Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-30518 State: PUBLISHED Published: 2023-04-12T17:05:09.301Z Last Updated: 2025-02-07T18:07:21.811Z Vendors: Jenkins Project Products: Jenkins Thycotic Secret Server Plugin Description: A missing permission check in Jenkins Thycotic Secret Server Plugin 1.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2837 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30519 State: PUBLISHED Published: 2023-04-12T17:05:10.014Z Last Updated: 2025-02-07T17:00:30.573Z Vendors: Jenkins Project Products: Jenkins Quay.io trigger Plugin Description: A missing permission check in Jenkins Quay.io trigger Plugin 0.1 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2849 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30520 State: PUBLISHED Published: 2023-04-12T17:05:10.727Z Last Updated: 2025-02-07T18:03:32.481Z Vendors: Jenkins Project Products: Jenkins Quay.io trigger Plugin Description: Jenkins Quay.io trigger Plugin 0.1 and earlier does not limit URL schemes for repository homepage URLs submitted via Quay.io trigger webhooks, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to submit crafted Quay.io trigger webhook payloads. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2850 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30521 State: PUBLISHED Published: 2023-04-12T17:05:11.466Z Last Updated: 2025-02-07T18:02:04.778Z Vendors: Jenkins Project Products: Jenkins Assembla merge request builder Plugin Description: A missing permission check in Jenkins Assembla merge request builder Plugin 1.1.13 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2872 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30522 State: PUBLISHED Published: 2023-04-12T17:05:12.169Z Last Updated: 2025-02-07T17:02:33.221Z Vendors: Jenkins Project Products: Jenkins Fogbugz Plugin Description: A missing permission check in Jenkins Fogbugz Plugin 2.2.17 and earlier allows attackers with Item/Read permission to trigger builds of jobs specified in a 'jobname' request parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2873 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30523 State: PUBLISHED Published: 2023-04-12T17:05:12.873Z Last Updated: 2025-02-07T16:58:41.462Z Vendors: Jenkins Project Products: Jenkins Report Portal Plugin Description: Jenkins Report Portal Plugin 0.5 and earlier stores ReportPortal access tokens unencrypted in job config.xml files on the Jenkins controller as part of its configuration where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2945 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30524 State: PUBLISHED Published: 2023-04-12T17:05:13.591Z Last Updated: 2025-02-07T16:57:04.169Z Vendors: Jenkins Project Products: Jenkins Report Portal Plugin Description: Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for attackers to observe and capture them. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2945 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30525 State: PUBLISHED Published: 2023-04-12T17:05:14.297Z Last Updated: 2025-02-07T16:04:51.819Z Vendors: Jenkins Project Products: Jenkins Report Portal Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Report Portal Plugin 0.5 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified bearer token authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2950 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30526 State: PUBLISHED Published: 2023-04-12T17:05:14.987Z Last Updated: 2025-02-07T16:54:29.794Z Vendors: Jenkins Project Products: Jenkins Report Portal Plugin Description: A missing permission check in Jenkins Report Portal Plugin 0.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified bearer token authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2950 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30527 State: PUBLISHED Published: 2023-04-12T17:05:15.700Z Last Updated: 2025-02-07T18:22:44.370Z Vendors: Jenkins Project Products: Jenkins WSO2 Oauth Plugin Description: Jenkins WSO2 Oauth Plugin 1.0 and earlier stores the WSO2 Oauth client secret unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2992 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30528 State: PUBLISHED Published: 2023-04-12T17:05:16.410Z Last Updated: 2025-02-07T18:21:03.216Z Vendors: Jenkins Project Products: Jenkins WSO2 Oauth Plugin Description: Jenkins WSO2 Oauth Plugin 1.0 and earlier does not mask the WSO2 Oauth client secret on the global configuration form, increasing the potential for attackers to observe and capture it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2992 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30529 