Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: galaxyproject Clear all filters
TI-2024-28338 CVE-2024-42351

Possible Data Tampering & Loss of Public Datasets in Galaxy

Priority MEDIUM 40

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00454 Published 2024-09-20 Fixed in 21.05 CWE-200
TI-2024-28333 CVE-2024-42346

Stored Cross Site Scripting (Stored XSS) in Galaxy

Priority LOW 35

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00768 Published 2024-09-20 Fixed in 24.1.1 CWE-79
TI-2015-07990 CVE-2015-10062 · GHSA-wgpq-5gwx-2wxh

galaxy-data-resource Command Line Template injection

Priority MEDIUM 44

A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00933 Published 2023-01-17 No fix listed CWE-74
TI-2018-15916 CVE-2018-1000516 · GHSA-qqr6-vm23-m488

The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of…

Priority LOW 29

The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, wh…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01051 Published 2018-06-26 Fixed in 14.10.1, 15.01 CWE-79