Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ion Assignment for Critical Resource” and could result in an exploit. Users should update to the latest version of Spring Security to mitigate any future exploits found around this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://spring.io/security/cve-2023-34042
CVE ID: CVE-2023-34043 State: PUBLISHED Published: 2023-09-26T17:14:36.790Z Last Updated: 2024-09-24T13:18:40.162Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: VMware Aria Operations Problem Types: Local Privilege Escalation Vulnerability Description: VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2023-0020.html
CVE ID: CVE-2023-34044 State: PUBLISHED Published: 2023-10-20T08:56:53.136Z Last Updated: 2024-08-02T16:01:52.395Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: VMware Products: Workstation, Fusion Description: VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine. Additional Analyst Notes: - CVE Program Container: References: - https:/
ed in hypervisor memory from a virtual machine. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2023-0022.html
CVE ID: CVE-2023-34045 State: PUBLISHED Published: 2023-10-20T09:00:30.352Z Last Updated: 2025-03-07T18:25:05.584Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: VMware Products: Fusion Description: VMware Fusion(13.x prior to 13.5) contains a local privilege escalation vulnerability that occurs during installation for the first time (the user needs to drag or copy the application to a folder from the '.dmg' volume) or when installing an upgrade. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is installed or being installed for the first time. Additiona
to escalate privileges to root on the system where Fusion is installed or being installed for the first time. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2023-0022.html
CVE ID: CVE-2023-34046 State: PUBLISHED Published: 2023-10-20T08:59:08.671Z Last Updated: 2025-03-07T18:27:07.211Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: VMware Products: Fusion Description: VMware Fusion(13.x prior to 13.5) contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during installation for the first time (the user needs to drag or copy the application to a folder from the '.dmg' volume) or when installing an upgrade. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is installed or being installed for the first time. A
rability to escalate privileges to root on the system where Fusion is installed or being installed for the first time. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2023-0022.html
CVE ID: CVE-2023-34047 State: PUBLISHED Published: 2023-09-20T09:09:12.648Z Last Updated: 2024-09-24T19:04:05.232Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Spring Products: Spring for GraphQL Description: A batch loader function in Spring for GraphQL versions 1.1.0 - 1.1.5 and 1.2.0 - 1.2.2 may be exposed to GraphQL context with values, including security context values, from a different session. An application is vulnerable if it provides a DataLoaderOptions instance when registering batch loader functions through DefaultBatchLoaderRegistry. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://spring.io/secur
istry. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://spring.io/security/cve-2023-34047
CVE ID: CVE-2023-34048 State: PUBLISHED Published: 2023-10-25T04:21:42.267Z Last Updated: 2025-10-21T23:05:33.739Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: VMware Products: VMware vCenter Server, VMware Cloud Foundation (VMware vCenter Server) Description: vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2023-0023.html
CVE ID: CVE-2023-34049 State: PUBLISHED Published: 2024-11-14T04:13:55.255Z Last Updated: 2024-11-14T15:20:15.288Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Salt Products: SALT Description: The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script with the privileges of the user running Salt-SSH. Do not make the copy path on the target predictable and ensure we check return codes of the scp command if the copy fails. Ad
t make the copy path on the target predictable and ensure we check return codes of the scp command if the copy fails. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://saltproject.io/security-announcements/2023-10-27-advisory/
CVE ID: CVE-2023-34050 State: PUBLISHED Published: 2023-10-19T07:11:35.038Z Last Updated: 2024-09-12T17:58:46.718Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H) Vendors: Spring Products: Spring AMQP Description: In spring AMQP versions 1.0.0 to 2.4.16 and 3.0.0 to 3.0.9 , allowed list patterns for deserializable class names were added to Spring AMQP, allowing users to lock down deserialization of data in messages from untrusted sources; however by default, when no allowed list was provided, all classes could be deserialized. Specifically, an application is vulnerable if * the SimpleMessageConverter or SerializerMessageConverter is used * the user does not configure a
tion is vulnerable if * the SimpleMessageConverter or SerializerMessageConverter is used * the user does not configure allowed list patterns * untrusted message originators gain permissions to write messages to the RabbitMQ broker to send malicious content Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://spring.io/security/cve-2023-34050
CVE ID: CVE-2023-34051 State: PUBLISHED Published: 2023-10-20T04:11:52.777Z Last Updated: 2025-05-02T18:30:37.399Z Vendors: n/a Products: VMware Aria Operations for Logs Problem Types: Authentication Bypass Vulnerability Description: VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2023-0021.html
CVE ID: CVE-2023-34052 State: PUBLISHED Published: 2023-10-20T04:11:45.105Z Last Updated: 2024-09-12T14:39:55.743Z Vendors: n/a Products: VMware Aria Operations for Logs Problem Types: Deserialization Vulnerability Description: VMware Aria Operations for Logs contains a deserialization vulnerability. A malicious actor with non-administrative access to the local system can trigger the deserialization of data which could result in authentication bypass. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2023-0021.html
CVE ID: CVE-2023-34053 State: PUBLISHED Published: 2023-11-28T08:10:37.217Z Last Updated: 2025-02-13T16:55:14.580Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Spring Products: Spring Framework Description: In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Specifically, an application is vulnerable when all of the following are true: * the application uses Spring MVC or Spring WebFlux * io.micrometer:micrometer-core is on the classpath * an ObservationRegistry is configured in the application to record observations Typically, Spring Boot app
he classpath * an ObservationRegistry is configured in the application to record observations Typically, Spring Boot applications need the org.springframework.boot:spring-boot-actuator dependency to meet all conditions. Additional Analyst Notes: - CVE Program Container: References: - https://spring.io/security/cve-2023-34053 - https://security.netapp.com/advisory/ntap-20231214-0007/
CVE ID: CVE-2023-34054 State: PUBLISHED Published: 2023-11-28T08:16:14.361Z Last Updated: 2024-08-02T16:01:52.415Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Spring Products: Reactor Netty Description: In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Specifically, an application is vulnerable if Reactor Netty HTTP Server built-in integration with Micrometer is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://spring.io/security/cve-2023-34054
CVE ID: CVE-2023-34055 State: PUBLISHED Published: 2023-11-28T08:27:25.132Z Last Updated: 2025-02-13T16:55:15.158Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Spring Products: Spring Boot Description: In Spring Boot versions 2.7.0 - 2.7.17, 3.0.0-3.0.12 and 3.1.0-3.1.5, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Specifically, an application is vulnerable when all of the following are true: * the application uses Spring MVC or Spring WebFlux * org.springframework.boot:spring-boot-actuator is on the classpath Additional Analyst Notes: - CVE Program Container: References: - https:
rk.boot:spring-boot-actuator is on the classpath Additional Analyst Notes: - CVE Program Container: References: - https://spring.io/security/cve-2023-34055 - https://security.netapp.com/advisory/ntap-20231221-0010/
CVE ID: CVE-2023-34056 State: PUBLISHED Published: 2023-10-25T04:24:47.707Z Last Updated: 2024-10-29T18:28:23.735Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: VMware Products: VMware vCenter Server, VMware Cloud Foundation (VMware vCenter Server) Description: vCenter Server contains a partial information disclosure vulnerability. A malicious actor with non-administrative privileges to vCenter Server may leverage this issue to access unauthorized data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2023-0023.html
CVE ID: CVE-2023-34057 State: PUBLISHED Published: 2023-10-27T04:52:55.280Z Last Updated: 2025-03-06T15:40:49.609Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: VMware Tools Problem Types: Local privilege escalation vulnerability Description: VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest virtual machine may elevate privileges within the virtual machine. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2023-0024.html
CVE ID: CVE-2023-34058 State: PUBLISHED Published: 2023-10-27T04:53:09.935Z Last Updated: 2025-03-06T15:40:20.221Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: VMware Tools, open-vm-tools Problem Types: SAML Token Signature Bypass vulnerability Description: VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias ht
ay be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2023-0024.html - http://www.openwall.com/lists/oss-security/2023/10/27/1 - https://www.debian.org/security/2023/dsa-5543 - https://lists.debian.org/debian-lts-announce/2023/11/msg00002.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org
-announce/2023/11/msg00002.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLTKVTRKQW2GD2274H3UOW6XU4E62GSK/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G7G77Z76CQPGUF7VHRA6O3UFCMPPR4O2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQUOFQL2SNNNMKROQ3TZQY4HEYMNOIBW/
CVE ID: CVE-2023-34059 State: PUBLISHED Published: 2023-10-27T04:53:31.893Z Last Updated: 2025-03-06T15:39:21.712Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: open-vm-tools Problem Types: File descriptor hijack vulnerability Description: open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2023-0024.html - http://www.openwall.com/li
Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2023-0024.html - http://www.openwall.com/lists/oss-security/2023/10/27/3 - http://www.openwall.com/lists/oss-security/2023/10/27/2 - https://www.debian.org/security/2023/dsa-5543 - https://lists.debian.org/debian-lts-announce/2023/11/msg00002.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLTKVTRKQW2GD2274H3UOW6XU4E62GSK/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G7G77Z76CQPGUF7VHRA6O3UFCMPPR4O2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQUOFQL2SNNNMKRO
PR4O2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQUOFQL2SNNNMKROQ3TZQY4HEYMNOIBW/ - http://www.openwall.com/lists/oss-security/2023/11/26/1 - http://www.openwall.com/lists/oss-security/2023/11/27/1
