What’s Vulnerable › Vulnerabilities

CVE-2024-37163: SkyScrape Secure API Requests

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-07 · updated 2026-06-17
• Weakness: CWE-319

Description

SkyScrape is a GUI Dashboard for AWS Infrastructure and Managing Resources and Usage Costs. SkyScrape's API requests are currently unsecured HTTP requests, leading to potential vulnerabilities for the user's temporary credentials and data. This affects version 1.0.0.

Affected products

• oslabs-beta SkyScraper: 1.0.0

References

• https://github.com/oslabs-beta/SkyScraper/security/advisories/GHSA-vfqg-qhm5-5m3j
• https://github.com/oslabs-beta/SkyScraper/security/advisories/GHSA-vfqg-qhm5-5m3j

Get alerted when CVE-2024-37163 or the next vulnerability affects your stack