CVE-2024-52891

Source
https://cve.org/CVERecord?id=CVE-2024-52891
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-52891.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-52891
Published
2025-01-07T12:15:25.010Z
Modified
2026-04-02T12:23:20.300317Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3

could allow an authenticated user to inject malicious information or obtain information from log files due to improper log neutralization.

References

Affected packages

Git / github.com/ibm/concert

Affected ranges

Type
GIT
Repo
https://github.com/ibm/concert
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Database specific
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.3"
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-52891.json"