Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-5217 State: PUBLISHED Published: 2020-01-23T02:15:17 Last Updated: 2024-08-04T08:22:08.919Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Twitter Products: secure_headers Problem Types: CWE-95 Description: In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.8.0, 5.1.0, and 6.2.0. If user-supplied input was passed into append/override_content_security_policy_directives, a semicolon could be injected leading to directive injection. This could be used to e.g. override a script-src directive. Duplicate directives are ignored and the first one wins. The directives in secure_headers are
de a script-src directive. Duplicate directives are ignored and the first one wins. The directives in secure_headers are sorted alphabetically so they pretty much all come before script-src. A previously undefined directive would receive a value even if SecureHeaders::OPT_OUT was supplied. The fixed versions will silently convert the semicolons to spaces and emit a deprecation warning when this happens. This will result in innocuous browser console messages if being exploited/accidentally used. In future releases, we will raise application errors resulting in 500s. Depending on what major version you are using, the fixed versions are 6.2.0, 5.1.0, 3.8.0. Additional Analyst Notes: - CVE Progr
g on what major version you are using, the fixed versions are 6.2.0, 5.1.0, 3.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/twitter/secure_headers/security/advisories/GHSA-xq52-rv6w-397c - https://github.com/twitter/secure_headers/issues/418 - https://github.com/twitter/secure_headers/pull/421 - https://github.com/twitter/secure_headers/commit/936a160e3e9659737a9f9eafce13eea36b5c9fa3
CVE ID: CVE-2020-5218 State: PUBLISHED Published: 2020-01-27T20:25:13 Last Updated: 2024-08-04T08:22:08.934Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Sylius Products: Sylius Problem Types: CWE-444 Description: Affected versions of Sylius give attackers the ability to switch channels via the _channel_code GET parameter in production environments. This was meant to be enabled only when kernel.debug is set to true. However, if no sylius_channel.debug is set explicitly in the configuration, the default value which is kernel.debug will be not resolved and cast to boolean, enabling this debug feature even if that parameter is set to false. Patch has been pr
not resolved and cast to boolean, enabling this debug feature even if that parameter is set to false. Patch has been provided for Sylius 1.3.x and newer - 1.3.16, 1.4.12, 1.5.9, 1.6.5. Versions older than 1.3 are not covered by our security support anymore. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Sylius/SyliusResourceBundle/security/advisories/GHSA-8vp7-j5cj-vvm2 - https://github.com/FriendsOfPHP/security-advisories/blob/master/sylius/resource-bundle/CVE-2020-5220.yaml
CVE ID: CVE-2020-5219 State: PUBLISHED Published: 2020-01-24T15:25:14 Last Updated: 2024-08-04T08:22:08.893Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: peerigon Products: angular-expressions Problem Types: CWE-74 Description: Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compile(userControlledInput) where userControlledInput is text that comes from user input. If running angular-expressions in the browser, an attacker could run any browser script when the application code calls expressions.compile(userControlledInput). If running angular-expressions on the server, an attacker could run any Javas
expressions.compile(userControlledInput). If running angular-expressions on the server, an attacker could run any Javascript expression, thus gaining Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/peerigon/angular-expressions/security/advisories/GHSA-hxhm-96pp-2m43 - https://github.com/peerigon/angular-expressions/commit/061addfb9a9e932a970e5fcb913d020038e65667 - http://blog.angularjs.org/2016/09/angular-16-expression-sandbox-removal.html
CVE ID: CVE-2020-5220 State: PUBLISHED Published: 2020-01-27T20:15:17 Last Updated: 2024-08-04T08:22:08.763Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Sylius Products: SyliusResourceBundle Problem Types: CWE-444 Description: Sylius ResourceBundle accepts and uses any serialisation groups to be passed via a HTTP header. This might lead to data exposure by using an unintended serialisation group - for example it could make Shop API use a more permissive group from Admin API. Anyone exposing an API with ResourceBundle's controller is affected. The vulnerable versions are: <1.3 || >=1.3.0 <=1.3.12 || >=1.4.0 <=1.4.5 || >=1.5.0 <=1.5.0 || >=1.6.0 <=1.6.2. T
