CVE-2024-27292
4 advisories.
PyPI/docassemble-webapp CVE-2024-27292: high 7.5, EPSS 69.49%
Docassemble unauthorized access through URL manipulation
Action: Upgrade docassemble-webapp to 1.4.97 or later.
pip install docassemble-webapp==1.4.97Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.53 | 1.4.97 | - |
Fixed versions
| 1.4.97 |
Sources
- osv: GHSA-jq57-3w7p-vwvv
- https://github.com/jhpyle/docassemble/security/advisories/GHSA-jq57-3w7p-vwvv
- https://nvd.nist.gov/vuln/detail/CVE-2024-27292
- https://github.com/jhpyle/docassemble/commit/97f77dc486a26a22ba804765bfd7058aabd600c9
- https://github.com/jhpyle/docassemble
CVE-2024-27292 · published · modified · JSON
PyPI/docassemble-base CVE-2024-27292: high 7.5, EPSS 69.49%
Docassemble unauthorized access through URL manipulation
Action: Upgrade docassemble-base to 1.4.97 or later.
pip install docassemble-base==1.4.97Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.53 | 1.4.97 | - |
Fixed versions
| 1.4.97 |
Sources
- osv: GHSA-jq57-3w7p-vwvv#PyPI/docassemble-base
- https://github.com/jhpyle/docassemble/security/advisories/GHSA-jq57-3w7p-vwvv
- https://nvd.nist.gov/vuln/detail/CVE-2024-27292
- https://github.com/jhpyle/docassemble/commit/97f77dc486a26a22ba804765bfd7058aabd600c9
- https://github.com/jhpyle/docassemble
CVE-2024-27292 · published · modified · JSON
PyPI/docassemble-base CVE-2024-27292: high 7.5, EPSS 69.49%
Docassemble unauthorized access through URL manipulation
Action: Upgrade docassemble-base to 1.4.97 or later.
pip install docassemble-base==1.4.97Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.53 | 1.4.97 | - |
Fixed versions
| 1.4.97 |
Sources
- osv: PYSEC-2026-1309
- https://github.com/jhpyle/docassemble/security/advisories/GHSA-jq57-3w7p-vwvv
- https://nvd.nist.gov/vuln/detail/CVE-2024-27292
- https://github.com/jhpyle/docassemble/commit/97f77dc486a26a22ba804765bfd7058aabd600c9
- https://github.com/jhpyle/docassemble
- https://pypi.org/project/docassemble-base
- https://github.com/advisories/GHSA-jq57-3w7p-vwvv
CVE-2024-27292 · published · modified · JSON
PyPI/docassemble-webapp CVE-2024-27292: high 7.5, EPSS 69.49%
Docassemble unauthorized access through URL manipulation
Action: Upgrade docassemble-webapp to 1.4.97 or later.
pip install docassemble-webapp==1.4.97Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.53 | 1.4.97 | - |
Fixed versions
| 1.4.97 |
Sources
- osv: PYSEC-2026-2453
- https://github.com/jhpyle/docassemble/security/advisories/GHSA-jq57-3w7p-vwvv
- https://nvd.nist.gov/vuln/detail/CVE-2024-27292
- https://github.com/jhpyle/docassemble/commit/97f77dc486a26a22ba804765bfd7058aabd600c9
- https://github.com/jhpyle/docassemble
- https://pypi.org/project/docassemble-webapp
- https://github.com/advisories/GHSA-jq57-3w7p-vwvv
CVE-2024-27292 · published · modified · JSON