jsbroks COCO Annotator 0.11.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:jsbroks:coco_annotator:0.11.1:*:*:*:*:*:*:*

part: a version: 0.11.1 update: *

VendorJsbroks (b211a976-c90b-5d63-aeb2-f3fab55dcd79)
ProductCoco Annotator (fe69f175-ab4b-5967-a7c7-080a80c139c3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/jsbroks/coco-annotator purl2cpe 2026-06-01 10:17:39.903575

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10141 vulnerable 2026-06-08 06:22:03.660028 jsbroks COCO Annotator Session predictable state
LOW (3.7)
A vulnerability, which was classified as problematic, was found in jsbroks COCO Annotator 0.11.1. This affects an unknown part of the component Session Handler. The manipulation of the argument SECRET_KEY leads to predictable from observable state. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
Published: 2024-10-19T15:00:07.186Z
Updated: 2024-10-21T13:58:18.883Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.