Skip to content
OpenAdvisories

Vendor

galaxyproject

5 known vulnerabilities.

Products

galaxy 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2024-42346 Public exploit

    Stored Cross Site Scripting (Stored XSS) in Galaxy

    Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations endpoint, can be used to store HTML tags and trigger javascrip…

    galaxyproject galaxy galaxy-data galaxy-auth PyPI
  • High 8.6
    CVE-2022-23470

    Arbitrary file access in the Galaxy data analysis platform

    Galaxy is an open-source platform for data analysis. An arbitrary file read exists in Galaxy 22.01 and Galaxy 22.05 due to the switch to Gunicorn, which can be used to read any file accessible to the operating system user under which Galaxy is running. This v…

    galaxyproject galaxy