ected. The vulnerable versions are: <1.3 || >=1.3.0 <=1.3.12 || >=1.4.0 <=1.4.5 || >=1.5.0 <=1.5.0 || >=1.6.0 <=1.6.2. The patch is provided for Sylius ResourceBundle 1.3.13, 1.4.6, 1.5.1 and 1.6.3, but not for any versions below 1.3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Sylius/SyliusResourceBundle/security/advisories/GHSA-8vp7-j5cj-vvm2 - https://github.com/FriendsOfPHP/security-advisories/blob/master/sylius/resource-bundle/CVE-2020-5220.yaml
CVE ID: CVE-2020-5221 State: PUBLISHED Published: 2020-01-22T18:50:13 Last Updated: 2024-08-04T08:22:08.876Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: troglobit Products: uftpd Problem Types: CWE-22 Description: In uftpd before 2.11, it is possible for an unauthenticated user to perform a directory traversal attack using multiple different FTP commands and read and write to arbitrary locations on the filesystem due to the lack of a well-written chroot jail in compose_abspath(). This has been fixed in version 2.11 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/troglobit/uftpd/security/advisories/GHSA-wmx8-v7mx-6x9h -
tes: - CVE Program Container: References: - https://github.com/troglobit/uftpd/security/advisories/GHSA-wmx8-v7mx-6x9h - https://github.com/troglobit/uftpd/commit/455b47d3756aed162d2d0ef7f40b549f3b5b30fe
CVE ID: CVE-2020-5222 State: PUBLISHED Published: 2020-01-30T20:50:13 Last Updated: 2024-08-04T08:22:08.720Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: opencast Products: opencast Problem Types: CWE-798 Description: Opencast before 7.6 and 8.1 enables a remember-me cookie based on a hash created from the username, password, and an additional system key. This means that an attacker getting access to a remember-me token for one server can get access to all servers which allow log-in using the same credentials without ever needing the credentials. This problem is fixed in Opencast 7.6 and Opencast 8.1 Additional Analyst Notes: - CVE Program Container: Refe
dentials. This problem is fixed in Opencast 7.6 and Opencast 8.1 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opencast/opencast/security/advisories/GHSA-mh8g-hprg-8363 - https://github.com/opencast/opencast/commit/1a7172c95af8d542a77ae5b153e4c834dd4788a6
CVE ID: CVE-2020-5223 State: PUBLISHED Published: 2020-01-23T01:35:14 Last Updated: 2024-08-04T08:22:08.955Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N) Vendors: PrivateBin Products: PrivateBin Problem Types: CWE-79 Description: In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible. Under certain conditions, a user provided attachment file name can inject HTML leading to a persistent Cross-site scripting (XSS) vulnerability. The vulnerability has been fixed in PrivateBin v1.3.2 & v1.2.2. Admins are urged to upgrade to these versions to protect the affected users. Additional Analyst Notes: - CVE Program Container: R
e urged to upgrade to these versions to protect the affected users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-8j72-p2wm-6738 - https://privatebin.info/news/v1.3.2-v1.2.2-release.html - https://github.com/PrivateBin/PrivateBin/commit/8d0ac336d23cd8c98e71d5f21cdadcae9c8a26e6 - https://github.com/PrivateBin/PrivateBin/issues/554
CVE ID: CVE-2020-5224 State: PUBLISHED Published: 2020-01-24T20:05:15 Last Updated: 2024-08-04T08:22:08.941Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N) Vendors: Jazzband Products: django-user-sessions Problem Types: CWE-287 Description: In Django User Sessions (django-user-sessions) before 1.7.1, the views provided allow users to terminate specific sessions. The session key is used to identify sessions, and thus included in the rendered HTML. In itself this is not a problem. However if the website has an XSS vulnerability, the session key could be extracted by the attacker and a session takeover could happen. Additional Analyst Notes: - CVE Program Container: Re
be extracted by the attacker and a session takeover could happen. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Bouke/django-user-sessions/security/advisories/GHSA-5fq8-3q2f-4m5g - https://github.com/jazzband/django-user-sessions/commit/f0c4077e7d1436ba6d721af85cee89222ca5d2d9
