Approved changes feed: RSS · Atom
cpe:2.3:a:journyx:journyx:11.5.4:*:*:*:*:linux:*:*
part: a version: 11.5.4 update: *
| Vendor | Journyx (925e280b-6c5a-5cc6-8c06-ce32d58bfe92) |
|---|---|
| Product | Journyx (82a9ffd8-1663-5ccb-9b13-a48e35f17dba) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | linux |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6893 |
vulnerable | 2026-06-08 06:58:20.669863 |
Journyx Unauthenticated XML External Entities Injection
The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources.
Published: 2024-08-07T23:22:08.667Z
Updated: 2024-08-08T13:14:39.692Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6891 |
vulnerable | 2026-06-08 06:58:20.668800 |
Journyx Authenticated Remote Code Execution
Attackers with a valid username and password can exploit a python code injection vulnerability during the natural login flow.
Published: 2024-08-07T23:13:56.924Z
Updated: 2024-08-08T13:41:15.752Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6890 |
vulnerable | 2026-06-08 06:58:20.668142 |
Journyx Unauthenticated Password Reset Bruteforce
Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation user can bruteforce the password reset and change the administrator password.
Published: 2024-08-07T23:09:40.249Z
Updated: 2024-08-08T13:28:52.446Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.