Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-20850 State: PUBLISHED Published: 2020-06-19T13:34:58 Last Updated: 2024-08-05T02:53:09.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Mobile Apps before 1.26.0. A view cache can persist on a device after a logout. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20851 State: PUBLISHED Published: 2020-06-19T14:02:54 Last Updated: 2024-08-05T02:53:09.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Mobile Apps before 1.26.0. An attacker can use directory traversal with the Video Preview feature to overwrite arbitrary files on a device. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20852 State: PUBLISHED Published: 2020-06-19T14:04:14 Last Updated: 2024-08-05T02:53:09.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Mobile Apps before 1.26.0. Local logging is not blocked for sensitive information (e.g., server addresses or message content). Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20853 State: PUBLISHED Published: 2020-06-19T14:04:55 Last Updated: 2024-08-05T02:53:09.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Packages before 5.16.3. A Droplet could allow Internet access to a service that has a remote code execution problem. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20854 State: PUBLISHED Published: 2020-06-19T14:05:45 Last Updated: 2024-08-05T02:53:09.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.17.0. It allows remote attackers to cause a denial of service (client-side application crash) via a LaTeX message. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20855 State: PUBLISHED Published: 2020-06-19T14:06:36 Last Updated: 2024-08-05T02:53:09.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.16.1, 5.15.2, 5.14.5, and 5.9.6. It allows attackers to obtain sensitive information (local files) during legacy attachment migration. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20856 State: PUBLISHED Published: 2020-06-19T14:07:21 Last Updated: 2024-08-05T02:53:09.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS. It allows dylib injection. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20857 State: PUBLISHED Published: 2020-06-19T14:10:50 Last Updated: 2024-08-05T02:53:09.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.16.0. It allows attackers to cause a denial of service (markdown renderer hang) via many backtick characters. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20858 State: PUBLISHED Published: 2020-06-19T14:11:43 Last Updated: 2024-08-05T02:53:09.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.15.0. It allows attackers to cause a denial of service (CPU consumption) via crafted characters in a SQL LIKE clause to an APIv4 endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20859 State: PUBLISHED Published: 2020-06-19T14:13:02 Last Updated: 2024-08-05T02:53:09.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.15.0. Login access control can be bypassed via crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20860 State: PUBLISHED Published: 2020-06-19T14:14:57 Last Updated: 2024-08-05T02:53:09.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.14.0, 5.13.3, 5.12.6, and 5.9.4. It allows remote attackers to cause a denial of service (application hang) via a crafted SVG document. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20861 State: PUBLISHED Published: 2020-06-19T14:16:54 Last Updated: 2024-08-05T02:53:09.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Desktop App before 4.2.2. It allows attackers to execute arbitrary code via a crafted link. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20862 State: PUBLISHED Published: 2020-06-19T14:17:46 Last Updated: 2024-08-05T02:53:09.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.13.0. Non-members may fetch a team's slash commands. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20863 State: PUBLISHED Published: 2020-06-19T14:18:41 Last Updated: 2024-08-05T02:53:09.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.13.0. Incoming webhook creation is not properly restricted. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20864 State: PUBLISHED Published: 2020-06-19T14:19:22 Last Updated: 2024-08-05T02:53:09.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Plugins before 5.13.0. The GitHub plugin allows an attacker to attach his Mattermost account to a different person's GitHub account. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20865 State: PUBLISHED Published: 2020-06-19T15:12:28 Last Updated: 2024-08-05T02:53:09.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.12.0, 5.11.1, 5.10.2, 5.9.2, and 4.10.10. The login page allows CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20866 State: PUBLISHED Published: 2020-06-19T15:13:15 Last Updated: 2024-08-05T02:53:09.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.12.0. Use of a Proxy HTTP header, rather than the source address in an IP packet header, for obtaining IP address information was mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20867 State: PUBLISHED Published: 2020-06-19T15:18:25 Last Updated: 2024-08-05T02:53:09.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.11.0. An attacker can interfere with a channel's post loading via one crafted post. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20868 State: PUBLISHED Published: 2020-06-19T15:19:47 Last Updated: 2024-08-05T02:53:09.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20869 State: PUBLISHED Published: 2020-06-19T15:21:12 Last Updated: 2024-08-05T02:53:09.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.10.0, 5.9.1, 5.8.2, and 4.10.9. A non-member could change the Update/Patch Channel endpoint for a private channel. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20870 State: PUBLISHED Published: 2020-06-19T15:21:54 Last Updated: 2024-08-05T02:53:09.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.10.0. An attacker can bypass the intended appearance of the Edited flag after changing a post's file ID. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20871 State: PUBLISHED Published: 2020-06-19T15:22:39 Last Updated: 2024-08-05T02:53:09.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The Markdown library allows catastrophic backtracking. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20872 State: PUBLISHED Published: 2020-06-19T15:23:27 Last Updated: 2024-08-05T02:53:09.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. SSRF can attack local services. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20873 State: PUBLISHED Published: 2020-06-19T15:24:13 Last Updated: 2024-08-05T02:53:09.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during user activation/deactivation. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20874 State: PUBLISHED Published: 2020-06-19T15:42:50 Last Updated: 2024-08-05T02:53:09.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during a role change. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20875 State: PUBLISHED Published: 2020-06-19T16:22:05 Last Updated: 2024-08-05T02:53:09.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows a password reset to proceed while an e-mail address is being changed. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20876 State: PUBLISHED Published: 2020-06-19T16:22:57 Last Updated: 2024-08-05T02:53:09.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Users can deactivate themselves, bypassing a policy. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20877 State: PUBLISHED Published: 2020-06-19T16:28:20 Last Updated: 2024-08-05T02:53:09.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information about whether someone has 2FA enabled. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20878 State: PUBLISHED Published: 2020-06-19T16:29:00 Last Updated: 2024-08-05T02:53:09.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Changes, within the application, to e-mail addresses are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20879 State: PUBLISHED Published: 2020-06-19T16:29:00 Last Updated: 2024-08-05T02:53:09.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Changes to e-mail addresses do not require credential re-entry. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20880 State: PUBLISHED Published: 2020-06-19T16:29:00 Last Updated: 2024-08-05T02:53:09.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service (memory consumption) via OpenGraph. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20881 State: PUBLISHED Published: 2020-06-19T16:29:01 Last Updated: 2024-08-05T02:53:09.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20882 State: PUBLISHED Published: 2020-06-19T16:39:23 Last Updated: 2024-08-05T02:53:09.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.8.0. It does not honor the domain requirement when processing a join request for an open team. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20883 State: PUBLISHED Published: 2020-06-19T16:39:30 Last Updated: 2024-08-05T02:53:09.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.8.0, when Town Square is set to Read-Only. Users can pin or unpin a post. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20884 State: PUBLISHED Published: 2020-06-19T16:42:05 Last Updated: 2024-08-05T02:53:09.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.8.0. It allows attackers to partially attach a file to more than one post. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20885 State: PUBLISHED Published: 2020-06-19T16:39:33 Last Updated: 2024-08-05T02:53:09.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.8.0. It does not always generate a robots.txt file. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20886 State: PUBLISHED Published: 2020-06-19T16:45:44 Last Updated: 2024-08-05T02:53:09.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.8.0. The first user is sometimes inadvertently a system admin. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20887 State: PUBLISHED Published: 2020-06-19T16:39:39 Last Updated: 2024-08-05T02:53:09.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6. It does not honor flags API permissions when deciding whether a user can receive intra-team posts. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20888 State: PUBLISHED Published: 2020-06-19T16:46:39 Last Updated: 2024-08-05T02:53:09.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows attackers to cause a denial of service (memory consumption) via an outgoing webhook or a slash command integration. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20889 State: PUBLISHED Published: 2020-06-19T16:47:07 Last Updated: 2024-08-05T02:53:09.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It mishandles permissions for user-access token creation. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20890 State: PUBLISHED Published: 2020-06-19T16:44:59 Last Updated: 2024-08-05T02:53:09.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.7. It allows a bypass of e-mail address discovery restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20891 State: PUBLISHED Published: 2020-06-19T20:35:57 Last Updated: 2024-08-05T02:53:09.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: WooCommerce before 3.6.5, when it handles CSV imports of products, has a cross-site request forgery (CSRF) issue with resultant stored cross-site scripting (XSS) via includes/admin/importers/class-wc-product-csv-importer-controller.php. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2019/woocommerce-csrf-to-stored-xss/ - https://raw.githubusercontent.com/woocommerce/woocommerce/master/CHANGELOG.txt
CVE ID: CVE-2019-20892 State: PUBLISHED Published: 2020-06-25T09:07:42 Last Updated: 2024-08-05T02:53:09.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/1877027 - https://bugzilla.redhat.com/show_bug.cgi?id=1663027 - https://sourceforge.net/p/net-snmp/bugs/2923/ - https://github.com/net-snmp/net-snmp/c
hat.com/show_bug.cgi?id=1663027 - https://sourceforge.net/p/net-snmp/bugs/2923/ - https://github.com/net-snmp/net-snmp/commit/5f881d3bf24599b90d67a45cae7a3eb099cd71c9 - http://www.openwall.com/lists/oss-security/2020/06/25/4 - https://usn.ubuntu.com/4410-1/ - https://security.gentoo.org/glsa/202008-12 - https://www.oracle.com/security-alerts/cpujan2021.html
CVE ID: CVE-2019-20893 State: PUBLISHED Published: 2020-06-30T11:35:22 Last Updated: 2024-08-05T02:53:09.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Activision Infinity Ward Call of Duty Modern Warfare 2 through 2019-12-11. PartyHost_HandleJoinPartyRequest has a buffer overflow vulnerability and can be exploited by using a crafted joinParty packet. This can be utilized to conduct arbitrary code execution on a victim's machine. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BlastsMods/JoinPartyRCE
CVE ID: CVE-2019-20894 State: PUBLISHED Published: 2020-07-02T15:30:22 Last Updated: 2024-08-05T02:53:09.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where ERR_BAD_SSL_CLIENT_AUTH_CERT should have occurred. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/containous/traefik/issues/5312
CVE ID: CVE-2019-20896 State: PUBLISHED Published: 2020-07-07T18:11:35 Last Updated: 2024-08-05T02:53:09.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/webchess/bugs/81/
CVE ID: CVE-2019-20897 State: PUBLISHED Published: 2020-07-13T00:50:11.654573Z Last Updated: 2024-09-16T17:33:31.211Z Vendors: Atlassian Products: Jira Server Problem Types: Denial of Service Description: The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achieve Denial of Service via a crafted PNG file. The affected versions are before version 8.5.4, from version 8.6.0 before 8.6.2, and from version 8.7.0 before 8.7.1. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-70813
CVE ID: CVE-2019-20898 State: PUBLISHED Published: 2020-07-13T00:55:12.380453Z Last Updated: 2024-09-16T23:30:41.180Z Vendors: Atlassian Products: Jira Server Problem Types: Information Disclosure Description: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information without being authenticated in the Global permissions screen. The affected versions are before version 8.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-70942
CVE ID: CVE-2019-20899 State: PUBLISHED Published: 2020-07-13T01:00:16.851486Z Last Updated: 2024-09-17T00:41:28.244Z Vendors: Atlassian Products: Jira Server Problem Types: Denial of Service Description: The Gadget API in Atlassian Jira Server and Data Center in affected versions allows remote attackers to make Jira unresponsive via repeated requests to a certain endpoint in the Gadget API. The affected versions are before version 8.5.4, and from version 8.6.0 before 8.6.1. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-70808
CVE ID: CVE-2019-20900 State: PUBLISHED Published: 2020-07-13T01:05:13.826873Z Last Updated: 2024-09-17T02:26:43.463Z Vendors: Atlassian Products: Jira Server Problem Types: Cross-Site Scripting (XSS) Description: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the Add Field module. The affected versions are before version 8.7.0. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-70858
CVE ID: CVE-2019-20901 State: PUBLISHED Published: 2020-07-13T04:55:11.862868Z Last Updated: 2024-09-17T01:41:06.651Z Vendors: Atlassian Products: Jira Server Problem Types: Open Redirect Description: The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect in the os_destination parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-70408
CVE ID: CVE-2019-20902 State: PUBLISHED Published: 2020-10-01T01:30:19.193146Z Last Updated: 2024-09-17T01:31:07.490Z Vendors: Atlassian Products: Crowd Problem Types: Broken Access Control Description: Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/CWD-5409