CVE-2024-47531

Scout is a web-based visualizer for VCF-files. Due to the lack of sanitization in the filename, it is possible bypass intended file extension and make users download malicious files with any extension. With malicious content injected inside the file data and users unknowingly downloading it and opening may lead to the compromise of users' devices or data. This vulnerability is fixed in 4.89.

• CWE-116

• https://github.com/Clinical-Genomics/scout/commit/f59e50f8ea596e641da8a0e9c7a33c0696bcbea5Patch
• https://github.com/Clinical-Genomics/scout/security/advisories/GHSA-24xv-q29v-3h6rExploit, Third Party Advisory

Published

Sep 30, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-47526LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…2.4
• CVE-2024-47527LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…5.4
• CVE-2024-47528LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…4.8
• CVE-2024-47529OpenC3 COSMOS provides the functionality needed to send comm…6.5
• CVE-2024-4753The WP Secure Maintenance WordPress plugin before 1.7 does n…4.8
• CVE-2024-47530Scout is a web-based visualizer for VCF-files. Open redirect…6.1
• CVE-2024-47532RestrictedPython is a restricted execution environment for P…6.5
• CVE-2024-47533Cobbler, a Linux installation server that allows for rapid s…9.8
• CVE-2024-47534go-tuf is a Go implementation of The Update Framework (TUF).…8.2
• CVE-2024-47535Netty is an asynchronous event-driven network application fr…5.5
• CVE-2024-47536Citizen is a MediaWiki skin that makes extensions part of th…5.4
• CVE-2024-47537GStreamer is a library for constructing graphs of media-hand…9.8