Vulnerabilities

TI-2019-12226 CVE-2019-16244 · GHSA-9g7m-mw8w-mqc5

OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query.

MEDIUM 44

OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0118 Published 2020-07-22 No fix listed

TI-2019-07312 CVE-2019-9943 · GHSA-xj63-cgcm-5qj2

In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment…

LOW 34

In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0, permissions on OMERO model objects may be circumvented during certain operations such as move and d…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00826 Published 2020-06-17 No fix listed CWE-276

TI-2019-07313 CVE-2019-9944 · GHSA-p97h-4jgc-m3x7

In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files…

LOW 35

In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01071 Published 2020-06-17 No fix listed

Vulnerabilities

Filters

OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query.

In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment…

In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files…