Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ration of an upstream proxy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/twisted/twisted/security/advisories/GHSA-c2jg-hw38-jrqq - https://github.com/twisted/twisted/commit/592217e951363d60e9cd99c5bbfd23d4615043ac - https://github.com/twisted/twisted/releases/tag/twisted-22.4.0rc1 - https://lists.debian.org/debian-lts-announce/2022/05/msg00003.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLKHA6WREIVAMBQD7KKWYHPHGGNKMAG6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7U6KYDTOLPICAVSR34G2WRYLFBD2YW5K/ - https://www.orac
rg/archives/list/package-announce%40lists.fedoraproject.org/message/7U6KYDTOLPICAVSR34G2WRYLFBD2YW5K/ - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2022-24802 State: PUBLISHED Published: 2022-03-31T23:15:15.000Z Last Updated: 2025-04-23T18:42:21.021Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: RebeccaStevens Products: deepmerge-ts Problem Types: CWE-915 Description: deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. deepmerge-ts is vulnerable to Prototype Pollution via file deepmerge.ts, function defaultMergeRecords(). This issue has been patched in version 4.0.2. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/RebeccaStevens/deepmerge
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/RebeccaStevens/deepmerge-ts/security/advisories/GHSA-r9w3-g83q-m6hq - https://github.com/RebeccaStevens/deepmerge-ts/commit/b39f1a93d9e1c3541bd2fe159fd696a16dbe1c72 - https://github.com/RebeccaStevens/deepmerge-ts/commit/d637db7e4fb2bfb113cb4bc1c85a125936d7081b
CVE ID: CVE-2022-24803 State: PUBLISHED Published: 2022-03-31T23:30:14.000Z Last Updated: 2025-04-22T18:17:46.997Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: jirutka Products: asciidoctor-include-ext Problem Types: CWE-78 Description: Asciidoctor-include-ext is Asciidoctor’s standard include processor reimplemented as an extension. Versions prior to 0.4.0, when used to render user-supplied input in AsciiDoc markup, may allow an attacker to execute arbitrary system commands on the host operating system. This attack is possible even when `allow-uri-read` is disabled! The problem has been patched in the referenced commits. Additional Analyst Notes: - CVE
n `allow-uri-read` is disabled! The problem has been patched in the referenced commits. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jirutka/asciidoctor-include-ext/security/advisories/GHSA-v222-6mr4-qj29 - https://github.com/jirutka/asciidoctor-include-ext/commit/c7ea001a597c7033575342c51483dab7b87ae155 - https://github.com/jirutka/asciidoctor-include-ext/commit/cbaccf3de533cbca224bf61d0b74e4b84d41d8ee
CVE ID: CVE-2022-24804 State: PUBLISHED Published: 2022-04-11T19:16:17.000Z Last Updated: 2025-04-23T18:41:13.014Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: discourse Products: discourse Problem Types: CWE-200 Description: Discourse is an open source platform for community discussion. In stable versions prior to 2.8.3 and beta versions prior 2.9.0.beta4 erroneously expose groups. When a group with restricted visibility has been used to set the permissions of a category, the name of the group is leaked to any user that is able to see the category. To workaround the problem, a site administrator can remove groups with restricted visibility from any categ
he category. To workaround the problem, a site administrator can remove groups with restricted visibility from any category's permissions setting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-v4c9-6m9g-37ff - https://github.com/discourse/discourse/commit/0f7b9878ff3207ce20970f0517604793920bb3d2
CVE ID: CVE-2022-24805 State: PUBLISHED Published: 2024-04-16T19:37:40.051Z Last Updated: 2024-08-03T04:20:50.538Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: net-snmp Products: net-snmp Problem Types: CWE-120 Description: net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the `INDEX` of `NET-SNMP-VACM-MIB` can cause an out-of-bounds memory access. A user with read-only credentials can exploit the issue. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a
ould use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775 - https://bugzilla.redhat.com/show_bug.cgi?id=2103225 - https://bugzilla.redhat.com/show_bug.cgi?id=2105238 - https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FX75KKGMO5XMV6JMQZF6KOG3JPFN
ps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/ - https://security.gentoo.org/glsa/202210-29 - https://www.debian.org/security/2022/dsa-5209 - https://github.com/net-snmp/net-snmp/commit/67ebb43e9038b2dae6e74ae8838b36fcc10fc937
