Clinical-Genomics Scout
4 CVEs affecting Clinical-Genomics Scout. Latest disclosed: 2024-09-30. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1592 | High | 8.2 | 2022-05-05 | Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requ… |
CVE-2022-1554 | High | 7.5 | 2022-05-03 | Path Traversal due to `send_file` call in GitHub repository clinical-genomics/scout prior to 4.52. |
CVE-2024-47530 | Medium | 5.4 | 2024-09-30 | Scout is a web-based visualizer for VCF-files. Open redirect vulnerability allows performing phishing attacks on users by redirecting them to malicious page. /… |
CVE-2024-47531 | Medium | 4.6 | 2024-09-30 | Scout is a web-based visualizer for VCF-files. Due to the lack of sanitization in the filename, it is possible bypass intended file extension and make users do… |