State: PUBLISHED Published: 2023-04-12T17:05:17.194Z Last Updated: 2025-02-07T18:16:36.998Z Vendors: Jenkins Project Products: Jenkins Lucene-Search Plugin Description: Jenkins Lucene-Search Plugin 387.v938a_ecb_f7fe9 and earlier does not require POST requests for an HTTP endpoint, allowing attackers to reindex the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3013 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30530 State: PUBLISHED Published: 2023-04-12T17:05:17.918Z Last Updated: 2025-02-07T18:13:00.186Z Vendors: Jenkins Project Products: Jenkins Consul KV Builder Plugin Description: Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2944 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30531 State: PUBLISHED Published: 2023-04-12T17:05:18.653Z Last Updated: 2025-02-07T18:11:07.263Z Vendors: Jenkins Project Products: Jenkins Consul KV Builder Plugin Description: Jenkins Consul KV Builder Plugin 2.0.13 and earlier does not mask the HashiCorp Consul ACL Token on the global configuration form, increasing the potential for attackers to observe and capture it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2944 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30532 State: PUBLISHED Published: 2023-04-12T17:05:19.376Z Last Updated: 2025-02-07T16:53:02.385Z Vendors: Jenkins Project Products: Jenkins TurboScript Plugin Description: A missing permission check in Jenkins TurboScript Plugin 1.3 and earlier allows attackers with Item/Read permission to trigger builds of jobs corresponding to the attacker-specified repository. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2851 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30533 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T19:42:49.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.sheetjs.com/sheetjs/sheetjs/src/branch/master/CHANGELOG.md - https://cdn.sheetjs.com/advisories/CVE-2023-30533 - https://git.sheetjs.com/sheetjs/sheetjs/issues/2986
CVE ID: CVE-2023-30534 State: PUBLISHED Published: 2023-09-05T21:21:30.257Z Last Updated: 2025-02-13T16:49:29.733Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Cacti Products: cacti Problem Types: CWE-502 Description: Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. While a viable gadget chain exists in Cacti’s vendor directory (phpseclib), the necessary gadgets are not included, making them inaccessible and the insecure deserializations not exploitable. Each instance of insecure deserialization is due to using the unserialize function without saniti
tions not exploitable. Each instance of insecure deserialization is due to using the unserialize function without sanitizing the user input. Cacti has a “safe” deserialization that attempts to sanitize the content and check for specific values before calling unserialize, but it isn’t used in these instances. The vulnerable code lies in graphs_new.php, specifically within the host_new_graphs_save function. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Cacti/cacti/security/advisories/GHSA-77rf-774j-6
am Container: - CISA ADP Vulnrichment: References: - https://github.com/Cacti/cacti/security/advisories/GHSA-77rf-774j-6h3p - https://www.fastly.com/blog/cve-2023-30534-insecure-deserialization-in-cacti-prior-to-1-2-25 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZGB2UXJEUYWWA6IWVFQ3ZTP22FIHMGN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH/
CVE ID: CVE-2023-30535 State: PUBLISHED Published: 2023-04-14T19:30:26.523Z Last Updated: 2025-02-06T18:41:19.845Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: snowflakedb Products: snowflake-jdbc Problem Types: CWE-20 Description: Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Users of the Snowflake JDBC driver were vulnerable to a command injection vulnerability. An attacker could set up a malicious, publicly accessible server which responds to the SSO URL with an attack payload. If the attacker then tricked a user into visiting the maliciously crafted connection URL, the user’
h an attack payload. If the attacker then tricked a user into visiting the maliciously crafted connection URL, the user’s local machine would render the malicious payload, leading to a remote code execution. The vulnerability was patched on March 17, 2023 as part of Snowflake JDBC driver Version 3.13.29. All users should immediately upgrade the Snowflake JDBC driver to the latest version: 3.13.29. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/snowflakedb/snowflake-jdbc/security/advisories/GHSA-4g3j-c4wg-6j7x - https://community.snowflake.com/s/article/JDBC-Driver-Release-Notes
