Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-31740 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-04-25T14:40:46.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: SEPPMail's web frontend, user input is not embedded correctly in the web page and therefore leads to cross-site scripting vulnerabilities (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-seppmail/
CVE ID: CVE-2021-31745 State: PUBLISHED Published: 2021-12-10T17:40:21 Last Updated: 2024-08-03T23:03:33.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session Fixation vulnerability in login.php in Pluck-CMS Pluck 4.7.15 allows an attacker to sustain unauthorized access to the platform. Because Pluck does not invalidate prior sessions after a password change, access can be sustained even after an administrator performs regular remediation attempts such as resetting their password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pluck-cms/pluck/issues/99
CVE ID: CVE-2021-31746 State: PUBLISHED Published: 2021-12-10T17:45:34 Last Updated: 2024-08-03T23:03:33.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zip Slip vulnerability in Pluck-CMS Pluck 4.7.15 allows an attacker to upload specially crafted zip files, resulting in directory traversal and potentially arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pluck-cms/pluck/issues/100
CVE ID: CVE-2021-31747 State: PUBLISHED Published: 2021-12-10T18:04:28 Last Updated: 2024-08-03T23:03:33.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing SSL Certificate Validation issue exists in Pluck 4.7.15 in update_applet.php, which could lead to man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pluck-cms/pluck/issues/101
CVE ID: CVE-2021-31755 State: PUBLISHED Published: 2021-05-07T22:01:44.000Z Last Updated: 2025-10-21T23:25:46.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Yu3H0/IoT_CVE/tree/main/Tenda/CVE_3
CVE ID: CVE-2021-31756 State: PUBLISHED Published: 2021-05-07T22:01:18 Last Updated: 2024-08-03T23:03:33.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /gofrom/setwanType allows attackers to execute arbitrary code on the system via a crafted post request. This occurs when input vector controlled by malicious attack get copied to the stack variable. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yu3H0/IoT_CVE/tree/main/Tenda/CVE_1
CVE ID: CVE-2021-31757 State: PUBLISHED Published: 2021-05-07T22:02:02 Last Updated: 2024-08-03T23:03:33.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setVLAN allows attackers to execute arbitrary code on the system via a crafted post request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yu3H0/IoT_CVE/tree/main/Tenda/CVE_4
CVE ID: CVE-2021-31758 State: PUBLISHED Published: 2021-05-07T22:01:32 Last Updated: 2024-08-03T23:03:33.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setportList allows attackers to execute arbitrary code on the system via a crafted post request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yu3H0/IoT_CVE/tree/main/Tenda/CVE_2
CVE ID: CVE-2021-31760 State: PUBLISHED Published: 2021-04-25T18:28:33 Last Updated: 2024-08-03T23:03:33.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to achieve Remote Command Execution (RCE) through Webmin's running process feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/webmin/webmin - https://youtu.be/D45FN8QrzDo - https://github.com/electronicbots/CVE-2021-31760 - https://github.com/Mesh3l911/CVE-2021-31760
CVE ID: CVE-2021-31761 State: PUBLISHED Published: 2021-04-25T18:30:40 Last Updated: 2024-08-03T23:03:33.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's running process feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/webmin/webmin - https://youtu.be/23VvUMu-28c - https://github.com/Mesh3l911/CVE-2021-31761 - https://github.com/electronicbots/CVE-2021-31761 - http://packetstormsecurity.com/files/163559/Webmin-1.973-Cross-Site-Request-Forgery.html
CVE ID: CVE-2021-31762 State: PUBLISHED Published: 2021-04-25T18:32:12 Last Updated: 2024-08-03T23:03:33.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running process feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/webmin/webmin - https://youtu.be/qCvEXwyaF5U - https://github.com/Mesh3l911/CVE-2021-31762 - https://github.com/electronicbots/CVE-2021-31762 - http://packetstormsecurity.com/files/163492/Webmin-1.973-Cross-Site-Request-Forgery.html
CVE ID: CVE-2021-31769 State: PUBLISHED Published: 2021-06-21T10:59:02 Last Updated: 2024-08-03T23:03:33.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because administrative session data can be read in the %PROGRAMFILES%\MyQ\PHP\Sessions directory. The "Select server file" feature is only intended for administrators but actually does not require authorization. An attacker can inject arbitrary OS commands (such as commands to create new .php files) via the Task Scheduler component. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/bc0d3/6d55866a78f66
component. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/bc0d3/6d55866a78f66569383241406e18794f
CVE ID: CVE-2021-31771 State: REJECTED Published: 2021-07-06T13:35:46 Last Updated: 2022-01-18T18:57:00 Description: No description available.
