2.8

CVE-2024-22194: cyber-domain-ontology cdo-utility-local-uuid

CVSS: 2.8v3.1LowModified
AliasesGHSA-rgrf-6mf5-m882PYSEC-2024-5PYSEC-2024-6
Published 11-01-2024Last modified 03-06-2025
Open JSON

Vulnerability summary

CVE-2024-22194 is a low (CVSS 2.8) vulnerability in cyber-domain-ontology cdo-utility-local-uuid. EPSS estimates a 0.41% chance of exploitation in the next 30 days, higher than 33.7% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
21/100
0100
Low · default modelHow is this calculated?
CVSS score
2.8/10
010
Low · v3.1 (NVD)
EPSS score
0.41%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github

Timeline

  1. 11-01-2024
    PublishedVulnerability first disclosed.
  2. 03-06-2025
    Last modifiedVulnerability information updated.

Description

cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in `cdo-local-uuid` at version `0.4.0`, and in `case-utils` in unpatched versions (matching the pattern `0.x.0`) at and since `0.5.0`, before `0.15.0`. The vulnerability stems from a Python function, `cdo_local_uuid.local_uuid()`, and its original implementation `case_utils.local_uuid()`.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.41%

Chance of exploitation in the next 30 days

Percentile

34%

Versus all other CVEs

30-day change

0.00 pp

From 0.41% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.41%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • githubUnverified

    Cdo Utility Local Uuid

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Lfprojects2 products
PyPI2 products
  • case-utils≥ 0.5.0, < 0.5.1 | ≥ 0.6.0, < 0.6.1 | ≥ 0.7.0, < 0.7.1 | ≥ 0.8.0, < 0.8.1 | ≥ 0.9.0, < 0.9.1 | ≥ 0.10.0, < 0.10.1 | ≥ 0.11.0, < 0.11.1 | ≥ 0.12.0, < 0.12.1 | ≥ 0.13.0, < 0.13.1 | ≥ 0.14.0, < 0.14.1 | < 9e78f7cb1075728d0aafc918514f32a1392cd235 | < fdc32414eccfcbde6be0fd91b7f491cc0779b02d | All versions (No fix recorded)
  • cdo-local-uuid≥ 0.4.0, < 0.5.0 | < fdc32414eccfcbde6be0fd91b7f491cc0779b02d | < 9e78f7cb1075728d0aafc918514f32a1392cd235 | All versions (No fix recorded)
Cyber-domain-ontology1 product
  • cdo-utility-local-uuid= 0.4.0 | = 0.5.0 | = 0.6.0 | = 0.7.0 | = 0.8.0 | = 0.9.0 | = 0.10.0 | = 0.11.0 | = 0.12.0

3 vendors · 5 products

References

18 links
Show all 18 references