What’s Vulnerable › Products

galaxyproject galaxy vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your galaxyproject galaxy version is affected

Latest galaxyproject galaxy vulnerabilities

• CVE-2024-42351 — Possible Data Tampering & Loss of Public Datasets in Galaxy (CVSS 9.1)
• CVE-2024-42346 — Stored Cross Site Scripting (Stored XSS) in Galaxy (CVSS 5.4)
• CVE-2023-42812 — Galaxy vulnerable to Server Side Request Forgery during data imports (CVSS 4.3)
• CVE-2023-27578 — Galaxy vulnerable to unauthorized modification of pages/visualizations due to insufficient permission check (CVSS 7.5)
• CVE-2015-10062 — galaxy-data-resource Command Line Template injection (CVSS 9.8)
• CVE-2022-23470 — Arbitrary file access in the Galaxy data analysis platform (CVSS 7.5)
• CVE-2018-1000516 — (CVSS 6.1)