CVE ID: CVE-2023-30536 State: PUBLISHED Published: 2023-04-17T21:17:33.775Z Last Updated: 2025-02-05T20:43:03.553Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: slimphp Products: Slim-Psr7 Problem Types: CWE-436 Description: slim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline (\n) into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. An attacker that is able to control the header names that are passed to Slilm-Psr7 would be able to intentionally craft invalid messages, possi
e to control the header names that are passed to Slilm-Psr7 would be able to intentionally craft invalid messages, possibly causing application errors or invalid HTTP requests being sent out with an PSR-18 HTTP client. The latter might present a denial of service vector if a remote service’s web application firewall bans the application due to the receipt of malformed requests. The issue has been patched in version 1.6.1. There are no known workarounds to this issue. Users are advised to upgrade. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/slimphp/Slim-Psr7/security/advisories/GHSA-q2qj-628g-vhfw - https://github.com/slimphp/Sl
ferences: - https://github.com/slimphp/Slim-Psr7/security/advisories/GHSA-q2qj-628g-vhfw - https://github.com/slimphp/Slim-Psr7/commit/ed1d553225dd190875d8814c47460daed4b550bb - https://www.rfc-editor.org/rfc/rfc7230#section-3.2.4
CVE ID: CVE-2023-30537 State: PUBLISHED Published: 2023-04-16T07:06:43.764Z Last Updated: 2025-02-06T17:05:39.297Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-95 Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with the right to add an object on a page can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the styles properties `FlamingoThemesCode.WebHome`. This page is installed by default. The vulnerability has been patched in XW
les properties `FlamingoThemesCode.WebHome`. This page is installed by default. The vulnerability has been patched in XWiki versions 13.10.11, 14.4.7 and 14.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vrr8-fp7c-7qgp - https://github.com/xwiki/xwiki-platform/commit/df596f15368342236f8899ca122af8f3df0fe2e8 - https://jira.xwiki.org/browse/XWIKI-20280
CVE ID: CVE-2023-30538 State: PUBLISHED Published: 2023-04-18T21:25:58.848Z Last Updated: 2025-02-06T16:33:27.722Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: discourse Products: discourse Problem Types: CWE-79 Description: Discourse is an open source platform for community discussion. Due to the improper sanitization of SVG files, an attacker can execute arbitrary JavaScript on the users’ browsers by uploading a crafted SVG file. This issue is patched in the latest stable and tests-passed versions of Discourse. Users are advised to upgrade. For users unable to upgrade there are two possible workarounds: enable CDN handing of uploads (and ensure the CDN
rade. For users unable to upgrade there are two possible workarounds: enable CDN handing of uploads (and ensure the CDN sanitizes SVG files) or disable SVG file uploads by ensuring that the `authorized extensions` site setting does not include `svg` (or reset that setting to the default, by default Discourse doesn't enable SVG uploads by users). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-w5mv-4pjf-xj43
CVE ID: CVE-2023-30539 State: PUBLISHED Published: 2023-04-17T21:27:29.405Z Last Updated: 2025-02-05T20:38:48.283Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: nextcloud Products: security-advisories Problem Types: CWE-284 Description: Nextcloud is a personal home server system. Depending on the set up tags and other workflows this issue can be used to limit access of others or being able to grant them access when there are system tag based files access control or files retention rules. It is recommended that the Nextcloud Server is upgraded to 24.0.11 or 25.0.5, the Nextcloud Enterprise Server to 21.0.9.11, 22.2.10.11, 23.0.12.6, 24.0.11 or 25.0.5, and t
aded to 24.0.11 or 25.0.5, the Nextcloud Enterprise Server to 21.0.9.11, 22.2.10.11, 23.0.12.6, 24.0.11 or 25.0.5, and the Nextcloud Files automated tagging app to 1.11.1, 1.12.1, 1.13.1, 1.14.2, 1.15.3 or 1.16.1. Users unable to upgrade should disable all workflow related apps. Users are advised to upgrade. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3m2f-v8x7-9w99 - https://github.com/nextcloud/files_automatedtagging/pull/705 - https://github.com/nextcloud/server/pull/37252 - https://hackerone.com/reports/1895976
