CVE-2024-39703

HIGH

ThreatQuotient ThreatQ <5.29.3 - Command Injection

Title source: llm
STIX 2.1

Description

In ThreatQuotient ThreatQ before 5.29.3, authenticated users are able to execute arbitrary commands by sending a crafted request to an API endpoint.

References (3)

Core 3

Scores

CVSS v3 8.8
EPSS 0.0069
EPSS Percentile 48.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-77
Status published
Products (1)
ThreatQuotient/ThreatQ < 5.29.3
Published Dec 18, 2024
Tracked Since Feb 18, 2026