Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-53257 State: PUBLISHED Published: 2024-12-03T15:46:40.513Z Last Updated: 2024-12-03T16:57:59.604Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: vitessio Products: vitess Problem Types: CWE-79 Description: Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered using text/template instead of rendering with a proper HTML templating engine. This vulnerability is fixed in 21.0.1, 20.0.4, and 19.0.8. Additional
f rendering with a proper HTML templating engine. This vulnerability is fixed in 21.0.1, 20.0.4, and 19.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vitessio/vitess/security/advisories/GHSA-7mwh-q3xm-qh6p - https://github.com/vitessio/vitess/commit/2b71d1b5f8ca676beeab2875525003cd45096217
CVE ID: CVE-2024-53258 State: PUBLISHED Published: 2024-11-25T19:19:24.920Z Last Updated: 2024-11-25T19:51:49.057Z Vendors: autolab Products: Autolab Problem Types: CWE-359, CWE-862 Description: Autolab is a course management service that enables auto-graded programming assignments. From Autolab versions v.3.0.0 onward students can download all assignments from another student, as long as they are logged in, using the download_all_submissions feature. This can allow for leakage of submissions to unauthorized users, such as downloading submissions from other students in the class, or even instructor test submissions, given they know their user IDs. This issue has been patched in commit `1aa4c
class, or even instructor test submissions, given they know their user IDs. This issue has been patched in commit `1aa4c769` which is not yet in a release version, but is expected to be included in version 3.0.3. Users are advised to either manually patch or to wait for version 3.0.3. As a workaround administrators can disable the feature. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/autolab/Autolab/security/advisories/GHSA-84qc-7773-2gg3 - https://github.com/autolab/Autolab/commit/1aa4c7690892fb458d2c61ff86739f368e34769d
CVE ID: CVE-2024-53259 State: PUBLISHED Published: 2024-12-02T16:12:40.605Z Last Updated: 2024-12-02T19:28:08.531Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: quic-go Products: quic-go Problem Types: CWE-345 Description: quic-go is an implementation of the QUIC protocol in Go. An off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used IP_PMTUDISC_DO, the kernel would then return a "message too large" error on sendmsg, i.e. when quic-go attempts to send a packet that exceeds the MTU claimed in that ICMP packet. By setting this value to smaller than 1200 bytes (the minimum MTU for QUIC), the attacker can disrupt a
hat ICMP packet. By setting this value to smaller than 1200 bytes (the minimum MTU for QUIC), the attacker can disrupt a QUIC connection. Crucially, this can be done after completion of the handshake, thereby circumventing any TCP fallback that might be implemented on the application layer (for example, many browsers fall back to HTTP over TCP if they're unable to establish a QUIC connection). The attacker needs to at least know the client's IP and port tuple to mount an attack. This vulnerability is fixed in 0.48.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/quic-go/quic-go/security/advisories/GHSA-px8v-pp82-rcvr - https://github.com/quic-go/quic-go/
nces: - https://github.com/quic-go/quic-go/security/advisories/GHSA-px8v-pp82-rcvr - https://github.com/quic-go/quic-go/pull/4729 - https://github.com/quic-go/quic-go/commit/ca31dd355cbe5fc6c5807992d9d1149c66c96a50 - https://github.com/quic-go/quic-go/releases/tag/v0.48.2
CVE ID: CVE-2024-53260 State: PUBLISHED Published: 2024-11-27T21:28:33.896Z Last Updated: 2024-11-29T18:10:01.006Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: autolab Products: Autolab Problem Types: CWE-1236 Description: Autolab is a course management service that enables auto-graded programming assignments. A user can modify their first and or last name to include a valid excel / spreadsheet formula. When an instructor downloads their course's roster and opens, this name will then be evaluated as a formula. This could lead to leakage of information of students in the course roster by sending the data to a remote endpoint. This issue has been patched in
of information of students in the course roster by sending the data to a remote endpoint. This issue has been patched in the source code repository and the fix is expected to be released in the next version. Users are advised to manually patch their systems or to wait for the next release. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/autolab/Autolab/security/advisories/GHSA-cqxx-pfmh-h43g - https://github.com/autolab/Autolab/commit/fe44b53815d37c63e751032205b692ccd5737620
CVE ID: CVE-2024-53261 State: PUBLISHED Published: 2024-11-25T19:15:28.233Z Last Updated: 2024-11-25T20:04:36.967Z Vendors: sveltejs Products: kit Problem Types: CWE-79 Description: SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. "Unsanitized input from *the request URL* flows into `end`, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS)." The files `packages/kit/src/exports/vite/dev/index.js` and `packages/kit/src/exports/vite/utils.js` both contain user controllable data which under specific conditions may flow to dev mode pages. There is little to no expected impact. The Vi
