Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-30956 State: PUBLISHED Published: 2022-05-17T14:06:25 Last Updated: 2024-08-03T07:03:39.842Z Vendors: Jenkins project Products: Jenkins Rundeck Plugin Description: Jenkins Rundeck Plugin 3.6.10 and earlier does not restrict URL schemes in Rundeck webhook submissions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to submit crafted Rundeck webhook payloads. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2600
CVE ID: CVE-2022-30957 State: PUBLISHED Published: 2022-05-17T14:06:27 Last Updated: 2024-08-03T07:03:39.880Z Vendors: Jenkins project Products: Jenkins SSH Plugin Description: A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2315 - http://www.openwall.com/lists/oss-security/2022/05/17/8
CVE ID: CVE-2022-30958 State: PUBLISHED Published: 2022-05-17T14:06:29 Last Updated: 2024-08-03T07:03:39.918Z Vendors: Jenkins project Products: Jenkins SSH Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins SSH Plugin 2.6.1 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2093
CVE ID: CVE-2022-30959 State: PUBLISHED Published: 2022-05-17T14:06:32 Last Updated: 2024-08-03T07:03:39.400Z Vendors: Jenkins project Products: Jenkins SSH Plugin Description: A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2093
CVE ID: CVE-2022-30960 State: PUBLISHED Published: 2022-05-17T14:06:34 Last Updated: 2024-08-03T07:03:40.019Z Vendors: Jenkins project Products: Jenkins Application Detector Plugin Description: Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717
CVE ID: CVE-2022-30961 State: PUBLISHED Published: 2022-05-17T14:06:36 Last Updated: 2024-08-03T07:03:39.861Z Vendors: Jenkins project Products: Jenkins Autocomplete Parameter Plugin Description: Jenkins Autocomplete Parameter Plugin 1.1 and earlier does not escape the name of Dropdown Autocomplete and Auto Complete String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717
CVE ID: CVE-2022-30962 State: PUBLISHED Published: 2022-05-17T14:06:38 Last Updated: 2024-08-03T07:03:39.864Z Vendors: Jenkins project Products: Jenkins Global Variable String Parameter Plugin Description: Jenkins Global Variable String Parameter Plugin 1.2 and earlier does not escape the name and description of Global Variable String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717
CVE ID: CVE-2022-30963 State: PUBLISHED Published: 2022-05-17T14:06:41 Last Updated: 2024-08-03T07:03:39.918Z Vendors: Jenkins project Products: Jenkins JDK Parameter Plugin Description: Jenkins JDK Parameter Plugin 1.0 and earlier does not escape the name and description of JDK parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717
CVE ID: CVE-2022-30964 State: PUBLISHED Published: 2022-05-17T14:06:43 Last Updated: 2024-08-03T07:03:39.779Z Vendors: Jenkins project Products: Jenkins Multiselect parameter Plugin Description: Jenkins Multiselect parameter Plugin 1.3 and earlier does not escape the name and description of Multiselect parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717
CVE ID: CVE-2022-30965 State: PUBLISHED Published: 2022-05-17T14:06:45 Last Updated: 2024-08-03T07:03:39.922Z Vendors: Jenkins project Products: Jenkins Promoted Builds (Simple) Plugin Description: Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name and description of Promotion Level parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717
CVE ID: CVE-2022-30966 State: PUBLISHED Published: 2022-05-17T14:06:48 Last Updated: 2024-08-03T07:03:39.902Z Vendors: Jenkins project Products: Jenkins Random String Parameter Plugin Description: Jenkins Random String Parameter Plugin 1.0 and earlier does not escape the name and description of Random String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717
CVE ID: CVE-2022-30967 State: PUBLISHED Published: 2022-05-17T14:06:50 Last Updated: 2024-08-03T07:03:39.855Z Vendors: Jenkins project Products: Jenkins Selection tasks Plugin Description: Jenkins Selection tasks Plugin 1.0 and earlier does not escape the name and description of Script Selection task variable parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717
