Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
pdf_dashboard_html_page' function. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/52cce49b-49b3-49b0-9f18-4829f07a420f?source=cve - https://plugins.trac.wordpress.org/browser/generate-pdf-using-contact-form-7/tags/4.0.6/inc/templates/cf7-pdf-generation.admin.html.php#L72
CVE ID: CVE-2024-6317 State: PUBLISHED Published: 2024-07-09T07:38:44.066Z Last Updated: 2024-08-01T21:33:05.450Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: zealopensource Products: Generate PDF using Contact Form 7 Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 4.0.6. This is due to missing nonce validation and the plugin not properly validating a file or its path prior to deleting it in the 'wp_cf7_pdf_dashboard_html_page' function. This makes it possible for unauthentica
its path prior to deleting it in the 'wp_cf7_pdf_dashboard_html_page' function. This makes it possible for unauthenticated attackers to delete arbitrary files, including the wp-config.php file, which can make site takeover and remote code execution possible via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/455b9695-e140-4bdb-b626-5c1695518563?source=cve - https://plugins.trac.wordpress.org/browser/generate-pdf-using-contact-form-7/tags/4.0.6/inc/templates/cf7-pdf-generation.adm
s://plugins.trac.wordpress.org/browser/generate-pdf-using-contact-form-7/tags/4.0.6/inc/templates/cf7-pdf-generation.admin.html.php#L74
CVE ID: CVE-2024-6318 State: PUBLISHED Published: 2024-07-04T08:32:20.895Z Last Updated: 2024-08-01T21:33:05.664Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wbolt Products: IMGspider – 图片采集抓取插件 Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The IMGspider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_img_file' function in all versions up to, and including, 2.3.10. This makes it possible for authenticated attackers, with contributor-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution pos
and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/306f00e4-9a70-48be-a91e-e396643a8129?source=cve - https://plugins.trac.wordpress.org/browser/imgspider/tags/2.3.10/classes/post.class.php#L122 - https://plugins.trac.wordpress.org/changeset/3107741/imgspider
CVE ID: CVE-2024-6319 State: PUBLISHED Published: 2024-07-04T08:32:21.972Z Last Updated: 2024-08-01T21:33:05.386Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wbolt Products: IMGspider – 图片采集抓取插件 Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The IMGspider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all versions up to, and including, 2.3.10. This makes it possible for authenticated attackers, with contributor-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible. Ad
e permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/63a4a077-c99e-4742-9fa1-f323fd24b950?source=cve - https://plugins.trac.wordpress.org/browser/imgspider/tags/2.3.10/classes/post.class.php#L189 - https://plugins.trac.wordpress.org/changeset/3107741/imgspider
CVE ID: CVE-2024-6320 State: PUBLISHED Published: 2024-07-09T07:38:49.002Z Last Updated: 2024-08-01T21:33:05.432Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: dwieeb Products: ScrollTo Top Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The ScrollTo Top plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 1.2.2. This is due to missing nonce validation and missing file type validation in the 'options_page' function. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possibl
enticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e11f1a56-d5a2-47a4-a5cc-34345966495a?source=cve - https://plugins.trac.wordpress.org/browser/scrollto-top/trunk/scrollto-top.php?rev=662578#L238
CVE ID: CVE-2024-6321 State: PUBLISHED Published: 2024-07-09T07:38:48.503Z Last Updated: 2024-08-01T21:33:05.319Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: dwieeb Products: ScrollTo Bottom Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The ScrollTo Bottom plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 1.1.1. This is due to missing nonce validation and missing file type validation in the 'options_page' function. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution p
unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d560f28f-899c-44cf-8640-55647c1de7dc?source=cve - https://plugins.trac.wordpress.org/browser/scrollto-bottom/trunk/scrollto-bottom.php?rev=516875#L256
CVE ID: CVE-2024-6322 State: PUBLISHED Published: 2024-08-20T17:52:06.232Z Last Updated: 2025-11-23T15:33:04.210Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L) Vendors: Grafana Products: Grafana, Grafana Enterprise Problem Types: CWE-266 Description: Access control for plugin data sources protected by the ReqActions json field of the plugin.json is bypassed if the user or service account is granted associated access to any other data source, as the ReqActions check was not scoped to each specific datasource. The account must have prior query access to the impacted datasource. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://grafana.com/secur
s to the impacted datasource. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://grafana.com/security/security-advisories/cve-2024-6322/
CVE ID: CVE-2024-6323 State: PUBLISHED Published: 2024-06-26T23:30:40.557Z Last Updated: 2024-09-17T17:03:09.769Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: Improper authorization in global search in GitLab EE affecting all versions from 16.11 prior to 16.11.5 and 17.0 prior to 17.0.3 and 17.1 prior to 17.1.1 allows an attacker leak content of a private repository in a public project. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/457912
