Vulnerability Description
A vulnerability, which was classified as problematic, was found in jsbroks COCO Annotator 0.11.1. This affects an unknown part of the component Session Handler. The manipulation of the argument SECRET_KEY leads to predictable from observable state. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jsbroks | Coco Annotator | 0.11.1 |
Related Weaknesses (CWE)
References
- https://github.com/jsbroks/coco-annotator/issues/626ExploitIssue TrackingThird Party Advisory
- https://github.com/jsbroks/coco-annotator/issues/626#issue-2582440109ExploitThird Party Advisory
- https://vuldb.com/?ctiid.280929Permissions RequiredThird Party AdvisoryVDB Entry
- https://vuldb.com/?id.280929Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.422713Third Party AdvisoryVDB Entry
FAQ
What is CVE-2024-10141?
CVE-2024-10141 is a vulnerability with a CVSS score of 3.7 (LOW). A vulnerability, which was classified as problematic, was found in jsbroks COCO Annotator 0.11.1. This affects an unknown part of the component Session Handler. The manipulation of the argument SECRET...
How severe is CVE-2024-10141?
CVE-2024-10141 has been rated LOW with a CVSS base score of 3.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-10141?
Check the references section above for vendor advisories and patch information. Affected products include: Jsbroks Coco Annotator.