VULNERABILITY INTELLIGENCE

CVE-2024-24914

CVSS score8 HIGH

EPSS probability0.41%

CISA KEVNot currently listed

Published2024-11-07

Last modified2026-06-17

Description

Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.