Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-4530 State: PUBLISHED Published: 2025-05-11T05:00:06.212Z Last Updated: 2025-05-12T13:55:51.342Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: feng_ha_ha, megagao Products: ssm-erp, production_ssm Problem Types: CWE-22 Description: A vulnerability was found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. It has been declared as problematic. Affected by this vulnerability is the function handleFileDownload of the file FileController.java of the component File Handler. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product is distributed
ack can be launched remotely. The exploit has been disclosed to the public and may be used. This product is distributed under two entirely different names. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308275 - https://vuldb.com/?ctiid.308275 - https://vuldb.com/?submit.565380 - https://github.com/Hao-Ni/CVE/issues/2
CVE ID: CVE-2025-4531 State: PUBLISHED Published: 2025-05-11T05:31:06.887Z Last Updated: 2025-05-12T13:50:33.139Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Seeyon Products: Zhiyuan OA Web Application System Problem Types: CWE-94, CWE-74 Description: A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been rated as critical. Affected by this issue is the function postData of the file ROOT\WEB-INF\classes\com\ours\www\ehr\salary\service\data\EhrSalaryPayrollServiceImpl.class of the component Beetl Template Handler. The manipulation of the argument payrollId leads to code injection. The attack may be launched remotely. The exploit has been di
pulation of the argument payrollId leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308276 - https://vuldb.com/?ctiid.308276 - https://vuldb.com/?submit.566097 - https://wx.mail.qq.com/s?k=iGTE4n4wT2AEdHPxOR
CVE ID: CVE-2025-4532 State: PUBLISHED Published: 2025-05-11T06:00:10.356Z Last Updated: 2025-05-12T13:45:39.723Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Shanghai Bairui Information Technology Products: SunloginClient Problem Types: CWE-427, CWE-426 Description: A vulnerability classified as critical has been found in Shanghai Bairui Information Technology SunloginClient 15.8.3.19819. This affects an unknown part in the library process.dll of the file sunlogin_guard.exe. The manipulation leads to uncontrolled search path. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitability is told to be difficu
s required to approach this attack. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308277 - https://vuldb.com/?ctiid.308277 - https://vuldb.com/?submit.566141 - https://www.yuque.com/ba1ma0-an29k/nnxoap/ey9gzmpiqfltiici?singleDoc
CVE ID: CVE-2025-4533 State: PUBLISHED Published: 2025-05-11T06:31:04.456Z Last Updated: 2025-05-12T13:39:06.588Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:N/A:P) Vendors: n/a Products: JeecgBoot Problem Types: CWE-400, CWE-404 Description: A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability affects the function unzipFile of the file /jeecg-boot/airag/knowledge/doc/import/zip of the component Document Library Upload. The manipulation of the argument File leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308278 - https://vuldb.com/?ctiid.308278 - https://vuldb.com/?submit.566192 - https://github.com/jeecgboot/JeecgBoot/issues/8199 - https://github.com/jeecgboot/JeecgBoot/issues/8199#issuecomment-2834691016 - https://github.com/jeecgboot/JeecgBoot/issues/8199#issue-3022937633
CVE ID: CVE-2025-4534 State: PUBLISHED Published: 2025-05-11T07:31:08.535Z Last Updated: 2025-05-12T13:34:15.499Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SunGrow Products: Logger1000 Problem Types: CWE-521 Description: A vulnerability, which was classified as problematic, has been found in SunGrow Logger1000 01_A. This issue affects some unknown processing. The manipulation leads to weak password requirements. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did
e exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308279 - https://vuldb.com/?ctiid.308279 - https://vuldb.com/?submit.566423 - https://wiki.shikangsi.com/post/share/a1cc2e2c-1f78-4c29-86dc-181800e34415
CVE ID: CVE-2025-4535 State: PUBLISHED Published: 2025-05-11T08:00:11.905Z Last Updated: 2025-05-12T14:21:27.118Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Gosuncn Technology Group Products: Audio-Visual Integrated Management Platform Problem Types: CWE-200, CWE-284 Description: A vulnerability, which was classified as problematic, was found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 4.0. Affected is an unknown function of the file /config/config.properties of the component Configuration File Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclos
manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308280 - https://vuldb.com/?ctiid.308280 - https://vuldb.com/?submit.566424 - https://wiki.shikangsi.com/post/share/d9f6cb0a-a673-472c-812c-7ba9545bfba8
CVE ID: CVE-2025-4536 State: PUBLISHED Published: 2025-05-11T08:31:06.924Z Last Updated: 2025-05-12T14:20:49.763Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Gosuncn Technology Group Products: Audio-Visual Integrated Management Platform Problem Types: CWE-200, CWE-284 Description: A vulnerability has been found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmgr/user/listByPage. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