CVE ID: CVE-2024-6324 State: PUBLISHED Published: 2025-01-09T06:02:46.213Z Last Updated: 2025-01-09T15:32:34.143Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: CWE-407 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. It was possible to trigger a DoS by creating cyclic references between epics. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/468914 - https://about.gitlab.com/releases/2025/01/08/patch-release-gitlab-17-7-
//gitlab.com/gitlab-org/gitlab/-/issues/468914 - https://about.gitlab.com/releases/2025/01/08/patch-release-gitlab-17-7-1-released/#cyclic-reference-of-epics-leads-resource-exhaustion - https://hackerone.com/reports/2553716
CVE ID: CVE-2024-6325 State: PUBLISHED Published: 2024-07-16T16:43:44.494Z Last Updated: 2024-08-01T21:33:05.423Z Vendors: Rockwell Automation Products: FactoryTalk® System Services (installed via FTPM), FactoryTalk® Policy Manager (FTPM) Problem Types: CWE-269 Description: The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and CVE-2022-1161 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html by implementing CIP security and did not update to the versions of the software CVE-2022-1161 https://www.rockwellautomation.com/en-u
ng CIP security and did not update to the versions of the software CVE-2022-1161 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html and CVE-2022-1161. https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1678.html
CVE ID: CVE-2024-6326 State: PUBLISHED Published: 2024-07-16T16:51:18.320Z Last Updated: 2024-08-01T21:33:05.450Z Vendors: Rockwell Automation Products: FactoryTalk® System Services (installed via FTPM), FactoryTalk® Policy Manager (FTPM) Problem Types: CWE-269 Description: An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerability by starting a back-up or restore process, which temporarily exposes private keys, passwords, pre-shared keys, and database folders when they are temporarily copied to an interim folder. This vulnerability is due to the lack of explicit permissions set on the ba
are temporarily copied to an interim folder. This vulnerability is due to the lack of explicit permissions set on the backup folder. If private keys are obtained by a malicious user, they could impersonate resources on the secured network. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1678.html
CVE ID: CVE-2024-6327 State: PUBLISHED Published: 2024-07-24T13:57:07.165Z Last Updated: 2024-08-01T21:33:05.307Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Progress Software Corporation Products: Telerik Report Server Problem Types: CWE-502 Description: In Progress® Telerik® Report Server versions prior to 2024 Q2 (10.1.24.709), a remote code execution attack is possible through an insecure deserialization vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.telerik.com/report-server - https://docs.telerik.com/report-server/knowledge-base/deserialization-vulnerability-cve-2024-6327
CVE ID: CVE-2024-6328 State: PUBLISHED Published: 2024-07-12T10:59:56.085Z Last Updated: 2024-08-01T21:33:05.461Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: inspireui Products: MStore API – Create Native Android & iOS Apps On The Cloud Problem Types: CWE-288 Authentication Bypass Using an Alternate Path or Channel Description: The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.14.7. This is due to insufficient verification on the 'phone' parameter of the 'firebase_sms_login' and 'firebase_sms_login_v2' functions. This makes it possible for u
on the 'phone' parameter of the 'firebase_sms_login' and 'firebase_sms_login_v2' functions. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email address or phone number. Additionally, if a new email address is supplied, a new user account is created with the default role, even if registration is disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/17d8e2e9-5e3f-433b-be1a-6ea765eba547?source=cve - https://plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/flutter-user.php#L69
a-6ea765eba547?source=cve - https://plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/flutter-user.php#L699 - https://plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/flutter-user.php#L714 - https://plugins.trac.wordpress.org/changeset/3115231/
CVE ID: CVE-2024-6329 State: PUBLISHED Published: 2024-08-08T10:02:09.817Z Last Updated: 2024-08-29T15:05:00.349Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-116 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2, which causes the web interface to fail to render the diff correctly when the path is encoded. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/468937 - https://hackerone.com/reports/2542483
CVE ID: CVE-2024-6330 State: PUBLISHED Published: 2024-08-19T06:00:02.982Z Last Updated: 2024-08-19T15:29:05.964Z Vendors: Unknown Products: GEO my WP Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The GEO my WP WordPress plugin before 4.5.0.2 does not prevent unauthenticated attackers from including arbitrary files in PHP's execution context, which leads to Remote Code Execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/95b532e0-1ffb-421e-b9c0-de03f89491d7/
CVE ID: CVE-2024-6331 State: PUBLISHED Published: 2024-08-04T00:00:15.148Z Last Updated: 2024-08-30T15:27:54.554Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: stitionai Products: stitionai/devika Problem Types: CWE-74 Description: stitionai/devika main branch as of commit cdfb782b0e634b773b10963c8034dc9207ba1f9f is vulnerable to Local File Read (LFI) by Prompt Injection. The integration of Google Gimini 1.0 Pro with `HarmBlockThreshold.BLOCK_NONE` for `HarmCategory.HARM_CATEGORY_HATE_SPEECH` and `HarmCategory.HARM_CATEGORY_HARASSMENT` in `safety_settings` disables content protection. This allows malicious commands to be executed, such as reading sensitive f
