Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-25956 State: PUBLISHED Published: 2021-08-17T14:15:54.142113Z Last Updated: 2024-09-16T19:45:46.350Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Dolibarr Products: dolibarr Problem Types: CWE-284 Description: In “Dolibarr” application, v3.3.beta1_20121221 to v13.0.2 have “Modify” access for admin level users to change other user’s details but fails to validate already existing “Login” name, while renaming the user “Login”. This leads to complete account takeover of the victim user. This happens since the password gets overwritten for the victim user having a similar login name. Additional Analyst Notes: - CVE Program Container: Reference
verwritten for the victim user having a similar login name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/c4cba43bade736ab89e31013a6ccee59a6e077ee - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25956
CVE ID: CVE-2021-25957 State: PUBLISHED Published: 2021-08-17T14:13:30.226153Z Last Updated: 2024-09-17T01:51:51.602Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dolibarr Products: dolibarr Problem Types: CWE-640 Description: In “Dolibarr” application, v2.8.1 to v13.0.2 are vulnerable to account takeover via password reset functionality. A low privileged attacker can reset the password of any user in the application using the password reset link the user received through email when requested for a forgotten password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/87f9530272925f0d651f59337a35661f
tes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/87f9530272925f0d651f59337a35661faeb6f377 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25957
CVE ID: CVE-2021-25958 State: PUBLISHED Published: 2021-08-30T14:07:00.257077Z Last Updated: 2024-09-16T18:02:54.998Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: apache Products: ofbiz-framework Problem Types: CWE-209 Description: In Apache Ofbiz, versions v17.12.01 to v17.12.07 implement a try catch exception to handle errors at multiple locations but leaks out sensitive table info which may aid the attacker for further recon. A user can register with a very long password, but when he tries to login with it an exception occurs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apache/ofbiz-framework/commit/2f5b8d33e32c4
nal Analyst Notes: - CVE Program Container: References: - https://github.com/apache/ofbiz-framework/commit/2f5b8d33e32c4d9a48243cf9e503236acd5aec5c - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25958
CVE ID: CVE-2021-25959 State: PUBLISHED Published: 2021-09-29T13:50:15.394433Z Last Updated: 2024-09-16T19:24:15.717Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: org.opencrx Products: opencrx-core-config Problem Types: CWE-79 Description: In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance. Additional Analyst Notes: - CVE Program Container: References: - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25959 - https://github.com/opencrx/o
: References: - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25959 - https://github.com/opencrx/opencrx/commit/14e75f95e5f56fbe7ee897bdf5d858788072e818
CVE ID: CVE-2021-25960 State: PUBLISHED Published: 2021-09-29T13:55:15.155975Z Last Updated: 2024-09-16T17:48:21.846Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: salesagility Products: SuiteCRM Problem Types: CWE-1236 Description: In “SuiteCRM” application, v7.11.18 through v7.11.19 and v7.10.29 through v7.10.31 are affected by “CSV Injection” vulnerability (Formula Injection). A low privileged attacker can use accounts module to inject payloads in the input fields. When an administrator access accounts module to export the data as a CSV file and opens it, the payload gets executed. This was not fixed properly as part of CVE-2020-15301, allowing the attacker
le and opens it, the payload gets executed. This was not fixed properly as part of CVE-2020-15301, allowing the attacker to bypass the security measure. Additional Analyst Notes: - CVE Program Container: References: - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25960 - https://github.com/salesagility/SuiteCRM/commit/7124482fe07ee164923d974456ed31e45f65e513 - https://github.com/salesagility/SuiteCRM/commit/f463031bee59676d7d5be53bb32d551cd70a5648
CVE ID: CVE-2021-25961 State: PUBLISHED Published: 2021-09-29T13:50:10.158439Z Last Updated: 2024-09-17T02:07:00.169Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: salesagility Products: SuiteCRM Problem Types: CWE-640 Description: In “SuiteCRM” application, v7.1.7 through v7.10.31 and v7.11-beta through v7.11.20 fail to properly invalidate password reset links that is associated with a deleted user id, which makes it possible for account takeover of any newly created user with the same user id. Additional Analyst Notes: - CVE Program Container: References: - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25961 - https://github.com/salesag
