Vulnerabilities in DIRACGrid

6 results

CVE-2026-61667CRITICALDIRAC: RCE in FileCatalog DatasetManager via SQL injection + evalEPSS 1.2%CVE-2026-45579CRITICALDIRAC: RCE in RequestManager due to eval on untrusted inputEPSS 0.9%CVE-2024-24825CRITICALTokenManager not checking permissions on cached tokens in DIRACEPSS 0.5%CVE-2025-54066MEDIUMDiracX-Web login page has Open Redirect vulnerabilityEPSS 0.4%CVE-2026-61668HIGHDIRAC: Pilot code downloaded over unverified HTTPS connectionEPSS 0.4%CVE-2024-29905HIGHDIRAC: Unauthorized users can read proxy contents during generationEPSS 0.3%