Known Vulnerabilities
CVE-2024-2052
CWE-552: Files or Directories Accessible to External Parties vulnerability exists that could allow unauthenticated files and logs exfiltration and download of files when an attacker modifies the URL to download to a different location.
HIGH
CVSS 7.5
Published Mar 18, 2024
CVE-2024-2050
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an attacker injects then executes arbitrary malicious JavaScript code within the context of the product.
HIGH
CVSS 8.2
Published Mar 18, 2024
CVE-2024-2051
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover and unauthorized access to the system when an attacker conducts brute-force attacks against the login form.
CRITICAL
CVSS 9.8
Published Mar 18, 2024