Description
Attackers with a valid username and password can exploit a python code injection vulnerability during the natural login flow.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Journyx | Journyx (jtime) | 11.5.4 | — |
References
- https://korelogic.com/Resources/Advisories/KL-001-2024-008.txt third-party-advisory