Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
cted. This can result in information disclosure, including sensitive database credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-08 - https://www.advantech.com/en/support/details/firmware-?id=1-HIPU-183
CVE ID: CVE-2025-53510 State: PUBLISHED Published: 2025-08-25T14:17:41.763Z Last Updated: 2025-11-03T18:13:13.086Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: SAIL Image Decoding Library Products: SAIL Image Decoding Library Problem Types: CWE-680 Description: A memory corruption vulnerability exists in the PSD Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .psd file, an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based buffer to overflow when decoding the image which can lead to remote code execution. An attacker will need to co
ap-based buffer to overflow when decoding the image which can lead to remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2218
CVE ID: CVE-2025-53511 State: PUBLISHED Published: 2025-08-25T13:53:39.120Z Last Updated: 2025-11-03T18:13:14.035Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: The Biosig Project Products: libbiosig Problem Types: CWE-122 Description: A heap-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_
lyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2237
CVE ID: CVE-2025-53512 State: PUBLISHED Published: 2025-07-08T16:47:44.427Z Last Updated: 2025-07-08T19:09:24.844Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Canonical Products: Juju Problem Types: CWE-200, CWE-285 Description: The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/juju/juju/security/advisories/GHSA-r64v-82fh-xc63
CVE ID: CVE-2025-53513 State: PUBLISHED Published: 2025-07-08T16:57:06.351Z Last Updated: 2025-07-09T14:00:10.613Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Canonical Products: Juju Problem Types: CWE-24 Description: The /charms endpoint on a Juju controller lacked sufficient authorization checks, allowing any user with an account on the controller to upload a charm. Uploading a malicious charm that exploits a Zip Slip vulnerability could allow an attacker to gain access to a machine running a unit through the affected charm. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/juju/juju/security/advisories/GHSA-24ch-w38v-x
Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/juju/juju/security/advisories/GHSA-24ch-w38v-xmh8
CVE ID: CVE-2025-53514 State: PUBLISHED Published: 2025-08-11T18:57:01.515Z Last Updated: 2025-08-11T19:36:46.050Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Mattermost Products: Mattermost Confluence Plugin Problem Types: CWE-754 Description: Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-53515 State: PUBLISHED Published: 2025-07-10T23:25:51.561Z Last Updated: 2025-07-11T13:57:41.891Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Advantech Products: iView Problem Types: CWE-89 Description: A vulnerability exists in Advantech iView that allows for SQL injection and remote code execution through NetworkServlet.archiveTrap(). This issue requires an authenticated attacker with at least user-level privileges. Certain input parameters are not sanitized, allowing an attacker to perform SQL injection and potentially execute code in the context of the 'nt authority\local service' account. Additional Analyst Notes: - CISA ADP Vulnrichm
execute code in the context of the 'nt authority\local service' account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-08 - https://www.advantech.com/en/support/details/firmware-?id=1-HIPU-183
CVE ID: CVE-2025-53518 State: PUBLISHED Published: 2025-08-25T13:53:51.327Z Last Updated: 2025-11-03T18:13:14.968Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: The Biosig Project Products: libbiosig Problem Types: CWE-190 Description: An integer overflow vulnerability exists in the ABF parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted ABF file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TAL
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2231
CVE ID: CVE-2025-53519 State: PUBLISHED Published: 2025-07-10T23:14:37.185Z Last Updated: 2025-07-11T17:50:07.862Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Advantech Products: iView Problem Types: CWE-79 Description: A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulating specific parameters, an attacker could execute unauthorized scripts in the user's browser, potentially leading to information disclosure or other malicious activities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/i
ties. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-08 - https://www.advantech.com/en/support/details/firmware-?id=1-HIPU-183