CVE ID: CVE-2023-30540 State: PUBLISHED Published: 2023-04-17T21:32:29.470Z Last Updated: 2025-03-03T19:18:53.256Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-200 Description: Nextcloud Talk is a chat, video & audio call extension for Nextcloud. In affected versions a user that was added later to a conversation can use this information to get access to data that was deleted before they were added to the conversation. This issue has been patched in version 15.0.5 and it is recommended that users upgrad to 15.0.5. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program C
ed that users upgrad to 15.0.5. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c9hr-cq65-9mjw - https://github.com/nextcloud/spreed/pull/8985 - https://hackerone.com/reports/1894676
CVE ID: CVE-2023-30541 State: PUBLISHED Published: 2023-04-17T21:37:29.361Z Last Updated: 2025-02-05T20:31:15.423Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenZeppelin Products: openzeppelin-contracts Problem Types: CWE-436 Description: OpenZeppelin Contracts is a library for secure smart contract development. A function in the implementation contract may be inaccessible if its selector clashes with one of the proxy's own selectors. Specifically, if the clashing function has a different signature with incompatible ABI encoding, the proxy could revert while attempting to decode the arguments from calldata. The probability of an accidental clash is neg
proxy could revert while attempting to decode the arguments from calldata. The probability of an accidental clash is negligible, but one could be caused deliberately and could cause a reduction in availability. The issue has been fixed in version 4.8.3. As a workaround if a function appears to be inaccessible for this reason, it may be possible to craft the calldata such that ABI decoding does not fail at the proxy and the function is properly proxied through. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-mx2q-35m2-x2rh - https://github.com/OpenZeppelin/openzeppelin-con
ppelin/openzeppelin-contracts/security/advisories/GHSA-mx2q-35m2-x2rh - https://github.com/OpenZeppelin/openzeppelin-contracts/pull/4154 - https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.3
CVE ID: CVE-2023-30542 State: PUBLISHED Published: 2023-04-16T07:10:13.474Z Last Updated: 2025-02-06T16:05:37.183Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L) Vendors: OpenZeppelin Products: openzeppelin-contracts Problem Types: CWE-20 Description: OpenZeppelin Contracts is a library for secure smart contract development. The proposal creation entrypoint (`propose`) in `GovernorCompatibilityBravo` allows the creation of proposals with a `signatures` array shorter than the `calldatas` array. This causes the additional elements of the latter to be ignored, and if the proposal succeeds the corresponding actions would eventually execute without any calldata. The `Pro
ignored, and if the proposal succeeds the corresponding actions would eventually execute without any calldata. The `ProposalCreated` event correctly represents what will eventually execute, but the proposal parameters as queried through `getActions` appear to respect the original intended calldata. This issue has been patched in 4.8.3. As a workaround, ensure that all proposals that pass through governance have equal length `signatures` and `calldatas` parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-93hq-5wgc-jc82 - https://github.com/OpenZeppelin/openzeppeli
penZeppelin/openzeppelin-contracts/security/advisories/GHSA-93hq-5wgc-jc82 - https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.3
CVE ID: CVE-2023-30543 State: PUBLISHED Published: 2023-04-17T21:02:20.566Z Last Updated: 2025-02-05T20:44:45.955Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:L) Vendors: Uniswap Products: web3-react Problem Types: CWE-362 Description: @web3-react is a framework for building Ethereum Apps . In affected versions the `chainId` may be outdated if the user changes chains as part of the connection flow. This means that the value of `chainId` returned by `useWeb3React()` may be incorrect. In an application, this means that any data derived from `chainId` could be incorrect. For example, if a swapping application derives a wrapped token contract address from the `chainId`
could be incorrect. For example, if a swapping application derives a wrapped token contract address from the `chainId` *and* a user has changed chains as part of their connection flow the application could cause the user to send funds to the incorrect address when wrapping. This issue has been addressed in PR #749 and is available in updated npm artifacts. There are no known workarounds for this issue. Users are advised to upgrade. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Uniswap/web3-react/security/advisories/GHSA-8pf3-6fgr-3g3g - https://github.com/Uniswap/web3-react/pull/749