ormation disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308281 - https://vuldb.com/?ctiid.308281 - https://vuldb.com/?submit.566425 - https://wiki.shikangsi.com/post/share/ab0b0245-dc38-4b27-80e8-bc61de83692c
CVE ID: CVE-2025-4537 State: PUBLISHED Published: 2025-05-11T09:31:05.162Z Last Updated: 2025-05-12T14:17:03.949Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: yangzongzhuan Products: RuoYi-Vue Problem Types: CWE-315, CWE-312 Description: A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.8.9 and classified as problematic. Affected by this issue is some unknown functionality of the file ruoyi-ui/jsencrypt.js and ruoyi-ui/login.vue of the component Password Handler. The manipulation leads to cleartext storage of sensitive information in a cookie. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is know
n in a cookie. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308282 - https://vuldb.com/?ctiid.308282 - https://vuldb.com/?submit.566469 - https://magnificent-dill-351.notion.site/Password-Disclosure-in-RuoYi-Vue-3-8-9-1e3c693918ed80ee9799f270c8346cd4
CVE ID: CVE-2025-4538 State: PUBLISHED Published: 2025-05-11T10:31:04.715Z Last Updated: 2025-05-12T14:15:23.166Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: kkFileView Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in kkFileView 4.4.0. It has been classified as critical. This affects an unknown part of the file /fileUpload. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
cted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308283 - https://vuldb.com/?ctiid.308283 - https://vuldb.com/?submit.566596 - https://magnificent-dill-351.notion.site/Arbitrary-File-Upload-in-kkFileView-4-4-0-1e3c693918ed802581faccab9140a130
CVE ID: CVE-2025-4539 State: PUBLISHED Published: 2025-05-11T11:00:10.385Z Last Updated: 2025-05-12T14:12:27.470Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Hainan Products: ToDesk Problem Types: CWE-427, CWE-426 Description: A vulnerability was found in Hainan ToDesk 4.7.6.3. It has been declared as critical. This vulnerability affects unknown code in the library profapi.dll of the component DLL File Parser. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be use
ck is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308284 - https://vuldb.com/?ctiid.308284 - https://vuldb.com/?submit.566698 - https://www.yuque.com/ba1ma0-an29k/nnxoap/dgxzuhd90e19grpg?singleDoc
CVE ID: CVE-2025-4540 State: PUBLISHED Published: 2025-05-11T15:31:04.118Z Last Updated: 2025-05-23T17:31:29.744Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: MTSoftware Products: C-Lodop Problem Types: CWE-428, CWE-426 Description: A vulnerability was found in MTSoftware C-Lodop 6.6.1.1 on Windows. It has been rated as critical. This issue affects some unknown processing of the component CLodopPrintService. The manipulation leads to unquoted search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to ve
The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 6.6.13 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308285 - https://vuldb.com/?ctiid.308285 - https://vuldb.com/?submit.566789 - https://0nightsedge0.github.io/2025/05/14/CVE-2025-4540-C-Lodop/
CVE ID: CVE-2025-4541 State: PUBLISHED Published: 2025-05-11T16:00:05.812Z Last Updated: 2025-05-12T12:38:28.908Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: LmxCMS Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in LmxCMS 1.41. Affected is the function manageZt of the file c\admin\ZtAction.class.php of the component POST Request Handler. The manipulation of the argument sortid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Not
may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308286 - https://vuldb.com/?ctiid.308286 - https://vuldb.com/?submit.567191 - https://github.com/xiaoyangsec/LmxCMS-SQL-Injection/blob/main/LmxCMS-SQL-Injection.md
CVE ID: CVE-2025-4542 State: PUBLISHED Published: 2025-05-11T17:31:03.798Z Last Updated: 2025-05-12T12:37:49.407Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Freeebird Products: Hotel 酒店管理系统 API Problem Types: CWE-942, CWE-346 Description: A vulnerability, which was classified as problematic, has been found in Freeebird Hotel 酒店管理系统 API up to 1.2. Affected by this issue is some unknown functionality of the file /src/main/java/cn/mafangui/hotel/tool/SessionInterceptor.java. The manipulation leads to permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known
sted domains. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308288 - https://vuldb.com/?ctiid.308288 - https://vuldb.com/?submit.567214 - https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250429-01.md
CVE ID: CVE-2025-4543 State: PUBLISHED Published: 2025-05-11T18:00:06.134Z Last Updated: 2025-05-12T12:37:18.618Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: LyLme Products: Spage Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in LyLme Spage 2.1. This affects an unknown part of the file lylme_spage/blob/master/admin/ajax_link.php. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308289 - https://vuldb.com/?ctiid.
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308289 - https://vuldb.com/?ctiid.308289 - https://vuldb.com/?submit.567290 - https://github.com/yanbeiii/Proof-of-Concept/blob/main/lylme-sqli.md
CVE ID: CVE-2025-4544 State: PUBLISHED Published: 2025-05-11T18:31:05.076Z Last Updated: 2025-05-12T18:58:45.569Z Severity: N/A (CVSS 6.8 AV:N/AC:H/Au:M/C:C/I:C/A:C) Vendors: D-Link Products: DI-8100 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in D-Link DI-8100 up to 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /ddos.asp of the component jhttpd. The manipulation of the argument def_max/def_time/def_tcp_max/def_tcp_time/def_udp_max/def_udp_time/def_icmp_max leads to stack-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult.
ttack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308291 - https://vuldb.com/?ctiid.308291 - https://vuldb.com/?submit.562695 - https://github.com/Yhuanhuan01/DI-8100_Vulnerability_Report/blob/main/Vulnerability_Report.md - https://www.dlink.com/
CVE ID: CVE-2025-4545 State: PUBLISHED Published: 2025-05-11T19:31:04.417Z Last Updated: 2025-05-12T18:57:46.800Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: CTCMS Products: Content Management System Problem Types: CWE-22 Description: A vulnerability was found in CTCMS Content Management System 2.1.2. It has been classified as critical. Affected is the function del of the file ctcms\apps\controllers\admin\Tpl.php of the component File Handler. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308292 - https://vuldb.com/?ctiid.308292 - https://vuldb.com/?submit.566498 - https://github.com/xiaoyangsec/ctcms/blob/main/CTCMS_Arbitrary_File_Deletion_Vulnerability_Authenticated.md
CVE ID: CVE-2025-4546 State: PUBLISHED Published: 2025-05-11T20:00:06.708Z Last Updated: 2025-05-12T18:56:54.462Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: 1Panel-dev Products: MaxKB Problem Types: CWE-1236, CWE-74 Description: A vulnerability was found in 1Panel-dev MaxKB up to 1.10.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Knowledge Base Module. The manipulation leads to csv injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.10.8 is able to address this issue. It is recommended to upgrade the affected component. The vend
Upgrading to version 1.10.8 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about this disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308293 - https://vuldb.com/?ctiid.308293 - https://vuldb.com/?submit.566517 - https://github.com/yaowenxiao721/Poc/blob/main/MaxKB/MaxKB-poc1.md
CVE ID: CVE-2025-4547 State: PUBLISHED Published: 2025-05-11T21:00:07.162Z Last Updated: 2025-05-12T18:56:07.490Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Web-based Pharmacy Product Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add User Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. Additional An
tely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308294 - https://vuldb.com/?ctiid.308294 - https://vuldb.com/?submit.567497 - https://github.com/csehacademy/CVEs/blob/main/Web-based%20Pharmacy%20Product%20Management%20System%20-%20Stored%20XSS.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-4548 State: PUBLISHED Published: 2025-05-11T21:31:05.460Z Last Updated: 2025-05-12T18:55:01.698Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Online Food Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /routers/router.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308295 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308295 - https://vuldb.com/?ctiid.308295 - https://vuldb.com/?submit.567547 - https://github.com/jhs1121/cve/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-4549 State: PUBLISHED Published: 2025-05-11T22:00:06.655Z Last Updated: 2025-05-12T18:53:17.173Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Online Food Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/register-router.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308296 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308296 - https://vuldb.com/?ctiid.308296 - https://vuldb.com/?submit.567549 - https://github.com/jhs1121/cve/issues/3 - https://www.campcodes.com/
CVE ID: CVE-2025-4550 State: PUBLISHED Published: 2025-05-11T22:31:05.450Z Last Updated: 2025-05-12T15:07:13.661Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Apartment Visitors Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Apartment Visitors Management System 1.0. This issue affects some unknown processing of the file /admin/pass-details.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308297 - https://vuldb.com/?ctiid.308297 - https://vuldb.com/?submit.567567 - https://github.com/y77-88/myCVE/issues/7 - https://phpgurukul.com/
CVE ID: CVE-2025-4551 State: PUBLISHED Published: 2025-05-11T23:00:06.082Z Last Updated: 2025-05-12T15:06:14.474Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: ContiNew Admin Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0. Affected is an unknown function of the file /dev-api/common/file. The manipulation of the argument File leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA
d. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308298 - https://vuldb.com/?ctiid.308298 - https://vuldb.com/?submit.567568 - https://github.com/uglory-gll/javasec/blob/main/continew-admin.md#1stored-cross-site-scripting