CVE-2024-29640
3 advisories.
crates.io/aliyundrive-webdav CVE-2024-29640: high, EPSS 1.18%
aliyundrive-webdav vulnerable to Command Injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.3.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-73v2-rxqp-7q4f
- https://nvd.nist.gov/vuln/detail/CVE-2024-29640
- https://github.com/lakemoon602/vuln/blob/main/detail.md
- https://github.com/messense/aliyundrive-webdav
- https://github.com/messense/aliyundrive-webdav/blob/main/openwrt/luci-app-aliyundrive-webdav/luasrc/controller/aliyundrive-webdav.lua
- http://aliyundrive-webdav.com
CVE-2024-29640 · published · modified · JSON
PyPI/aliyundrive-webdav CVE-2024-29640: high, EPSS 1.18%
aliyundrive-webdav vulnerable to Command Injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.3.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-73v2-rxqp-7q4f#PyPI/aliyundrive-webdav
- https://nvd.nist.gov/vuln/detail/CVE-2024-29640
- https://github.com/lakemoon602/vuln/blob/main/detail.md
- https://github.com/messense/aliyundrive-webdav
- https://github.com/messense/aliyundrive-webdav/blob/main/openwrt/luci-app-aliyundrive-webdav/luasrc/controller/aliyundrive-webdav.lua
- http://aliyundrive-webdav.com
CVE-2024-29640 · published · modified · JSON
PyPI/aliyundrive-webdav CVE-2024-29640: unknown, EPSS 1.18%
aliyundrive-webdav vulnerable to Command Injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.3.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1114
- https://nvd.nist.gov/vuln/detail/CVE-2024-29640
- https://github.com/lakemoon602/vuln/blob/main/detail.md
- https://github.com/messense/aliyundrive-webdav
- https://github.com/messense/aliyundrive-webdav/blob/main/openwrt/luci-app-aliyundrive-webdav/luasrc/controller/aliyundrive-webdav.lua
- http://aliyundrive-webdav.com
- https://pypi.org/project/aliyundrive-webdav
- https://github.com/advisories/GHSA-73v2-rxqp-7q4f
CVE-2024-29640 · published · modified · JSON