CVE-2024-41114

CVSS V2 None CVSS V3 None

Description

streamlit-geospatial is a streamlit multipage app for geospatial applications. Prior to commit c4f81d9616d40c60584e36abb15300853a66e489, the `palette` variable on line 430 in `pages/1_

Overview

CVE ID
CVE-2024-41114

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-07-26T20:10:48.528Z

Last Modified Date
2024-07-26T20:10:48.528Z

Weakness Enumerations

CWE	URL
CWE-20	http://cwe.mitre.org/data/definitions/20.html

References

Reference URL	Reference Tags
https://securitylab.github.com/advisories/GHSL-2024-100_GHSL-2024-108_streamlit-geospatial/	x_refsource_CONFIRM
https://github.com/opengeos/streamlit-geospatial/commit/c4f81d9616d40c60584e36abb15300853a66e489	x_refsource_MISC
https://github.com/opengeos/streamlit-geospatial/blob/4b89495f3bdd481998aadf1fc74b10de0f71c237/pages/1_%F0%9F%93%B7_Timelapse.py#L430	x_refsource_MISC
https://github.com/opengeos/streamlit-geospatial/blob/4b89495f3bdd481998aadf1fc74b10de0f71c237/pages/1_%F0%9F%93%B7_Timelapse.py#L435	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-41114
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41114

History

Created	Old Value	New Value	Data Type	Notes
2024-07-27 13:03:38				Added to TrackCVE