CVE ID: CVE-2022-24806 State: PUBLISHED Published: 2024-04-16T19:44:53.414Z Last Updated: 2024-08-03T04:20:50.548Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: net-snmp Products: net-snmp Problem Types: CWE-20 Description: net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can exploit an Improper Input Validation vulnerability when SETing malformed OIDs in master agent and subagent simultaneously. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex co
trong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775 - https://bugzilla.redhat.com/show_bug.cgi?id=2103225 - https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/ - https://security.gentoo.org/glsa/202210-29 - https://www
s.fedoraproject.org/message/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/ - https://security.gentoo.org/glsa/202210-29 - https://www.debian.org/security/2022/dsa-5209
CVE ID: CVE-2022-24807 State: PUBLISHED Published: 2024-04-16T19:49:00.448Z Last Updated: 2024-08-03T04:20:50.465Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: net-snmp Products: net-snmp Problem Types: CWE-120 Description: net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a malformed OID in a SET request to `SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable` can cause an out-of-bounds memory access. A user with read-write credentials can exploit the issue. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c shoul
Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775 - https://bugzilla.redhat.com/show_bug.cgi?id=2103225 - https://bugzilla.redhat.com/show_bug.cgi?id=2105239 - https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FX75KKGMO5XMV6JMQZF6
ml - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/ - https://security.gentoo.org/glsa/202210-29 - https://www.debian.org/security/2022/dsa-5209 - https://github.com/net-snmp/net-snmp/commit/67ebb43e9038b2dae6e74ae8838b36fcc10fc937
CVE ID: CVE-2022-24808 State: PUBLISHED Published: 2024-04-16T19:52:31.783Z Last Updated: 2024-08-03T04:20:50.466Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: net-snmp Products: net-snmp Problem Types: CWE-476 Description: net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malformed OID in a `SET` request to `NET-SNMP-AGENT-MIB::nsLogTable` to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community st
v3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775 - https://bugzilla.redhat.com/show_bug.cgi?id=2103225 - https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/ - https://security.gentoo.org/glsa/202210-29 - https://www.debian.or
oject.org/message/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/ - https://security.gentoo.org/glsa/202210-29 - https://www.debian.org/security/2022/dsa-5209 - https://bugzilla.redhat.com/show_bug.cgi?id=2105240 - https://github.com/net-snmp/net-snmp/commit/67ebb43e9038b2dae6e74ae8838b36fcc10fc937
CVE ID: CVE-2022-24809 State: PUBLISHED Published: 2024-04-16T19:56:07.108Z Last Updated: 2024-08-03T04:20:50.442Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: net-snmp Products: net-snmp Problem Types: CWE-476 Description: net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a `GET-NEXT` to the `nsVacmAccessTable` to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enha
s and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775 - https://bugzilla.redhat.com/show_bug.cgi?id=2103225 - https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/ - https://security.gentoo.org/glsa/202210-29 - https://www.debian.org/security/20
sage/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/ - https://security.gentoo.org/glsa/202210-29 - https://www.debian.org/security/2022/dsa-5209 - https://bugzilla.redhat.com/show_bug.cgi?id=2105242
CVE ID: CVE-2022-24810 State: PUBLISHED Published: 2024-04-16T19:59:41.084Z Last Updated: 2024-08-03T04:20:50.586Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: net-snmp Products: net-snmp Problem Types: CWE-476 Description: net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malformed OID in a SET to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the
oid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775 - https://bugzilla.redhat.com/show_bug.cgi?id=2103225 - https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/ - https://security.gentoo.org/glsa/202210-29 - https://www.debian.org/security/2022/dsa-5
