CVE-2024-39703: Threatquotient Threatq

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

In ThreatQuotient ThreatQ before 5.29.3, authenticated users are able to execute arbitrary commands by sending a crafted request to an API endpoint.

Affected products

• Threatquotient Threatq: before 5.29.3 (fixed in 5.29.3)

Published 2024-12-18. Last modified 2026-06-17.