er: References: - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25961 - https://github.com/salesagility/SuiteCRM/commit/7124482fe07ee164923d974456ed31e45f65e513 - https://github.com/salesagility/SuiteCRM/commit/f463031bee59676d7d5be53bb32d551cd70a5648
CVE ID: CVE-2021-25962 State: PUBLISHED Published: 2021-09-29T13:55:10.208119Z Last Updated: 2024-09-17T02:11:12.333Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: shuup Products: shuup Problem Types: CWE-1236 Description: “Shuup” application in versions 0.4.2 to 2.10.8 is affected by the “Formula Injection” vulnerability. A customer can inject payloads in the name input field in the billing address while buying a product. When a store administrator accesses the reports page to export the data as an Excel file and opens it, the payload gets executed. Additional Analyst Notes: - CVE Program Container: References: - https://www.whitesourcesoftware.com/vulnerabil
xecuted. Additional Analyst Notes: - CVE Program Container: References: - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25962 - https://github.com/shuup/shuup/commit/0a2db392e8518410c282412561461cd8797eea51
CVE ID: CVE-2021-25963 State: PUBLISHED Published: 2021-09-30T07:50:11.121Z Last Updated: 2025-04-30T16:26:18.839Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: shuup Products: shuup Problem Types: CWE-79 Description: In Shuup, versions 1.6.0 through 2.10.8 are vulnerable to reflected Cross-Site Scripting (XSS) that allows execution of arbitrary javascript code on a victim browser. This vulnerability exists due to the error page contents not escaped. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25963 - https://github.com/shuup/shuup/commit/75714
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25963 - https://github.com/shuup/shuup/commit/75714c37e32796eb7cbb0d977af5bcaa26573588
CVE ID: CVE-2021-25964 State: PUBLISHED Published: 2021-10-04T14:55:10.213Z Last Updated: 2025-04-30T16:24:59.772Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: OzzieIsaacs Products: calibreweb Problem Types: CWE-79 Description: In “Calibre-web” application, v0.6.0 to v0.6.12, are vulnerable to Stored XSS in “Metadata”. An attacker that has access to edit the metadata information, can inject JavaScript payload in the description field. When a victim tries to open the file, XSS will be triggered. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25964
tainer: - CISA ADP Vulnrichment: References: - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25964 - https://github.com/janeczku/calibre-web/commit/32e27712f0f71fdec646add20cd78b4ce75acfce
CVE ID: CVE-2021-25965 State: PUBLISHED Published: 2021-11-16T09:15:11.000Z Last Updated: 2025-04-30T15:46:00.249Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: calibreweb Products: calibreweb Problem Types: CWE-352 Description: In Calibre-web, versions 0.6.0 to 0.6.13 are vulnerable to Cross-Site Request Forgery (CSRF). By luring an authenticated user to click on a link, an attacker can create a new user role with admin privileges and attacker-controlled credentials, allowing them to take over the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/janeczku/calibre-web/commit/50919d472120
VE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/janeczku/calibre-web/commit/50919d47212066c75f03ee7a5332ecf2d584b98e - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25965
CVE ID: CVE-2021-25966 State: PUBLISHED Published: 2021-10-10T09:45:11.697Z Last Updated: 2025-04-30T16:24:51.258Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: OrchardCore Products: Users Problem Types: CWE-613 Description: In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.whitesourceso
ged. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25966 - https://github.com/OrchardCMS/OrchardCore/blob/v1.0.0/src/OrchardCore.Modules/OrchardCore.Users/Controllers/ResetPasswordController.cs#L123
CVE ID: CVE-2021-25967 State: PUBLISHED Published: 2021-12-01T13:40:09.000Z Last Updated: 2025-04-30T15:44:12.543Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: ckan Products: ckan Problem Types: CWE-79 Description: In CKAN, versions 2.9.0 to 2.9.3 are affected by a stored XSS vulnerability via SVG file upload of users’ profile picture. This allows low privileged application users to store malicious scripts in their profile picture. These scripts are executed in a victim’s browser when they open the malicious profile picture Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.whitesourcesoftware.com/vulnera
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25967
CVE ID: CVE-2021-25968 State: PUBLISHED Published: 2021-10-19T08:15:12.000Z Last Updated: 2025-04-30T16:00:50.132Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: org.opencms Products: opencms-core Problem Types: CWE-79 Description: In “OpenCMS”, versions 10.5.0 to 11.0.2 are affected by a stored XSS vulnerability that allows low privileged application users to store malicious scripts in the Sitemap functionality. These scripts are executed in a victim’s browser when they open the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.whitesourcesoftware.com/vulnerability-da
