Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-22818 State: PUBLISHED Published: 2022-01-28T19:09:35 Last Updated: 2024-08-03T18:51:07.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to the charging station web interface by performing brute force attacks. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2) Additional Analyst Notes: - CVE Program Container: References: - https://download.
A (All versions prior to R8 V3.4.0.2) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-02
CVE ID: CVE-2021-22819 State: PUBLISHED Published: 2022-01-28T19:09:35 Last Updated: 2024-08-03T18:51:07.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use the web interface rendered within iframes. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2) Additional Analyst Notes: - CVE Program Container: Referenc
link Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-02
CVE ID: CVE-2021-22820 State: PUBLISHED Published: 2022-01-28T19:09:36 Last Updated: 2024-08-03T18:51:07.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CWE-614 Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain an unauthorized access over a hijacked session to the charger station web server even after the legitimate user account holder has changed his password. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2) Additional Analyst Notes: - CVE Program Cont
.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-02
CVE ID: CVE-2021-22821 State: PUBLISHED Published: 2022-01-28T19:09:37 Last Updated: 2024-08-03T18:51:07.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station web server to forward requests to unintended network targets when crafted malicious parameters are submitted to the charging station web server. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2) Additional Analyst Notes: - CVE Program Container: References
nk Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-02
CVE ID: CVE-2021-22822 State: PUBLISHED Published: 2022-01-28T19:09:38 Last Updated: 2024-08-03T18:51:07.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CWE-79 Improper Neutralization of Input During Web Page Generation (�Cross-site Scripting�) vulnerability exists that could allow an attacker to impersonate the user who manages the charging station or carry out actions on their behalf when crafted malicious parameters are submitted to the charging station web server. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions p
EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-02
CVE ID: CVE-2021-22823 State: PUBLISHED Published: 2022-02-11T17:40:39 Last Updated: 2024-08-03T18:51:07.467Z Vendors: n/a Products: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21320 and prior) Problem Types: CWE-306 Description: A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21320 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348
lyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-01
CVE ID: CVE-2021-22824 State: PUBLISHED Published: 2022-02-11T17:40:40 Last Updated: 2024-08-03T18:51:07.555Z Vendors: n/a Products: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21320 and prior) Problem Types: CWE-120 Description: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21320 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-
onal Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-01
CVE ID: CVE-2021-22825 State: PUBLISHED Published: 2022-01-28T19:09:40.000Z Last Updated: 2025-09-08T16:09:21.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could allow an attacker to access the system with elevated privileges when a privileged account clicks on a malicious URL that compromises the security token. Affected Products: AP7xxxx and AP8xxx with NMC2 (V6.9.6 or earlier), AP7xxx and AP8xxx with NMC3 (V1.1.0.3 or earlier), and APDU9xxx with NMC3 (V1.0.0.28 or earlier) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://downloa
28 or earlier) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-04
CVE ID: CVE-2021-22826 State: PUBLISHED Published: 2022-01-28T19:09:38 Last Updated: 2024-08-03T18:51:07.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22827. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-03
CVE ID: CVE-2021-22827 State: PUBLISHED Published: 2022-01-28T19:09:39 Last Updated: 2024-08-03T18:51:07.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22826. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-03
CVE ID: CVE-2021-22847 State: PUBLISHED Published: 2021-01-22T08:30:20.982369Z Last Updated: 2024-09-16T19:04:46.163Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Hyweb Products: HyCMS-J1 Problem Types: CWE-89 Description: Hyweb HyCMS-J1's API fail to filter POST request parameters. Remote attackers can inject SQL syntax and execute commands without privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4316-298fc-1.html
CVE ID: CVE-2021-22848 State: PUBLISHED Published: 2021-03-18T04:35:21.791482Z Last Updated: 2024-09-16T20:57:24.152Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: HGiga Products: MailSherlock MSR45/SSR45 Problem Types: CWE-89 Description: HGiga MailSherlock contains a SQL Injection. Remote attackers can inject SQL syntax and execute SQL commands in a URL parameter of email pages without privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4521-a4fd8-1.html
