Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-9z36-xrsm-tyh1
Vulnerability ID VCID-9z36-xrsm-tyh1
Aliases CVE-2024-35180
GHSA-vr85-5pwx-c6gq
Summary OMERO.web must check that the JSONP callback is a valid function OMERO.web before 5.25.0
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-830 Inclusion of Web Functionality from an Untrusted Source
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00422 https://api.first.org/data/v1/epss?cve=CVE-2024-35180
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-vr85-5pwx-c6gq
cvssv3.1 6.1 https://github.com/ome/omero-web
generic_textual MODERATE https://github.com/ome/omero-web
cvssv3.1 6.1 https://github.com/ome/omero-web/commit/d41207cbb82afc56ea79e84db532608aa24ab4aa
generic_textual MODERATE https://github.com/ome/omero-web/commit/d41207cbb82afc56ea79e84db532608aa24ab4aa
ssvc Track https://github.com/ome/omero-web/commit/d41207cbb82afc56ea79e84db532608aa24ab4aa
cvssv3.1 6.1 https://github.com/ome/omero-web/security/advisories/GHSA-vr85-5pwx-c6gq
cvssv3.1_qr MODERATE https://github.com/ome/omero-web/security/advisories/GHSA-vr85-5pwx-c6gq
generic_textual MODERATE https://github.com/ome/omero-web/security/advisories/GHSA-vr85-5pwx-c6gq
ssvc Track https://github.com/ome/omero-web/security/advisories/GHSA-vr85-5pwx-c6gq
cvssv3.1 6.1 https://nvd.nist.gov/vuln/detail/CVE-2024-35180
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2024-35180
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2024-35180
https://github.com/ome/omero-web
https://github.com/ome/omero-web/commit/d41207cbb82afc56ea79e84db532608aa24ab4aa
CVE-2024-35180 https://nvd.nist.gov/vuln/detail/CVE-2024-35180
GHSA-vr85-5pwx-c6gq https://github.com/advisories/GHSA-vr85-5pwx-c6gq
GHSA-vr85-5pwx-c6gq https://github.com/ome/omero-web/security/advisories/GHSA-vr85-5pwx-c6gq
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/ome/omero-web
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/ome/omero-web/commit/d41207cbb82afc56ea79e84db532608aa24ab4aa
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T15:13:29Z/ Found at https://github.com/ome/omero-web/commit/d41207cbb82afc56ea79e84db532608aa24ab4aa
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/ome/omero-web/security/advisories/GHSA-vr85-5pwx-c6gq
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T15:13:29Z/ Found at https://github.com/ome/omero-web/security/advisories/GHSA-vr85-5pwx-c6gq
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2024-35180
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.6244
EPSS Score 0.00422
Published At June 5, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T16:21:44.695535+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/omero-web/CVE-2024-35180.yml 38.6.0