CVE ID: CVE-2022-30968 State: PUBLISHED Published: 2022-05-17T14:06:52 Last Updated: 2024-08-03T07:03:39.608Z Vendors: Jenkins project Products: Jenkins vboxwrapper Plugin Description: Jenkins vboxwrapper Plugin 1.3 and earlier does not escape the name and description of VBox node parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717
CVE ID: CVE-2022-30969 State: PUBLISHED Published: 2022-05-17T14:06:54 Last Updated: 2024-08-03T07:03:39.913Z Vendors: Jenkins project Products: Jenkins Autocomplete Parameter Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Autocomplete Parameter Plugin 1.1 and earlier allows attackers to execute arbitrary code without sandbox protection if the victim is an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2322
CVE ID: CVE-2022-30970 State: PUBLISHED Published: 2022-05-17T14:06:56 Last Updated: 2024-08-03T07:03:40.038Z Vendors: Jenkins project Products: Jenkins Autocomplete Parameter Plugin Description: Jenkins Autocomplete Parameter Plugin 1.1 and earlier references Dropdown Autocomplete parameter and Auto Complete String parameter names in an unsafe manner from Javascript embedded in view definitions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2267
CVE ID: CVE-2022-30971 State: PUBLISHED Published: 2022-05-17T14:06:57 Last Updated: 2024-08-03T07:03:40.213Z Vendors: Jenkins project Products: Jenkins Storable Configs Plugin Description: Jenkins Storable Configs Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-1969
CVE ID: CVE-2022-30972 State: PUBLISHED Published: 2022-05-17T14:06:59 Last Updated: 2024-08-03T07:03:40.143Z Vendors: Jenkins project Products: Jenkins Storable Configs Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Storable Configs Plugin 1.0 and earlier allows attackers to have Jenkins parse a local XML file (e.g., archived artifacts) that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-1969
CVE ID: CVE-2022-30973 State: PUBLISHED Published: 2022-05-31T13:20:10 Last Updated: 2024-08-03T07:03:40.228Z Vendors: Apache Software Foundation Products: Apache Tika Problem Types: Denial of Service Description: We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.3. Additional Analyst Notes: - CVE Program Container: References: -
ch is a non-standard handler. This is fixed in 1.28.3. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/gqvb5t4p7tmdpl0y5bdbf72pgxj04h7p - http://www.openwall.com/lists/oss-security/2022/05/31/2 - http://www.openwall.com/lists/oss-security/2022/06/27/5 - https://security.netapp.com/advisory/ntap-20220722-0004/
CVE ID: CVE-2022-30974 State: PUBLISHED Published: 2022-05-18T00:00:00 Last Updated: 2024-08-03T07:03:40.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ccxvii/mujs/issues/162 - https://www.debian.org/security/2022/dsa-5291 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MC6PLHTXHZ7GW7QQGTLBHLXL47UHTHXO/
CVE ID: CVE-2022-30975 State: PUBLISHED Published: 2022-05-18T00:00:00 Last Updated: 2024-08-03T07:03:40.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ccxvii/mujs/issues/161 - https://www.debian.org/security/2022/dsa-5291 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MC6PLHTXHZ7GW7QQGTLBHLXL47UHTHXO/
CVE ID: CVE-2022-30976 State: PUBLISHED Published: 2022-05-18T05:20:13 Last Updated: 2024-08-03T07:03:40.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2179 - https://github.com/gpac/gpac/blob/105d67985ff3c3f4b98a98f312e3d84ae77a4463/share/doc/man/gpac.1#L2226-L2229 - https://github.com/gpac/gpac/blob/105d67985ff3c3f4b98a98f312e3d84ae77a4463/src/utils/utf.c#L35-L59
CVE ID: CVE-2022-30981 State: PUBLISHED Published: 2022-07-17T22:24:51 Last Updated: 2024-08-03T07:03:40.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an attacker is able to deserialize arbitrary data and hence can potentially achieve Java code execution. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilies-in-gentics-cms/
CVE ID: CVE-2022-30982 State: PUBLISHED Published: 2022-07-17T22:26:38 Last Updated: 2024-08-03T07:03:40.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Gentics CMS before 5.43.1. There is stored XSS in the profile description and in the username. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilies-in-gentics-cms/
