Ggalaxyproject

Products

Exploited and recent CVEs

• CVE-2024-42351 Medium 6.5 Possible Data Tampering & Loss of Public Datasets in Galaxy 0.5%
• CVE-2024-42346 High 7.6 Stored Cross Site Scripting (Stored XSS) in Galaxy 0.8%
• CVE-2023-42812 Medium 6.3 Galaxy vulnerable to Server Side Request Forgery during data imports 0.4%
• CVE-2023-27578 Critical 9.1 Galaxy vulnerable to unauthorized modification of pages/visualizations due to insufficient permission check 0.8%
• CVE-2022-23470 High 8.6 Arbitrary file access in the Galaxy data analysis platform 0.9%