https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 23 Aug 2026 13:23:56 +0000 https://db.gcve.eu/sighting/737ab396-17d3-42e9-9d65-d835df3e36d9/export {"uuid": "737ab396-17d3-42e9-9d65-d835df3e36d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43796", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"} {"uuid": "737ab396-17d3-42e9-9d65-d835df3e36d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43796", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"} https://db.gcve.eu/sighting/737ab396-17d3-42e9-9d65-d835df3e36d9/export Wed, 21 Jan 2026 21:18:16 +0000 https://db.gcve.eu/sighting/e57437d8-edad-40ec-891b-cbae16bab6d4/export {"uuid": "e57437d8-edad-40ec-891b-cbae16bab6d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43796", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ls26axz56c2q", "content": "", "creation_timestamp": "2025-06-20T13:44:02.964777Z"} {"uuid": "e57437d8-edad-40ec-891b-cbae16bab6d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43796", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ls26axz56c2q", "content": "", "creation_timestamp": "2025-06-20T13:44:02.964777Z"} https://db.gcve.eu/sighting/e57437d8-edad-40ec-891b-cbae16bab6d4/export Fri, 20 Jun 2025 13:44:02 +0000 https://db.gcve.eu/sighting/798cd6a2-77b8-4ac2-87b5-05656be9e256/export {"uuid": "798cd6a2-77b8-4ac2-87b5-05656be9e256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43795", "type": "seen", "source": "https://t.me/cvedetector/6881", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43795 - OpenC3 COSMOS Reflected Cross-Site Scripting (XSS)\", \n \"Content\": \"CVE ID : CVE-2024-43795 \nPublished : Oct. 2, 2024, 8:15 p.m. | 43\u00a0minutes ago \nDescription : OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. The login functionality contains a reflected cross-site scripting (XSS) vulnerability. This vulnerability is fixed in 5.19.0. Note: This CVE only affects Open Source Edition, and not OpenC3 COSMOS Enterprise Edition. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"02 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T23:03:34.000000Z"} {"uuid": "798cd6a2-77b8-4ac2-87b5-05656be9e256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43795", "type": "seen", "source": "https://t.me/cvedetector/6881", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43795 - OpenC3 COSMOS Reflected Cross-Site Scripting (XSS)\", \n \"Content\": \"CVE ID : CVE-2024-43795 \nPublished : Oct. 2, 2024, 8:15 p.m. | 43\u00a0minutes ago \nDescription : OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. The login functionality contains a reflected cross-site scripting (XSS) vulnerability. This vulnerability is fixed in 5.19.0. Note: This CVE only affects Open Source Edition, and not OpenC3 COSMOS Enterprise Edition. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"02 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T23:03:34.000000Z"} https://db.gcve.eu/sighting/798cd6a2-77b8-4ac2-87b5-05656be9e256/export Wed, 02 Oct 2024 23:03:34 +0000 https://db.gcve.eu/sighting/7917b1e6-2335-401a-85a0-78a4090959de/export {"uuid": "7917b1e6-2335-401a-85a0-78a4090959de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43793", "type": "seen", "source": "https://t.me/cvedetector/5365", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43793 - Apache Halo CSS (Cross-Site Scripting)\", \n \"Content\": \"CVE ID : CVE-2024-43793 \nPublished : Sept. 11, 2024, 3:15 p.m. | 27\u00a0minutes ago \nDescription : Halo is an open source website building tool. A security vulnerability has been identified in versions prior to 2.19.0 of the Halo project. This vulnerability allows an attacker to execute malicious scripts in the user's browser through specific HTML and JavaScript code, potentially leading to a Cross-Site Scripting (XSS) attack. This vulnerability is fixed in 2.19.0. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"11 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T17:51:10.000000Z"} {"uuid": "7917b1e6-2335-401a-85a0-78a4090959de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43793", "type": "seen", "source": "https://t.me/cvedetector/5365", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43793 - Apache Halo CSS (Cross-Site Scripting)\", \n \"Content\": \"CVE ID : CVE-2024-43793 \nPublished : Sept. 11, 2024, 3:15 p.m. | 27\u00a0minutes ago \nDescription : Halo is an open source website building tool. A security vulnerability has been identified in versions prior to 2.19.0 of the Halo project. This vulnerability allows an attacker to execute malicious scripts in the user's browser through specific HTML and JavaScript code, potentially leading to a Cross-Site Scripting (XSS) attack. This vulnerability is fixed in 2.19.0. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"11 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T17:51:10.000000Z"} https://db.gcve.eu/sighting/7917b1e6-2335-401a-85a0-78a4090959de/export Wed, 11 Sep 2024 17:51:10 +0000 https://db.gcve.eu/sighting/84f3fdbe-d575-4e0a-aee2-835136a095bf/export {"uuid": "84f3fdbe-d575-4e0a-aee2-835136a095bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43796", "type": "seen", "source": "https://t.me/cvedetector/5243", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43796 - Express.js Remote Code Execution\", \n \"Content\": \"CVE ID : CVE-2024-43796 \nPublished : Sept. 10, 2024, 3:15 p.m. | 45\u00a0minutes ago \nDescription : Express.js minimalist web framework for node. In express Severity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"10 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-10T18:25:13.000000Z"} {"uuid": "84f3fdbe-d575-4e0a-aee2-835136a095bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43796", "type": "seen", "source": "https://t.me/cvedetector/5243", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43796 - Express.js Remote Code Execution\", \n \"Content\": \"CVE ID : CVE-2024-43796 \nPublished : Sept. 10, 2024, 3:15 p.m. | 45\u00a0minutes ago \nDescription : Express.js minimalist web framework for node. In express Severity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"10 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-10T18:25:13.000000Z"} https://db.gcve.eu/sighting/84f3fdbe-d575-4e0a-aee2-835136a095bf/export Tue, 10 Sep 2024 18:25:13 +0000 https://db.gcve.eu/sighting/6b9d3c59-46a5-4143-a9af-38fcbbffc6f3/export {"uuid": "6b9d3c59-46a5-4143-a9af-38fcbbffc6f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43799", "type": "seen", "source": "https://t.me/cvedetector/5242", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43799 - Send RCE Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-43799 \nPublished : Sept. 10, 2024, 3:15 p.m. | 45\u00a0minutes ago \nDescription : Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0.19.0. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"10 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-10T18:25:09.000000Z"} {"uuid": "6b9d3c59-46a5-4143-a9af-38fcbbffc6f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43799", "type": "seen", "source": "https://t.me/cvedetector/5242", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43799 - Send RCE Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-43799 \nPublished : Sept. 10, 2024, 3:15 p.m. | 45\u00a0minutes ago \nDescription : Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0.19.0. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"10 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-10T18:25:09.000000Z"} https://db.gcve.eu/sighting/6b9d3c59-46a5-4143-a9af-38fcbbffc6f3/export Tue, 10 Sep 2024 18:25:09 +0000 https://db.gcve.eu/sighting/4fce84cb-9292-4fe5-8aae-1edbe6f462fa/export {"uuid": "4fce84cb-9292-4fe5-8aae-1edbe6f462fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43792", "type": "seen", "source": "https://t.me/cvedetector/4653", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43792 - \"Halo Cross-Site Scripting Vulnerability\"\", \n \"Content\": \"CVE ID : CVE-2024-43792 \nPublished : Sept. 2, 2024, 6:15 p.m. | 42\u00a0minutes ago \nDescription : Halo is an open source website building tool. A security vulnerability has been identified in versions prior to 2.17.0 of the Halo project. This vulnerability allows an attacker to execute malicious scripts in the user's browser through specific HTML and JavaScript code, potentially leading to a Cross-Site Scripting (XSS) attack. Users are advised to upgrade to version 2.17.0+. There are no known workarounds for this vulnerability. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"02 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T21:24:27.000000Z"} {"uuid": "4fce84cb-9292-4fe5-8aae-1edbe6f462fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43792", "type": "seen", "source": "https://t.me/cvedetector/4653", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43792 - \"Halo Cross-Site Scripting Vulnerability\"\", \n \"Content\": \"CVE ID : CVE-2024-43792 \nPublished : Sept. 2, 2024, 6:15 p.m. | 42\u00a0minutes ago \nDescription : Halo is an open source website building tool. A security vulnerability has been identified in versions prior to 2.17.0 of the Halo project. This vulnerability allows an attacker to execute malicious scripts in the user's browser through specific HTML and JavaScript code, potentially leading to a Cross-Site Scripting (XSS) attack. Users are advised to upgrade to version 2.17.0+. There are no known workarounds for this vulnerability. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"02 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T21:24:27.000000Z"} https://db.gcve.eu/sighting/4fce84cb-9292-4fe5-8aae-1edbe6f462fa/export Mon, 02 Sep 2024 21:24:27 +0000 https://db.gcve.eu/sighting/e84ea030-4e9b-4934-aed2-867f72d4abc5/export {"uuid": "e84ea030-4e9b-4934-aed2-867f72d4abc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43797", "type": "seen", "source": "https://t.me/cvedetector/4652", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43797 - \"Audiobookshelf Path Traversal Vulnerability\"\", \n \"Content\": \"CVE ID : CVE-2024-43797 \nPublished : Sept. 2, 2024, 6:15 p.m. | 42\u00a0minutes ago \nDescription : audiobookshelf is a self-hosted audiobook and podcast server. A non-admin user is not allowed to create libraries (or access only the ones they have permission to). However, the `LibraryController` is missing the check for admin user and thus allows a path traversal issue. Allowing non-admin users to write to any directory in the system can be seen as a form of path traversal. However, since it can be restricted to only admin permissions, fixing this is relatively simple and falls more into the realm of Role-Based Access Control (RBAC). This issue has been addressed in release version 2.13.0. All users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"02 