CVE-2024-22194
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code
cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in `cdo-local-uuid` at version `0.4.0`, and in `case-utils` in unpatched versions (matching the pattern `0.x.0`) at and since `0.5.0`, before `0.15.0`. The vulnerability stems from a Python function, `cdo_local_uuid.local_uuid()`, and its original implementation `case_utils.local_uuid()`.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
CDO-Utility-Local-UUID
- Vendor
- Cyber-Domain-Ontology
- Product
- CDO-Utility-Local-UUID
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| = 0.4.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| = 0.5.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| = 0.6.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| = 0.7.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| = 0.8.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| = 0.9.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| = 0.10.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| = 0.11.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| = 0.12.0 | affected | Unavailable | Unavailable | Unavailable | None listed |