Vulnerabilities

TI-2024-32971 CVE-2024-49386 · GHSA-jrgj-8969-92hw

Sensitive information disclosure due to spell-jacking.

LOW 25

Sensitive information disclosure due to spell-jacking.

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00247 Published 2024-10-17 Fixed in 9.0.0x24 CWE-359

TI-2024-32974 CVE-2024-49389 · GHSA-g772-q8cg-3fp5

LOW 35

Local privilege escalation due to insecure folder permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00138 Published 2024-10-17 Fixed in 9.0.0x24 CWE-276

TI-2024-32975 CVE-2024-49390 · GHSA-88q9-p7rf-93g4

LOW 33

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00164 Published 2024-10-17 Fixed in 9.0.0x24 CWE-427

TI-2024-32976 CVE-2024-49391 · GHSA-qmp9-38cm-qhwr

LOW 33

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00139 Published 2024-10-17 Fixed in 9.0.0x24 CWE-427

TI-2024-32977 CVE-2024-49392 · GHSA-48cm-7wff-qj95

LOW 24

Stored cross-site scripting (XSS) vulnerability on enrollment invitation page.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0023 Published 2024-10-17 Fixed in 9.0.0x24 CWE-79