CVE ID: CVE-2022-30984 State: PUBLISHED Published: 2022-08-25T23:18:19 Last Updated: 2024-08-03T07:03:40.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in the Rubrik Backup Service (RBS) Agent for Linux or Unix-based systems in Rubrik CDM 7.0.1, 7.0.1-p1, 7.0.1-p2 or 7.0.1-p3 before CDM 7.0.2-p2 could allow a local attacker to obtain root privileges by sending a crafted message to the RBS agent. Additional Analyst Notes: - CVE Program Container: References: - https://rubrik.com - https://www.rubrik.com/advisories/rbk-20220705-V0037
CVE ID: CVE-2022-30990 State: PUBLISHED Published: 2022-05-18T19:38:04.964724Z Last Updated: 2024-09-17T03:49:05.176Z Vendors: Acronis Products: Acronis Cyber Protect 15, Acronis Agent Problem Types: CWE-200 Description: Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Linux) before build 29240, Acronis Agent (Linux) before build 28037 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-2299
CVE ID: CVE-2022-30991 State: PUBLISHED Published: 2022-05-18T19:43:14.157456Z Last Updated: 2024-09-17T01:46:35.314Z Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-74 Description: HTML injection via report name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 29240 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-3928
CVE ID: CVE-2022-30992 State: PUBLISHED Published: 2022-05-18T19:42:45.904385Z Last Updated: 2024-09-16T19:10:09.912Z Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-601 Description: Open redirect via user-controlled query parameter. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 29240 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-2917
CVE ID: CVE-2022-30993 State: PUBLISHED Published: 2022-05-18T19:42:02.470306Z Last Updated: 2024-09-17T04:20:12.370Z Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-319 Description: Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 29240 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-2441
CVE ID: CVE-2022-30994 State: PUBLISHED Published: 2022-05-18T19:41:32.839531Z Last Updated: 2024-09-17T02:06:03.286Z Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-319 Description: Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 29240 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-2388
CVE ID: CVE-2022-30995 State: PUBLISHED Published: 2023-05-03T10:50:45.883Z Last Updated: 2025-01-30T15:19:32.564Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: Acronis Products: Acronis Cyber Protect 15, Acronis Cyber Backup 12.5 Problem Types: CWE-287 Description: Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-3855
CVE ID: CVE-2022-30996 State: REJECTED Published: N/A Last Updated: 2023-03-10T00:00:00 Description: No description available.
CVE ID: CVE-2022-30997 State: PUBLISHED Published: 2022-06-28T10:06:01 Last Updated: 2024-08-03T07:03:40.234Z Vendors: Yokogawa Electric Corporation Products: STARDOM Controller Problem Types: Use of Hard-coded Credentials Description: Use of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller R4.10 to R4.31, which may allow an attacker with an administrative privilege to read/change configuration settings or update the controller with tampered firmware. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://web-material3.yokogawa.com/1/32885/files/YSAR-22-0007-E.pdf - https://web-material3.yokogawa.com/19/32885/
es: - https://web-material3.yokogawa.com/1/32885/files/YSAR-22-0007-E.pdf - https://web-material3.yokogawa.com/19/32885/files/YSAR-22-0007-J.pdf - https://jvn.jp/vu/JVNVU95452299/index.html - https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-01
CVE ID: CVE-2022-30998 State: PUBLISHED Published: 2022-07-22T16:48:26.624Z Last Updated: 2025-02-20T20:15:50.277Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: WooPlugins.co Products: Homepage Product Organizer for WooCommerce (WordPress plugin) Problem Types: CWE-89 Description: Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in WooPlugins.co's Homepage Product Organizer for WooCommerce plugin <= 1.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/homepage-product-organizer-for-woocommerce/#description - https://patchstack.