CVE ID: CVE-2025-53520 State: PUBLISHED Published: 2025-08-08T16:09:02.072Z Last Updated: 2025-08-08T19:12:44.942Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: EG4 Electronics Products: EG4 12kPV, EG4 18kPV, EG4 Flex 21, EG4 Flex 18, EG4 6000XP, EG4 12000XP, EG4 GridBoss Problem Types: CWE-494 Description: The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center (remote, cloud-connected interface) or via a serial connection, and can install these files without integrity checks. The TTComp archive format used for the firmware is unencrypted and can be unpacked
hese files without integrity checks. The TTComp archive format used for the firmware is unencrypted and can be unpacked and altered without detection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-07 - https://eg4electronics.com/contact/
CVE ID: CVE-2025-53521 State: PUBLISHED Published: 2025-10-15T13:55:52.694Z Last Updated: 2025-10-16T03:57:04.951Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-770 Description: When a BIG-IP APM Access Policy is configured on a virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000156741
CVE ID: CVE-2025-53522 State: PUBLISHED Published: 2025-08-20T04:22:51.144Z Last Updated: 2025-08-20T16:00:35.915Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Six Apart Ltd. Products: Movable Type (Software Edition), Movable Type Advanced (Software Edition), Movable Type Premium (Software Edition), Movable Type Premium (Advanced Edition) (Software Edition), Movable Type (Cloud Edition), Movable Type Premium (Cloud Edition) Problem Types: CWE-348 Description: Movable Type contains an issue with use of less trusted source. If exploited, tampered email to reset a password may be sent by a remote unauthenticated attacker. Additional Analyst Notes: - CISA ADP
ampered email to reset a password may be sent by a remote unauthenticated attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://movabletype.org/news/2025/08/mt-843-released.html - https://jvn.jp/en/jp/JVN76729865/
CVE ID: CVE-2025-53525 State: PUBLISHED Published: 2025-07-07T16:30:25.627Z Last Updated: 2025-07-07T20:47:10.007Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-79 Description: WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the profile_familiar.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the id_dependente parameter. This vulnerability is fixed in 3.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-982x-v58q-6qpj - https://github.com/LabRedesCefetRJ/WeGIA/com
/github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-982x-v58q-6qpj - https://github.com/LabRedesCefetRJ/WeGIA/commit/45695edc5ff7689f14efcfddb37e0323df34e184
CVE ID: CVE-2025-53526 State: PUBLISHED Published: 2025-07-07T16:36:45.447Z Last Updated: 2025-07-07T20:48:35.093Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-79 Description: WeGIA is a web manager for charitable institutions. An XSS Injection vulnerability was identified in novo_memorando.php. After the memo was submitted, the vulnerability was confirmed by accessing listar_memorandos_antigos.php. Upon loading this page, the injected script was executed in the browser. This vulnerability is fixed in 3.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-46fm-hx2r-69fg - https://github.com/LabR
References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-46fm-hx2r-69fg - https://github.com/LabRedesCefetRJ/WeGIA/commit/f8cf5d0473334e6c28ea7f604da11ee2a7b419df
CVE ID: CVE-2025-53527 State: PUBLISHED Published: 2025-07-07T16:47:04.624Z Last Updated: 2025-07-08T13:39:36.975Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is a web manager for charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in the almox parameter of the /controle/relatorio_geracao.php endpoint. This issue allows attacker to inject arbitrary SQL queries, potentially leading to unauthorized data access or further exploitation depending on database configuration. This vulnerability is fixed in 3.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/a
.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-43xw-c4g6-jgff - https://github.com/LabRedesCefetRJ/WeGIA/commit/9de9a741d1d26ae76b2215a32660817d9bd452aa
CVE ID: CVE-2025-53528 State: PUBLISHED Published: 2025-07-21T20:15:17.464Z Last Updated: 2025-07-23T15:01:36.184Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L) Vendors: zmievsa Products: cadwyn Problem Types: CWE-79 Description: Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI. In versions before 5.4.3, the version parameter of the "/docs" endpoint is vulnerable to a Reflected XSS (Cross-Site Scripting) attack. This XSS would notably allow an attacker to execute JavaScript code on a user's session for any application based on Cadwyn via a one-click attack. The vulnerability has been fixed in version 5.4.3. Additional Anal
y application based on Cadwyn via a one-click attack. The vulnerability has been fixed in version 5.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zmievsa/cadwyn/security/advisories/GHSA-2gxp-6r36-m97r - https://github.com/zmievsa/cadwyn/commit/b424ecd57cd8dabbc8fe39b8f8ccafea629c7728
