Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-1000398 State: PUBLISHED Published: 2018-01-26T02:00:00 Last Updated: 2024-08-05T22:00:41.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote API in Jenkins 2.73.1 and earlier, 2.83 and earlier at /computer/(agent-name)/api showed information about tasks (typically builds) currently running on that agent. This included information about tasks that the current user otherwise has no access to, e.g. due to lack of Item/Read permission. This has been fixed, and the API now only shows information about accessible tasks. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2017-10-11/
CVE ID: CVE-2017-1000399 State: PUBLISHED Published: 2018-01-26T02:00:00 Last Updated: 2024-08-05T22:00:41.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jenkins 2.73.1 and earlier, 2.83 and earlier remote API at /queue/item/(ID)/api showed information about tasks in the queue (typically builds waiting to start). This included information about tasks that the current user otherwise has no access to, e.g. due to lack of Item/Read permission. This has been fixed, and the API endpoint is now only available for tasks that the current user has access to. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2017-10-11/
CVE ID: CVE-2017-1000400 State: PUBLISHED Published: 2018-01-26T02:00:00 Last Updated: 2024-08-05T22:00:39.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jenkins 2.73.1 and earlier, 2.83 and earlier remote API at /job/(job-name)/api contained information about upstream and downstream projects. This included information about tasks that the current user otherwise has no access to, e.g. due to lack of Item/Read permission. This has been fixed, and the API now only lists upstream and downstream projects that the current user has access to. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2017-10-11/
CVE ID: CVE-2017-1000401 State: PUBLISHED Published: 2018-01-26T02:00:00 Last Updated: 2024-08-05T22:00:40.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jenkins 2.73.1 and earlier, 2.83 and earlier default form control for passwords and other secrets, <f:password/>, supports form validation (e.g. for API keys). The form validation AJAX requests were sent via GET, which could result in secrets being logged to a HTTP access log in non-default configurations of Jenkins, and made available to users with access to these log files. Form validation for <f:password/> is now always sent via POST, which is typically not logged. Additional Analyst Notes: - CVE Program Container: R
sword/> is now always sent via POST, which is typically not logged. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2017-10-11/
CVE ID: CVE-2017-1000402 State: PUBLISHED Published: 2018-01-26T02:00:00 Last Updated: 2024-08-05T22:00:41.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins Swarm Plugin Client 3.4 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2017-10-11/
CVE ID: CVE-2017-1000403 State: PUBLISHED Published: 2018-01-26T02:00:00 Last Updated: 2024-08-05T22:00:40.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins Speaks! Plugin, all current versions, allows users with Job/Configure permission to run arbitrary Groovy code inside the Jenkins JVM, effectively elevating privileges to Overall/Run Scripts. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2017-10-11/
CVE ID: CVE-2017-1000404 State: PUBLISHED Published: 2018-01-26T02:00:00 Last Updated: 2024-08-05T22:00:40.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jenkins Delivery Pipeline Plugin version 1.0.7 and earlier used the unescaped content of the query parameter 'fullscreen' in its JavaScript, resulting in a cross-site scripting vulnerability through specially crafted URLs. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2017-11-16/ - http://www.securityfocus.com/bid/101927
CVE ID: CVE-2017-1000405 State: PUBLISHED Published: 2017-11-30T22:00:00 Last Updated: 2024-08-05T22:00:40.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside the THP implementation. touch_pmd() can be reached by get_user_pages(). In such case, the pmd will become dirty. This scenario breaks the new can_follow_write_pmd()'s logic - pmd can become dirty without going through a COW cycle. This bug is not as severe as the original "Dirty cow" because an ext4 file (or any other regular file) cannot be mapped using THP. Nevertheless, it does allow us to overwrite re
ause an ext4 file (or any other regular file) cannot be mapped using THP. Nevertheless, it does allow us to overwrite read-only huge pages. For example, the zero huge page and sealed shmem files can be overwritten (since their mapping can be populated using THP). Note that after the first write page-fault to the zero page, it will be replaced with a new fresh (and zeroed) thp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102032 - https://access.redhat.com/errata/RHSA-2018:0180 - https://medium.com/bindecy/huge-dirty-cow-cve-2017-1000405-110eca132de0 - https://source.android.com/security/bulletin/pixel/2018-02-01 - http://www.securitytracke