CVE ID: CVE-2023-34060 State: PUBLISHED Published: 2023-11-14T20:20:51.972Z Last Updated: 2025-01-07T19:36:02.150Z Vendors: n/a Products: VMware Cloud Director Appliance (VCD Appliance) Problem Types: Authentication Bypass Vulnerability Description: VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance was upgraded to 10.5 from an older version. On an upgraded version of VMware Cloud Director Appliance 10.5, a malicious actor with network access to the appliance can bypass login restrictions when authenticating on port 22 (ssh) or port 5480 (appliance management console) . This bypass is not present on port 443 (VCD provider a
ng on port 22 (ssh) or port 5480 (appliance management console) . This bypass is not present on port 443 (VCD provider and tenant login). On a new installation of VMware Cloud Director Appliance 10.5, the bypass is not present. VMware Cloud Director Appliance is impacted since it uses an affected version of sssd from the underlying Photon OS. The sssd issue is no longer present in versions of Photon OS that ship with sssd-2.8.1-11 or higher (Photon OS 3) or sssd-2.8.2-9 or higher (Photon OS 4 and 5). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2023-0026.html - https://github.com/vmware/photon/wiki/S
: References: - https://www.vmware.com/security/advisories/VMSA-2023-0026.html - https://github.com/vmware/photon/wiki/Security-Update-5.0-143 - https://github.com/vmware/photon/wiki/Security-Update-4.0-512 - https://github.com/vmware/photon/wiki/Security-Update-3.0-687
CVE ID: CVE-2023-34061 State: PUBLISHED Published: 2024-01-12T07:01:49.532Z Last Updated: 2025-06-03T14:05:36.784Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Cloud Foundry Products: Routing Release, CF deployment Description: Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack. An unauthenticated attacker can use this vulnerability to force route pruning and therefore degrade the service availability of the Cloud Foundry deployment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cloudfoundry.org/blog/cve-2023-34061-gorouter-route-pruning/
CVE ID: CVE-2023-34062 State: PUBLISHED Published: 2023-11-15T09:46:42.975Z Last Updated: 2024-08-29T17:47:11.730Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: Reactor Netty Problem Types: Directory Traversal Description: In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack. Specifically, an application is vulnerable if Reactor Netty HTTP Server is configured to serve static resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://spring.i
ic resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://spring.io/security/cve-2023-34062
CVE ID: CVE-2023-34063 State: PUBLISHED Published: 2024-01-16T09:10:09.738Z Last Updated: 2025-06-20T17:02:26.911Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H) Vendors: N/A Products: VMware Aria Automation, VMware Cloud Foundation Problem Types: VMware Aria Automation Missing Access Control Vulnerability Description: Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2024-0001.html
CVE ID: CVE-2023-34064 State: PUBLISHED Published: 2023-12-12T19:50:51.210Z Last Updated: 2024-08-02T16:01:53.919Z Vendors: n/a Products: VMware Workspace ONE Launcher Description: Workspace ONE Launcher contains a Privilege Escalation Vulnerability. A malicious actor with physical access to Workspace ONE Launcher could utilize the Edge Panel feature to bypass setup to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2023-0027.html
CVE ID: CVE-2023-34085 State: PUBLISHED Published: 2023-10-25T02:03:56.433Z Last Updated: 2024-09-10T15:05:08.099Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Ping Identity Products: PingFederate Problem Types: CWE-359 Description: When an AWS DynamoDB table is used for user attribute storage, it is possible to retrieve the attributes of another user using a maliciously crafted request Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.pingidentity.com/en/resources/downloads/pingfederate.html - https://docs.pingidentity.com/r/en-us/pingfederate-113/gyk1689105783244
CVE ID: CVE-2023-34086 State: PUBLISHED Published: 2023-08-11T02:37:27.980Z Last Updated: 2024-10-09T17:34:28.531Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC BIOS firmware Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html
CVE ID: CVE-2023-34087 State: PUBLISHED Published: 2024-01-08T14:47:54.135Z Last Updated: 2025-11-04T18:14:39.042Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-119 Description: An improper array index validation vulnerability exists in the EVCD var len parsing functionality of GTKWave 3.3.115. A specially crafted .evcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1803 - https://lists.debian
P Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1803 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE ID: CVE-2023-34088 State: PUBLISHED Published: 2023-05-31T18:15:42.895Z Last Updated: 2025-01-09T19:51:07.042Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: CollaboraOnline Products: online Problem Types: CWE-79 Description: Collabora Online is a collaborative online office suite. A stored cross-site scripting (XSS) vulnerability was found in Collabora Online prior to versions 22.05.13, 21.11.9.1, and 6.4.27. An attacker could create a document with an XSS payload as a document name. Later, if an administrator opened the admin console and navigated to the history page, the document name was injected as unescaped HTML and executed as a script inside the c
nd navigated to the history page, the document name was injected as unescaped HTML and executed as a script inside the context of the admin console. The administrator JSON web token (JWT) used for the websocket connection could be leaked through this flaw. Users should upgrade to Collabora Online 22.05.13 or higher; Collabora Online 21.11.9.1 or higher; Collabora Online 6.4.27 or higher to receive a patch. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CollaboraOnline/online/security/advisories/GHSA-7582-pwfh-3pwr