Cyclonedx Cdxgen vulnerabilities

1 known vulnerability affecting cyclonedx/cdxgen.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2024-50611HIGHCVSS 8.8≥ 0, < 11.1.72024-10-28

CVE-2024-50611 [HIGH] CWE-94 CycloneDX cdxgen may execute code contained within build-related files CycloneDX cdxgen may execute code contained within build-related files CycloneDX cdxgen prior to 11.1.7, when run against an untrusted codebase, may execute code contained within build-related files such as build.gradle.kts, a similar issue to CVE-2022-24441. cdxgen is used by, for example, OWASP dep-scan. NOTE: this has been characterized as a design limitation, rather than an implementation mis