ve-2017-1000405-110eca132de0 - https://source.android.com/security/bulletin/pixel/2018-02-01 - http://www.securitytracker.com/id/1040020 - https://www.exploit-db.com/exploits/43199/
CVE ID: CVE-2017-1000406 State: PUBLISHED Published: 2017-11-30T21:00:00Z Last Updated: 2024-09-16T20:02:38.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache is manually cleared (e.g. via restart). Additional Analyst Notes: - CVE Program Container: References: - https://git.opendaylight.org/gerrit/#/q/topic:AAA-151 - https://jira.opendaylight.org/browse/AAA-151 - http://seclists.org/oss-sec/2017/q4/320
CVE ID: CVE-2017-1000407 State: PUBLISHED Published: 2017-12-11T21:00:00 Last Updated: 2024-08-05T22:00:40.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3617-1/ - https://usn.ubuntu.com/3619-2/ - https://www.debian.org/security/2018/dsa-4082 - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - http://www.openwall.com/lists/oss-security/2017/12/04/2 - http://www.securityfocus.com/bid/102038 - https://usn.ubun
l - http://www.openwall.com/lists/oss-security/2017/12/04/2 - http://www.securityfocus.com/bid/102038 - https://usn.ubuntu.com/3583-2/ - https://usn.ubuntu.com/3632-1/ - https://access.redhat.com/security/cve/cve-2017-1000407 - https://access.redhat.com/errata/RHSA-2018:1062 - https://usn.ubuntu.com/3583-1/ - https://access.redhat.com/errata/RHSA-2018:0676 - https://www.debian.org/security/2017/dsa-4073 - https://usn.ubuntu.com/3617-2/ - https://www.spinics.net/lists/kvm/msg159809.html - https://usn.ubuntu.com/3619-1/ - https://access.redhat.com/errata/RHSA-2019:1170
CVE ID: CVE-2017-1000408 State: PUBLISHED Published: 2018-02-01T04:00:00 Last Updated: 2024-08-05T22:00:41.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43331/ - http://seclists.org/oss-sec/2017/q4/385 - https://security.netapp.com/advisory/ntap-20190404-0003/ - http://www.openwall.com/lists/oss-security/2019/06/27/7 - http://www.openwall.c
etapp.com/advisory/ntap-20190404-0003/ - http://www.openwall.com/lists/oss-security/2019/06/27/7 - http://www.openwall.com/lists/oss-security/2019/06/28/1 - http://www.openwall.com/lists/oss-security/2019/06/28/2
CVE ID: CVE-2017-1000409 State: PUBLISHED Published: 2018-02-01T04:00:00 Last Updated: 2024-08-05T22:00:39.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43331/ - http://seclists.org/oss-sec/2017/q4/385 - https://security.netapp.com/advisory/ntap-20190404-0003/
CVE ID: CVE-2017-1000410 State: PUBLISHED Published: 2017-12-07T19:00:00 Last Updated: 2024-08-05T22:00:41.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info leak is a result of uninitialized stack variables that may be returned to an attacker in their uninitialized state. By manipulating the code flows that precede the handling of these configuration messages, an attacker can also gain some control over which data will be held in the uninitialized stack variables. This can allow him to bypass KASLR, a
in some control over which data will be held in the uninitialized stack variables. This can allow him to bypass KASLR, and stack canaries protection - as both pointers and stack canaries may be leaked in this manner. Combining this vulnerability (for example) with the previously disclosed RCE vulnerability in L2CAP configuration parsing (CVE-2017-1000251) may allow an attacker to exploit the RCE against kernels which were built with the above mitigations. These are the specifics of this vulnerability: In the function l2cap_parse_conf_rsp and in the function l2cap_parse_conf_req the following variable is declared without initialization: struct l2cap_conf_efs efs; In addition, when parsing inp
_req the following variable is declared without initialization: struct l2cap_conf_efs efs; In addition, when parsing input configuration parameters in both of these functions, the switch case for handling EFS elements may skip the memcpy call that will write to the efs variable: ... case L2CAP_CONF_EFS: if (olen == sizeof(efs)) memcpy(&efs, (void *)val, olen); ... The olen in the above if is attacker controlled, and regardless of that if, in both of these functions the efs variable would eventually be added to the outgoing configuration request that is being built: l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, sizeof(efs), (unsigned long) &efs); So by sending a configuration request, or response,
