Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-28067/
CVE ID: CVE-2024-28068 State: PUBLISHED Published: 2024-07-09T00:00:00 Last Updated: 2024-11-20T16:17:32.090Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:H/AV:A/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in SS in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 2400, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, and Exynos Modem 5300 that involves a NULL pointer dereference which can cause abnormal termination of a mobile phone via a manipulated
5300 that involves a NULL pointer dereference which can cause abnormal termination of a mobile phone via a manipulated packet. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-28068/
CVE ID: CVE-2024-28069 State: PUBLISHED Published: 2024-03-16T00:00:00.000Z Last Updated: 2025-03-18T13:35:02.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to access sensitive information and potentially conduct unauthorized actions within the vulnerable component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories/mitel-product-secur
Container: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0001
CVE ID: CVE-2024-28070 State: PUBLISHED Published: 2024-03-16T00:00:00.000Z Last Updated: 2025-03-20T19:21:09.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation. A successful exploit could allow an attacker to access sensitive information and gain unauthorized access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0002
CVE ID: CVE-2024-28072 State: PUBLISHED Published: 2024-05-03T07:50:00.696Z Last Updated: 2024-08-02T00:48:48.228Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L) Vendors: SolarWinds Products: Serv-U Problem Types: CWE-532 Description: A highly privileged account can overwrite arbitrary files on the system with log output. The log file path tags were not sanitized properly. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28072 - https://solarwindscore.my.site.com/SuccessCenter/s/article/Serv-U-15-4-2-Hotfix-1-Release-Notes?language=en_US
CVE ID: CVE-2024-28073 State: PUBLISHED Published: 2024-04-17T16:58:12.353Z Last Updated: 2024-08-02T00:48:48.255Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: SolarWinds Products: ServU Problem Types: CWE-22 Description: SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged account to be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28073
CVE ID: CVE-2024-28074 State: PUBLISHED Published: 2024-07-17T14:29:39.778Z Last Updated: 2024-08-02T00:48:48.255Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-502 Description: It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were implemented the researcher was able to bypass these and use a different method to exploit the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2
Program Container: References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE ID: CVE-2024-28075 State: PUBLISHED Published: 2024-05-09T12:42:44.975Z Last Updated: 2024-08-02T00:48:48.249Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-502 Description: The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution. We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities. Additional Analyst Notes: - CISA ADP Vuln
arWinds on responsible disclosure of this and other potential vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28075 - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-4_release_notes.htm - https://documentation.solarwinds.com/en/success_center/arm/content/secure-your-arm-deployment.htm
CVE ID: CVE-2024-28076 State: PUBLISHED Published: 2024-04-18T09:05:42.592Z Last Updated: 2024-08-02T00:48:48.245Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L) Vendors: SolarWinds Products: SolarWinds Platform Problem Types: CWE-601 Description: The SolarWinds Platform was susceptible to a Arbitrary Open Redirection Vulnerability. A potential attacker can redirect to different domain when using URL parameter with relative entry in the correct format Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28076 - https://documentation.solarwinds.com/en/success_center/
solarwinds.com/trust-center/security-advisories/cve-2024-28076 - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1-1_release_notes.htm
