CVE-2024-6891
Journyx Authenticated Remote Code Execution
HIGH 8.8EPSS 1.0%
Attackers with a valid username and password can exploit a python code injection vulnerability during the natural login flow.
- Affected
- Journyx · Journyx (jtime)
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.95% chance of exploitation in the next 30 days, 61st percentile
- Published
- 2024-08-07
- Updated
- 2024-08-08