d_conf_opt(&ptr, L2CAP_CONF_EFS, sizeof(efs), (unsigned long) &efs); So by sending a configuration request, or response, that contains an L2CAP_CONF_EFS element, but with an element length that is not sizeof(efs) - the memcpy to the uninitialized efs variable can be avoided, and the uninitialized variable would be returned to the attacker (16 bytes). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2017/q4/357 - https://www.debian.org/security/2018/dsa-4082 - https://access.redhat.com/errata/RHSA-2018:1062 - https://access.redhat.com/errata/RHSA-2018:0654 - https://access.redhat.com/errata/RHSA-2018:1319 - https://help.ecostruxureit.com/display/pub
com/errata/RHSA-2018:0654 - https://access.redhat.com/errata/RHSA-2018:1319 - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 - https://access.redhat.com/errata/RHSA-2018:0676 - https://access.redhat.com/errata/RHSA-2018:1170 - https://access.redhat.com/errata/RHSA-2018:1130 - https://www.debian.org/security/2017/dsa-4073 - http://www.securityfocus.com/bid/102101 - https://usn.ubuntu.com/3933-2/ - https://usn.ubuntu.com/3933-1/
CVE ID: CVE-2017-1000411 State: PUBLISHED Published: 2018-01-31T14:00:00 Last Updated: 2024-08-05T22:00:41.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw when multiple 'expired' flows take up the memory resource of CONFIG DATASTORE which leads to CONTROLLER shutdown. If multiple different flows with 'idle-timeout' and 'hard-timeout' are sent to the Openflow Plugin REST API, the expired flows will eventually crash the controller once its resource allocations set with the JVM size are exceeded. Although the installed flows (with timeout set) are removed from
source allocations set with the JVM size are exceeded. Although the installed flows (with timeout set) are removed from network (and thus also from controller's operations DS), the expired entries are still present in CONFIG DS. The attack can originate both from NORTH or SOUTH. The above description is for a north bound attack. A south bound attack can originate when an attacker attempts a flow flooding attack and since flows come with timeouts, the attack is not successful. However, the attacker will now be successful in CONTROLLER overflow attack (resource consumption). Although, the network (actual flow tables) and operational DS are only (~)1% occupied, the controller requests for resou
Although, the network (actual flow tables) and operational DS are only (~)1% occupied, the controller requests for resource consumption. This happens because the installed flows get removed from the network upon timeout. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2018/q1/52 - http://www.securityfocus.com/bid/102736
CVE ID: CVE-2017-1000412 State: PUBLISHED Published: 2018-01-02T17:00:00Z Last Updated: 2024-09-16T17:38:36.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key. Additional Analyst Notes: - CVE Program Container: References: - https://www.op-tee.org/security-advisories/ - https://github.com/OP-TEE/optee_os/blob/2.5.0/CHANGELOG.md - https://github.com/OP-TEE/optee_os/pull/1610
CVE ID: CVE-2017-1000413 State: PUBLISHED Published: 2018-01-02T17:00:00Z Last Updated: 2024-09-17T01:26:59.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key. Additional Analyst Notes: - CVE Program Container: References: - https://www.op-tee.org/security-advisories/ - https://github.com/OP-TEE/optee_os/blob/2.5.0/CHANGELOG.md - https://github.com/OP-TEE/optee_os/pull/1610
CVE ID: CVE-2017-1000414 State: PUBLISHED Published: 2018-01-25T16:00:00Z Last Updated: 2024-09-17T03:03:20.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImpulseAdventure/JPEGsnoop/commit/b4e458612d4294e0cfe01dbf1c0b09a07a8133a4#diff-cf9182aecc9d630e8db2e0e35f1eec65 - https://www.impulseadventure.com/photo/jpeg-snoop-history.html
CVE ID: CVE-2017-1000415 State: PUBLISHED Published: 2018-01-09T20:00:00Z Last Updated: 2024-09-16T16:47:40.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: MatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate validation process resulting in some certificates have their expiration (beginning) year extended (delayed) by 100 years. Additional Analyst Notes: - CVE Program Container: References: - https://www.ieee-security.org/TC/SP2017/papers/231.pdf - https://www.youtube.com/watch?v=FW--c_F_cY8
CVE ID: CVE-2017-1000416 State: PUBLISHED Published: 2018-01-22T23:00:00Z Last Updated: 2024-09-17T02:53:21.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: axTLS version 1.5.3 has a coding error in the ASN.1 parser resulting in the year (19)50 of UTCTime being misinterpreted as 2050. Additional Analyst Notes: - CVE Program Container: References: - https://www.ieee-security.org/TC/SP2017/papers/231.pdf - https://www.youtube.com/watch?v=FW--c_F_cY8
