Clinical Genomics Scout

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:clinical-genomics:scout:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorClinical Genomics (009994e8-bb83-560e-9817-2ca1599e152b)
ProductScout (487e93c3-f891-59ac-9c8f-acdaba01cabf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/clinical-genomics/scout purl2cpe 2026-06-01 10:13:12.266417

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-47531 vulnerable 2026-06-08 06:48:12.531216 Scout contains insufficient output escaping of attachment names
MEDIUM (4.6)
Scout is a web-based visualizer for VCF-files. Due to the lack of sanitization in the filename, it is possible bypass intended file extension and make users download malicious files with any extension. With malicious content injected inside the file data and users unknowingly downloading it and opening may lead to the compromise of users' devices or data. This vulnerability is fixed in 4.89.
Published: 2024-09-30T15:26:49.421Z
Updated: 2024-09-30T16:31:07.889Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47530 vulnerable 2026-06-08 06:48:12.529609 Scout contains an Open Redirect on Login via `next`
MEDIUM (5.4)
Scout is a web-based visualizer for VCF-files. Open redirect vulnerability allows performing phishing attacks on users by redirecting them to malicious page. /login API endpoint is vulnerable to open redirect attack via next parameter due to absence of sanitization logic. Additionally, due to lack of scheme validation, HTTPS Downgrade Attack can be performed on the users. This vulnerability is fixed in 4.89.
Published: 2024-09-30T15:17:39.731Z
Updated: 2024-09-30T15:45:37.010Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.