Skip to content
OpenAdvisories
High · 8.8 CVE-2024-39703 EUVD-2024-38197GHSA-j39q-fh2m-9hfg

In ThreatQuotient ThreatQ before 5.29.3, authenticated users are able to execute arbitrary commands by sending a crafted request to an API …

Published Dec 18, 2024 · Updated Dec 18, 2024 · Assigned by mitre

Description

In ThreatQuotient ThreatQ before 5.29.3, authenticated users are able to execute arbitrary commands by sending a crafted request to an API endpoint.

Affected products

VendorProductAffectedFixed
ThreatQuotient ThreatQ < 5.29.3 5.29.3

Advisories 1

References