CVE ID: CVE-2024-28077 State: PUBLISHED Published: 2024-08-26T00:00:00.000Z Last Updated: 2025-03-14T13:12:01.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial-of-service issue was discovered on certain GL-iNet devices. Some websites can detect devices exposed to the external network through DDNS, and consequently obtain the IP addresses and ports of devices that are exposed. By using special usernames and special characters (such as half parentheses or square brackets), one can call the login interface and cause the session-management program to crash, resulting in customers being unable to log into their devices. This affects MT6000 4.5.6, XE3000 4.4.5, X3000 4.4.6,
h, resulting in customers being unable to log into their devices. This affects MT6000 4.5.6, XE3000 4.4.5, X3000 4.4.6, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-V2 4.3.10, and XE300 4.3.16. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gl-inet.com - https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Denial%20of%20service.md
CVE ID: CVE-2024-28084 State: PUBLISHED Published: 2024-03-03T00:00:00.000Z Last Updated: 2025-11-04T18:30:23.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: p2putil.c in iNet wireless daemon (IWD) through 2.15 allows attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/pub/scm/network/wireless/iwd.git/commit/?id=52a47c9fd428904de611a90cbf8b223af879684d - https://git.kernel.org/pub/scm/network/wireless/iwd.git/commit/?id=d
mmit/?id=52a47c9fd428904de611a90cbf8b223af879684d - https://git.kernel.org/pub/scm/network/wireless/iwd.git/commit/?id=d34b4e16e045142590ed7cb653e01ed0ae5362eb - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KSGT4IZ23CJBOQA3AFYEMBJ5OHFZBMK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYRPQ3OLV3GGLUCDYWBHU34DLBLM62XJ/
CVE ID: CVE-2024-28085 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:30:25.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt - https://github.com/util-li
DP Vulnrichment: References: - https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt - https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq - https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/ - https://www.openwall.com/lists/oss-security/2024/03/27/5 - https://github.com/skyler-ferrante/CVE-2024-28085 - https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html - http://www.openwall.com/lists/oss-security/2024/03/28/1 - http://www.openwall.com/lists/oss-security/2024/03/27/6 - http://www.openwall.com/lists/oss-security/2024/03/27/9 - http://www.openwall.com/lists/oss-security/2024/03/27/8 - http://www.openwall.com/lists/oss-security/2024/0
24/03/27/9 - http://www.openwall.com/lists/oss-security/2024/03/27/8 - http://www.openwall.com/lists/oss-security/2024/03/27/7 - http://www.openwall.com/lists/oss-security/2024/03/28/2 - http://www.openwall.com/lists/oss-security/2024/03/28/3 - http://www.openwall.com/lists/oss-security/2024/03/27/5 - https://security.netapp.com/advisory/ntap-20240531-0003/
CVE ID: CVE-2024-28087 State: PUBLISHED Published: 2024-05-15T00:00:00 Last Updated: 2024-09-05T15:38:58.895820 Vendors: n/a Products: n/a Problem Types: n/a Description: In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://documentation.bonitasoft.com/bonita/latest/release-notes#_fixes_in_bonita_2024_1_2024_04_11 - https://documentation.bonitasoft.com/bonita/2024.1/release-notes#_fixes_in_bonita_2024_1_u0_2024_04
_2024_1_2024_04_11 - https://documentation.bonitasoft.com/bonita/2024.1/release-notes#_fixes_in_bonita_2024_1_u0_2024_04_11
CVE ID: CVE-2024-28088 State: PUBLISHED Published: 2024-03-03T00:00:00 Last Updated: 2024-08-26T19:44:45.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure of an API key for a large language model online service, or remote code execution. (A patch is available as of release 0.1.29 of langchain-core.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
elease 0.1.29 of langchain-core.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PinkDraconian/PoC-Langchain-RCE/blob/main/README.md - https://github.com/langchain-ai/langchain/blob/f96dd57501131840b713ed7c2e86cbf1ddc2761f/libs/core/langchain_core/utils/loading.py - https://github.com/langchain-ai/langchain/pull/18600
CVE ID: CVE-2024-28089 State: PUBLISHED Published: 2024-03-09T00:00:00 Last Updated: 2024-08-19T19:53:30.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity (who has access to the router admin panel) to conduct a DOM-based stored XSS attack that can fetch remote resources. The payload is executed at index.html#advanced_location (aka the Device Location page). This can cause a denial of service or lead to information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/cve/blob/main/Hitron/CVE-2024-28089 - h
am Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/cve/blob/main/Hitron/CVE-2024-28089 - https://github.com/actuator/cve/blob/main/Hitron/Hitron_DOM_XSS_POC.gif - https://github.com/actuator/cve/blob/main/Hitron/Hitron_DOM_XSS_POC_DOS_ALT.gif
CVE ID: CVE-2024-28090 State: PUBLISHED Published: 2024-03-28T00:00:00 Last Updated: 2024-11-21T16:43:12.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor TC8715D TC8715D-01.EF.04.38.00-180405-S-FF9-D RSE-TC8717T devices allow a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via User name in dyn_dns.asp. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/actuator/cve/blob/main/Technicolor/CVE-2024-28090
CVE ID: CVE-2024-28091 State: PUBLISHED Published: 2024-03-28T00:00:00 Last Updated: 2024-11-12T20:06:48.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor TC8715D TC8715D-01.EF.04.38.00-180405-S-FF9-D RSE-TC8717T devices allow a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via User Defined Service in managed_services_add.asp (the victim must click an X for a deletion). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/cve/blob/main/Technicolor/CVE-2024-28091
CVE ID: CVE-2024-28092 State: PUBLISHED Published: 2024-03-19T00:00:00 Last Updated: 2024-10-31T14:12:05.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: UBEE DDW365 XCNDDW365 8.14.3105 software on hardware 3.13.1 allows a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via RgFirewallEL.asp, RgDdns.asp, RgTime.asp, RgDiagnostics.asp, or RgParentalBasic.asp. The affected fields are SMTP Server Name, SMTP Username, Host Name, Time Server 1, Time Server 2, Time Server 3, Target, Add Keyword, Add Domain, and Add Allowed Domain. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/cve/blob/main/Ub
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/cve/blob/main/Ubee/CVE-2024-28092
CVE ID: CVE-2024-28093 State: PUBLISHED Published: 2024-03-26T00:00:00 Last Updated: 2024-10-28T20:43:20.165247 Vendors: n/a Products: n/a Problem Types: n/a Description: The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/cve/blob/main/AdTran/CWE-287 - https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-28093 - https://supportcommunity.adtran.com/t5/NetVanta-Product-Notices/2019-Q2-NetVanta-3120-3130-EOL/ta-p/35715
CVE ID: CVE-2024-28094 State: PUBLISHED Published: 2024-03-07T03:14:25.843Z Last Updated: 2024-08-02T00:48:48.241Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Schoolbox Pty Ltd Products: Schoolbox Problem Types: CWE-89 Description: Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the authenticated attackers to read, modify, and delete database records. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.themissinglink.com.au/security-advisories/cve-2024-28094 - https://schoolbox.education/
CVE ID: CVE-2024-28095 State: PUBLISHED Published: 2024-03-07T03:17:02.562Z Last Updated: 2024-08-02T00:48:48.247Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: Schoolbox Pty Ltd Products: Schoolbox Problem Types: CWE-79 Description: News functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated attacker to perform security actions in the context of the affected users. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.themissinglink.com.au/security-advisories/cve-2024-28095 - https://schoolbox.education/
CVE ID: CVE-2024-28096 State: PUBLISHED Published: 2024-03-07T03:18:33.101Z Last Updated: 2024-08-02T00:48:48.893Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: Schoolbox Pty Ltd Products: Schoolbox Problem Types: CWE-79 Description: Class functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated attacker to perform security actions in the context of the affected users. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.themissinglink.com.au/security-advisories/cve-2024-28096 - https://schoolbox.education/
CVE ID: CVE-2024-28097 State: PUBLISHED Published: 2024-03-07T03:21:21.016Z Last Updated: 2024-08-26T15:58:14.503Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: Schoolbox Pty Ltd Products: Schoolbox Problem Types: CWE-79 Description: Calendar functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated attacker to perform security actions in the context of the affected users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.themissinglink.com.au/security-advisories/cve-2024-28097 - https://schoolbox.education/