safety_settings` disables content protection. This allows malicious commands to be executed, such as reading sensitive file contents like `/etc/passwd`. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/d5ac1051-22fa-42f0-8d82-73267482e60f
CVE ID: CVE-2024-6332 State: PUBLISHED Published: 2024-09-05T09:29:48.753Z Last Updated: 2024-09-05T19:38:14.016Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: ameliabooking Products: Booking for Appointments and Events Calendar – Amelia Premium, Booking for Appointments and Events Calendar – Amelia Problem Types: CWE-862 Description: The Booking for Appointments and Events Calendar – Amelia Premium and Lite plugins for WordPress are vulnerable to unauthorized access of data due to a missing capability check on the 'ameliaButtonCommand' function in all versions up to, and including, Premium 7.7 and Lite 1.2.3. This makes it possible for unauthenticated att
unction in all versions up to, and including, Premium 7.7 and Lite 1.2.3. This makes it possible for unauthenticated attackers to access employee calendar details, including Google Calendar OAuth tokens in the premium version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2ac1e3ee-4dcc-4f45-ad07-17af750da3d1?source=cve - https://plugins.trac.wordpress.org/browser/ameliabooking/trunk/assets/js/tinymce/amelia-mce.js#L741 - https://plugins.trac.wordpress.org/browser/ameliabooking/trunk/public/js/tinymce/amelia-mce.js#L741
CVE ID: CVE-2024-6333 State: PUBLISHED Published: 2024-10-17T13:51:16.011Z Last Updated: 2025-09-17T16:52:52.859Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Xerox Products: AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807, Xerox® EC8036 / EC8056, Xerox® EC8036 / EC8056 - Common Criteria (June 2022), Xerox® EC8036 / EC8056 - Common Criteria (June 2024), AltaLink®C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria (Aug 2024), AltaLink® C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria Certified (Aug 2023), VersaLink® B625 / C625 | B425 / C425 Common Criteria Certifie
8145 / B8155 / B8170 Common Criteria Certified (Aug 2023), VersaLink® B625 / C625 | B425 / C425 Common Criteria Certified (2024), WorkCentre 3655/3655i, WorkCentre 5945/55i, WorkCentre 6655/6655i, WorkCentre 7220/7225i, WorkCentre 7830/7835i, WorkCentre 7845/7855i, WorkCentre 7845/7855 (IBG), WorkCentre 7970/7970i, WorkCentre EC7836, WorkCentre EC7856 Problem Types: CWE-78, CWE-77 Description: Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitydocs.business.xerox.com/wp-content/uploads/2024/10/Xerox-Security-Bulletin-XRX24-015-for-Altalink-Versalink-and-Wor
uritydocs.business.xerox.com/wp-content/uploads/2024/10/Xerox-Security-Bulletin-XRX24-015-for-Altalink-Versalink-and-WorkCentre-%E2%80%93-CVE-2024-6333-.pdf
CVE ID: CVE-2024-6334 State: PUBLISHED Published: 2024-07-09T06:00:05.147Z Last Updated: 2024-11-21T14:57:54.683Z Vendors: Unknown Products: Easy Table of Contents Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Easy Table of Contents WordPress plugin before 2.0.67.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/6c09083c-6960-4369-8c5c-ad20e34aaa8b/
CVE ID: CVE-2024-6335 State: PUBLISHED Published: 2025-05-15T20:07:06.829Z Last Updated: 2025-05-20T19:24:58.749Z Vendors: Unknown Products: Tracking Code Manager Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Tracking Code Manager WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3bfb6b3f-8642-4807-b6b3-f214b26e96c2/
CVE ID: CVE-2024-6336 State: PUBLISHED Published: 2024-07-16T21:27:07.393Z Last Updated: 2024-08-01T21:33:05.420Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-200 Description: A Security Misconfiguration vulnerability in GitHub Enterprise Server allowed sensitive information disclosure to unauthorized users in GitHub Enterprise Server by exploiting organization ruleset feature. This attack required an organization member to explicitly change the visibility of a dependent repository from private to public. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.13.1, 3.12.6, 3.11.12, 3.10.14, and 3.9.17. This vuln
GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.13.1, 3.12.6, 3.11.12, 3.10.14, and 3.9.17. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.15 - https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.12 - https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.6 - https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.1 - https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.17
CVE ID: CVE-2024-6337 State: PUBLISHED Published: 2024-08-20T19:19:49.193Z Last Updated: 2024-08-21T13:43:00.222Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-863 Description: An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed a GitHub App with only content: read and pull_request_write: write permissions to read issue content inside a private repository. This was only exploitable via user access token and installation access token was not impacted. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.13.3, 3.12.8, 3.11.14 and 3.10.16. This vulnerability was reporte
prise Server prior to 3.14 and was fixed in versions 3.13.3, 3.12.8, 3.11.14 and 3.10.16. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.16 - https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.14 - https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.8 - https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.3
CVE ID: CVE-2024-6338 State: PUBLISHED Published: 2024-07-19T07:36:48.921Z Last Updated: 2024-08-01T21:33:05.459Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: foliovision Products: FV Flowplayer Video Player Problem Types: CWE-89 Description: The FV Flowplayer Video Player plugin for WordPress is vulnerable to time-based SQL Injection via the ‘exclude’ parameter in all versions up to, and including, 7.5.46.7212 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries int