CVE-2024-44795General(gazelle_project / gazelle)

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A cross-site scripting (XSS) vulnerability in the component /login/disabled.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter.

gazelle_project CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/WhatCD/Gazelle/issues/129

Other references

https://github.com/WhatCD/Gazelle

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

gazelle

Threat summary

1 mentions across 1 observed day

What's happening

General: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

gazelle_project

Products

gazelle

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets1 URL

By indicator

https://securityarsenal.com/blog/how-to-protect-against-critical-n8n-workflow-automation-flaws-cve-2024-44795-and-cve-2024-44796

Full discourse1 post

Security Arsenal, LLC@SecurityAr58409177d
General
🔒 #CyberSecurity How to Protect Against Critical n8n Workflow Automation Flaws (CVE-2024-44795 &… "Recent research has uncovered two critical vulnerabilities in n8n, a popular…" 🔗 https://securityarsenal.com/blog/how-to-protect-against-critical-n8n-workflow-automation-flaws-cve-2024-44795-and-cve-2024-44796 #CyberSecurity #ThreatIntel #alertfatigue #triage #alertmonitor
Post summary
The tweet notes the discovery of two critical n8n workflow automation flaws (CVE‑2024‑44795 & 44796) and points to a blog on protection, but offers no technical, exploit, or patch specifics.
1000035
10 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	gazelle_project	gazelle	-	-	-

Explore more

Back to dashboard gazelle_project CVEs gazelle vulnerabilities