← All advisories

Medium severity5.4NVD Advisory· Published Jul 28, 2024· Updated Jun 17, 2026

CVE-2024-42055

CVE-2024-42055

Description

Cervantes through 0.5-alpha allows stored XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Cervantessec/Cervantes3 versions
cpe:2.3:a:cervantessec:cervantes:0.3:alpha:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:cervantessec:cervantes:0.3:alpha:*:*:*:*:*:*
- cpe:2.3:a:cervantessec:cervantes:0.4:alpha:*:*:*:*:*:*
- cpe:2.3:a:cervantessec:cervantes:0.5:alpha:*:*:*:*:*:*
Cervantes/Cervantescpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=0.5-alpha

Patches

Vulnerability mechanics

References

3

github.com/CervantesSec/cervantes/commit/78631a034d0fb3323a53fb7428b2022b29a0d2cdnvdPatch
www.getastra.com/blog/vulnerability/xss-insecure-file-cervantes/nvdThird Party Advisory
www.jinsonvarghese.com/stored-xss-file-upload-vulnerabilities-found-in-cervantes/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.