CVE ID: CVE-2025-53529 State: PUBLISHED Published: 2025-07-07T16:51:03.848Z Last Updated: 2025-07-07T18:02:36.711Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is a web manager for charitable institutions. An SQL Injection vulnerability was identified in the /html/funcionario/profile_funcionario.php endpoint. The id_funcionario parameter is not properly sanitized or validated before being used in a SQL query, allowing an unauthenticated attacker to inject arbitrary SQL commands. The vulnerability is fixed in 3.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
y SQL commands. The vulnerability is fixed in 3.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-rrj6-pj6w-8j2r - https://github.com/LabRedesCefetRJ/WeGIA/commit/0a061bcc5024937edd18ab3e65ccc8f38deb6957
CVE ID: CVE-2025-53530 State: PUBLISHED Published: 2025-07-07T17:00:57.957Z Last Updated: 2025-07-07T17:59:49.121Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-770 Description: WeGIA is a web manager for charitable institutions. The Wegia server has a vulnerability that allows excessively long HTTP GET requests to a specific URL. This issue arises from the lack of validation for the length of the errorstr parameter. Tests confirmed that the server processes URLs up to 8,142 characters, resulting in high resource consumption, elevated latency, timeouts, and read errors. This makes the server susceptible to Denial of Service (DoS) attacks. This vulnerability is fixed in 3.3.0. A
ad errors. This makes the server susceptible to Denial of Service (DoS) attacks. This vulnerability is fixed in 3.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-562r-xgj9-2r7p
CVE ID: CVE-2025-53531 State: PUBLISHED Published: 2025-07-07T17:02:33.439Z Last Updated: 2025-07-07T17:55:38.432Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-770 Description: WeGIA is a web manager for charitable institutions. The Wegia server has a vulnerability that allows excessively long HTTP GET requests to a specific URL. This issue arises from the lack of validation for the length of the fid parameter. Tests confirmed that the server processes URLs up to 8,142 characters, resulting in high resource consumption, elevated latency, timeouts, and read errors. This makes the server susceptible to Denial of Service (DoS) attacks. This vulnerability is fixed in 3.3.0. Additi
rors. This makes the server susceptible to Denial of Service (DoS) attacks. This vulnerability is fixed in 3.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-4ffc-f23j-54m3
CVE ID: CVE-2025-53532 State: PUBLISHED Published: 2025-07-07T17:06:58.249Z Last Updated: 2025-07-07T17:52:47.272Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: giscus Products: giscus Problem Types: CWE-285 Description: giscus is a commenting system powered by GitHub Discussions. A bug in giscus' discussions creation API allowed an unauthorized user to create discussions on any repository where giscus is installed. This affects the server-side part of giscus, which is provided via http://giscus.app or your own self-hosted service. This vulnerability is fixed by the c43af7806e65adfcf4d0feeebef76dc36c95cb9a and 4b9745fe1a326ce08d69f8a388331bc993d19389 commi
ulnerability is fixed by the c43af7806e65adfcf4d0feeebef76dc36c95cb9a and 4b9745fe1a326ce08d69f8a388331bc993d19389 commits. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/giscus/giscus/security/advisories/GHSA-w6vg-v24f-4vm3 - https://github.com/giscus/giscus/commit/4b9745fe1a326ce08d69f8a388331bc993d19389 - https://github.com/giscus/giscus/commit/c43af7806e65adfcf4d0feeebef76dc36c95cb9a
CVE ID: CVE-2025-53533 State: PUBLISHED Published: 2025-10-27T19:06:32.428Z Last Updated: 2025-10-27T19:19:08.837Z Vendors: pi-hole Products: web Problem Types: CWE-79 Description: Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions 6.2.1 and earlier are vulnerable to reflected cross-site scripting (XSS) via a malformed URL path. The 404 error page includes the requested path in the class attribute of the body tag without proper sanitization or escaping. An attacker can craft a URL containing an onload attribute that will execute arbitrary JavaScript code in the browser when
attacker can craft a URL containing an onload attribute that will execute arbitrary JavaScript code in the browser when a victim visits the malicious link. If an attacker sends a crafted pi-hole link to a victim and the victim visits it, attacker-controlled JavaScript code is executed in the browser of the victim. This has been patched in version 6.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pi-hole/web/security/advisories/GHSA-w8f8-92rx-4f6w
