Skip to content
OpenAdvisories

Vendor

Journyx

4 known vulnerabilities.

Products

Journyx (jtime) 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-6893 Scanner template EPSS 33%

    Journyx Unauthenticated XML External Entities Injection

    The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources.

    Journyx Journyx (jtime)
  • High 8.8
    CVE-2024-6891

    Journyx Authenticated Remote Code Execution

    Attackers with a valid username and password can exploit a python code injection vulnerability during the natural login flow.

    Journyx Journyx (jtime)