CVE-2024-41112

CVSS V2 None CVSS V3 None

Description

streamlit-geospatial is a streamlit multipage app for geospatial applications. Prior to commit c4f81d9616d40c60584e36abb15300853a66e489, the palette variable in `pages/1_

Overview

CVE ID
CVE-2024-41112

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-07-26T20:01:37.903Z

Last Modified Date
2024-07-26T20:04:27.922Z

Weakness Enumerations

CWE	URL
CWE-20	http://cwe.mitre.org/data/definitions/20.html

References

Reference URL	Reference Tags
https://securitylab.github.com/advisories/GHSL-2024-100_GHSL-2024-108_streamlit-geospatial/	x_refsource_CONFIRM
https://github.com/opengeos/streamlit-geospatial/commit/c4f81d9616d40c60584e36abb15300853a66e489	x_refsource_MISC
https://github.com/opengeos/streamlit-geospatial/blob/4b89495f3bdd481998aadf1fc74b10de0f71c237/pages/1_%F0%9F%93%B7_Timelapse.py#L373-L376	x_refsource_MISC
https://github.com/opengeos/streamlit-geospatial/blob/4b89495f3bdd481998aadf1fc74b10de0f71c237/pages/1_%F0%9F%93%B7_Timelapse.py#L380	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-41112
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41112

History

Created	Old Value	New Value	Data Type	Notes
2024-07-27 13:04:51				Added to TrackCVE