CVE ID: CVE-2021-31776 State: PUBLISHED Published: 2021-04-29T00:03:56 Last Updated: 2024-08-03T23:03:33.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators. Additional Analyst Notes: - CVE Program Container: References: - https://docs.aviatrix.com/Downloads/samlclient.html - https://docs.aviatrix.com/HowTos/changelog.html#aviatrix-vpn-client-changelog - https://docs.aviatrix.com/Downloads/samlclient.html#windows-
x.com/HowTos/changelog.html#aviatrix-vpn-client-changelog - https://docs.aviatrix.com/Downloads/samlclient.html#windows-win
CVE ID: CVE-2021-31777 State: PUBLISHED Published: 2021-04-28T06:24:10.000Z Last Updated: 2025-05-30T16:01:46.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dce (aka Dynamic Content Element) extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user account. Additional Analyst Notes: - CVE Program Container: References: - https://excellium-services.com/cert-xlm-advisory/ - https://typo3.org/security/advisory/typo3-ext-sa-2021-005 - http://packetstormsecurity.com/files/162429/TYPO3-6.2.1-SQL-Injection.html - https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-31777
CVE ID: CVE-2021-31778 State: PUBLISHED Published: 2021-04-28T06:19:09 Last Updated: 2024-08-03T23:10:29.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: The media2click (aka 2 Clicks for External Media) extension 1.x before 1.3.3 for TYPO3 allows XSS by a backend user account. Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/security/advisory/typo3-ext-sa-2021-004
CVE ID: CVE-2021-31779 State: PUBLISHED Published: 2021-04-28T06:23:48 Last Updated: 2024-08-03T23:10:29.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The yoast_seo (aka Yoast SEO) extension before 7.2.1 for TYPO3 allows SSRF via a backend user account. Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/security/advisory/typo3-ext-sa-2021-006
CVE ID: CVE-2021-31780 State: PUBLISHED Published: 2021-04-23T19:41:55 Last Updated: 2024-08-03T23:10:29.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: In app/Model/MispObject.php in MISP 2.4.141, an incorrect sharing group association could lead to information disclosure on an event edit. When an object has a sharing group associated with an event edit, the sharing group object is ignored and instead the passed local ID is reused. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/a0f08501d2850025892e703f40fb1570c7995478
CVE ID: CVE-2021-31783 State: PUBLISHED Published: 2021-04-26T18:05:16 Last Updated: 2024-08-03T23:10:29.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: show_default.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows Local File Inclusion because the file parameter is not validated with a proper regular-expression check. Additional Analyst Notes: - CVE Program Container: References: - https://piwigo.org/ext/index.php?cid=null - https://github.com/Piwigo/LocalFilesEditor/issues/2 - https://github.com/Piwigo/LocalFilesEditor/commit/dda691d3e45bfd166ac175c70bd8b91cb4917b6b
CVE ID: CVE-2021-31784 State: PUBLISHED Published: 2021-04-26T18:03:32 Last Updated: 2024-08-03T23:10:29.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance Drawings SDK before 2021.6 on all supported by ODA platforms in static configuration. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.opendesign.com/security-advisories - https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf
CVE ID: CVE-2021-31785 State: PUBLISHED Published: 2021-09-07T06:07:39 Last Updated: 2024-08-03T23:10:29.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMP_host_connection_req packets, allowing attackers in radio range to trigger a denial of service (deadlock) of the device via crafted LMP packets. Manual user intervention is required to restart the device and restore Bluetooth communication. Additional Analyst Notes: - CVE Program Container: References: - https://www.actions-semi.com/index.php?id=3581&siteId=4 - https://launchstudio.bluetooth.com/L
Container: References: - https://www.actions-semi.com/index.php?id=3581&siteId=4 - https://launchstudio.bluetooth.com/ListingDetails/76427 - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
CVE ID: CVE-2021-31786 State: PUBLISHED Published: 2021-09-07T06:05:49 Last Updated: 2024-08-03T23:10:29.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forged BDAddress that matches the original connected host. Additional Analyst Notes: - CVE Program Container: References: - https://www.actions-semi.com/index.php?id=3581&siteId=4 - https://launchstudio.bluetooth.com/ListingDetails/76427 -
