CVE-2024-42360

—

CVSS 3.1

9.8 critical

EPSS

<1%p46

Published

Aug 14, 2024 (Aug 14, 2024)

Modified

Jun 17, 2026

Description

SequenceServer lets you rapidly set up a BLAST+ server with an intuitive user interface for personal or group use. Several HTTP endpoints did not properly sanitize user input and/or query parameters. This could be exploited to inject and run unwanted shell commands. This vulnerability has been fixed in 3.1.2.

Vendors: wurmlab
Products: sequenceserver
Weakness: CWE-77
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.