CVE ID: CVE-2020-5225 State: PUBLISHED Published: 2020-01-24T20:55:14 Last Updated: 2024-08-04T08:22:08.946Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: simplesamlphp Products: SimpleSAMLphp Problem Types: CWE-532 Description: Log injection in SimpleSAMLphp before version 1.18.4. The www/erroreport.php script, which receives error reports and sends them via email to the system administrator, did not properly sanitize the report identifier obtained from the request. This allows an attacker, under specific circumstances, to inject new log lines by manually crafting this report ID. When configured to use the file logging handler, SimpleSAMLphp will output a
lines by manually crafting this report ID. When configured to use the file logging handler, SimpleSAMLphp will output all its logs by appending each log line to a given file. Since the reportID parameter received in a request sent to www/errorreport.php was not properly sanitized, it was possible to inject newline characters into it, effectively allowing a malicious user to inject new log lines with arbitrary content. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/simplesamlphp/simplesamlphp/security/advisories/GHSA-6gc6-m364-85ww - https://simplesamlphp.org/security/202001-02
CVE ID: CVE-2020-5226 State: PUBLISHED Published: 2020-01-24T21:15:15 Last Updated: 2024-08-04T08:22:08.731Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: simplesamlphp Products: SimpleSAMLphp Problem Types: CWE-79 Description: Cross-site scripting in SimpleSAMLphp before version 1.18.4. The www/erroreport.php script allows error reports to be submitted and sent to the system administrator. Starting with SimpleSAMLphp 1.18.0, a new SimpleSAML\Utils\EMail class was introduced to handle sending emails, implemented as a wrapper of an external dependency. This new wrapper allows us to use Twig templates in order to create the email sent with an error report. S
l dependency. This new wrapper allows us to use Twig templates in order to create the email sent with an error report. Since Twig provides automatic escaping of variables, manual escaping of the free-text field in www/errorreport.php was removed to avoid double escaping. However, for those not using the new user interface yet, an email template is hardcoded into the class itself in plain PHP. Since no escaping is provided in this template, it is then possible to inject HTML inside the template by manually crafting the contents of the free-text field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/simplesamlphp/simplesamlphp/security/advisories/GHSA-mj9p-v
s: - CVE Program Container: References: - https://github.com/simplesamlphp/simplesamlphp/security/advisories/GHSA-mj9p-v2r8-wf8w - https://simplesamlphp.org/security/202001-01
CVE ID: CVE-2020-5227 State: PUBLISHED Published: 2020-01-28T22:40:14 Last Updated: 2024-08-04T08:22:08.917Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: lkiesow Products: python-feedgen Problem Types: CWE-776 Description: Feedgen (python feedgen) before 0.9.0 is susceptible to XML Denial of Service attacks. The *feedgen* library allows supplying XML as content for some of the available fields. This XML will be parsed and integrated into the existing XML tree. During this process, feedgen is vulnerable to XML Denial of Service Attacks (e.g. XML Bomb). This becomes a concern in particular if feedgen is used to include content from untrused sources and if X
.g. XML Bomb). This becomes a concern in particular if feedgen is used to include content from untrused sources and if XML (including XHTML) is directly included instead of providing plain tex content only. This problem has been fixed in feedgen 0.9.0 which disallows XML entity expansion and external resources. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lkiesow/python-feedgen/security/advisories/GHSA-g8q7-xv52-hf9f - https://docs.microsoft.com/en-us/archive/msdn-magazine/2009/november/xml-denial-of-service-attacks-and-defenses - https://github.com/lkiesow/python-feedgen/commit/f57a01b20fa4aaaeccfa417f28e66b4084b9d0cf - https://lists.fedoraproject.org/
s://github.com/lkiesow/python-feedgen/commit/f57a01b20fa4aaaeccfa417f28e66b4084b9d0cf - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T6I5ENUYGFNMIH6ZQ62FZ6VU2WD3SIOI/
CVE ID: CVE-2020-5228 State: PUBLISHED Published: 2020-01-30T19:50:13 Last Updated: 2024-08-04T08:22:08.952Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N) Vendors: opencast Products: opencast Problem Types: CWE-862 Description: Opencast before 8.1 and 7.6 allows unauthorized public access to all media and metadata by default via OAI-PMH. OAI-PMH is part of the default workflow and is activated by default, requiring active user intervention of users to protect media. This leads to users unknowingly handing out public access to events without their knowledge. The problem has been addressed in Opencast 7.6 and 8.1 where the OAI-PMH endpoint is configured to require user
owledge. The problem has been addressed in Opencast 7.6 and 8.1 where the OAI-PMH endpoint is configured to require users with `ROLE_ADMIN` by default. In addition to this, Opencast 9 removes the OAI-PMH publication from the default workflow, making the publication a conscious decision users have to make by updating their workflows. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opencast/opencast/security/advisories/GHSA-6f54-3qr9-pjgj - https://github.com/opencast/opencast/blob/1fb812c7810c78f09f29a7f455ff920417924307/etc/security/mh_default_org.xml#L271-L276
CVE ID: CVE-2020-5229 State: PUBLISHED Published: 2020-01-30T20:05:17 Last Updated: 2024-08-04T08:22:08.967Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: opencast Products: opencast Problem Types: CWE-327 Description: Opencast before 8.1 stores passwords using the rather outdated and cryptographically insecure MD5 hash algorithm. Furthermore, the hashes are salted using the username instead of a random salt, causing hashes for users with the same username and password to collide which is problematic especially for popular users like the default `admin` user. This essentially means that for an attacker, it might be feasible to reconstruct a user's password g
fault `admin` user. This essentially means that for an attacker, it might be feasible to reconstruct a user's password given access to these hashes. Note that attackers needing access to the hashes means that they must gain access to the database in which these are stored first to be able to start cracking the passwords. The problem is addressed in Opencast 8.1 which now uses the modern and much stronger bcrypt password hashing algorithm for storing passwords. Note, that old hashes remain MD5 until the password is updated. For a list of users whose password hashes are stored using MD5, take a look at the `/user-utils/users/md5.json` REST endpoint. Additional Analyst Notes: - CVE Program Cont
d using MD5, take a look at the `/user-utils/users/md5.json` REST endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opencast/opencast/security/advisories/GHSA-h362-m8f2-5x7c - https://github.com/opencast/opencast/commit/32bfbe5f78e214e2d589f92050228b91d704758e
CVE ID: CVE-2020-5230 State: PUBLISHED Published: 2020-01-30T20:55:14 Last Updated: 2024-08-04T08:22:09.097Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: opencast Products: opencast Problem Types: CWE-99 Description: Opencast before 8.1 and 7.6 allows almost arbitrary identifiers for media packages and elements to be used. This can be problematic for operation and security since such identifiers are sometimes used for file system operations which may lead to an attacker being able to escape working directories and write files to other locations. In addition, Opencast's Id.toString(…) vs Id.compact(…) behavior, the latter trying to mitigate some of the file
tions. In addition, Opencast's Id.toString(…) vs Id.compact(…) behavior, the latter trying to mitigate some of the file system problems, can cause errors due to identifier mismatch since an identifier may unintentionally change. This issue is fixed in Opencast 7.6 and 8.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opencast/opencast/security/advisories/GHSA-w29m-fjp4-qhmq - https://github.com/opencast/opencast/commit/bbb473f34ab95497d6c432c81285efb0c739f317
CVE ID: CVE-2020-5231 State: PUBLISHED Published: 2020-01-30T21:15:16 Last Updated: 2024-08-04T08:22:08.962Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: opencast Products: opencast Problem Types: CWE-285 Description: In Opencast before 7.6 and 8.1, users with the role ROLE_COURSE_ADMIN can use the user-utils endpoint to create new users not including the role ROLE_ADMIN. ROLE_COURSE_ADMIN is a non-standard role in Opencast which is referenced neither in the documentation nor in any code (except for tests) but only in the security configuration. From the name – implying an admin for a specific course – users would never expect that this role allows user c
uration. From the name – implying an admin for a specific course – users would never expect that this role allows user creation. This issue is fixed in 7.6 and 8.1 which both ship a new default security configuration. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opencast/opencast/security/advisories/GHSA-94qw-r73x-j7hg - https://github.com/opencast/opencast/commit/72fad0031d8a82c860e2bde0b27570c5042320ee
CVE ID: CVE-2020-5232 State: PUBLISHED Published: 2020-01-30T23:55:13 Last Updated: 2024-08-04T08:22:09.005Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: ensdomains Products: @ensdomains/ens Problem Types: CWE-285 Description: A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ensdomains/ens/security/advisories/GHSA-8f9f-pc5v-9r5h - https://github.com/ensdomains/
References: - https://github.com/ensdomains/ens/security/advisories/GHSA-8f9f-pc5v-9r5h - https://github.com/ensdomains/ens/commit/36e10e71fcddcade88646821e0a57cc6c19e1ecf
CVE ID: CVE-2020-5233 State: PUBLISHED Published: 2020-01-30T17:45:17 Last Updated: 2024-08-04T08:22:09.082Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L) Vendors: pusher Products: OAuth2 Proxy Problem Types: CWE-601 Description: OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version 5.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pusher/oauth2_proxy/security/advisories/GHSA-qqxw-m5fj-f7gv - https://github.com/pusher/oauth2_proxy/commit/a316f8a06f3c0ca2b5fc5fa18a91781b313607b2 - https://github.com/pusher/oauth2_proxy/relea
b.com/pusher/oauth2_proxy/commit/a316f8a06f3c0ca2b5fc5fa18a91781b313607b2 - https://github.com/pusher/oauth2_proxy/releases/tag/v5.0.0
CVE ID: CVE-2020-5234 State: PUBLISHED Published: 2020-01-31T17:50:14 Last Updated: 2024-08-04T08:22:09.077Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: neuecc Products: MessagePack, MessagePack.ImmutableCollection, MessagePack.ReactiveProperty, MessagePack.UnityShims Problem Types: CWE-121 Description: MessagePack for C# and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/neuecc/MessagePac
remediation steps. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/neuecc/MessagePack-CSharp/security/advisories/GHSA-7q36-4xx7-xcxf - https://github.com/neuecc/MessagePack-CSharp/commit/56fa86219d01d0a183babbbbcb34abbdea588a02 - https://github.com/neuecc/MessagePack-CSharp/issues/810 - https://github.com/neuecc/MessagePack-CSharp/commit/f88684078698386df02204f13faeff098a61f007
CVE ID: CVE-2020-5235 State: PUBLISHED Published: 2020-02-04T03:00:18 Last Updated: 2024-08-04T08:22:09.040Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: nanopb Products: Nanopb Problem Types: CWE-125 Description: There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4. When nanopb is compiled with PB_ENABLE_MALLOC, the message to be decoded contains a repeated string, bytes or message field and realloc() runs out of memory when expanding the array nanopb can end up calling `free()` on a pointer value that comes from uninitialized memory. Depending on platform this can result in a crash or further memory cor
inter value that comes from uninitialized memory. Depending on platform this can result in a crash or further memory corruption, which may be exploitable in some cases. This problem is fixed in nanopb-0.4.1, nanopb-0.3.9.5, nanopb-0.2.9.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nanopb/nanopb/security/advisories/GHSA-gcx3-7m76-287p - https://github.com/nanopb/nanopb/commit/45582f1f97f49e2abfdba1463d1e1027682d9856 - https://github.com/nanopb/nanopb/commit/7b396821ddd06df8e39143f16e1dc0a4645b89a3 - https://github.com/nanopb/nanopb/commit/aa9d0d1ca78d6adec3adfeecf3a706c7f9df81f2
CVE ID: CVE-2020-5236 State: PUBLISHED Published: 2020-02-04T03:05:14 Last Updated: 2024-08-04T08:22:09.008Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: Pylons Products: Waitress Problem Types: CWE-400 Description: Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regular expression engine to catastrophically backtrack causing the process to use 100% CPU time and blocking any other interactions. This allows an attacker to send a single request with an invalid header and take the service offline. This issue was int