trollable data which under specific conditions may flow to dev mode pages. There is little to no expected impact. The Vite development is not exposed to the network by default and even if someone were able to trick a developer into executing an XSS against themselves, a development database should not have any sensitive data. None the less this issue has been addressed in version 2.8.3 and all users are advised to upgrade. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sveltejs/kit/security/advisories/GHSA-rjjv-87mx-6x3h - https://github.com/sveltejs/kit/commit/d338d4635a7fd947ba5112df6ee632c4a0979438
CVE ID: CVE-2024-53262 State: PUBLISHED Published: 2024-11-25T19:07:20.317Z Last Updated: 2024-11-25T20:24:05.750Z Vendors: sveltejs Products: kit Problem Types: CWE-79 Description: SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. The static error.html template for errors contains placeholders that are replaced without escaping the content first. error.html is the page that is rendered when everything else fails. It can contain the following placeholders: %sveltekit.status% — the HTTP status, and %sveltekit.error.message% — the error message. This leads to possible injection if an app explicitly creates an error with a message that contains us
he error message. This leads to possible injection if an app explicitly creates an error with a message that contains user controlled content. Only applications where user provided input is used in the `Error` message will be vulnerable, so the vast majority of applications will not be vulnerable This issue has been addressed in version 2.8.3 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sveltejs/kit/security/advisories/GHSA-mh2x-fcqh-fmqv - https://github.com/sveltejs/kit/commit/134e36343ef57ed7e6e2b3bb9e7f05ad37865794 - https://kit.svelte.dev/docs/errors
CVE ID: CVE-2024-53263 State: PUBLISHED Published: 2025-01-14T19:33:21.876Z Last Updated: 2025-01-28T04:55:24.382Z Vendors: git-lfs Products: git-lfs Problem Types: CWE-74 Description: Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the `git-credential(1)` command without checking for embedded line-ending control characters, and then sends any credentials it receives back from the Git credential helper to the remote host. By inserting URL-encoded control characters such as line feed (LF) or carriage return (CR) characters into the URL, an attacker may be able to retrieve a user's Git
uch as line feed (LF) or carriage return (CR) characters into the URL, an attacker may be able to retrieve a user's Git credentials. This problem exists in all previous versions and is patched in v3.6.1. All users should upgrade to v3.6.1. There are no workarounds known at this time. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/git-lfs/git-lfs/security/advisories/GHSA-q6r2-x2cc-vrp7 - https://github.com/git-lfs/git-lfs/commit/0345b6f816e611d050c0df67b61f0022916a1c90 - https://github.com/git-lfs/git-lfs/releases/tag/v3.6.1
CVE ID: CVE-2024-53264 State: PUBLISHED Published: 2024-11-27T18:31:25.815Z Last Updated: 2024-11-27T19:32:44.880Z Vendors: bunkerity Products: bunkerweb Problem Types: CWE-601 Description: bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. The loading endpoint accepts and uses an unvalidated "next" parameter for redirects. Ex. visiting: `/loading?next=https://google.com` while authenticated will cause the page will redirect to google.com. This vulnerability could be used in phishing attacks by redir
enticated will cause the page will redirect to google.com. This vulnerability could be used in phishing attacks by redirecting users from a legitimate application URL to malicious sites. This issue has been addressed in version 1.5.11. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bunkerity/bunkerweb/security/advisories/GHSA-q9rr-h3hx-m87g
CVE ID: CVE-2024-53266 State: PUBLISHED Published: 2025-02-04T21:18:19.591Z Last Updated: 2025-02-04T21:40:25.211Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: discourse Products: discourse Problem Types: CWE-79 Description: Discourse is an open source platform for community discussion. In affected versions with some combinations of plugins, and with CSP disabled, activity streams in the user's profile page may be vulnerable to XSS. This has been patched in the latest version of Discourse core. Users are advised to upgrade. Users unable to upgrade should ensure CSP is enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github
to upgrade should ensure CSP is enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-hw4j-4hg7-22h2
CVE ID: CVE-2024-53267 State: PUBLISHED Published: 2024-11-26T18:41:29.240Z Last Updated: 2024-11-26T19:46:41.263Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: sigstore Products: sigstore-java Problem Types: CWE-347 Description: sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient verification for a situation where a validly-signed but "mismatched" bundle is presented as proof of inclusion into a transparency log. This bug impacts clients using any variation of KeylessVerifier.verify(). The verifier may accept a bundle with an unrelated log entry, cryptographically verifying everything but fa
er.verify(). The verifier may accept a bundle with an unrelated log entry, cryptographically verifying everything but fails to ensure the log entry applies to the artifact in question, thereby "verifying" a bundle without any proof the signing event was logged. This allows the creation of a bundle without fulcio certificate and private key combined with an unrelated but time-correct log entry to fake logging of a signing event. A malicious actor using a compromised identity may want to do this to prevent discovery via rekor's log monitors. The signer's identity will still be available to the verifier. The signature on the bundle must still be on the correct artifact for the verifier to pass.
e available to the verifier. The signature on the bundle must still be on the correct artifact for the verifier to pass. sigstore-gradle-plugin and sigstore-maven-plugin are not affected by this as they only provide signing functionality. This issue has been patched in v1.1.0 release with PR #856. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sigstore/sigstore-java/security/advisories/GHSA-q4xm-6fjc-5f6w - https://github.com/sigstore/sigstore-conformance/pull/166 - https://github.com/sigstore/sigstore-java/pull/856
CVE ID: CVE-2024-53268 State: PUBLISHED Published: 2024-11-25T19:22:17.131Z Last Updated: 2024-11-25T19:38:18.292Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: laurent22 Products: joplin Problem Types: CWE-94 Description: Joplin is an open source, privacy-focused note taking app with sync capabilities for Windows, macOS, Linux, Android and iOS. In affected versions attackers are able to abuse the fact that openExternal is used without any filtering of URI schemes to obtain remote code execution in Windows environments. This issue has been addressed in version 3.0.3 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
addressed in version 3.0.3 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/laurent22/joplin/security/advisories/GHSA-pc5v-xp44-5mgv
CVE ID: CVE-2024-53269 State: PUBLISHED Published: 2024-12-18T19:12:17.033Z Last Updated: 2024-12-18T21:36:18.888Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: envoyproxy Products: envoy Problem Types: CWE-670 Description: Envoy is a cloud-native high-performance edge/middle/service proxy. When additional address are not ip addresses, then the Happy Eyeballs sorting algorithm will crash in data plane. This issue has been addressed in releases 1.32.2, 1.31.4, and 1.30.8. Users are advised to upgrade. Users unable to upgrade may disable Happy Eyeballs and/or change the IP configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
ppy Eyeballs and/or change the IP configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/envoyproxy/envoy/security/advisories/GHSA-mfqp-7mmj-rm53 - https://github.com/envoyproxy/envoy/pull/37743/commits/3f62168d86aceb90f743f63b50cc711710b1c401
CVE ID: CVE-2024-53270 State: PUBLISHED Published: 2024-12-18T19:12:18.775Z Last Updated: 2024-12-18T21:35:24.476Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: envoyproxy Products: envoy Problem Types: CWE-670 Description: Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions `sendOverloadError` is going to assume the active request exists when `envoy.load_shed_points.http1_server_abort_dispatch` is configured. If `active_request` is nullptr, only onMessageBeginImpl() is called. However, the `onMessageBeginImpl` will directly return ok status if the stream is already reset leading to the nullptr reference. The downstream r
inImpl` will directly return ok status if the stream is already reset leading to the nullptr reference. The downstream reset can actually happen during the H/2 upstream reset. As a result envoy may crash. This issue has been addressed in releases 1.32.3, 1.31.5, 1.30.9, and 1.29.12. Users are advised to upgrade. Users unable to upgrade may disable `http1_server_abort_dispatch` load shed point and/or use a high threshold. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/envoyproxy/envoy/security/advisories/GHSA-q9qv-8j52-77p3 - https://github.com/envoyproxy/envoy/pull/37743/commits/6cf8afda956ba67c9afad185b962325a5242ef02
CVE ID: CVE-2024-53271 State: PUBLISHED Published: 2024-12-18T19:12:20.612Z Last Updated: 2024-12-18T21:34:22.425Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H) Vendors: envoyproxy Products: envoy Problem Types: CWE-670 Description: Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions envoy does not properly handle http 1.1 non-101 1xx responses. This can lead to downstream failures in networked devices. This issue has been addressed in versions 1.31.5 and 1.32.3. Users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/envoyprox
orkarounds for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/envoyproxy/envoy/security/advisories/GHSA-rmm5-h2wv-mg4f - https://github.com/envoyproxy/envoy/commit/da56f6da63079baecef9183436ee5f4141a59af8
CVE ID: CVE-2024-53272 State: PUBLISHED Published: 2024-12-11T22:06:56.331Z Last Updated: 2024-12-12T16:00:45.275Z Vendors: HabitRPG Products: habatica Problem Types: CWE-79 Description: Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `login` and `social media` function in `RegisterLoginReset.vue` contains two reflected XSS vulnerabilities due to an incorrect sanitization function. An attacker can specify a malicious `redirectTo` parameter to trigger the vulnerability, giving the attacker control of the victim’s account when a victim registers or logins with a specially crafted link. Version 5.28.5 contains a p
