In CKAN versions before 2.0.0 and 2.10.5 a medium severity vulnerability CVE-2024-41674 was detected. This vulnerability allows potential exposure of sensitive information, like internal Solr URLs and credentials, in error messages when there are connection issues between CKAN and the Solr server. To fix this issue, users must upgrade CKAN to versions 2.10.5 and 2.11.0. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-41674.
Read more Data Analytics
In CKAN versions 2.10.5 and earlier a medium severity vulnerability CVE-2024-43371 was detected. CKAN plugins that download content from resource URLs lack restrictions on what URLs can be accessed, making them vulnerable to Server Side Request Forgery (SSRF) attacks. To fix this problem, users should upgrade to version 2.10.5 or 2.11.0. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-43371.
Read more Data Analytics
In Grafana versions 11.1.0, 11.1.2 a medium severity vulnerability CVE-2024-27186 was detected. This vulnerability allows attackers to bypass access control for plugin data sources protected by the ReqActions json field in the plugin.json file. To fix the issue, users must upgrade Grafana to versions 11.1.1 or 11.1.3. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-6322.
Read more Data Analytics
In Joomla versions 4.0.0-4.4.6 and 5.0.0-5.1.2 a medium severity vulnerability CVE-2024-6322 was detected. This vulnerability allows attackers to inject malicious scripts into web pages viewed by other users. To fix the issue, users must upgrade Joomla to version 4.4.7 or 5.1.3. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-27186.
Read more CMS
In WooCommerce versions prior from n/a through 9.1.2 a medium severity vulnerability CVE-2024-39666 was detected. This security flaw allows hackers to insert harmful code into web pages. To fix this problem, users should upgrade to WooCommerce version 9.1.3. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-39666.
Read more E-commerce
In Ghost versions from 4.46.0 before 5.89.4 a medium severity vulnerability CVE-2024-43409 was detected. This vulnerability allows attackers to access member-only information and perform actions meant for registered users, potentially exposing personal data. To fix this problem, users should upgrade Ghost to version 5.89.5. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-43409.
Read more CMS
In Joomla! CMS versions 4.0.0-4.4.6, 5.0.0-5.1.2 a high severity vulnerability CVE-2024-27187 was detected. Improper access controls allow backend users to overwrite their usernames, even when this action is disallowed. To fix this vulnerability, users need to upgrade to version 4.4.7 or 5.1.3. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-27187.
Read more CMS
In Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier a high severity vulnerability CVE-2024-39406 was detected. This vulnerability allows attackers to perform Path Traversal, potentially leading to arbitrary file system read. To address this issue, it is recommended to apply the latest security patches. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-39406.
Read more E-commerce
In Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier a critical severity vulnerability CVE-2024-39397 was detected. This vulnerability allows attackers to execute arbitrary code by uploading a malicious file, which can then be executed on the server. To address this issue, users must apply the latest security updates. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-39397.