Skip to content
OpenAdvisories

Vendor

man-group

9 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2024-55890 Public exploit Scanner template

    D-Tale allows Remote Code Execution through the Custom Filter Input

    D-Tale is a visualizer for pandas data structures. Prior to version 3.16.1, users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.16.1 where the `upda…

  • Critical 9.8
    CVE-2024-3408 Public exploit Scanner template EPSS 78%

    Authentication Bypass and RCE in man-group/dtale

    man-group/dtale version 3.10.0 is vulnerable to an authentication bypass and remote code execution (RCE) due to improper input validation. The vulnerability arises from a hardcoded `SECRET_KEY` in the flask configuration, allowing attackers to forge a session…