CVE-2024-27612

EPSS 10.71%
Veröffentlicht 08.03.2024 06:15:52
Zuletzt bearbeitet 08.05.2025 17:38:19
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Numbas editor before 7.3 mishandles editing of themes and extensions.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Numbas ≫ Editor Version < 7.3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	10.71%	0.952

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.2	2.5	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://github.com/numbas/Numbas

Product

https://www.numbas.org.uk/blog/2024/03/development-update-march-2024/

Product

https://nvd.nist.gov/vuln/detail/CVE-2024-27612

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-27612

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-27612

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-27612