CVE-2024-47531
Published Sep 30, 2024Scout is a web-based visualizer for VCF-files. Due to the lack of sanitization in the filename, it is possible bypass intended file extension and make users download malicious fil…
Vendor/product archive
clinical-genomics / scout CVEs
Beta · best-effort4 CVEs tagged to clinical-genomics / scout — 0 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2024-47530
Published Sep 30, 2024Scout is a web-based visualizer for VCF-files. Open redirect vulnerability allows performing phishing attacks on users by redirecting them to malicious page. /login API endpoint i…
CVE-2022-1592
Published May 5, 2022Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing stea…
CVE-2022-1554
Published May 3, 2022Path Traversal due to `send_file` call in GitHub repository clinical-genomics/scout prior to 4.52.
Showing 1-4 of 4 CVEsPage 1 of 1