CVE-2024-42346

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations endpoint, can be used to store HTML tags and trigger javascript execution upon edit operation. All supported branches of Galaxy (and more back to release_20.05) were amended with the supplied patches. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Score
CVSS 3.1 7.6 High
Status
Analyzed - security-advisories@github.com
Published
2024-09-20
Last modified
2024-09-20
Weaknesses
CWE-79

Affected products

References

 
 
© AVABIS GmbH privacypolicy about