rol of the victim’s account when a victim registers or logins with a specially crafted link. Version 5.28.5 contains a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2024-109_GHSL-2024-111_habitica/ - https://github.com/HabitRPG/habitica/commit/946ade5da1f52a804ef2ba76d49416c43e8166bf
CVE ID: CVE-2024-53273 State: PUBLISHED Published: 2024-12-11T22:13:44.876Z Last Updated: 2024-12-12T15:55:37.199Z Vendors: HabitRPG Products: habatica Problem Types: CWE-79 Description: Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `register` function in `RegisterLoginReset.vue` contains a reflected XSS vulnerability due to an incorrect sanitization function. An attacker can specify a malicious `redirectTo` parameter to trigger the vulnerability, giving the attacker control of the victim’s account when a victim registers or logins with a specially crafted link. Version 5.28.5 contains a patch. Additional Ana
account when a victim registers or logins with a specially crafted link. Version 5.28.5 contains a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2024-109_GHSL-2024-111_habitica/ - https://github.com/HabitRPG/habitica/commit/946ade5da1f52a804ef2ba76d49416c43e8166bf
CVE ID: CVE-2024-53274 State: PUBLISHED Published: 2024-12-11T22:16:31.855Z Last Updated: 2024-12-12T15:54:17.865Z Vendors: HabitRPG Products: habatica Problem Types: CWE-79 Description: Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `register` function in `home.vue` containsa reflected XSS vulnerability due to an incorrect sanitization function. An attacker can specify a malicious `redirectTo` parameter to trigger the vulnerability. Arbitrary javascript can be executed by the attacker in the context of the victim’s session. Version 5.28.5 contains a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
context of the victim’s session. Version 5.28.5 contains a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2024-109_GHSL-2024-111_habitica/ - https://github.com/HabitRPG/habitica/commit/946ade5da1f52a804ef2ba76d49416c43e8166bf
CVE ID: CVE-2024-53275 State: PUBLISHED Published: 2024-12-23T17:13:42.772Z Last Updated: 2025-02-18T21:48:11.075Z Vendors: xemle Products: home-gallery Problem Types: CWE-350 Description: Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, the default setup of home-gallery is vulnerable to DNS rebinding. Home-gallery is set up without TLS and user authentication by default, leaving it vulnerable to DNS rebinding. In this attack, an attacker will ask a user to visit their website. The attacker website will then change the DNS records of their domain from their IP address to the internal IP address of the home-gallery instance
hen change the DNS records of their domain from their IP address to the internal IP address of the home-gallery instance. To tell which IP addresses are valid, we can rebind a subdomain to each IP address we want to check, and see if there is a response. Once potential candidates have been found, the attacker can launch the attack by reading the response of the web server after the IP address has changed. When the attacker domain is fetched, the response will be from the home-gallery instance, not the attacker website, because the IP address has been changed. Due to a lack of authentication, home-gallery photos can then be extracted by the attacker website. Additional Analyst Notes: - CISA A
of authentication, home-gallery photos can then be extracted by the attacker website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2024-091_GHSL-2024-092_home-gallery/
CVE ID: CVE-2024-53276 State: PUBLISHED Published: 2024-12-23T17:13:46.115Z Last Updated: 2025-02-18T21:48:40.822Z Vendors: xemle Products: home-gallery Problem Types: CWE-942 Description: Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, an open CORS policy in app.js may allow an attacker to view the images of home-gallery when it is using the default settings. The following express middleware allows any website to make a cross site request to home-gallery, thus allowing them to read any endpoint on home-gallery. Home-gallery is mostly safe from cross-site requests due to most of its pages requiring JavaScript, and cross-s
gallery. Home-gallery is mostly safe from cross-site requests due to most of its pages requiring JavaScript, and cross-site requests such as fetch() do not render javascript. If an attacker is able to get the path of the preview images which are randomized, an attacker will be able to view such a photo. If any static files or endpoints are introduced in the future that contain sensitive information, they will be accessible to an attacker website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2024-091_GHSL-2024-092_home-gallery/ - https://github.com/xemle/home-gallery/blob/v1.15.0/packages/server/src/app.js#L45