s: - https://www.actions-semi.com/index.php?id=3581&siteId=4 - https://launchstudio.bluetooth.com/ListingDetails/76427 - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
CVE ID: CVE-2021-31787 State: PUBLISHED Published: 2021-11-30T19:04:24 Last Updated: 2024-08-03T23:10:30.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Classic implementation on Actions ATS2815 chipsets does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown of a device by flooding the target device with LMP_features_res packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.actions-semi.com/index.php?id=3581&siteId=4 - https://launchstudio.bluetooth.com/ListingDetails/76427 - https://dl.packetstormsecurity.net/papers/general/brak
eId=4 - https://launchstudio.bluetooth.com/ListingDetails/76427 - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
CVE ID: CVE-2021-31791 State: PUBLISHED Published: 2021-04-23T21:07:10 Last Updated: 2024-08-03T23:10:29.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Hardware Sentry KM before 10.0.01 for BMC PATROL, a cleartext password may be discovered after a failure or timeout of a command. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentrysoftware.com/library/releaseNotes/index.html?hardwaresentrykmforpatrol10_0_01releasenotes.htm
CVE ID: CVE-2021-31792 State: PUBLISHED Published: 2021-04-30T21:23:03 Last Updated: 2024-08-03T23:10:30.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field Additional Analyst Notes: - CVE Program Container: References: - https://github.com/salesagility/SuiteCRM - https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_19 - https://chris-forbes.github.io/CVE-2021-31792
CVE ID: CVE-2021-31793 State: PUBLISHED Published: 2021-05-06T16:46:18 Last Updated: 2024-08-03T23:10:30.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue exists on NightOwl WDB-20-V2 WDB-20-V2_20190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated user to take a snapshot from the doorbell camera via the /snapshot URI. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/tj-oconnor/16a4116050bbcb4717315f519b944f1f - https://cloud.binary.ninja/embed/f4400a22-c438-403a-bf2a-939ca44a4f6b
CVE ID: CVE-2021-31794 State: PUBLISHED Published: 2021-04-24T19:40:28 Last Updated: 2024-08-03T23:10:29.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Settings.aspx?view=About in Directum 5.8.2 allows XSS via the HTTP User-Agent header. Additional Analyst Notes: - CVE Program Container: References: - https://www.directum.ru/ - https://github.com/awillix/research/blob/main/cve/CVE-2021-31794.md
CVE ID: CVE-2021-31795 State: PUBLISHED Published: 2021-04-24T17:24:43 Last Updated: 2024-08-03T23:10:30.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PowerVR GPU kernel driver in pvrsrvkm.ko through 2021-04-24 for the Linux kernel, as used on Alcatel 1S phones, allows attackers to overwrite heap memory via PhysmemNewRamBackedPMR. Additional Analyst Notes: - CVE Program Container: References: - https://mcyoloswagham.github.io/linux/
CVE ID: CVE-2021-31796 State: PUBLISHED Published: 2021-09-02T00:24:16 Last Updated: 2024-08-03T23:10:30.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may lead to Information Disclosure. An attacker may realistically have enough information that the number of possible keys (for a credential file) is only one, and the number is usually not higher than 2^36. Additional Analyst Notes: - CVE Program Container: References: - https://www.cyberark.com/resources/blog - http://seclists.org/fulldisclosure/2021/Sep/1 - https://korelogic.com/Resources/Advisories/KL-001-2021-008.txt - http://pa
tp://seclists.org/fulldisclosure/2021/Sep/1 - https://korelogic.com/Resources/Advisories/KL-001-2021-008.txt - http://packetstormsecurity.com/files/164023/CyberArk-Credential-File-Insufficient-Effective-Key-Space.html
CVE ID: CVE-2021-31797 State: PUBLISHED Published: 2021-09-01T23:58:31 Last Updated: 2024-08-03T23:10:30.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user identification mechanism used by CyberArk Credential Provider prior to 12.1 is susceptible to a local host race condition, leading to password disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.cyberark.com/resources/blog - http://seclists.org/fulldisclosure/2021/Sep/2 - https://korelogic.com/Resources/Advisories/KL-001-2021-009.txt - http://packetstormsecurity.com/files/164033/CyberArk-Credential-Provider-Race-Condition-Authorization-Bypass.html
