Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276272 - https://vuldb.com/?ctiid.276272 - https://vuldb.com/?submit.400787 - https://github.com/qingluan-bot/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2024-8369 State: PUBLISHED Published: 2024-09-10T11:30:31.628Z Last Updated: 2024-09-10T13:19:26.394Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: metagauss Products: EventPrime – Events Calendar, Bookings and Tickets Problem Types: CWE-862 Description: The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access to Private or Password-protected events due to missing authorization checks in all versions up to, and including, 4.0.4.3. This makes it possible for unauthenticated attackers to view private or password-protected events. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
d attackers to view private or password-protected events. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/97174ec0-a2b7-455e-9bf8-b6f51546beee?source=cve - https://wordpress.org/plugins/eventprime-event-calendar-management/
CVE ID: CVE-2024-8370 State: PUBLISHED Published: 2024-09-01T22:00:04.021Z Last Updated: 2024-09-03T14:23:22.210Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Grocy Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in Grocy up to 4.2.0. This vulnerability affects unknown code of the file /api/files/recipepictures/ of the component SVG File Upload Handler. The manipulation of the argument force_serve_as with the input picture' leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. U
been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. Unfortunately, the project maintainer does not want to be quoted in any way regarding the dispute rationale. The security policy of the project implies that this finding is "practically irrelevant" due to authentication requirements. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276274 - https://vuldb.com/?ctiid.276274 - https://vuldb.com/?submit.400844
CVE ID: CVE-2024-8371 State: REJECTED Published: N/A Last Updated: 2024-09-03T12:25:27.453Z Description: No description available.
CVE ID: CVE-2024-8372 State: PUBLISHED Published: 2024-09-09T14:46:03.134Z Last Updated: 2025-11-03T19:34:58.181Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Google Products: AngularJS Problem Types: CWE-1289 Description: Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing . This issue affects AngularJS versions 1.3.0-rc.4 and greater. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https
larJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status . Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.herodevs.com/vulnerability-directory/cve-2024-8372 - https://codepen.io/herodevs/full/xxoQRNL/0072e627abe03e9cda373bc75b4c1017
CVE ID: CVE-2024-8373 State: PUBLISHED Published: 2024-09-09T14:48:41.513Z Last Updated: 2025-11-03T19:34:59.571Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Google Products: AngularJS Problem Types: CWE-791 Description: Improper sanitization of the value of the [srcset] attribute in <source> HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing . This issue affects all versions of AngularJS. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see h
The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status . Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.herodevs.com/vulnerability-directory/cve-2024-8373 - https://codepen.io/herodevs/full/bGPQgMp/8da9ce87e99403ee13a295c305ebfa0b
CVE ID: CVE-2024-8374 State: PUBLISHED Published: 2024-09-03T10:01:12.871Z Last Updated: 2024-09-03T13:47:37.496Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ultimaker Products: Cura Problem Types: CWE-94 Description: UltiMaker Cura slicer versions 5.7.0-beta.1 through 5.7.2 are vulnerable to code injection via the 3MF format reader (/plugins/ThreeMFReader.py). The vulnerability arises from improper handling of the drop_to_buildplate property within 3MF files, which are ZIP archives containing the model data. When a 3MF file is loaded in Cura, the value of the drop_to_buildplate property is passed to the Python eval() function without proper sanitization,
Cura, the value of the drop_to_buildplate property is passed to the Python eval() function without proper sanitization, allowing an attacker to execute arbitrary code by crafting a malicious 3MF file. This vulnerability poses a significant risk as 3MF files are commonly shared via 3D model databases. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Ultimaker/Cura/commit/285a241eb28da3188c977f85d68937c0dad79c50
CVE ID: CVE-2024-8375 State: PUBLISHED Published: 2024-09-19T15:50:12.825Z Last Updated: 2024-09-19T18:02:42.333Z Vendors: Google Deepmind Products: Reverb Problem Types: CWE-502 Description: There exists a use after free vulnerability in Reverb. Reverb supports the VARIANT datatype, which is supposed to represent an arbitrary object in C++. When a tensor proto of type VARIANT is unpacked, memory is first allocated to store the entire tensor, and a ctor is called on each instance. Afterwards, Reverb copies the content in tensor_content to the previously mentioned pre-allocated memory, which results in the bytes in tensor_content overwriting the vtable pointers of all the objects which were p
ted memory, which results in the bytes in tensor_content overwriting the vtable pointers of all the objects which were previously allocated. Reverb exposes 2 relevant gRPC endpoints: InsertStream and SampleStream. The attacker can insert this stream into the server’s database, then when the client next calls SampleStream they will unpack the tensor into RAM, and when any method on that object is called (including its destructor) the attacker gains control of the Program Counter. We recommend upgrading past git commit https://github.com/google-deepmind/reverb/commit/6a0dcf4c9e842b7f999912f792aaa6f6bd261a25 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goo
9e842b7f999912f792aaa6f6bd261a25 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/google-deepmind/reverb/issues/141 - https://github.com/google-deepmind/reverb/commit/6a0dcf4c9e842b7f999912f792aaa6f6bd261a25
CVE ID: CVE-2024-8376 State: PUBLISHED Published: 2024-10-11T15:18:54.142Z Last Updated: 2024-10-31T09:15:30.149Z Vendors: Eclipse Foundation Products: Mosquitto Problem Types: CWE-401, CWE-416, CWE-755 Description: In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UNSUBSCRIBE" and "PUBLISH" packets. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/216 - https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/217 - https://gitlab.eclipse.org/security/vul
s/216 - https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/217 - https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/218 - https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/227 - https://gitlab.eclipse.org/security/cve-assignement/-/issues/26 - https://github.com/eclipse/mosquitto/releases/tag/v2.0.19 - https://mosquitto.org/ - https://github.com/eclipse-mosquitto/mosquitto/commit/1914b3ee2a18102d0a94cbdbbfeae1afa03edd17
CVE ID: CVE-2024-8377 State: REJECTED Published: N/A Last Updated: 2025-02-08T21:32:50.450Z Description: No description available.
CVE ID: CVE-2024-8378 State: PUBLISHED Published: 2024-11-07T15:07:36.788Z Last Updated: 2024-11-07T19:53:59.721Z Vendors: Unknown Products: Safe SVG Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Safe SVG WordPress plugin before 2.2.6 has its sanitisation code is only running for paths that call wp_handle_upload, but not for example for code that uses wp_handle_sideload which is often used to upload attachments via raw POST data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/17be4bf2-486d-43ab-b87a-2117c8d77ca8/
CVE ID: CVE-2024-8379 State: PUBLISHED Published: 2024-09-30T06:00:07.069Z Last Updated: 2024-10-01T14:13:20.982Z Vendors: Unknown Products: Cost Calculator Builder Problem Types: CWE-89 SQL Injection Description: The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a3463d5a-8215-4958-a6c0-039681c35a50/
CVE ID: CVE-2024-8380 State: PUBLISHED Published: 2024-09-03T00:31:04.892Z Last Updated: 2024-09-03T13:57:42.430Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Contact Manager with Export to VCF Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been rated as critical. This issue affects some unknown processing of the file /endpoint/delete-account.php of the component Delete Contact Handler. The manipulation of the argument contact leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes:
ttack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276353 - https://vuldb.com/?ctiid.276353 - https://vuldb.com/?submit.401249 - https://github.com/jadu101/CVE/blob/main/SourceCodester_Contact_Manager_delete_contact_sqli.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-8381 State: PUBLISHED Published: 2024-09-03T12:32:17.682Z Last Updated: 2025-11-04T16:15:58.218Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Type confusion when looking up a property name in a "with" block Description: A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < 128.2, and Thunderbird < 115.15. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1912715 - https://www.
Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1912715 - https://www.mozilla.org/security/advisories/mfsa2024-39/ - https://www.mozilla.org/security/advisories/mfsa2024-40/ - https://www.mozilla.org/security/advisories/mfsa2024-41/ - https://www.mozilla.org/security/advisories/mfsa2024-43/ - https://www.mozilla.org/security/advisories/mfsa2024-44/
CVE ID: CVE-2024-8382 State: PUBLISHED Published: 2024-09-03T12:32:18.066Z Last Updated: 2025-11-04T16:16:00.702Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran Description: Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence would indicate certain browser features had been used, such as when a user opened the Dev Tools console. This vulnerability affects Firefox
in browser features had been used, such as when a user opened the Dev Tools console. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < 128.2, and Thunderbird < 115.15. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1906744 - https://www.mozilla.org/security/advisories/mfsa2024-39/ - https://www.mozilla.org/security/advisories/mfsa2024-40/ - https://www.mozilla.org/security/advisories/mfsa2024-41/ - https://www.mozilla.org/security/advisories/mfsa2024-43/ - https://www.mozilla.org/security/advisories/mfsa2024-44/
CVE ID: CVE-2024-8383 State: PUBLISHED Published: 2024-09-03T12:32:18.363Z Last Updated: 2025-11-04T16:16:03.161Z Vendors: Mozilla Products: Firefox, Firefox ESR Problem Types: Firefox did not ask before openings news: links in an external application Description: Firefox normally asks for confirmation before asking the operating system to find an application to handle a scheme that the browser does not support. It did not ask before doing so for the Usenet-related schemes news: and snews:. Since most operating systems don't have a trusted newsreader installed by default, an unscrupulous program that the user downloaded could register itself as a handler. The website that served the applicat
n unscrupulous program that the user downloaded could register itself as a handler. The website that served the application download could then launch that application at will. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Firefox ESR < 115.15. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1908496 - https://www.mozilla.org/security/advisories/mfsa2024-39/ - https://www.mozilla.org/security/advisories/mfsa2024-40/ - https://www.mozilla.org/security/advisories/mfsa2024-41/
CVE ID: CVE-2024-8384 State: PUBLISHED Published: 2024-09-03T12:32:18.656Z Last Updated: 2025-11-04T16:16:05.056Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Garbage collection could mis-color cross-compartment objects in OOM conditions Description: The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < 128.2, and Thunderbird < 115.15. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://
Thunderbird < 115.15. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1911288 - https://www.mozilla.org/security/advisories/mfsa2024-39/ - https://www.mozilla.org/security/advisories/mfsa2024-40/ - https://www.mozilla.org/security/advisories/mfsa2024-41/ - https://www.mozilla.org/security/advisories/mfsa2024-43/ - https://www.mozilla.org/security/advisories/mfsa2024-44/
CVE ID: CVE-2024-8385 State: PUBLISHED Published: 2024-09-03T12:32:18.964Z Last Updated: 2024-09-06T18:31:04.224Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: WASM type confusion involving ArrayTypes Description: A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1911909 - https://www.mozilla.org/security/advisories/mfsa2024-39/ - https://www.mozilla.org/security/advisories/mfsa202
1911909 - https://www.mozilla.org/security/advisories/mfsa2024-39/ - https://www.mozilla.org/security/advisories/mfsa2024-40/ - https://www.mozilla.org/security/advisories/mfsa2024-43/
CVE ID: CVE-2024-8386 State: PUBLISHED Published: 2024-09-03T12:32:19.249Z Last Updated: 2024-11-21T15:06:53.584Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: SelectElements could be shown over another site if popups are allowed Description: If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1907032 - https://bugzilla.mozilla.org/show_bug.cgi?id=1909163 - https
s: - https://bugzilla.mozilla.org/show_bug.cgi?id=1907032 - https://bugzilla.mozilla.org/show_bug.cgi?id=1909163 - https://bugzilla.mozilla.org/show_bug.cgi?id=1909529 - https://www.mozilla.org/security/advisories/mfsa2024-39/ - https://www.mozilla.org/security/advisories/mfsa2024-40/ - https://www.mozilla.org/security/advisories/mfsa2024-43/
