version: 1.1.2

cpe:2.3:a:yetanalytics:lrs:1.1.2
Yetanalytics » Lrs » Version: 1.1.3

cpe:2.3:a:yetanalytics:lrs:1.1.3
Yetanalytics » Lrs » Version: 1.2.0

cpe:2.3:a:yetanalytics:lrs:1.2.0
Yetanalytics » Lrs » Version: 1.2.1

cpe:2.3:a:yetanalytics:lrs:1.2.1
Yetanalytics » Lrs » Version: 1.2.10

cpe:2.3:a:yetanalytics:lrs:1.2.10
Yetanalytics » Lrs » Version: 1.2.11

cpe:2.3:a:yetanalytics:lrs:1.2.11
Yetanalytics » Lrs » Version: 1.2.12

cpe:2.3:a:yetanalytics:lrs:1.2.12
Yetanalytics » Lrs » Version: 1.2.13

cpe:2.3:a:yetanalytics:lrs:1.2.13
Yetanalytics » Lrs » Version: 1.2.14

cpe:2.3:a:yetanalytics:lrs:1.2.14
Yetanalytics » Lrs » Version: 1.2.15

cpe:2.3:a:yetanalytics:lrs:1.2.15
Yetanalytics » Lrs » Version: 1.2.16

cpe:2.3:a:yetanalytics:lrs:1.2.16
Yetanalytics » Lrs » Version: 1.2.2

cpe:2.3:a:yetanalytics:lrs:1.2.2
Yetanalytics » Lrs » Version: 1.2.3

cpe:2.3:a:yetanalytics:lrs:1.2.3
Yetanalytics » Lrs » Version: 1.2.4

cpe:2.3:a:yetanalytics:lrs:1.2.4
Yetanalytics » Lrs » Version: 1.2.5

cpe:2.3:a:yetanalytics:lrs:1.2.5
Yetanalytics » Lrs » Version: 1.2.6

cpe:2.3:a:yetanalytics:lrs:1.2.6
Yetanalytics » Lrs » Version: 1.2.7

cpe:2.3:a:yetanalytics:lrs:1.2.7
Yetanalytics » Lrs » Version: 1.2.8

cpe:2.3:a:yetanalytics:lrs:1.2.8
Yetanalytics » Lrs » Version: 1.2.9

cpe:2.3:a:yetanalytics:lrs:1.2.9
Yetanalytics » Sql Lrs » Version: 0.1.0

cpe:2.3:a:yetanalytics:sql_lrs:0.1.0
Yetanalytics » Sql Lrs » Version: 0.1.1

cpe:2.3:a:yetanalytics:sql_lrs:0.1.1
Yetanalytics » Sql Lrs » Version: 0.1.2

cpe:2.3:a:yetanalytics:sql_lrs:0.1.2
Yetanalytics » Sql Lrs » Version: 0.1.3

cpe:2.3:a:yetanalytics:sql_lrs:0.1.3
Yetanalytics » Sql Lrs » Version: 0.1.4

cpe:2.3:a:yetanalytics:sql_lrs:0.1.4
Yetanalytics » Sql Lrs » Version: 0.1.5

cpe:2.3:a:yetanalytics:sql_lrs:0.1.5
Yetanalytics » Sql Lrs » Version: 0.1.6

cpe:2.3:a:yetanalytics:sql_lrs:0.1.6
Yetanalytics » Sql Lrs » Version: 0.1.7

cpe:2.3:a:yetanalytics:sql_lrs:0.1.7
Yetanalytics » Sql Lrs » Version: 0.1.8

cpe:2.3:a:yetanalytics:sql_lrs:0.1.8
Yetanalytics » Sql Lrs » Version: 0.1.9

cpe:2.3:a:yetanalytics:sql_lrs:0.1.9
Yetanalytics » Sql Lrs » Version: 0.2.0

cpe:2.3:a:yetanalytics:sql_lrs:0.2.0
Yetanalytics » Sql Lrs » Version: 0.2.1

cpe:2.3:a:yetanalytics:sql_lrs:0.2.1
Yetanalytics » Sql Lrs » Version: 0.2.10

cpe:2.3:a:yetanalytics:sql_lrs:0.2.10
Yetanalytics » Sql Lrs » Version: 0.2.11

cpe:2.3:a:yetanalytics:sql_lrs:0.2.11
Yetanalytics » Sql Lrs » Version: 0.2.2

cpe:2.3:a:yetanalytics:sql_lrs:0.2.2
Yetanalytics » Sql Lrs » Version: 0.2.3

cpe:2.3:a:yetanalytics:sql_lrs:0.2.3
Yetanalytics » Sql Lrs » Version: 0.2.4

cpe:2.3:a:yetanalytics:sql_lrs:0.2.4
Yetanalytics » Sql Lrs » Version: 0.2.5

cpe:2.3:a:yetanalytics:sql_lrs:0.2.5
Yetanalytics » Sql Lrs » Version: 0.2.6

cpe:2.3:a:yetanalytics:sql_lrs:0.2.6
Yetanalytics » Sql Lrs » Version: 0.2.7

cpe:2.3:a:yetanalytics:sql_lrs:0.2.7
Yetanalytics » Sql Lrs » Version: 0.2.8

cpe:2.3:a:yetanalytics:sql_lrs:0.2.8