CVE ID: CVE-2021-22849 State: PUBLISHED Published: 2021-01-22T08:30:21.580361Z Last Updated: 2024-09-16T16:12:45.703Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Hyweb Products: HyCMS-J1 Problem Types: CWE-79 Description: Hyweb HyCMS-J1 backend editing function does not filter special characters. Users after log-in can inject JavaScript syntax to perform a stored XSS (Stored Cross-site scripting) attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4318-09cd3-1.html
CVE ID: CVE-2021-22850 State: PUBLISHED Published: 2021-01-19T10:05:35.059886Z Last Updated: 2024-09-17T01:16:31.598Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HGiga Products: OAKSv20 OAKlouds-document_v3, OAKSv30 OAKlouds-document_v3 Problem Types: CWE-732 Description: HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4326-3d9d2-1.html - https://www.chtsecurity.com/news/eb024200-7cf9-4c58-a063-c451dbc9daef
CVE ID: CVE-2021-22851 State: PUBLISHED Published: 2021-01-19T10:05:35.751486Z Last Updated: 2024-09-16T17:43:24.218Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HGiga Products: OAKSv20 OAKlouds-document_v3 2.0, OAKSv30 OAKlouds-document_v3 3.0 Problem Types: CWE-89 Description: HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (document management page) to obtain database schema and data. Additional Analyst Notes: - CVE Program Container: References: - https://www.chtsecurity.com/news/eb024200-7cf9-4c58-a063-c451dbc9daef - https://www.twcert.org.tw/tw/cp-132-4327-50e99-1.html
CVE ID: CVE-2021-22852 State: PUBLISHED Published: 2021-01-19T10:05:36.386263Z Last Updated: 2024-09-16T16:33:42.943Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: HGiga Products: OAKSv20 OAKlouds-mol_course_v3 2.0, OAKSv30 OAKlouds-mol_course_v3 3.0 Problem Types: CWE-89 Description: HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (online registration) to obtain database schema and data. Additional Analyst Notes: - CVE Program Container: References: - https://www.chtsecurity.com/news/eb024200-7cf9-4c58-a063-c451dbc9daef - https://www.twcert.org.tw/tw/cp-132-4328-97765-1.html
CVE ID: CVE-2021-22853 State: PUBLISHED Published: 2021-02-17T13:30:19.537050Z Last Updated: 2024-09-17T04:04:36.098Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: Soar Cloud System Co., Ltd. Products: HR Portal Problem Types: CWE-284 Description: The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, further causing the login function not to work. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4403-8eb68-1.html - https://www.chtsecurity.com/news/d334641f-2b28-4ea
References: - https://www.twcert.org.tw/tw/cp-132-4403-8eb68-1.html - https://www.chtsecurity.com/news/d334641f-2b28-4eab-a5ed-c6ec6740557e
CVE ID: CVE-2021-22854 State: PUBLISHED Published: 2021-02-17T13:30:20.119423Z Last Updated: 2024-09-16T22:56:59.729Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Soar Cloud System Co., Ltd. Products: HR Portal Problem Types: CWE-89 Description: The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4404-3f498-1.html - https://www.chtsecurity.com/news/d334641f-2b28-4eab-a5ed-c6ec6740557e
CVE ID: CVE-2021-22855 State: PUBLISHED Published: 2021-02-17T13:30:20.743977Z Last Updated: 2024-09-16T20:52:52.968Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Soar Cloud System Co., Ltd. Products: HR Portal Problem Types: CWE-502 Description: The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serialized objects to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4405-2ddde-1.html - https://www.chtsecurity.com/news/d334641f-2b28-4eab-a5ed-c6ec6740557e
CVE ID: CVE-2021-22856 State: PUBLISHED Published: 2021-02-17T10:45:28.427313Z Last Updated: 2024-09-17T01:51:39.534Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ChanGate EnterPrise Co., Ltd Products: property management system Problem Types: CWE-89 Description: The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4394-76d41-1.html - https://www.chtsecurity.com/news/fe1e30ef-4dac-4848-a3c9-a7df12672422
CVE ID: CVE-2021-22857 State: PUBLISHED Published: 2021-02-17T10:45:29.023806Z Last Updated: 2024-09-16T22:08:22.477Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ChanGate EnterPrise Co., Ltd Products: property management system Problem Types: CWE-22 Description: The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4395-c01f7-1.html - https://www.chtsecurity.com/news/fe1e30ef-4dac-4848-a3c9-a7df12672422
CVE ID: CVE-2021-22858 State: PUBLISHED Published: 2021-02-17T10:45:29.715142Z Last Updated: 2024-09-17T01:35:41.229Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ChanGate EnterPrise Co., Ltd Products: property management system Problem Types: CWE-287 Description: Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4396-e6d44-1.html - https://www.chtsecurity.com/news/fe1e30ef-4dac-4848-a3c9-a7df12672422
CVE ID: CVE-2021-22859 State: PUBLISHED Published: 2021-03-17T09:10:30.761178Z Last Updated: 2024-09-16T23:01:27.719Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Excellent Infotek Corporation Products: e-document system Problem Types: CWE-89 Description: The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4517-51e25-1.html - https://gist.github.com/tonykuo76/807c838b75879b0d327782dfcd2c3bea - https://ww
ert.org.tw/tw/cp-132-4517-51e25-1.html - https://gist.github.com/tonykuo76/807c838b75879b0d327782dfcd2c3bea - https://www.chtsecurity.com/news/c974fd28-c19b-4003-82f3-818904057496
