CVE-2024-6891

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Attackers with a valid username and password can exploit a python code injection vulnerability during the natural login flow.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94CWE-95

Affected software

VendorProductVersions
JournyxJournyx (jtime)11.5.4
journyxjournyx11.5.4

References

Timeline

Published
Aug 8, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-68926.1Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the Journyx web application.CVE-2024-68937.5The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticatCVE-2024-68945.4The RD Station plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.3.2 due to insufficCVE-2024-68956.1Insufficient authentication in user account management in Yugabyte Platform allows local network attackers with a compromised user session tCVE-2024-68965.4The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versCVE-2024-68976.4The aThemes Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and CVE-2024-68989.8A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as critical. This affects an unknown part oCVE-2024-68999.8A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as critical. This vulnerability affects unknoCVE-2024-69008.8A vulnerability was found in SourceCodester Record Management System 1.0. It has been rated as critical. This issue affects some unknown proCVE-2024-69018.8A vulnerability classified as critical has been found in SourceCodester Record Management System 1.0. Affected is an unknown function of theCVE-2024-69028.8A vulnerability classified as critical was found in SourceCodester Record Management System 1.0. Affected by this vulnerability is an unknowCVE-2024-69038.8A vulnerability, which was classified as critical, has been found in SourceCodester Record Management System 1.0. Affected by this issue is
CVE-2024-6891: High severity, CVSS 8.8 | Vulnix