CVE-2024-34006

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-838

Affected software

VendorProductVersions
——>= 4.0, <= 4.3.3; >= 4.2, <= 4.2.6; >= 4.1, <= 4.1.9
fedoraprojectfedora>= 4.0, <= 4.3.3
fedoraprojectfedora>= 4.1, <= 4.1.9
fedoraprojectfedora>= 4.2, <= 4.2.6

References

Timeline

Published
May 31, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-340078.8The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.CVE-2024-340088.8Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk.CVE-2024-340097.5Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages wCVE-2024-340108.2Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud AgentCVE-2024-340116.8Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (WindoCVE-2024-340124.4Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before bCVE-2024-340137.8Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image (macOS) beforeCVE-2024-340145.5Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin CVE-2024-340153.3Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis BCVE-2024-340166.5Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (WindoCVE-2024-340177.3Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before buiCVE-2024-340185.5Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) befo
CVE-2024-34006: Medium severity, CVSS 4.3 | Vulnix