Approved changes feed: RSS · Atom

cpe:2.3:a:gmod:apollo:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGmod (0cb610c3-5a50-5ff1-be2f-2aa33b53f9f9)
ProductApollo (d1902224-bd75-5859-88b2-20c799e84359)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-24924 vulnerable 2026-06-08 07:12:50.175399 GMOD Apollo Missing Authentication for Critical Function
CRITICAL (9.8)
Certain functionality within GMOD Apollo does not require authentication when passed with an administrative username
Published: 2025-03-05T00:02:08.272Z
Updated: 2025-03-05T15:07:16.136Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23410 vulnerable 2026-06-08 07:10:55.716483 GMOD Apollo Relative Path Traversal
CRITICAL (9.8)
When uploading organism or sequence data via the web interface, GMOD Apollo will unzip and inspect the files and will not check for path traversal in supported archive types.
Published: 2025-03-04T23:58:51.635Z
Updated: 2025-03-05T16:10:26.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21092 vulnerable 2026-06-08 07:08:51.167847 GMOD Apollo Incorrect Privilege Assignment
MEDIUM (6.5)
GMOD Apollo does not have sufficient logical or access checks when updating a user's information. This could result in an attacker being able to escalate privileges for themselves or others.
Published: 2025-03-04T23:49:12.458Z
Updated: 2025-03-05T16:11:35.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20002 vulnerable 2026-06-08 07:08:38.740620 GMOD Apollo Generation of Error Message Containing Sensitive Information
MEDIUM (5.3)
After attempting to upload a file that does not meet prerequisites, GMOD Apollo will respond with local path information disclosure
Published: 2025-03-05T00:08:13.877Z
Updated: 2025-03-05T15:06:21.477Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.