CVE-2024-1713 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.2 HIGH	NETWORK	HIGH	HIGH	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H
Google	CNA	7.2 HIGH	NETWORK	HIGH	HIGH	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 17%

Vendor	Product	Version
plv8	plv8	3.2.1

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

plv8

plucky	dne
oracular	dne
noble	dne
mantic	dne
jammy	dne
focal	dne
bionic	needs-triage
xenial	needs-triage

Known Exploits!

Common Weakness Enumeration

CWE-394 - Unexpected Status Code or Return Value
The software does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the software.
CWE-754 - Improper Check for Unusual or Exceptional Conditions
The software does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the software.

References

https://github.com/google/security-research/security/advisories/GHSA-r7m9-grw7-vcc4

https://github.com/google/security-research/security/advisories/GHSA-r7m9-grw7-vcc4