Elektraweb vulnerabilities

2 known vulnerabilities in Elektraweb from Talya Informatics. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Elektraweb: Missing Authentication for Critical Functionality

  CVE-2024-0949Jun 27, 2024Talya Informatics

  Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68.

• 9.8 Critical severity

  Elektraweb: Reliance on Cookies without Validation and Integrity Checking

  CVE-2024-0947Jun 27, 2024Talya Informatics

  Reliance on Cookies without Validation and Integrity Checking vulnerability in Talya Informatics Elektraweb allows Session Credential Falsification through Manipulation, Accessing/Intercepting/Modifying HTTP Cookies, Manipulating Opaque Client-based Data Token