Skip to content
OpenAdvisories

Vendor

man-group

9 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-3408 Public exploit Scanner template EPSS 78%

    Authentication Bypass and RCE in man-group/dtale

    man-group/dtale version 3.10.0 is vulnerable to an authentication bypass and remote code execution (RCE) due to improper input validation. The vulnerability arises from a hardcoded `SECRET_KEY` in the flask configuration, allowing attackers to forge a session…