← back
CVE-2024-42360

Command Injection in sequenceserver

CVSS 9.8 CRITICALEPSS 0.6%CWE-77
SequenceServer lets you rapidly set up a BLAST+ server with an intuitive user interface for personal or group use. Several HTTP endpoints did not properly sanitize user input and/or query parameters. This could be exploited to inject and run unwanted shell commands. This vulnerability has been fixed in 3.1.2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
wurmlab · sequenceserver

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →