Skip to content
OpenAdvisories

Product · Netflix

Dispatch

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2024-7093

    Server-Side Template Injection in Dispatch Message Templates

    Dispatch's notification service uses Jinja templates to generate messages to users. Jinja permits code execution within blocks, which were neither properly sanitized nor sandboxed. This vulnerability enables users to construct command line scripts in their cu…

    Netflix Dispatch
  • Critical 9.1
    CVE-2023-40171

    Dispatch writes JWT tokens in error message

    Dispatch is an open source security incident management tool. The server response includes the JWT Secret Key used for signing JWT tokens in error message when the `Dispatch Plugin - Basic Authentication Provider` plugin encounters an error when attempting to…

    Netflix Dispatch