CVE-2024-42360

Publication date

2024-08-14 19:50:09

Family

GitHub_M

State

PUBLISHED

Description

SequenceServer lets you rapidly set up a BLAST+ server with an intuitive user interface for personal or group use. Several HTTP endpoints did not properly sanitize user input and/or query parameters. This could be exploited to inject and run unwanted shell commands. This vulnerability has been fixed in 3.1.2.