CVE ID: CVE-2021-31798 State: PUBLISHED Published: 2021-09-02T00:09:46 Last Updated: 2024-08-03T23:10:30.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and under certain conditions a local malicious user can obtain the plaintext of cache files. Additional Analyst Notes: - CVE Program Container: References: - https://www.cyberark.com/resources/blog - http://seclists.org/fulldisclosure/2021/Sep/3 - https://korelogic.com/Resources/Advisories/KL-001-2021-010.txt - http://packetstormsecurity.com/files/164035/CyberArk-Credential-Provider-Local-Cache-Decryption.html
CVE ID: CVE-2021-31799 State: PUBLISHED Published: 2021-07-29T00:00:00 Last Updated: 2024-10-15T20:28:31.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.debian.org/debian-lts-announce/2021/10/msg00009.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.ruby-lang.org/en/news/2021/05/02/os-command-injection-in-rdoc/ - https://security-tracker.debian.org/tracker/CVE-2021-31799 - https://security.netapp.com
os-command-injection-in-rdoc/ - https://security-tracker.debian.org/tracker/CVE-2021-31799 - https://security.netapp.com/advisory/ntap-20210902-0004/ - https://security.gentoo.org/glsa/202401-05
CVE ID: CVE-2021-31800 State: PUBLISHED Published: 2021-05-05T10:24:10 Last Updated: 2024-08-03T23:10:31.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing /etc/shadow or an SSH authorized key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SecureAuthCorp/impacket/releases - https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e916162
hub.com/SecureAuthCorp/impacket/releases - https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L876 - https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L3485 - https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L2008 - https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L2958 - https://github.com/SecureAuthCorp/impacket/commit/49c643bf66620646884ed141c94e5fdd85bcdd2f - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/
0646884ed141c94e5fdd85bcdd2f - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UF56LYB27LHEIFJTFHU3M75NMNNK2SCG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRV2C5DATXBHG6TF6CEEX54KZ75THQS3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPXDPWCAPVX3UWYZ3N2T5OLBSBBUHJP6/
CVE ID: CVE-2021-31802 State: PUBLISHED Published: 2021-04-26T12:02:32 Last Updated: 2024-08-03T23:10:29.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication. The vulnerability exists within the handling of an HTTP request. An attacker can leverage this to execute code as root. The problem is that a user-provided length value is trusted during a backup.cgi file upload. The attacker must add a \n before the Content-Length header. Additional Analyst Notes: - CVE Program Container: References: - https://www.netgear.com/about/security/ - https://ssd-disc
itional Analyst Notes: - CVE Program Container: References: - https://www.netgear.com/about/security/ - https://ssd-disclosure.com/ssd-advisory-netgear-nighthawk-r7000-httpd-preauth-rce/
CVE ID: CVE-2021-31803 State: PUBLISHED Published: 2021-04-26T07:30:54 Last Updated: 2024-08-03T23:10:30.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save Profile (SEC-581). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/94-change-log/
CVE ID: CVE-2021-31804 State: PUBLISHED Published: 2021-04-26T07:30:35 Last Updated: 2024-08-03T23:10:30.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/leozide/leocad/issues/645
CVE ID: CVE-2021-31805 State: PUBLISHED Published: 2022-04-12T15:25:11 Last Updated: 2024-08-03T23:10:30.193Z Vendors: Apache Software Foundation Products: Apache Struts Problem Types: CWE-917 Description: The fix issued for CVE-2020-17530 was incomplete. So from Apache Struts 2.0.0 to 2.5.29, still some of the tag’s attributes could perform a double evaluation if a developer applied forced OGNL evaluation by using the %{...} syntax. Using forced OGNL evaluation on untrusted user input can lead to a Remote Code Execution and security degradation. Additional Analyst Notes: - CVE Program Container: References: - https://cwiki.apache.org/confluence/display/WW/S2-062 - http://www.openwall.com/li
CVE Program Container: References: - https://cwiki.apache.org/confluence/display/WW/S2-062 - http://www.openwall.com/lists/oss-security/2022/04/12/6 - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20220420-0001/