Azienda Sicura

Lista CVE 2024/52xxx

CVE-2024-52001 (Reflected Cross-site Scripting exploit in Combodo iTop)

CVE-2024-52002 (Portal user is able to access forbidden services information in Combodo iTop)

CVE-2024-52003 (Cross-Site Request Forgery (CSRF) in several iTop pages)

CVE-2024-52004 (X-Forwarded-Prefix Header still allows for Open Redirect in traefik)

CVE-2024-52005 (Remote code execution vulnerabilities in MediaCMS)

CVE-2024-52006 (The sideband payload is passed unfiltered to the terminal in git)

CVE-2024-52007 (Newline confusion in credential helpers can lead to credential exfiltration in git)

CVE-2024-52008 (XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`)

CVE-2024-52009 (Password Policy Bypass Vulnerability in Fides Webserver)

CVE-2024-52010 (Git credentials are exposed in atlantis logs)

CVE-2024-52012 (Zoraxy has an authenticated command injection in the Web SSH feature)

CVE-2024-52013 (Apache Solr: Configset upload on Windows allows arbitrary path write-access)