Skip to content
OpenAdvisories

Vendor

galaxyproject

5 known vulnerabilities.

Products

galaxy 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-42351

    Possible Data Tampering & Loss of Public Datasets in Galaxy

    Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. An attacker can potentially replace the contents of public datasets resulting in data loss or tampering.…

    galaxyproject galaxy
  • Medium 6.3
    CVE-2023-42812

    Galaxy vulnerable to Server Side Request Forgery during data imports

    Galaxy is an open-source platform for FAIR data analysis. Prior to version 22.05, Galaxy is vulnerable to server-side request forgery, which allows a malicious to issue arbitrary HTTP/HTTPS requests from the application server to internal hosts and read their…

    galaxyproject galaxy