Threat database

A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/connections of the component JWT Refresh Token Handler. Performing a manipulation of the argument Bearer results in improper privilege management. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Upgrading to version 5.8.1.11 is sufficient to fix this issue. It is recommended to upgrade the affected component.

A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the component SAML Authentication. Such manipulation of the argument Email leads to improper authentication. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.8.1.11 is recommended to address this issue. Upgrading the affected component is recommended.

A vulnerability was identified in NucleoidAI Nucleoid up to 0.7.10. The impacted element is the function extension.apply of the file /src/cluster.ts of the component Outbound Request Handler. Such manipulation of the argument https/ip/port/path/headers leads to server-side request forgery. The attack may be performed from remote.

EPSS 0.5%VulnerabilityNucleoidAIGermanyFrance+6

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CK MacLeod Category Featured Images Extended category-featured-images-extended allows Stored XSS.This issue affects Category Featured Images Extended: from n/a through <= 1.52.

CVE-2024-55956 affects Cleo Harmony, VLTrader, and LexiCom products prior to version 5.8.0.24. The vulnerability allows an unauthenticated attacker to import and execute arbitrary Bash or PowerShell commands on the host system by exploiting the default settings of the Autorun directory. This can lead to full system compromise. The vulnerability has a critical CVSS score of 9.8 and is known to be exploited in the wild, including use in ransomware campaigns.

CVE-2024-50623 is a critical vulnerability affecting multiple Cleo managed file transfer products including Cleo Harmony, VLTrader, and LexiCom. It involves unrestricted file upload and download capabilities that can be exploited to achieve remote code execution with elevated privileges. The vulnerability has a CVSS score of 9.8 and is known to be exploited in the wild, including use in ransomware campaigns.