VYPR
← All advisories
High severity7.6NVD Advisory· Published Sep 20, 2024· Updated Jun 17, 2026

CVE-2024-42346

CVE-2024-42346

Description

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations endpoint, can be used to store HTML tags and trigger javascript execution upon edit operation. All supported branches of Galaxy (and more back to release_20.05) were amended with the supplied patches. Users are advised to upgrade. There are no known workarounds for this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Galaxyproject/Galaxy3 versions
    cpe:2.3:a:galaxyproject:galaxy:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:galaxyproject:galaxy:*:*:*:*:*:*:*:*range: <24.1.1
    • (no CPE)range: back to release_20.05
    • (no CPE)range: < 24.1.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.