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25968 - https://github.com/alkacon/mercury-template/commit/800945f5d02346c633c7aef9f5d596d7dedc8fb5
CVE ID: CVE-2021-25969 State: PUBLISHED Published: 2021-10-20T11:55:14.000Z Last Updated: 2025-04-30T15:57:20.923Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: camaleon_cms Products: camaleon_cms Problem Types: CWE-79 Description: In Camaleon CMS application, versions 0.0.1 to 2.6.0 are vulnerable to stored XSS, that allows an unauthenticated attacker to store malicious scripts in the comments section of the post. These scripts are executed in a victim’s browser when they open the page containing the malicious comment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/owen2345/camaleon-cms/commit/
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/owen2345/camaleon-cms/commit/05506e9087bb05282c0bae6ccfe0283d0332ab3c - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25969
CVE ID: CVE-2021-25970 State: PUBLISHED Published: 2021-10-20T11:55:16.000Z Last Updated: 2025-04-30T15:53:18.740Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: camaleon_cms Products: camaleon_cms Problem Types: CWE-613 Description: Camaleon CMS 0.1.7 to 2.6.0 doesn’t terminate the active session of the users, even after the admin changes the user’s password. A user that was already logged in, will still have access to the application even after the password was changed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/owen2345/camaleon-cms/commit/77e31bc6cdde7c951fba104aebcd5ebb3f02b030 - https://w
ment: References: - https://github.com/owen2345/camaleon-cms/commit/77e31bc6cdde7c951fba104aebcd5ebb3f02b030 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25970
CVE ID: CVE-2021-25971 State: PUBLISHED Published: 2021-10-20T11:55:17.000Z Last Updated: 2025-04-30T15:53:12.191Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: camaleon_cms Products: camaleon_cms Problem Types: CWE-248 Description: In Camaleon CMS, versions 2.0.1 to 2.6.0 are vulnerable to an Uncaught Exception. The app's media upload feature crashes permanently when an attacker with a low privileged access uploads a specially crafted .svg file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/owen2345/camaleon-cms/commit/ab89584ab32b98a0af3d711e3f508a1d048147d2 - https://www.whitesourcesoftware.c
s://github.com/owen2345/camaleon-cms/commit/ab89584ab32b98a0af3d711e3f508a1d048147d2 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25971
CVE ID: CVE-2021-25972 State: PUBLISHED Published: 2021-10-20T11:55:19.000Z Last Updated: 2025-04-30T15:53:05.783Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: camaleon_cms Products: camaleon_cms Problem Types: CWE-918 Description: In Camaleon CMS, versions 2.1.2.0 to 2.6.0, are vulnerable to Server-Side Request Forgery (SSRF) in the media upload feature, which allows admin users to fetch media files from external URLs but fails to validate URLs referencing to localhost or other internal servers. This allows attackers to read files stored in the internal server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
d in the internal server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/owen2345/camaleon-cms/commit/5a252d537411fdd0127714d66c1d76069dc7e190 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25972
CVE ID: CVE-2021-25973 State: PUBLISHED Published: 2021-11-02T06:55:09.000Z Last Updated: 2025-04-30T15:52:50.959Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: publify_core Products: publify_core Problem Types: CWE-285 Description: In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happens due to front-end restriction only. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/publify/publify/commit/3447e0241e921b65f6eb1090453d8ea73e98387e - https://www.whitesourcesoftware.com/vulnerability-database/C
y/publify/commit/3447e0241e921b65f6eb1090453d8ea73e98387e - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25973
CVE ID: CVE-2021-25974 State: PUBLISHED Published: 2021-11-10T11:10:12.000Z Last Updated: 2025-04-30T15:52:28.933Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: publify_core Products: publify_core Problem Types: CWE-79 Description: In Publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS. A user with a “publisher” role is able to inject and execute arbitrary JavaScript code while creating a page/article. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/publify/publify/commit/fefd5f76302adcc425b2b6e7e7d23587cfc0083e - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25974
CVE ID: CVE-2021-25975 State: PUBLISHED Published: 2021-11-10T11:10:13.000Z Last Updated: 2025-04-30T15:52:22.378Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: publify_core Products: publify_core Problem Types: CWE-79 Description: In publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS as a result of an unrestricted file upload. This issue allows a user with “publisher” role to inject malicious JavaScript via the uploaded html file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25974 - https://github.com/publify/publify/commit/d99c0870d
