Netflix Dispatch
4 CVEs affecting Netflix Dispatch. Latest disclosed: 2024-08-01. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-40171 | Critical | 9.1 | 2023-08-17 | Dispatch is an open source security incident management tool. The server response includes the JWT Secret Key used for signing JWT tokens in error message when… |
CVE-2020-9300 | Medium | 6.5 | 2020-11-09 | The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participan… |
CVE-2020-9299 | Medium | 5.4 | 2020-11-09 | There were XSS vulnerabilities discovered and reported in the Dispatch application, affecting name and description parameters of Incident Priority, Incident Ty… |
CVE-2024-7093 | | 2024-08-01 | Dispatch's notification service uses Jinja templates to generate messages to users. Jinja permits code execution within blocks, which were neither properly san… |