Book a demo

Our news and updates

Choose category
4 Jul 2024 Communication and Collaboration
Discourse: The vulnerability allows attackers to suspend other staff users and block their login

In Discourse version 3.2.3 a medium severity vulnerability CVE-2024-36113 was detected. This vulnerability allows attackers to suspend other staff users and block their login. There is no solution to this yet. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-36113/.

 Read more Communication
4 Jul 2024 Communication and Collaboration
Discourse: Malicious URLs Disrupting Platform

In Discourse prior to version 3.2.3 a high severity vulnerability CVE-2024-35227 was detected. Malicious URLs disrupt the platform due to improper input validation, risking unsafe data processing. Currently, there is no fix version for this issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-35227.

 Read more Communication
2 Jul 2024 DevOps
GitLab: The vulnerability allows attackers to DoS attack on the server

In GitLab version 17.1 a medium severity vulnerability CVE-2024-1493 was detected. This vulnerability allows attackers to DoS attack on the server. Currently, there is no fix version for this issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-1493/.

 Read more Developer Tools
2 Jul 2024 Data Management and Analytics
MongoDB: The vulnerability allows attackers to affect database performance

In MongoDB version 7.0.3 a medium severity vulnerability CVE-2024-6375 was detected. This vulnerability allows attackers to affect database performance. Currently, there is no fix version for this issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-6375/.

 Read more Database
2 Jul 2024 Business and Enterprise Solutions
OpenVPN: The vulnerability allows attackers to access sensitive data

In OpenVPN version 2.0.4 a low severity vulnerability CVE-2024-28820 was detected. This vulnerability allows attackers to access sensitive data. There is no fix to this yet. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-28820/.

 Read more CMS
1 Jul 2024 Infrastructure and Network
Authentik: The vulnerability allows attackers to get access to the system

In Authentik a high severity vulnerability CVE-2024-38371 was detected. This vulnerability allows attackers to get access to the system. To address this issue, users must update to versions 2024.6.0, 2024.2.4, and 2024.4.3. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-38371/.

 Read more Security
1 Jul 2024 Infrastructure and Network
Authentik: The vulnerability allows attackers to get admin access

In Authentik a high severity vulnerability CVE-2024-37905 was detected. This vulnerability allows attackers to get admin access. To address this issue, users should update Authentik to versions 2024.6.0, 2024.2.4, and 2024.4.3. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-37905/.

 Read more Security
1 Jul 2024 DevOps
GitLab: The vulnerability allows attackers to get access to sensitive data

In GitLab versions from 16.7 to 17.1.1 a medium severity vulnerability CVE-2024-3959 was detected. This vulnerability allows attackers to get access to sensitive data. Currently, there is no fix version for this issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-3959/.

 Read more Developer Tools
1 Jul 2024 DevOps
Gitlab: Accessing Issues and Epics Without SSO via Duo Chat

In GitLab EE all versions starting from 16.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1 a medium severity vulnerability CVE-2024-3115 was detected. Attackers can access issues and epics without an SSO session through Duo Chat. Currently, there is no fix version for this issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-3115.

 Read more Developer Tools