CVE-2024-24562
vantage6-UI is the official user interface for the vantage6 server. In affected versions a number of security headers ar
vantage6-UI is the official user interface for the vantage6 server. In affected versions a number of security headers are not set. This issue has been addressed in commit 68dfa6614 which is expected to be included in future releases.
Users are advised to upgrade when a new release is made. While an upgrade path is not available users may modify the docker image build to insert the headers into nginx.
MEDIUM · CVSS 5.4
EPSS 0.00122
Monitor
- No active-exploitation, high-EPSS, or public-exploit signals - routine patching cadence
Sigma rules0
YARA rules0