Yetanalytics » Sql Lrs » Version: 0.2.9

cpe:2.3:a:yetanalytics:sql_lrs:0.2.9
Yetanalytics » Sql Lrs » Version: 0.3.0

cpe:2.3:a:yetanalytics:sql_lrs:0.3.0
Yetanalytics » Sql Lrs » Version: 0.3.1

cpe:2.3:a:yetanalytics:sql_lrs:0.3.1
Yetanalytics » Sql Lrs » Version: 0.3.2

cpe:2.3:a:yetanalytics:sql_lrs:0.3.2
Yetanalytics » Sql Lrs » Version: 0.3.3

cpe:2.3:a:yetanalytics:sql_lrs:0.3.3
Yetanalytics » Sql Lrs » Version: 0.3.4

cpe:2.3:a:yetanalytics:sql_lrs:0.3.4
Yetanalytics » Sql Lrs » Version: 0.3.5

cpe:2.3:a:yetanalytics:sql_lrs:0.3.5
Yetanalytics » Sql Lrs » Version: 0.3.6

cpe:2.3:a:yetanalytics:sql_lrs:0.3.6
Yetanalytics » Sql Lrs » Version: 0.3.7

cpe:2.3:a:yetanalytics:sql_lrs:0.3.7
Yetanalytics » Sql Lrs » Version: 0.3.8

cpe:2.3:a:yetanalytics:sql_lrs:0.3.8
Yetanalytics » Sql Lrs » Version: 0.3.9

cpe:2.3:a:yetanalytics:sql_lrs:0.3.9
Yetanalytics » Sql Lrs » Version: 0.4.0

cpe:2.3:a:yetanalytics:sql_lrs:0.4.0
Yetanalytics » Sql Lrs » Version: 0.4.1

cpe:2.3:a:yetanalytics:sql_lrs:0.4.1
Yetanalytics » Sql Lrs » Version: 0.4.2

cpe:2.3:a:yetanalytics:sql_lrs:0.4.2
Yetanalytics » Sql Lrs » Version: 0.5.0

cpe:2.3:a:yetanalytics:sql_lrs:0.5.0
Yetanalytics » Sql Lrs » Version: 0.5.1

cpe:2.3:a:yetanalytics:sql_lrs:0.5.1
Yetanalytics » Sql Lrs » Version: 0.5.2

cpe:2.3:a:yetanalytics:sql_lrs:0.5.2
Yetanalytics » Sql Lrs » Version: 0.5.3

cpe:2.3:a:yetanalytics:sql_lrs:0.5.3
Yetanalytics » Sql Lrs » Version: 0.5.4

cpe:2.3:a:yetanalytics:sql_lrs:0.5.4
Yetanalytics » Sql Lrs » Version: 0.5.5

cpe:2.3:a:yetanalytics:sql_lrs:0.5.5
Yetanalytics » Sql Lrs » Version: 0.5.6

cpe:2.3:a:yetanalytics:sql_lrs:0.5.6
Yetanalytics » Sql Lrs » Version: 0.5.7

cpe:2.3:a:yetanalytics:sql_lrs:0.5.7
Yetanalytics » Sql Lrs » Version: 0.6.0

cpe:2.3:a:yetanalytics:sql_lrs:0.6.0
Yetanalytics » Sql Lrs » Version: 0.6.1

cpe:2.3:a:yetanalytics:sql_lrs:0.6.1
Yetanalytics » Sql Lrs » Version: 0.6.2

cpe:2.3:a:yetanalytics:sql_lrs:0.6.2
Yetanalytics » Sql Lrs » Version: 0.6.3

cpe:2.3:a:yetanalytics:sql_lrs:0.6.3
Yetanalytics » Sql Lrs » Version: 0.6.4

cpe:2.3:a:yetanalytics:sql_lrs:0.6.4
Yetanalytics » Sql Lrs » Version: 0.6.5

cpe:2.3:a:yetanalytics:sql_lrs:0.6.5
Yetanalytics » Sql Lrs » Version: 0.6.6

cpe:2.3:a:yetanalytics:sql_lrs:0.6.6
Yetanalytics » Sql Lrs » Version: 0.6.7

cpe:2.3:a:yetanalytics:sql_lrs:0.6.7
Yetanalytics » Sql Lrs » Version: 0.6.8

cpe:2.3:a:yetanalytics:sql_lrs:0.6.8
Yetanalytics » Sql Lrs » Version: 0.6.9

cpe:2.3:a:yetanalytics:sql_lrs:0.6.9
Yetanalytics » Sql Lrs » Version: 0.7.0

cpe:2.3:a:yetanalytics:sql_lrs:0.7.0
Yetanalytics » Sql Lrs » Version: 0.7.1

cpe:2.3:a:yetanalytics:sql_lrs:0.7.1
Yetanalytics » Sql Lrs » Version: 0.7.2

cpe:2.3:a:yetanalytics:sql_lrs:0.7.2
Yetanalytics » Sql Lrs » Version: 0.7.3

cpe:2.3:a:yetanalytics:sql_lrs:0.7.3
Yetanalytics » Sql Lrs » Version: 0.7.4

cpe:2.3:a:yetanalytics:sql_lrs:0.7.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-26140

Products

Pricing

Contact Us