Vulnerability Details CVE-2024-42054
Cervantes through 0.5-alpha accepts insecure file uploads.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 4.4%
CVSS Severity
CVSS v3 Score 5.4
References
- https://github.com/CervantesSec/cervantes/commit/78631a034d0fb3323a53fb7428b2022b29a0d2cd
- https://www.getastra.com/blog/vulnerability/xss-insecure-file-cervantes/
- https://www.jinsonvarghese.com/stored-xss-file-upload-vulnerabilities-found-in-cervantes/
- https://github.com/CervantesSec/cervantes/commit/78631a034d0fb3323a53fb7428b2022b29a0d2cd
- https://www.getastra.com/blog/vulnerability/xss-insecure-file-cervantes/
- https://www.jinsonvarghese.com/stored-xss-file-upload-vulnerabilities-found-in-cervantes/
Products affected by CVE-2024-42054
-
cpe:2.3:a:cervantessec:cervantes:0.3
-
cpe:2.3:a:cervantessec:cervantes:0.4
-
cpe:2.3:a:cervantessec:cervantes:0.5