eferences: - https://wordpress.org/plugins/homepage-product-organizer-for-woocommerce/#description - https://patchstack.com/database/vulnerability/homepage-product-organizer-for-woocommerce/wordpress-homepage-product-organizer-for-woocommerce-plugin-1-1-multiple-authenticated-sql-injection-sqli-vulnerabilities
CVE ID: CVE-2022-30999 State: PUBLISHED Published: 2022-05-25T21:30:14.000Z Last Updated: 2025-04-22T17:56:29.739Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: FriendsOfFlarum Products: upload Problem Types: CWE-79 Description: FriendsofFlarum (FoF) Upload is an extension that handles file uploads intelligently for your forum. If FoF Upload prior to version 1.2.3 is configured to allow the uploading of SVG files ('image/svg+xml'), navigating directly to an SVG file URI could execute arbitrary Javascript code decided by an attacker. This Javascript code could include the execution of HTTP web requests to Flarum, or any other web service. This could allow dat
vascript code could include the execution of HTTP web requests to Flarum, or any other web service. This could allow data to be leaked by an authenticated Flarum user, or, possibly, for data to be modified maliciously. This issue has been patched with v1.2.3, which now sanitizes uploaded SVG files. As a workaround, remove the ability for users to upload SVG files through FoF Upload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FriendsOfFlarum/upload/security/advisories/GHSA-fm53-mpmp-7qw2 - https://github.com/FriendsOfFlarum/upload/issues/68 - https://github.com/FriendsOfFlarum/upload/pull/318 - https://github.com/FriendsOfFlaru
riendsOfFlarum/upload/issues/68 - https://github.com/FriendsOfFlarum/upload/pull/318 - https://github.com/FriendsOfFlarum/upload/releases/tag/1.2.3
CVE ID: CVE-2022-31000 State: PUBLISHED Published: 2022-06-01T17:25:11.000Z Last Updated: 2025-04-22T17:55:17.777Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: solidusio Products: solidus Problem Types: CWE-352 Description: solidus_backend is the admin interface for the Solidus e-commerce framework. Versions prior to 3.1.6, 3.0.6, and 2.11.16 contain a cross-site request forgery (CSRF) vulnerability. The vulnerability allows attackers to change the state of an order's adjustments if they hold its number, and the execution happens on a store administrator's computer. Users should upgrade to solidus_backend 3.1.6, 3.0.6, or 2.11.16 to receive a patch. Addition
administrator's computer. Users should upgrade to solidus_backend 3.1.6, 3.0.6, or 2.11.16 to receive a patch. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/solidusio/solidus/security/advisories/GHSA-8639-qx56-r428 - https://github.com/solidusio/solidus/commit/de796a2e0be7f154cae48b46e267501559d9716c
CVE ID: CVE-2022-31001 State: PUBLISHED Published: 2022-05-31T00:00:00 Last Updated: 2024-08-03T07:03:40.212Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: freeswitch Products: sofia-sip Problem Types: CWE-125 Description: Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to FreeSWITCH, which may cause crash. This type of crash may be caused by `#define MATCH(s, m) (strncmp(s, m, n = sizeof(m) - 1) == 0)`, which will make `n` bigger and trigger out-of-bound access when `IS_NON_WS(s[n])`. Version 1.13.8 contains a patch for this issue. Additional Analyst Note
gger out-of-bound access when `IS_NON_WS(s[n])`. Version 1.13.8 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-79jq-hh82-cv9g - https://github.com/freeswitch/sofia-sip/commit/a99804b336d0e16d26ab7119d56184d2d7110a36 - https://lists.debian.org/debian-lts-announce/2022/09/msg00001.html - https://security.gentoo.org/glsa/202210-18 - https://www.debian.org/security/2023/dsa-5410
CVE ID: CVE-2022-31002 State: PUBLISHED Published: 2022-05-31T00:00:00.000Z Last Updated: 2025-04-22T17:56:06.613Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: freeswitch Products: sofia-sip Problem Types: CWE-125 Description: Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to FreeSWITCH, which may cause a crash. This type of crash may be caused by a URL ending with `%`. Version 1.13.8 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/freeswitch/sofia-sip/security/