CVE-2024-42351

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. An attacker can potentially replace the contents of public datasets resulting in data loss or tampering. All supported branches of Galaxy (and more back to release_21.05) were amended with the below patch. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-200

• https://depot.galaxyproject.org/patch/GX-2024-0001/022da344a02bafd604402ac8e253e0014f6e2e08.patchPatch
• https://depot.galaxyproject.org/patch/GX-2024-0001/15060a6cb222f2fcfc687d0f0260f1eb1b9c757b.patchPatch
• https://depot.galaxyproject.org/patch/GX-2024-0001/235f1d8b400708556732b9dda788c919ebf3bb80.patchPatch
• https://github.com/galaxyproject/galaxy/security/advisories/GHSA-5639-cmph-9j4vPatch, Vendor Advisory

Published

Sep 20, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-42346Galaxy is a free, open-source system for analyzing data, aut…5.4
• CVE-2024-42347matrix-react-sdk is a react-based SDK for inserting a Matri…6.5
• CVE-2024-42348FOG is a cloning/imaging/rescue suite/inventory management s…8.6
• CVE-2024-42349FOG is a cloning/imaging/rescue suite/inventory management s…5.3
• CVE-2024-4235A vulnerability classified as problematic was found in Netge…4.9
• CVE-2024-42350Biscuit is an authorization token with decentralized verific…3
• CVE-2024-42352Nuxt is a free and open-source framework to create full-stac…7.5
• CVE-2024-42353WebOb provides objects for HTTP requests and responses. When…6.1
• CVE-2024-42354Shopware is an open commerce platform. The store-API works w…5.9
• CVE-2024-42355Shopware, an open ecommerce platform, has a new Twig Tag `sw…9.8
• CVE-2024-42356Shopware is an open commerce platform. Prior to versions 6.6…7.2
• CVE-2024-42357Shopware is an open commerce platform. Prior to versions 6.6…9.8