/www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25974 - https://github.com/publify/publify/commit/d99c0870d3dbbfde7febdc6cad33199b84770101
CVE ID: CVE-2021-25976 State: PUBLISHED Published: 2021-11-16T09:05:12.000Z Last Updated: 2025-04-30T15:46:50.534Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: PiranhaCMS Products: Piranha Problem Types: CWE-352 Description: In PiranhaCMS, versions 4.0.0-alpha1 to 9.2.0 are vulnerable to cross-site request forgery (CSRF) when performing various actions supported by the management system, such as deleting a user, deleting a role, editing a post, deleting a media folder etc., when an ID is known. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PiranhaCMS/piranha.core/commit/e42abacdd0dd880ce9cf6607e
iner: - CISA ADP Vulnrichment: References: - https://github.com/PiranhaCMS/piranha.core/commit/e42abacdd0dd880ce9cf6607efcc24646ac82eda - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25976
CVE ID: CVE-2021-25977 State: PUBLISHED Published: 2021-10-25T13:10:10.000Z Last Updated: 2025-04-30T15:52:58.659Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: PiranhaCMS Products: Piranha Problem Types: CWE-79 Description: In PiranhaCMS, versions 7.0.0 to 9.1.1 are vulnerable to stored XSS due to the page title improperly sanitized. By creating a page with a specially crafted page title, a low privileged user can trigger arbitrary JavaScript execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PiranhaCMS/piranha.core/commit/543bc53c7dbd28c793ec960b57fb0e716c6b18d7 - https://www.whitesourc
s: - https://github.com/PiranhaCMS/piranha.core/commit/543bc53c7dbd28c793ec960b57fb0e716c6b18d7 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25977
CVE ID: CVE-2021-25978 State: PUBLISHED Published: 2021-11-07T17:15:10.000Z Last Updated: 2025-04-30T15:52:43.284Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Apostrophe Products: Apostrophe Problem Types: CWE-79 Description: Apostrophe CMS versions between 2.63.0 to 3.3.1 are vulnerable to Stored XSS where an editor uploads an SVG file that contains malicious JavaScript onto the Images module, which triggers XSS once viewed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apostrophecms/apostrophe/commit/c8b94ee9c79468f1ce28e31966cb0e0839165e59
CVE ID: CVE-2021-25979 State: PUBLISHED Published: 2021-11-08T14:20:11.000Z Last Updated: 2025-04-30T15:52:36.538Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Apostrophe Products: Apostrophe Problem Types: CWE-613 Description: Apostrophe CMS versions prior to 3.3.1 did not invalidate existing login sessions when disabling a user account or changing the password, creating a situation in which a device compromised by a third party could not be locked out by those means. As a mitigation for older releases the user account in question can be archived (3.x) or moved to the trash (2.x and earlier) which does disable the existing session. Additional Analyst N
be archived (3.x) or moved to the trash (2.x and earlier) which does disable the existing session. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apostrophecms/apostrophe/commit/c211b211f9f4303a77a307cf41aac9b4ef8d2c7c
CVE ID: CVE-2021-25980 State: PUBLISHED Published: 2021-11-11T07:10:11.000Z Last Updated: 2025-04-30T15:46:56.474Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: debiki Products: talkyard Problem Types: CWE-74 Description: In Talkyard, versions v0.04.01 through v0.6.74-WIP-63220cb, v0.2020.22-WIP-b2e97fe0e through v0.2021.02-WIP-879ef3fe1 and tyse-v0.2021.02-879ef3fe1-regular through tyse-v0.2021.28-af66b6905-regular, are vulnerable to Host Header Injection. By luring a victim application-user to click on a link, an unauthenticated attacker can use the “forgot password” functionality to reset the victim’s password and successfully take over their account. Add
can use the “forgot password” functionality to reset the victim’s password and successfully take over their account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/debiki/talkyard/commit/4067e191a909ed06f250d09a40e43aa5edbb0289 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25980
CVE ID: CVE-2021-25981 State: PUBLISHED Published: 2022-01-03T06:35:10 Last Updated: 2024-08-03T20:19:19.390Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: debiki Products: talkyard Problem Types: CWE-613 Description: In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerable to Insufficient Session Expiration. This may allow an attacker to reuse the admin’s still-valid session token even when logged-out, to gain admin privileges, given the attacker is able to obtain that token (via other, hypothetical attacks) Additional Analyst Notes: - CVE Program Container: References: - https://github.c
oken (via other, hypothetical attacks) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/debiki/talkyard/commit/b0310df019887f3464895529c773bc7d85ddcf34 - https://github.com/debiki/talkyard/commit/b0712915d8a22a20b09a129924e8a29c25ae5761 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25981