Vulnerabilities

TI-2024-31820 CVE-2024-47531

Scout contains insufficient output escaping of attachment names

MEDIUM 54

Scout is a web-based visualizer for VCF-files.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.0033 Published 2024-09-30 No fix listed CWE-116

TI-2024-31819 CVE-2024-47530

MEDIUM 60

Scout is a web-based visualizer for VCF-files.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00393 Published 2024-09-30 Fixed in 4.89 CWE-601

TI-2022-01462 CVE-2022-1592 · GHSA-g53g-q539-93cv

LOW 38

Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0133 Published 2022-05-05 Fixed in v4.42, 4.52 CWE-918

TI-2022-01425 CVE-2022-1554 · GHSA-694v-63fq-fmr4

LOW 36

Path Traversal due to `send_file` call in GitHub repository clinical-genomics/scout prior to 4.52.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01366 Published 2022-05-03 Fixed in 4.52 CWE-36