← All advisories

Medium severity5.4NVD Advisory· Published Jul 28, 2024· Updated Jun 17, 2026

CVE-2024-42054

CVE-2024-42054

Description

Cervantes through 0.5-alpha accepts insecure file uploads.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Cervantes/Cervantescpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=0.5-alpha

Patches

Vulnerability mechanics

References

3

github.com/CervantesSec/cervantes/commit/78631a034d0fb3323a53fb7428b2022b29a0d2cdnvdPatch
www.getastra.com/blog/vulnerability/xss-insecure-file-cervantes/nvdThird Party Advisory
www.jinsonvarghese.com/stored-xss-file-upload-vulnerabilities-found-in-cervantes/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.