CVE-2024-34365

EPSS 0.39%
Veröffentlicht 14.05.2024 15:38:46
Zuletzt bearbeitet 10.07.2025 16:28:27
Quelle security@apache.org
CVE-Watchlists
Login
Unerledigt
Login

** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Karaf Cave.This issue affects all versions of Apache Karaf Cave.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

Diese Information steht angemeldeten Benutzern zur Verfügung.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apache ≫ Karaf Cave

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.39%	0.591

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.openwall.com/lists/oss-security/2024/05/09/5

Third Party Advisory

Mailing List

https://karaf.apache.org/security/cve-2024-34365.txt

Vendor Advisory

Mailing List

https://nvd.nist.gov/vuln/detail/CVE-2024-34365

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-34365

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-34365

EUVD