CVE-2024-11308

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The DVC from TRCore encrypts files using a hardcoded key. Attackers can use this key to decrypt the files and restore the original content.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-321

Affected software

VendorProductVersions
TRCoreDVC>= 6.0, <= 6.3
trcoredvc>= 6.0, <= 6.3

References

Timeline

Published
Nov 18, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-113097.5The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbiCVE-2024-113107.5The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbiCVE-2024-113119.8The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remoteCVE-2024-113129.8The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remoteCVE-2024-113139.8The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remoteCVE-2024-113149.8The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remoteCVE-2024-113159.8The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remoteCVE-2024-113167.5Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product.  Affected products: ABB ASPECT - ECVE-2024-1131710.0Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeoCVE-2024-113187.5An IDOR (Insecure Direct Object Reference) vulnerability has been discovered in AbsysNet, affecting version 2.3.1. This vulnerability could CVE-2024-113194.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS Association django-cCVE-2024-11328.1A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to constru
CVE-2024-11308: Medium severity, CVSS 5.5 | Vulnix