CVE ID: CVE-2024-28098 State: PUBLISHED Published: 2024-03-12T18:15:39.848Z Last Updated: 2025-02-13T17:47:15.300Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Apache Software Foundation Products: Apache Pulsar Problem Types: CWE-863 Description: The vulnerability allows authenticated users with only produce or consume permissions to modify topic-level policies, such as retention, TTL, and offloading settings. These management operations should be restricted to users with the tenant admin role or super user role. This issue affects Apache Pulsar versions from 2.7.1 to 2.10.5, from 2.11.0 to 2.11.3, from 3.0.0 to 3.0.2, from 3.1.0 to 3.1.2, and 3.2.0. 2.10
e Pulsar versions from 2.7.1 to 2.10.5, from 2.11.0 to 2.11.3, from 3.0.0 to 3.0.2, from 3.1.0 to 3.1.2, and 3.2.0. 2.10 Apache Pulsar users should upgrade to at least 2.10.6. 2.11 Apache Pulsar users should upgrade to at least 2.11.4. 3.0 Apache Pulsar users should upgrade to at least 3.0.3. 3.1 Apache Pulsar users should upgrade to at least 3.1.3. 3.2 Apache Pulsar users should upgrade to at least 3.2.1. Users operating versions prior to those listed above should upgrade to the aforementioned patched versions or newer versions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/3m6923y3wxpdcs9346sjvt8ql9swqc2z - https:/
hment: - CVE Program Container: References: - https://lists.apache.org/thread/3m6923y3wxpdcs9346sjvt8ql9swqc2z - https://pulsar.apache.org/security/CVE-2024-28098/ - http://www.openwall.com/lists/oss-security/2024/03/12/12
CVE ID: CVE-2024-28099 State: PUBLISHED Published: 2024-04-15T10:31:34.198Z Last Updated: 2024-08-08T19:16:52.084Z Vendors: KEYENCE CORPORATION Products: VT STUDIO Problem Types: Uncontrolled Search Path Element Description: VT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.keyence.com/vt_vulnerability240329_en - https://jvn.jp/en/vu/JVNVU92825069/
CVE ID: CVE-2024-28100 State: PUBLISHED Published: 2024-09-02T16:10:11.512Z Last Updated: 2024-09-03T13:48:37.352Z Severity: HIGH (CVSS 8.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L) Vendors: elabftw Products: elabftw Problem Types: CWE-79 Description: eLabFTW is an open source electronic lab notebook for research labs. By uploading specially crafted files, a regular user can create a circumstance where a visitor's browser runs arbitrary JavaScript code in the context of the eLabFTW application. This can be triggered by the visitor viewing a list of experiments. Viewing this allows the malicious script to act on behalf of the visitor in any way, including the creation of API keys for pers
this allows the malicious script to act on behalf of the visitor in any way, including the creation of API keys for persistence, or other options normally available to the user. If the user viewing the page has the sysadmin role in eLabFTW, the script can act as a sysadmin (including system configuration and extensive user management roles). Users are advised to upgrade to at least version 5.0.0. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/elabftw/elabftw/security/advisories/GHSA-xp3v-w8cx-cqxc
CVE ID: CVE-2024-28101 State: PUBLISHED Published: 2024-03-06T21:07:36.476Z Last Updated: 2024-08-05T16:57:05.215Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: apollographql Products: router Problem Types: CWE-409 Description: The Apollo Router is a graph router written in Rust to run a federated supergraph that uses Apollo Federation. Versions 0.9.5 until 1.40.2 are subject to a Denial-of-Service (DoS) type vulnerability. When receiving compressed HTTP payloads, affected versions of the Router evaluate the `limits.http_max_request_bytes` configuration option after the entirety of the compressed payload is decompressed. If affected versions of the Router re
configuration option after the entirety of the compressed payload is decompressed. If affected versions of the Router receive highly compressed payloads, this could result in significant memory consumption while the compressed payload is expanded. Router version 1.40.2 has a fix for the vulnerability. Those who are unable to upgrade may be able to implement mitigations at proxies or load balancers positioned in front of their Router fleet (e.g. Nginx, HAProxy, or cloud-native WAF services) by creating limits on HTTP body upload size. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apollographql/router/security/advisories/GHSA-cgqf-
Container: - CISA ADP Vulnrichment: References: - https://github.com/apollographql/router/security/advisories/GHSA-cgqf-3cq5-wvcj - https://github.com/apollographql/router/commit/9e9527c73c8f34fc8438b09066163cd42520f413