CVE ID: CVE-2017-1000417 State: PUBLISHED Published: 2018-01-22T23:00:00Z Last Updated: 2024-09-17T04:29:21.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: MatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible spoofing of OIDs (e.g. in ExtKeyUsage extension) on X.509 certificates. Additional Analyst Notes: - CVE Program Container: References: - https://www.ieee-security.org/TC/SP2017/papers/231.pdf - https://www.youtube.com/watch?v=FW--c_F_cY8 - https://github.com/matrixssl/matrixssl/blob/master/doc/CHANGES.md
CVE ID: CVE-2017-1000418 State: PUBLISHED Published: 2018-01-02T18:00:00Z Last Updated: 2024-09-16T19:51:08.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WildMidi_Open function in WildMIDI since commit d8a466829c67cacbb1700beded25c448d99514e5 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Mindwerks/wildmidi/commit/814f31d8eceda8401eb812fc2e94ed143fdad0ab - https://github.com/Mindwerks/wildmidi/issues/178
CVE ID: CVE-2017-1000419 State: PUBLISHED Published: 2018-01-02T19:00:00Z Last Updated: 2024-09-17T03:07:02.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avatar function resulting allowing an attacker to perform port scanning, requesting internal content and potentially attacking such internal services via the web application. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpbb.com/community/viewtopic.php?f=14&p=14782136 - https://www.sec-consult.com/en/blog/advisories/phpbb-server-side-request-forgery-vulnerability/index.html
CVE ID: CVE-2017-1000420 State: PUBLISHED Published: 2018-01-02T19:00:00Z Last Updated: 2024-09-16T16:53:22.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite Additional Analyst Notes: - CVE Program Container: References: - https://github.com/syncthing/syncthing/issues/4286
CVE ID: CVE-2017-1000421 State: PUBLISHED Published: 2018-01-02T19:00:00 Last Updated: 2024-08-05T22:00:40.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code execution Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/01/msg00006.html - https://www.debian.org/security/2018/dsa-4084 - https://github.com/kohler/gifsicle/issues/114
CVE ID: CVE-2017-1000422 State: PUBLISHED Published: 2018-01-02T20:00:00 Last Updated: 2024-08-05T22:00:41.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function resulting in memory corruption and potential code execution Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=785973 - https://www.debian.org/security/2018/dsa-4088 - https://usn.ubuntu.com/3532-1/ - https://lists.debian.org/debian-lts-announce/2018/01/msg00007.html - https://security.gentoo.org/glsa/201804-14
CVE ID: CVE-2017-1000423 State: PUBLISHED Published: 2018-01-02T20:00:00Z Last Updated: 2024-09-17T02:47:36.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic install functionality resulting in unauthenticated attacker gaining PHP code execution on the victim's setup. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/b2evolution/b2evolution/commit/0096a3ebc85f6aadbda2c4427cd092a538b161d2 - https://github.com/b2evolution/b2evolution/commit/b899d654d931f3bf3cfbbdd71e0d1a0f3a16d04c
CVE ID: CVE-2017-1000424 State: PUBLISHED Published: 2018-01-02T20:00:00Z Last Updated: 2024-09-16T20:27:54.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/electron/electron/pull/10008 - https://github.com/electron/electron/pull/10008/files
CVE ID: CVE-2017-1000425 State: PUBLISHED Published: 2018-01-02T23:00:00 Last Updated: 2024-08-05T22:00:41.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and older allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the "movie" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://dev.liferay.com/web/community-security-team/known-vulnerabilities/-/asset_publisher/4AHAYapUm8Xc/content/cst-7030-multiple-xss-vulnerabilities-in-7-0-ce-ga4 - https://github.com/liferay/liferay-portal/commit/9435af4ef8a90b5333da92
030-multiple-xss-vulnerabilities-in-7-0-ce-ga4 - https://github.com/liferay/liferay-portal/commit/9435af4ef8a90b5333da925a5ec860a43d18c031
CVE ID: CVE-2017-1000426 State: PUBLISHED Published: 2018-01-02T21:00:00Z Last Updated: 2024-09-17T00:36:14.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mapproxy/mapproxy/issues/322
CVE ID: CVE-2017-1000427 State: PUBLISHED Published: 2018-01-02T23:00:00 Last Updated: 2024-08-05T22:00:41.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/npm:marked:20170112 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO2RMVVZVV6NFTU46B5RYRK7ZCXYARZS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6BJG6RGDH7ZWVVAUFBFI5L32RSMQN2S/
CVE ID: CVE-2017-1000428 State: PUBLISHED Published: 2018-01-10T02:00:00Z Last Updated: 2024-09-17T04:14:41.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_management.php due to the use of $_SERVER['PHP_SELF'] to build links and a stored XSS in the admin log panel by specifying a malformed User-Agent string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCore-CMS/issues/35