5KKGMO5XMV6JMQZF6KOG3JPFNQBY7/ - https://security.gentoo.org/glsa/202210-29 - https://www.debian.org/security/2022/dsa-5209 - https://bugzilla.redhat.com/show_bug.cgi?id=2105241
CVE ID: CVE-2022-24811 State: PUBLISHED Published: 2022-04-05T18:35:11.000Z Last Updated: 2025-04-22T18:17:11.388Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Combodo Products: iTop Problem Types: CWE-79 Description: Combodi iTop is a web based IT Service Management tool. Prior to versions 2.7.6 and 3.0.0, cross-site scripting is possible for scripts outside of script tags when displaying HTML attachments. This issue is fixed in versions 2.7.6 and 3.0.0. There are currently no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Combodo/iTop/security/advisories/GHSA-67x5-mqg4-rvgc
ontainer: - CISA ADP Vulnrichment: References: - https://github.com/Combodo/iTop/security/advisories/GHSA-67x5-mqg4-rvgc - https://github.com/Combodo/iTop/commit/92a9a8c65f3cbb2cd4414ca3a3b45a5754ba57b4 - https://huntr.dev/bounties/1625056478879-Combodo/iTop/
CVE ID: CVE-2022-24812 State: PUBLISHED Published: 2022-04-12T17:00:19.000Z Last Updated: 2025-04-23T18:40:31.097Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: grafana Products: grafana Problem Types: CWE-269 Description: Grafana is an open-source platform for monitoring and observability. When fine-grained access control is enabled and a client uses Grafana API Key to make requests, the permissions for that API Key are cached for 30 seconds for the given organization. Because of the way the cache ID is constructed, the consequent requests with any API Key evaluate to the same permissions as the previous requests. This can lead to an escalation of privileges,
ith any API Key evaluate to the same permissions as the previous requests. This can lead to an escalation of privileges, when for example a first request is made with Admin permissions, and the second request with different API Key is made with Viewer permissions, the second request will get the cached permissions from the previous Admin, essentially accessing higher privilege than it should. The vulnerability is only impacting Grafana Enterprise when the fine-grained access control beta feature is enabled and there are more than one API Keys in one organization with different roles assigned. All installations after Grafana Enterprise v8.1.0-beta1 should be upgraded as soon as possible. As a
ent roles assigned. All installations after Grafana Enterprise v8.1.0-beta1 should be upgraded as soon as possible. As an alternative, disable fine-grained access control will mitigate the vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/grafana/grafana/security/advisories/GHSA-82gq-xfg3-5j7v - https://grafana.com/blog/2022/04/12/grafana-enterprise-8.4.6-released-with-high-severity-security-fix/ - https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-4-6/ - https://security.netapp.com/advisory/ntap-20220519-0005/
CVE ID: CVE-2022-24813 State: PUBLISHED Published: 2022-04-04T17:40:11.000Z Last Updated: 2025-04-23T18:41:50.268Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: miraheze Products: CreateWiki Problem Types: CWE-288, CWE-287 Description: CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. Without the patch for this issue, anonymous comments can be made using Special:RequestWikiQueue when sent directly via POST. A patch for this issue is available in the `master` branch of CreateWiki's GitHub repository. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/miraheze/CreateWiki/se
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/miraheze/CreateWiki/security/advisories/GHSA-9xvw-w66v-prvg - https://github.com/miraheze/CreateWiki/commit/d0ae79843d689832ccac765d6b1721e668d99ab9 - https://phabricator.miraheze.org/T9018
CVE ID: CVE-2022-24814 State: PUBLISHED Published: 2022-04-04T17:50:11.000Z Last Updated: 2025-04-23T18:41:43.700Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: directus Products: directus Problem Types: CWE-79 Description: Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.7.0, unauthorized JavaScript (JS) can be executed by inserting an iframe into the rich text html interface that links to a file uploaded HTML file that loads another uploaded JS file in its script tag. This satisfies the regular content security policy header, which in turn allows the file to run any arbitrary JS. This issue was resolved in
egular content security policy header, which in turn allows the file to run any arbitrary JS. This issue was resolved in version 9.7.0. As a workaround, disable the live embed in the what-you-see-is-what-you-get by adding `{ "media_live_embeds": false }` to the _Options Overrides_ option of the Rich Text HTML interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/directus/directus/security/advisories/GHSA-xmjj-3c76-5w84 - https://github.com/directus/directus/pull/12020 - https://github.com/directus/directus/releases/tag/v9.7.0
CVE ID: CVE-2022-24815 State: PUBLISHED Published: 2022-04-11T19:25:13.000Z Last Updated: 2025-04-22T18:16:34.648Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: jhipster Products: generator-jhipster Problem Types: CWE-89 Description: JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice architectures. SQL Injection vulnerability in entities for applications generated with the option "reactive with Spring WebFlux" enabled and an SQL database using r2dbc. Applications created without "reactive with Spring WebFlux" and applications with NoSQL databases are not affected. Users who have generated a micros
"reactive with Spring WebFlux" and applications with NoSQL databases are not affected. Users who have generated a microservice Gateway using the affected version may be impacted as Gateways are reactive by default. Currently, SQL injection is possible in the findAllBy(Pageable pageable, Criteria criteria) method of an entity repository class generated in these applications as the where clause using Criteria for queries are not sanitized and user input is passed on as it is by the criteria. This issue has been patched in v7.8.1. Users unable to upgrade should be careful when combining criterias and conditions as the root of the issue lies in the `EntityManager.java` class when creating the wh
combining criterias and conditions as the root of the issue lies in the `EntityManager.java` class when creating the where clause via `Conditions.just(criteria.toString())`. `just` accepts the literal string provided. Criteria's `toString` method returns a plain string and this combination is vulnerable to sql injection as the string is not sanitized and will contain whatever used passed as input using any plain SQL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jhipster/generator-jhipster/security/advisories/GHSA-qjmq-8hjr-qcv6 - https://github.com/jhipster/generator-jhipster/issues/18269 - https://github.com/jhipster/generator
HSA-qjmq-8hjr-qcv6 - https://github.com/jhipster/generator-jhipster/issues/18269 - https://github.com/jhipster/generator-jhipster/commit/c220a210fd7742c53eea72bd5fadbb96220faa98
CVE ID: CVE-2022-24816 State: PUBLISHED Published: 2022-04-13T20:45:17.000Z Last Updated: 2025-10-21T23:15:42.188Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: geosolutions-it Products: jai-ext Problem Types: CWE-94 Description: JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects the downstream GeoServer project. Version 1.2.22 will contain a patch that disables the ability to inject malicious code into the result
eoServer project. Version 1.2.22 will contain a patch that disables the ability to inject malicious code into the resulting script. Users unable to upgrade may negate the ability to compile Jiffle scripts from the final application, by removing janino-x.y.z.jar from the classpath. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/geosolutions-it/jai-ext/security/advisories/GHSA-v92f-jx6p-73rx - https://github.com/geosolutions-it/jai-ext/commit/cb1d6565d38954676b0a366da4f965fef38da1cb
CVE ID: CVE-2022-24817 State: PUBLISHED Published: 2022-05-06T00:00:14.000Z Last Updated: 2025-04-23T18:29:46.822Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: fluxcd Products: flux2 Problem Types: CWE-94 Description: Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via malicious Kubeconfig. In multi-tenancy deployments this can also lead to privilege escalation if the controller's service account has elevated permissions. Workarounds include disabling functionality via Validati
n if the controller's service account has elevated permissions. Workarounds include disabling functionality via Validating Admission webhooks by restricting users from setting the `spec.kubeConfig` field in Flux `Kustomization` and `HelmRelease` objects. Additional mitigations include applying restrictive AppArmor and SELinux profiles on the controller’s pod to limit what binaries can be executed. This vulnerability is fixed in kustomize-controller v0.23.0 and helm-controller v0.19.0, both included in flux2 v0.29.0 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fluxcd/flux2/security/advisories/GHSA-vvmq-fwmg-2gjc