Test Kennung:	1.3.6.1.4.1.25623.1.0.114543
Kategorie:	Web Servers
Titel:	aiohttp < 3.9.4 Multiple Vulnerabilities - Linux
Zusammenfassung:	aiohttp is prone to multiple vulnerabilities.
Beschreibung:	Summary: aiohttp is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2024-27306: Cross-site scripting (XSS) on index pages for static file handling - CVE-2024-30251: Denial of service (DoS) when trying to parse malformed POST requests Affected Software/OS: aiohttp versions prior to 3.9.4. Solution: Update to version 3.9.4 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2024-27306 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZIVBMPEY7WWOFMC3CWXFBRQPFECV4SW3/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2EXRGTN2WG7VZLUZ7WOXU5GQJKCPPHKP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWEI6NIHZ3G7DURDZVMRK7ZEFC2BTD3U/ https://github.com/aio-libs/aiohttp/commit/28335525d1eac015a7e7584137678cbb6ff19397 https://github.com/aio-libs/aiohttp/pull/8319 https://github.com/aio-libs/aiohttp/security/advisories/GHSA-7gpw-8wmc-pm8g Common Vulnerability Exposure (CVE) ID: CVE-2024-30251 https://github.com/aio-libs/aiohttp/commit/7eecdff163ccf029fbb1ddc9de4169d4aaeb6597 https://github.com/aio-libs/aiohttp/commit/cebe526b9c34dc3a3da9140409db63014bc4cf19 https://github.com/aio-libs/aiohttp/commit/f21c6f2ca512a026ce7f0f6c6311f62d6a638866 https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5m98-qgg9-wh84 http://www.openwall.com/lists/oss-security/2024/05/02/4
Copyright	Copyright (C) 2024 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.