CVE ID: CVE-2025-53534 State: PUBLISHED Published: 2025-08-05T20:58:56.350Z Last Updated: 2025-08-06T19:21:42.760Z Vendors: tnb-labs Products: panel Problem Types: CWE-305 Description: RatPanel is a server operation and maintenance management panel. In versions 2.3.19 through 2.5.5, when an attacker obtains the backend login path of RatPanel (including but not limited to weak default paths, brute-force cracking, etc.), they can execute system commands or take over hosts managed by the panel without logging in. In addition to this remote code execution (RCE) vulnerability, the flawed code also leads to unauthorized access. RatPanel uses the CleanPath middleware provided by github.com/go-chi/c
he flawed code also leads to unauthorized access. RatPanel uses the CleanPath middleware provided by github.com/go-chi/chi package to clean URLs, but but the middleware does not process r.URL.Path, which can cause the paths to be misinterpreted. This is fixed in version 2.5.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/tnborg/panel/security/advisories/GHSA-fm3m-jrgm-5ppg - https://github.com/tnborg/panel/commit/ed5c74c7534230ba685273504af4c1e1e3598ff1 - https://github.com/tnborg/panel/releases/tag/v2.5.6
CVE ID: CVE-2025-53535 State: PUBLISHED Published: 2025-07-07T17:15:52.027Z Last Updated: 2025-07-07T17:48:36.223Z Vendors: better-auth Products: better-auth Problem Types: CWE-601 Description: Better Auth is an authentication and authorization library for TypeScript. An open redirect has been found in the originCheck middleware function, which affects the following routes: /verify-email, /reset-password/:token, /delete-user/callback, /magic-link/verify, /oauth-proxy-callback. This vulnerability is fixed in 1.2.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/better-auth/better-auth/security/advisories/GHSA-36rg-gfq2-3h56
CVE ID: CVE-2025-53536 State: PUBLISHED Published: 2025-07-07T17:57:36.835Z Last Updated: 2025-07-08T13:31:24.035Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: RooCodeInc Products: Roo-Code Problem Types: CWE-552 Description: Roo Code is an AI-powered autonomous coding agent. Prior to 3.22.6, if the victim had "Write" auto-approved, an attacker with the ability to submit prompts to the agent could write to VS Code settings files and trigger code execution. There were multiple ways to achieve that. One example is with the php.validate.executablePath setting which lets you set the path for the php executable for syntax validation. The attacker could have writ
tablePath setting which lets you set the path for the php executable for syntax validation. The attacker could have written the path to an arbitrary command there and then created a php file to trigger it. This vulnerability is fixed in 3.22.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-3765-5vjr-qjgm - https://github.com/RooCodeInc/Roo-Code/commit/1be6fce1a6864ae63e8160b0666db2c647f2dbba - https://github.com/RooCodeInc/Roo-Code/commit/3993406ebdc0553a32ef391a799a4fb124930a1c
CVE ID: CVE-2025-53537 State: PUBLISHED Published: 2025-07-23T20:35:30.824Z Last Updated: 2025-07-23T20:48:59.864Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: OISF Products: libhtp Problem Types: CWE-401 Description: LibHTP is a security-aware parser for the HTTP protocol and its related bits and pieces. In versions 0.5.50 and below, there is a traffic-induced memory leak that can starve the process of memory, leading to loss of visibility. To workaround this issue, set `suricata.yaml app-layer.protocols.http.libhtp.default-config.lzma-enabled` to false. This issue is fixed in version 0.5.51. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
abled` to false. This issue is fixed in version 0.5.51. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OISF/libhtp/security/advisories/GHSA-v3qq-h8mh-vph7 - https://github.com/OISF/libhtp/commit/9037ea35110a0d97be5cedf8d31fb4cd9a38c7a7
CVE ID: CVE-2025-53538 State: PUBLISHED Published: 2025-07-22T21:36:03.976Z Last Updated: 2025-07-23T18:32:21.856Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: OISF Products: suricata Problem Types: CWE-770, CWE-400 Description: Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions 7.0.10 and below and 8.0.0-beta1 through 8.0.0-rc1, mishandling of data on HTTP2 stream 0 can lead to uncontrolled memory usage, leading to loss of visibility. Workarounds include disabling the HTTP/2 parser, and using a signature like drop http2 any any -> any any (frame:http2.hdr; byte_
ds include disabling the HTTP/2 parser, and using a signature like drop http2 any any -> any any (frame:http2.hdr; byte_test:1,=,0,3; byte_test:4,=,0,5; sid: 1;) where the first byte test tests the HTTP2 frame type DATA and the second tests the stream id 0. This is fixed in versions 7.0.11 and 8.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OISF/suricata/security/advisories/GHSA-qrr7-crgj-cmh3 - https://github.com/OISF/suricata/commit/1d6d331752e933c46aca0ae7a9679b27462246e3 - https://github.com/OISF/suricata/commit/7fa88ea9e7d05e07a7864050cfd836b576669720