CVE-2024-29151

Published Mar 18, 2024

Last updated 2 months ago

CVSS critical 9.1
Supply chain

Overview

Description
Rocket.Chat.Audit through 5ad78e8 depends on filecachetools, which does not exist in PyPI.
Source
cve@mitre.org
NVD status
Deferred

Risk scores

CVSS 3.1

Type
Secondary
Base score
9.1
Impact score
5.2
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity
CRITICAL

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-311

Social media

Hype score
Not currently trending

Related CVEs

  1. Nx Console Embedded Malicious Code Vulnerability•CVE-2026-48027
  2. Daemon Tools Lite Embedded Malicious Code Vulnerability•CVE-2026-8398
  3. TanStack Unspecified Vulnerability•CVE-2026-45321
  4. Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2 and Thunderbird 149.0.2.•CVE-2026-5735
  5. Fortinet FortiClient EMS Improper Access Control Vulnerability•CVE-2026-35616

References

Sources include official advisories and independent security research.