CVE ID: CVE-2024-8387 State: PUBLISHED Published: 2024-09-03T12:32:19.490Z Last Updated: 2024-09-06T18:31:07.603Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2 Description: Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mo
R < 128.2, and Thunderbird < 128.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1857607%2C1911858%2C1914009 - https://www.mozilla.org/security/advisories/mfsa2024-39/ - https://www.mozilla.org/security/advisories/mfsa2024-40/ - https://www.mozilla.org/security/advisories/mfsa2024-43/
CVE ID: CVE-2024-8388 State: PUBLISHED Published: 2024-09-03T12:32:19.992Z Last Updated: 2024-10-30T16:13:17.309Z Vendors: Mozilla Products: Firefox Problem Types: Fullscreen notice on Android could be hidden under various panels and OS prompts Description: Multiple prompts and panels from both Firefox and the Android OS could be used to obscure the notification announcing the transition to fullscreen mode after the fix for CVE-2023-6870 in Firefox 121. This could lead to spoofing the browser UI if the sudden appearance of the prompt distracted the user from noticing the visual transition happening behind the prompt. These notifications now use the Android Toast feature. *This bug only affec
sual transition happening behind the prompt. These notifications now use the Android Toast feature. *This bug only affects Firefox on Android. Other operating systems are unaffected.* This vulnerability affects Firefox < 130. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1839074%2C1865413%2C1868970%2C1873367%2C1877820%2C1884642%2C1886469%2C1894326%2C1894891%2C1897648 - https://bugzilla.mozilla.org/show_bug.cgi?id=1902996 - https://www.mozilla.org/security/advisories/mfsa2024-39/
CVE ID: CVE-2024-8389 State: PUBLISHED Published: 2024-09-03T12:32:20.303Z Last Updated: 2024-09-06T18:31:08.729Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 130 Description: Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 130. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1907230%2C1909367 - https://www.mozilla.org/security/advisories/mfsa2024-39/
CVE ID: CVE-2024-8391 State: PUBLISHED Published: 2024-09-04T15:27:58.478Z Last Updated: 2024-09-04T17:40:20.318Z Vendors: Eclipse Foundation Products: Eclipse Vert.x Problem Types: CWE-770 Description: In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload (Maven GAV: io.vertx:vertx-grpc-server and io.vertx:vertx-grpc-client). This is fixed in the 4.5.10 version. Note this does not affect the Vert.x gRPC server based grpc-java and Netty libraries (Maven GAV: io.vertx:vertx-grpc) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.eclipse.org/security/cve-assignement/-/issues/31 - https://github.com/eclipse-v
lnrichment: References: - https://gitlab.eclipse.org/security/cve-assignement/-/issues/31 - https://github.com/eclipse-vertx/vertx-grpc/issues/113
CVE ID: CVE-2024-8392 State: PUBLISHED Published: 2024-10-26T08:36:01.502Z Last Updated: 2024-10-28T19:41:54.248Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: delabon Products: WordPress Post Grid Layouts with Pagination – Sogrid Problem Types: CWE-98 Description: The WordPress Post Grid Layouts with Pagination – Sogrid plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.5.2 via the 'tab' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be
to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. This can also be exploited via CSRF techniques. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/62d81e01-9b6e-48e9-b9da-85444a3694e7?source=cve - https://plugins.trac.wordpress.org/browser/sogrid/trunk/src/admin-panel/views/panel.php
CVE ID: CVE-2024-8393 State: PUBLISHED Published: 2025-08-16T03:38:52.456Z Last Updated: 2025-08-18T13:23:58.482Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: delabon Products: Woocommerce Blocks – Woolook Problem Types: CWE-98 Description: The Woocommerce Blocks – Woolook plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.0 via the via the 'tab' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtai
on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Please note that this can also be exploited via CSRF techniques. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cf3916fc-f652-4615-872c-3f007b8999df?source=cve - https://plugins.trac.wordpress.org/browser/woolook/trunk/includes/views/panel.php