Количество 2
Количество 2
CVE-2024-35180
OMERO.web provides a web based client and plugin infrastructure. There is currently no escaping or validation of the `callback` parameter that can be passed to various OMERO.web endpoints that have JSONP enabled. This vulnerability has been patched in version 5.26.0.
GHSA-vr85-5pwx-c6gq
OMERO.web must check that the JSONP callback is a valid function
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-35180 OMERO.web provides a web based client and plugin infrastructure. There is currently no escaping or validation of the `callback` parameter that can be passed to various OMERO.web endpoints that have JSONP enabled. This vulnerability has been patched in version 5.26.0. | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
| GHSA-vr85-5pwx-c6gq OMERO.web must check that the JSONP callback is a valid function | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу