Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tion/security/advisories/GHSA-8gv3-3j7f-wg94 - https://packagist.org/packages/nette/application - https://packagist.org/packages/nette/nette - https://lists.debian.org/debian-lts-announce/2021/04/msg00003.html
CVE ID: CVE-2020-15228 State: PUBLISHED Published: 2020-10-01T17:25:12 Last Updated: 2024-08-04T13:08:22.896Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: actions Products: toolkit Problem Types: CWE-20 Description: In the `@actions/core` npm module before version 1.2.6,`addPath` and `exportVariable` functions communicate with the Actions Runner over stdout by generating a string in a specific format. Workflows that log untrusted data to stdout may invoke these commands, resulting in the path or environment variables being modified without the intention of the workflow or action author. The runner will release an update that disables the `set-env` and `add-p
the intention of the workflow or action author. The runner will release an update that disables the `set-env` and `add-path` workflow commands in the near future. For now, users should upgrade to `@actions/core v1.2.6` or later, and replace any instance of the `set-env` or `add-path` commands in their workflows with the new Environment File Syntax. Workflows and actions using the old commands or older versions of the toolkit will start to warn, then error out during workflow execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/actions/toolkit/security/advisories/GHSA-mfwh-5m23-j46w - http://packetstormsecurity.com/files/159794/GitHub-Widespread-Injec
ns/toolkit/security/advisories/GHSA-mfwh-5m23-j46w - http://packetstormsecurity.com/files/159794/GitHub-Widespread-Injection.html
CVE ID: CVE-2020-15229 State: PUBLISHED Published: 2020-10-14T18:55:14 Last Updated: 2024-08-04T13:08:23.183Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N) Vendors: hpcng Products: singularity Problem Types: CWE-22 Description: Singularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability. Due to insecure handling of path traversal and the lack of path sanitization within `unsquashfs`, it is possible to overwrite/create any files on the host filesystem during the extraction with a crafted squashfs filesystem. The extraction occurs automatically for unprivileged (either installation or with `allow setuid = no`) run of Singularity
he extraction occurs automatically for unprivileged (either installation or with `allow setuid = no`) run of Singularity when a user attempt to run an image which is a local SIF image or a single file containing a squashfs filesystem and is coming from remote sources `library://` or `shub://`. Image build is also impacted in a more serious way as it can be used by a root user, allowing an attacker to overwrite/create files leading to a system compromise, so far bootstrap methods `library`, `shub` and `localimage` are triggering the squashfs extraction. This issue is addressed in Singularity 3.6.4. All users are advised to upgrade to 3.6.4 especially if they use Singularity mainly for buildin
ed in Singularity 3.6.4. All users are advised to upgrade to 3.6.4 especially if they use Singularity mainly for building image as root user. There is no solid workaround except to temporary avoid to use unprivileged mode with single file images in favor of sandbox images instead. Regarding image build, temporary avoid to build from `library` and `shub` sources and as much as possible use `--fakeroot` or a VM for that. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hpcng/singularity/security/advisories/GHSA-7gcp-w6ww-2xv9 - https://github.com/hpcng/singularity/blob/v3.6.4/CHANGELOG.md#security-related-fixes - https://github.com/hpcng/singularity/pull/5611
b.com/hpcng/singularity/blob/v3.6.4/CHANGELOG.md#security-related-fixes - https://github.com/hpcng/singularity/pull/5611 - https://github.com/hpcng/singularity/commit/eba3dea260b117198fdb6faf41f2482ab2f8d53e - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00071.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00070.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00009.html
CVE ID: CVE-2020-15230 State: PUBLISHED Published: 2020-10-02T18:55:14 Last Updated: 2024-08-04T13:08:22.827Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N) Vendors: vapor Products: vapor Problem Types: CWE-22 Description: Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application. Only applications using FileMiddleware are affected. This is fixed in version 4.29.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vapor/vapor/security/advisories/GHSA-vcvg-xgr8-p5gq - https://github.com/vapor/vapor/pull/2500 - https://github.com/vapor/v
or/vapor/security/advisories/GHSA-vcvg-xgr8-p5gq - https://github.com/vapor/vapor/pull/2500 - https://github.com/vapor/vapor/commit/cf1651f7ff76515593f4d8ca6e6e15d2247fe255
CVE ID: CVE-2020-15231 State: PUBLISHED Published: 2020-10-02T19:40:14 Last Updated: 2024-08-04T13:08:23.265Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: mapfish Products: mapfish-print Problem Types: CWE-79 Description: In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mapfish/mapfish-print/security/advisories/GHSA-w534-q4xf-h5v2 - https://github.com/mapfish/mapfish-print/pull/1397/commits/89155f2506b9cee822e15ce60ccae390a1419d5e
CVE ID: CVE-2020-15232 State: PUBLISHED Published: 2020-10-02T19:45:15 Last Updated: 2024-08-04T13:08:22.897Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: mapfish Products: mapfish-print Problem Types: CWE-611 Description: In mapfish-print before version 3.24, a user can do to an XML External Entity (XXE) attack with the provided SDL style. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mapfish/mapfish-print/security/advisories/GHSA-vjv6-gq77-3mjw - https://github.com/mapfish/mapfish-print/pull/1397/commits/e1d0527d13db06b2b62ca7d6afb9e97dacd67a0e
CVE ID: CVE-2020-15233 State: PUBLISHED Published: 2020-10-02T20:40:17 Last Updated: 2024-08-04T13:08:22.914Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: ory Products: fosite Problem Types: CWE-20, CWE-601 Description: ORY Fosite is a security first OAuth2 & OpenID Connect framework for Go. In Fosite from version 0.30.2 and before version 0.34.1, there is an issue in which an an attacker can override the registered redirect URL by performing an OAuth flow and requesting a redirect URL that is to the loopback adapter. Attackers can provide both custom URL query parameters to their loopback redirect URL, as well as actually overriding the host of the regis
de both custom URL query parameters to their loopback redirect URL, as well as actually overriding the host of the registered redirect URL. These attacks are only applicable in scenarios where the attacker has access over the loopback interface. This vulnerability has been patched in ORY Fosite v0.34.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ory/fosite/commit/cdee51ebe721bfc8acca0fd0b86b030ca70867bf - https://github.com/ory/fosite/security/advisories/GHSA-rfq3-w54c-f9q5
CVE ID: CVE-2020-15234 State: PUBLISHED Published: 2020-10-02T20:40:12 Last Updated: 2024-08-04T13:08:23.189Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: ory Products: fosite Problem Types: CWE-20, CWE-601 Description: ORY Fosite is a security first OAuth2 & OpenID Connect framework for Go. In Fosite before version 0.34.1, the OAuth 2.0 Client's registered redirect URLs and the redirect URL provided at the OAuth2 Authorization Endpoint where compared using strings.ToLower while they should have been compared with a simple string match. This allows an attacker to register a client with allowed redirect URL https://example.com/callback. Then perform an OAu
This allows an attacker to register a client with allowed redirect URL https://example.com/callback. Then perform an OAuth2 flow and requesting redirect URL https://example.com/CALLBACK. Instead of an error (invalid redirect URL), the browser is redirected to https://example.com/CALLBACK with a potentially successful OAuth2 response, depending on the state of the overall OAuth2 flow (the user might still deny the request for example). This vulnerability has been patched in ORY Fosite v0.34.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ory/fosite/security/advisories/GHSA-grfp-q2mm-hfp6 - https://github.com/ory/fosite/commit/cdee51ebe721bfc8acca0fd0b86b
m/ory/fosite/security/advisories/GHSA-grfp-q2mm-hfp6 - https://github.com/ory/fosite/commit/cdee51ebe721bfc8acca0fd0b86b030ca70867bf
CVE ID: CVE-2020-15235 State: PUBLISHED Published: 2020-10-05T15:15:13 Last Updated: 2024-08-04T13:08:23.234Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ractf Products: core Problem Types: CWE-200 Description: In RACTF before commit f3dc89b, unauthenticated users are able to get the value of sensitive config keys that would normally be hidden to everyone except admins. All versions after commit f3dc89b9f6ab1544a289b3efc06699b13d63e0bd(3/10/20) are patched. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ractf/core/security/advisories/GHSA-ph67-c355-52vm - https://github.com/ractf/core/commit/f3dc89b9f6ab1544a289b3efc0
com/ractf/core/security/advisories/GHSA-ph67-c355-52vm - https://github.com/ractf/core/commit/f3dc89b9f6ab1544a289b3efc06699b13d63e0bd
CVE ID: CVE-2020-15236 State: PUBLISHED Published: 2020-10-05T14:55:12 Last Updated: 2024-08-04T13:08:22.847Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Requarks Products: wiki Problem Types: CWE-22 Description: In Wiki.js before version 2.5.151, directory traversal outside of Wiki.js context is possible when a storage module with local asset cache fetching is enabled. A malicious user can potentially read any file on the file system by crafting a special URL that allows for directory traversal. This is only possible when a storage module implementing local asset cache (e.g Local File System or Git) is enabled and that no web application firewall solution
e implementing local asset cache (e.g Local File System or Git) is enabled and that no web application firewall solution (e.g. cloudflare) strips potentially malicious URLs. Commit 084dcd69d1591586ee4752101e675d5f0ac6dcdc fixes this vulnerability by sanitizing the path before it is passed on to the storage module. The sanitization step removes any directory traversal (e.g. `..` and `.`) sequences as well as invalid filesystem characters from the path. As a workaround, disable any storage module with local asset caching capabilities such as Local File System and Git. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Requarks/wiki/security/advisories/GHSA-whpv
nal Analyst Notes: - CVE Program Container: References: - https://github.com/Requarks/wiki/security/advisories/GHSA-whpv-5xg2-w527 - https://github.com/Requarks/wiki/commit/084dcd69d1591586ee4752101e675d5f0ac6dcdc
CVE ID: CVE-2020-15237 State: PUBLISHED Published: 2020-10-05T18:30:14 Last Updated: 2024-08-04T13:08:22.833Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: shrinerb Products: shrine Problem Types: CWE-208, CWE-203 Description: In Shrine before version 3.3.0, when using the `derivation_endpoint` plugin, it's possible for the attacker to use a timing attack to guess the signature of the derivation URL. The problem has been fixed by comparing sent and calculated signature in constant time, using `Rack::Utils.secure_compare`. Users using the `derivation_endpoint` plugin are urged to upgrade to Shrine 3.3.0 or greater. A possible workaround is provided in the l
`derivation_endpoint` plugin are urged to upgrade to Shrine 3.3.0 or greater. A possible workaround is provided in the linked advisory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shrinerb/shrine/security/advisories/GHSA-5jjv-x4fq-qjwp - https://github.com/shrinerb/shrine/commit/1b27090ce31543bf39f186c20ea47c8250fca2f0
CVE ID: CVE-2020-15238 State: PUBLISHED Published: 2020-10-27T19:00:20 Last Updated: 2024-08-04T13:08:23.191Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L) Vendors: blueman-project Products: blueman Problem Types: CWE-74 Description: Blueman is a GTK+ Bluetooth Manager. In Blueman before 2.1.4, the DhcpClient method of the D-Bus interface to blueman-mechanism is prone to an argument injection vulnerability. The impact highly depends on the system configuration. If Polkit-1 is disabled and for versions lower than 2.0.6, any local user can possibly exploit this. If Polkit-1 is enabled for version 2.0.6 and later, a possible attacker needs to be allowed to use the `org.
ploit this. If Polkit-1 is enabled for version 2.0.6 and later, a possible attacker needs to be allowed to use the `org.blueman.dhcp.client` action. That is limited to users in the wheel group in the shipped rules file that do have the privileges anyway. On systems with ISC DHCP client (dhclient), attackers can pass arguments to `ip link` with the interface name that can e.g. be used to bring down an interface or add an arbitrary XDP/BPF program. On systems with dhcpcd and without ISC DHCP client, attackers can even run arbitrary scripts by passing `-c/path/to/script` as an interface name. Patches are included in 2.1.4 and master that change the DhcpClient D-Bus method(s) to accept BlueZ net
interface name. Patches are included in 2.1.4 and master that change the DhcpClient D-Bus method(s) to accept BlueZ network object paths instead of network interface names. A backport to 2.0(.8) is also available. As a workaround, make sure that Polkit-1-support is enabled and limit privileges for the `org.blueman.dhcp.client` action to users that are able to run arbitrary commands as root anyway in /usr/share/polkit-1/rules.d/blueman.rules. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blueman-project/blueman/security/advisories/GHSA-jpc9-mgw6-2xwx - https://github.com/blueman-project/blueman/releases/tag/2.1.4 - https://bugs.launchpad.net/ubuntu/+sour
jpc9-mgw6-2xwx - https://github.com/blueman-project/blueman/releases/tag/2.1.4 - https://bugs.launchpad.net/ubuntu/+source/blueman/+bug/1897287 - https://www.debian.org/security/2020/dsa-4781 - http://packetstormsecurity.com/files/159740/Blueman-Local-Root-Privilege-Escalation.html - https://lists.debian.org/debian-lts-announce/2020/11/msg00005.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFLMNHAHX5HPIKC5IG6F25HO5Z6RH2N/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W52NP7HRFTNAVNZLGKY4GR3JIZG5KKGS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
age/W52NP7HRFTNAVNZLGKY4GR3JIZG5KKGS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3F4EQU6CAPBKAPJ42HTB473NJLXFKB32/ - https://security.gentoo.org/glsa/202011-11
CVE ID: CVE-2020-15239 State: PUBLISHED Published: 2020-10-06T18:30:15 Last Updated: 2024-08-04T13:08:23.202Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: horazont Products: xmpp-http-upload Problem Types: CWE-22 Description: In xmpp-http-upload before version 0.4.0, when the GET method is attacked, attackers can read files which have a `.data` suffix and which are accompanied by a JSON file with the `.meta` suffix. This can lead to Information Disclosure and in some shared-hosting scenarios also to circumvention of authentication or other limitations on the outbound (GET) traffic. For example, in a scenario where a single server has multiple instances of th
limitations on the outbound (GET) traffic. For example, in a scenario where a single server has multiple instances of the application running (with separate DATA_ROOT settings), an attacker who has knowledge about the directory structure is able to read files from any other instance to which the process has read access. If instances have individual authentication (for example, HTTP authentication via a reverse proxy, source IP based filtering) or other restrictions (such as quotas), attackers may circumvent those limits in such a scenario by using the Directory Traversal to retrieve data from the other instances. If the associated XMPP server (or anyone knowing the SECRET_KEY) is malicious,
retrieve data from the other instances. If the associated XMPP server (or anyone knowing the SECRET_KEY) is malicious, they can write files outside the DATA_ROOT. The files which are written are constrained to have the `.meta` and the `.data` suffixes; the `.meta` file will contain the JSON with the Content-Type of the original request and the `.data` file will contain the payload. The issue is patched in version 0.4.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/horazont/xmpp-http-upload/security/advisories/GHSA-hwv5-w8gm-fq9f - https://github.com/horazont/xmpp-http-upload/pull/12 - https://github.com/horazont/xmpp-http-upload/commit/82056540191e89f0
ps://github.com/horazont/xmpp-http-upload/pull/12 - https://github.com/horazont/xmpp-http-upload/commit/82056540191e89f0cd697c81f57714c00962ed75 - https://pypi.org/project/xmpp-http-upload/#history
CVE ID: CVE-2020-15240 State: PUBLISHED Published: 2020-10-21T17:25:14 Last Updated: 2024-08-04T13:08:22.896Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: auth0 Products: omniauth-auth0 Problem Types: CWE-287, CWE-347 Description: omniauth-auth0 (rubygems) versions >= 2.3.0 and < 2.4.1 improperly validate the JWT token signature when using the `jwt_validator.verify` method. Improper validation of the JWT token signature can allow an attacker to bypass authentication and authorization. You are affected by this vulnerability if all of the following conditions apply: 1. You are using `omniauth-auth0`. 2. You are using `JWTValidator.verify` method directly OR y
llowing conditions apply: 1. You are using `omniauth-auth0`. 2. You are using `JWTValidator.verify` method directly OR you are not authenticating using the SDK’s default Authorization Code Flow. The issue is patched in version 2.4.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/auth0/omniauth-auth0/security/advisories/GHSA-58r4-h6v8-jcvm - https://github.com/auth0/omniauth-auth0/commit/fd3a14f4ccdfbc515d1121d6378ff88bf55a7a7a - https://rubygems.org/gems/omniauth-auth0
CVE ID: CVE-2020-15241 State: PUBLISHED Published: 2020-10-08T20:15:17 Last Updated: 2024-08-04T13:08:22.895Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: TYPO3 Products: Fluid Problem Types: CWE-601 Description: TYPO3 Fluid Engine (package `typo3fluid/fluid`) before versions 2.0.5, 2.1.4, 2.2.1, 2.3.5, 2.4.1, 2.5.5 or 2.6.1 is vulnerable to cross-site scripting when making use of the ternary conditional operator in templates like `{showFullName ? fullName : defaultValue}`. Updated versions of this package are bundled in following TYPO3 (`typo3/cms-core`) versions as well: TYPO3 v8.7.25 (using `typo3fluid/fluid` v2.5.4) and TYPO3 v9.5.6 (using `typo3fluid
(`typo3/cms-core`) versions as well: TYPO3 v8.7.25 (using `typo3fluid/fluid` v2.5.4) and TYPO3 v9.5.6 (using `typo3fluid/fluid` v2.6.1). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TYPO3/Fluid/security/advisories/GHSA-7733-hjv6-4h47 - https://github.com/TYPO3/Fluid/commit/9ef6a8ffff2e812025fc0701b4ce72eea6911a3d - https://typo3.org/security/advisory/typo3-core-sa-2019-013
CVE ID: CVE-2020-15242 State: PUBLISHED Published: 2020-10-08T19:50:12 Last Updated: 2024-08-04T13:08:23.211Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: vercel Products: next.js Problem Types: CWE-601 Description: Next.js versions >=9.5.0 and <9.5.4 are vulnerable to an Open Redirect. Specially encoded paths could be used with the trailing slash redirect to allow an open redirect to occur to an external site. In general, this redirect does not directly harm users although can allow for phishing attacks by redirecting to an attackers domain from a trusted domain. The issue is fixed in version 9.5.4. Additional Analyst Notes: - CVE Program Container: Refe
main from a trusted domain. The issue is fixed in version 9.5.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vercel/next.js/security/advisories/GHSA-x56p-c8cg-q435 - https://github.com/zeit/next.js/releases/tag/v9.5.4
CVE ID: CVE-2020-15243 State: PUBLISHED Published: 2020-10-08T22:40:12 Last Updated: 2024-08-04T13:08:23.167Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: smartstore Products: SmartStoreNET Problem Types: CWE-287 Description: Affected versions of Smartstore have a missing WebApi Authentication attribute. This vulnerability affects Smartstore shops in version 4.0.0 & 4.0.1 which have installed and activated the Web API plugin. Users of Smartstore 4.0.0 and 4.0.1 must merge their repository with 4.0.x or overwrite the file SmartStore.Web.Framework in the */bin* directory of the deployed shop with this file. As a workaround without updating uninstall the W
.Framework in the */bin* directory of the deployed shop with this file. As a workaround without updating uninstall the Web API plugin to close this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/smartstore/SmartStoreNET/security/advisories/GHSA-8g9m-jx26-qp4h
CVE ID: CVE-2020-15244 State: PUBLISHED Published: 2020-10-21T20:05:20 Last Updated: 2024-08-04T13:08:23.228Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: OpenMage Products: magento-lts Problem Types: CWE-502, CWE-74 Description: In Magento (rubygems openmage/magento-lts package) before versions 19.4.8 and 20.0.4, an admin user can generate soap credentials that can be used to trigger RCE via PHP Object Injection through product attributes and a product. The issue is patched in versions 19.4.8 and 20.0.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenMage/magento-lts/security/advisories/GHSA-jrgf-vfw2-hj26 - https://g
ram Container: References: - https://github.com/OpenMage/magento-lts/security/advisories/GHSA-jrgf-vfw2-hj26 - https://github.com/OpenMage/magento-lts/commit/26433d15b57978fcb7701b5f99efe8332ca8630b
CVE ID: CVE-2020-15245 State: PUBLISHED Published: 2020-10-19T20:50:16 Last Updated: 2024-08-04T13:08:23.223Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Sylius Products: Sylius Problem Types: CWE-79 Description: In Sylius before versions 1.6.9, 1.7.9 and 1.8.3, the user may register in a shop by email mail@example.com, verify it, change it to the mail another@domain.com and stay verified and enabled. This may lead to having accounts addressed to totally different emails, that were verified. Note, that this way one is not able to take over any existing account (guest or normal one). The issue has been patched in Sylius 1.6.9, 1.7.9 and 1.8.3. As a workar