CVE ID: CVE-2021-22860 State: PUBLISHED Published: 2021-03-17T09:10:31.510444Z Last Updated: 2024-09-16T16:12:43.224Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Excellent Infotek Corporation Products: e-document system Problem Types: Broken Authentication Description: EIC e-document system does not perform completed identity verification for sorting and filtering personnel data. The vulnerability allows remote attacker to obtain users’ credential information without logging in the system, and further acquire the privileged permissions and execute arbitrary commends. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.or
s and execute arbitrary commends. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4518-c813c-1.html - https://gist.github.com/tonykuo76/17d497b3472a80a5e8914227e81e6fa3 - https://www.chtsecurity.com/news/12929036-924b-4b89-8a0e-3e7155e19011
CVE ID: CVE-2021-22861 State: PUBLISHED Published: 2021-03-03T03:25:21 Last Updated: 2024-08-03T18:51:07.561Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-285 Description: An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to gain write access to unauthorized repositories via specifically crafted pull requests and REST API requests. An attacker would need to be able to fork the targeted repository, a setting that is disabled by default for organization owned private repositories. Branch protections such as required pull request reviews or status checks would prevent unauthorized commits
positories. Branch protections such as required pull request reviews or status checks would prevent unauthorized commits from being merged without further review or validation. This vulnerability affected all versions of GitHub Enterprise Server since 2.4.21 and was fixed in versions 2.20.24, 2.21.15, 2.22.7 and 3.0.1. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: References: - https://docs.github.com/en/enterprise-server%402.20/admin/release-notes#2.20.24 - https://docs.github.com/en/enterprise-server%402.21/admin/release-notes#2.21.15 - https://docs.github.com/en/enterprise-server%402.22/admin/release-notes#2.22.7 - ht
402.21/admin/release-notes#2.21.15 - https://docs.github.com/en/enterprise-server%402.22/admin/release-notes#2.22.7 - https://docs.github.com/en/enterprise-server%403.0/admin/release-notes#3.0.1
CVE ID: CVE-2021-22862 State: PUBLISHED Published: 2021-03-03T03:25:22 Last Updated: 2024-08-03T18:51:07.479Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-285 Description: An improper access control vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with the ability to fork a repository to disclose Actions secrets for the parent repository of the fork. This vulnerability existed due to a flaw that allowed the base reference of a pull request to be updated to point to an arbitrary SHA or another pull request outside of the fork repository. By establishing this incorrect reference in a PR, the restrictions that limit the Actions
utside of the fork repository. By establishing this incorrect reference in a PR, the restrictions that limit the Actions secrets sent a workflow from forks could be bypassed. This vulnerability affected GitHub Enterprise Server version 3.0.0, 3.0.0.rc2, and 3.0.0.rc1. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: References: - https://docs.github.com/en/enterprise-server%403.0/admin/release-notes#3.0.1
CVE ID: CVE-2021-22863 State: PUBLISHED Published: 2021-03-03T03:25:23 Last Updated: 2024-08-03T18:51:07.572Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-285 Description: An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission of a pull request without proper authorization. By exploiting this vulnerability, an attacker would be able to gain access to head branches of pull requests opened on repositories of which they are a maintainer. Forking is disabled by default for organization owned private repositories and would prevent
hich they are a maintainer. Forking is disabled by default for organization owned private repositories and would prevent this vulnerability. Additionally, branch protections such as required pull request reviews or status checks would prevent unauthorized commits from being merged without further review or validation. This vulnerability affected all versions of GitHub Enterprise Server since 2.12.22 and was fixed in versions 2.20.24, 2.21.15, 2.22.7 and 3.0.1. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: References: - https://docs.github.com/en/enterprise-server%402.20/admin/release-notes#2.20.24 - https://docs.github.c
r: References: - https://docs.github.com/en/enterprise-server%402.20/admin/release-notes#2.20.24 - https://docs.github.com/en/enterprise-server%402.21/admin/release-notes#2.21.15 - https://docs.github.com/en/enterprise-server%402.22/admin/release-notes#2.22.7 - https://docs.github.com/en/enterprise-server%403.0/admin/release-notes#3.0.1
CVE ID: CVE-2021-22864 State: PUBLISHED Published: 2021-03-23T21:40:12 Last Updated: 2024-08-03T18:51:07.560Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-77 Description: A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration options used by GitHub Pages were not sufficiently restricted and made it possible to override environment variables leading to code execution on the GitHub Enterprise Server instance. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. Th
, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.0.3 and was fixed in 3.0.3, 2.22.9, and 2.21.17. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: References: - https://docs.github.com/en/enterprise-server%402.21/admin/release-notes#2.21.17 - https://docs.github.com/en/enterprise-server%402.22/admin/release-notes#2.22.9 - https://docs.github.com/en/enterprise-server%403.0/admin/release-notes#3.0.3