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T21:24:26.000000Z"} {"uuid": "e84ea030-4e9b-4934-aed2-867f72d4abc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43797", "type": "seen", "source": "https://t.me/cvedetector/4652", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43797 - \"Audiobookshelf Path Traversal Vulnerability\"\", \n \"Content\": \"CVE ID : CVE-2024-43797 \nPublished : Sept. 2, 2024, 6:15 p.m. | 42\u00a0minutes ago \nDescription : audiobookshelf is a self-hosted audiobook and podcast server. A non-admin user is not allowed to create libraries (or access only the ones they have permission to). However, the `LibraryController` is missing the check for admin user and thus allows a path traversal issue. Allowing non-admin users to write to any directory in the system can be seen as a form of path traversal. However, since it can be restricted to only admin permissions, fixing this is relatively simple and falls more into the realm of Role-Based Access Control (RBAC). This issue has been addressed in release version 2.13.0. All users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"02 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T21:24:26.000000Z"} https://db.gcve.eu/sighting/e84ea030-4e9b-4934-aed2-867f72d4abc5/export Mon, 02 Sep 2024 21:24:26 +0000 https://db.gcve.eu/sighting/ffcdf294-7114-45ce-885e-98a8e06fa1af/export {"uuid": "ffcdf294-7114-45ce-885e-98a8e06fa1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43798", "type": "seen", "source": "https://t.me/cvedetector/4225", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43798 - Chisel SSH Authentication Bypass\", \n \"Content\": \"CVE ID : CVE-2024-43798 \nPublished : Aug. 26, 2024, 11:15 p.m. | 46\u00a0minutes ago \nDescription : Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. The Chisel server doesn't ever read the documented `AUTH` environment variable used to set credentials, which allows any unauthenticated user to connect, even if credentials were set. Anyone running the Chisel server that is using the `AUTH` environment variable to specify credentials to authenticate against is affected by this vulnerability. Chisel is often used to provide an entrypoint to a private network, which means services that are gated by Chisel may be affected. Additionally, Chisel is often used for exposing services to the internet. An attacker could MITM requests by connecting to a Chisel server and requesting to forward traffic from a remote port. This issue has been addressed in release version 1.10.0. All users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"27 Aug 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-27T02:21:34.000000Z"} {"uuid": "ffcdf294-7114-45ce-885e-98a8e06fa1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43798", "type": "seen", "source": "https://t.me/cvedetector/4225", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43798 - Chisel SSH Authentication Bypass\", \n \"Content\": \"CVE ID : CVE-2024-43798 \nPublished : Aug. 26, 2024, 11:15 p.m. | 46\u00a0minutes ago \nDescription : Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. The Chisel server doesn't ever read the documented `AUTH` environment variable used to set credentials, which allows any unauthenticated user to connect, even if credentials were set. Anyone running the Chisel server that is using the `AUTH` environment variable to specify credentials to authenticate against is affected by this vulnerability. Chisel is often used to provide an entrypoint to a private network, which means services that are gated by Chisel may be affected. Additionally, Chisel is often used for exposing services to the internet. An attacker could MITM requests by connecting to a Chisel server and requesting to forward traffic from a remote port. This issue has been addressed in release version 1.10.0. All users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"27 Aug 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-27T02:21:34.000000Z"} https://db.gcve.eu/sighting/ffcdf294-7114-45ce-885e-98a8e06fa1af/export Tue, 27 Aug 2024 02:21:34 +0000 https://db.gcve.eu/sighting/fefb7dfe-9bf5-4514-a6be-b64c9db9829b/export {"uuid": "fefb7dfe-9bf5-4514-a6be-b64c9db9829b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43794", "type": "seen", "source": "https://t.me/cvedetector/4017", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43794 - OpenSearch-Dashboards Redirect Vulnerability (Traversal of Entity Bounds)\", \n \"Content\": \"CVE ID : CVE-2024-43794 \nPublished : Aug. 23, 2024, 5:15 p.m. | 19\u00a0minutes ago \nDescription : OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is available in 1.3.19 and 2.16.0 for this issue. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"23 Aug 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-23T19:38:37.000000Z"} {"uuid": "fefb7dfe-9bf5-4514-a6be-b64c9db9829b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43794", "type": "seen", "source": "https://t.me/cvedetector/4017", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43794 - OpenSearch-Dashboards Redirect Vulnerability (Traversal of Entity Bounds)\", \n \"Content\": \"CVE ID : CVE-2024-43794 \nPublished : Aug. 23, 2024, 5:15 p.m. | 19\u00a0minutes ago \nDescription : OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is available in 1.3.19 and 2.16.0 for this issue. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"23 Aug 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-23T19:38:37.000000Z"} https://db.gcve.eu/sighting/fefb7dfe-9bf5-4514-a6be-b64c9db9829b/export Fri, 23 Aug 2024 19:38:37 +0000