Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-31993 State: PUBLISHED Published: 2025-10-12T02:23:53.322Z Last Updated: 2025-10-14T14:53:52.866Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:L) Vendors: HCL Software Products: Unica Centralized Offer Management Problem Types: CWE-918 Description: HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF). An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124422
CVE ID: CVE-2025-31994 State: PUBLISHED Published: 2025-10-13T03:59:01.076Z Last Updated: 2025-10-14T20:07:09.399Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: HCL Software Products: Unica Campaign Problem Types: CWE-79 Description: HCL Unica Campaign 12.1.10 is vulnerable to Reflected Cross-Site Scripting (XSS) where an attacker injects malicious script into an HTTP request, which is then reflected unsafely in the server's immediate response to the victim's browser, executing the script as if it originated from the trusted website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124472
CVE ID: CVE-2025-31995 State: PUBLISHED Published: 2025-10-13T04:58:20.465Z Last Updated: 2025-10-14T19:36:39.714Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: HCL Software Products: MaxAI Workbench Problem Types: CWE-20 Description: HCL Unica MaxAI Workbench is vulnerable to improper input validation. This allows attackers to exploit vulnerabilities such as SQL Injection, XSS, or command injection, leading to unauthorized access or data breaches, etc. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124425
CVE ID: CVE-2025-31996 State: PUBLISHED Published: 2025-10-13T03:46:30.361Z Last Updated: 2025-10-14T13:40:26.112Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: HCL Software Products: Unica Platform Problem Types: CWE-552 Description: HCL Unica Platform is affected by unprotected files due to improper access controls. These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124418
CVE ID: CVE-2025-31997 State: PUBLISHED Published: 2025-10-12T02:27:25.913Z Last Updated: 2025-10-14T14:53:48.041Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: HCL Software Products: Unica Centralized Offer Management Problem Types: CWE-639 Description: HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR). An attacker can bypass authorization and access resources in the system directly, for example database records or files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124422
CVE ID: CVE-2025-31998 State: PUBLISHED Published: 2025-10-12T02:41:16.694Z Last Updated: 2025-10-17T14:37:29.930Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: Unica Centralized Offer Management Problem Types: CWE-703, CWE-209 Description: HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_artic
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124422
CVE ID: CVE-2025-32001 State: PUBLISHED Published: 2025-11-11T16:50:55.191Z Last Updated: 2025-11-13T04:55:13.818Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Processor Identification Utility Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present wi
able escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01334.html
CVE ID: CVE-2025-32002 State: PUBLISHED Published: 2025-05-15T08:48:12.065Z Last Updated: 2025-05-15T14:00:55.838Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: I-O DATA DEVICE, INC. Products: HDL-TC1, HDL-TC500, HDL-T1NV, HDL-T1WH, HDL-T2NV, HDL-T2WH, HDL-T3NV, HDL-T3WH Problem Types: CWE-78 Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote Link3 function' is enabled. If exploited, a remote unauthenticated attacker may execute an arbitrary OS command. Additional Analyst Notes: - CISA ADP Vuln
loited, a remote unauthenticated attacker may execute an arbitrary OS command. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.iodata.jp/support/information/2025/05_hdl-t/ - https://jvn.jp/en/vu/JVNVU91726405/
CVE ID: CVE-2025-32004 State: PUBLISHED Published: 2025-08-12T16:59:36.959Z Last Updated: 2025-08-15T03:55:42.257Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: Intel(R) SGX SDK Problem Types: Escalation of Privilege, CWE-20 Description: Improper input validation in the Intel Edger8r Tool for some Intel(R) SGX SDK may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01383.html
CVE ID: CVE-2025-32010 State: PUBLISHED Published: 2025-08-20T13:09:04.659Z Last Updated: 2025-11-03T18:09:23.075Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Tenda Products: AC6 V5.0 Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP response can lead to arbitrary code execution. An attacker can send an HTTP response to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2168
CVE ID: CVE-2025-32011 State: PUBLISHED Published: 2025-05-01T18:40:28.325Z Last Updated: 2025-05-02T13:28:33.763Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: KUNBUS GmbH Products: Revolution Pi PiCtory Problem Types: CWE-305 Description: KUNBUS PiCtory versions 2.5.0 through 2.11.1 have an authentication bypass vulnerability where a remote attacker can bypass authentication to get access due to a path traversal. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-121-01 - http://packages.revolutionpi.de/pool/main/p/pictory/
CVE ID: CVE-2025-32012 State: PUBLISHED Published: 2025-04-15T20:08:52.658Z Last Updated: 2025-04-15T20:13:13.413Z Vendors: jellyfin Products: jellyfin Problem Types: CWE-290 Description: Jellyfin is an open source self hosted media server. In versions 10.9.0 to before 10.10.7, the /System/Restart endpoint provides administrators the ability to restart their Jellyfin server. This endpoint is intended to be admins-only, but it also authorizes requests from any device in the same local network as the Jellyfin server. Due to the method Jellyfin uses to determine the source IP of a request, an unauthenticated attacker is able to spoof their IP to appear as a LAN IP, allowing them to restart the
of a request, an unauthenticated attacker is able to spoof their IP to appear as a LAN IP, allowing them to restart the Jellyfin server process without authentication. This means that an unauthenticated attacker could mount a denial-of-service attack on any default-configured Jellyfin server by simply sending the same spoofed request every few seconds to restart the server over and over. This method of IP spoofing also bypasses some security mechanisms, cause a denial-of-service attack, and possible bypass the admin restart requirement if combined with remote code execution. This issue is patched in version 10.10.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git
. This issue is patched in version 10.10.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jellyfin/jellyfin/security/advisories/GHSA-qcmf-gmhm-rfv9 - https://github.com/jellyfin/jellyfin/commit/f625665cb116a7e3feb8b79aaf1ed39a956e0585
CVE ID: CVE-2025-32013 State: PUBLISHED Published: 2025-04-06T20:07:05.624Z Last Updated: 2025-04-07T14:08:48.776Z Vendors: lnbits Products: lnbits Problem Types: CWE-918 Description: LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered in LNbits' LNURL authentication handling functionality. When processing LNURL authentication requests, the application accepts a callback URL parameter and makes an HTTP request to that URL using the httpx library with redirect following enabled. The application doesn't properly validate the callback URL, allowing attackers to specify internal network addresses and access internal resources.
erly validate the callback URL, allowing attackers to specify internal network addresses and access internal resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lnbits/lnbits/security/advisories/GHSA-qp8j-p87f-c8cc
CVE ID: CVE-2025-32014 State: PUBLISHED Published: 2025-04-07T14:56:40.413Z Last Updated: 2025-04-07T15:45:04.415Z Vendors: remcohaszing Products: estree-util-value-to-estree Problem Types: CWE-1321 Description: estree-util-value-to-estree converts a JavaScript value to an ESTree expression. When generating an ESTree from a value with a property named __proto__, valueToEstree would generate an object that specifies a prototype instead. This vulnerability is fixed in 3.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/remcohaszing/estree-util-value-to-estree/security/advisories/GHSA-f7f6-9jq7-3rqj - https://github.com/remcohaszing/estree-util-value-to-es
e-util-value-to-estree/security/advisories/GHSA-f7f6-9jq7-3rqj - https://github.com/remcohaszing/estree-util-value-to-estree/commit/d0c394fbc64bc55937ffe4e162b81f15ba506e55
CVE ID: CVE-2025-32015 State: PUBLISHED Published: 2025-06-04T19:59:39.615Z Last Updated: 2025-06-04T20:47:07.131Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: FreshRSS Products: FreshRSS Problem Types: CWE-79 Description: FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, HTML is sanitized improperly inside the `<iframe srcdoc>` attribute, which leads to cross-site scripting (XSS) by loading an attacker's UserJS inside `<script src>`. In order to execute the attack, the attacker needs to control one of the victim's feeds and have an account on the FreshRSS instance that the victim is using. An attacker can gain access to the victim's
feeds and have an account on the FreshRSS instance that the victim is using. An attacker can gain access to the victim's account by exploiting this vulnerability. If the victim is an admin it would be possible to delete all users (cause damage) or execute arbitrary code on the server by modifying the update URL using fetch() via the XSS. Version 1.26.2 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-wgrq-mcwc-8f8v - https://github.com/FreshRSS/FreshRSS/commit/54e2f9107d03c5b3bb260f38fdb2736bce449fd4
CVE ID: CVE-2025-32016 State: PUBLISHED Published: 2025-04-09T15:48:57.328Z Last Updated: 2025-04-09T20:45:42.880Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: AzureAD Products: microsoft-identity-web Problem Types: CWE-532 Description: Microsoft Identity Web is a library which contains a set of reusable classes used in conjunction with ASP.NET Core for integrating with the Microsoft identity platform (formerly Azure AD v2.0 endpoint) and AAD B2C. This vulnerability affects confidential client applications, including daemons, web apps, and web APIs. Under specific circumstances, sensitive information such as client secrets or certificate details may be ex
nd web APIs. Under specific circumstances, sensitive information such as client secrets or certificate details may be exposed in the service logs of these applications. Service logs are intended to be handled securely. Service logs generated at the information level or credential descriptions containing local file paths with passwords, Base64 encoded values, or Client secret. Additionally, logs of services using Base64 encoded certificates or certificate paths with password credential descriptions are also affected if the certificates are invalid or expired, regardless of the log level. Note that these credentials are not usable due to their invalid or expired status. To mitigate this vulner
he log level. Note that these credentials are not usable due to their invalid or expired status. To mitigate this vulnerability, update to Microsoft.Identity.Web 3.8.2 or Microsoft.Identity.Abstractions 9.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/AzureAD/microsoft-identity-web/security/advisories/GHSA-rpq8-q44m-2rpg
CVE ID: CVE-2025-32017 State: PUBLISHED Published: 2025-04-08T15:37:23.733Z Last Updated: 2025-04-09T17:13:15.314Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: umbraco Products: Umbraco-CMS Problem Types: CWE-23 Description: Umbraco is a free and open source .NET content management system. Authenticated users to the Umbraco backoffice are able to craft management API request that exploit a path traversal vulnerability to upload files into a incorrect location. The issue affects Umbraco 14+ and is patched in 14.3.4 and 15.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-q62r
alyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-q62r-8ppj-xvf4 - https://github.com/umbraco/Umbraco-CMS/commit/06a2a500b358ce15b1e228391eb60bd517c6e833 - https://github.com/umbraco/Umbraco-CMS/commit/d3c1443b14b1076faf13d1bcecc42860fdf5fad8
CVE ID: CVE-2025-32018 State: PUBLISHED Published: 2025-04-08T15:49:19.550Z Last Updated: 2025-04-08T20:01:45.654Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: getcursor Products: cursor Problem Types: CWE-22 Description: Cursor is a code editor built for programming with AI. In versions 0.45.0 through 0.48.6, the Cursor app introduced a regression affecting the set of file paths the Cursor Agent is permitted to modify automatically. Under specific conditions, the agent could be prompted, either directly by the user or via maliciously crafted context, to automatically write to files outside of the opened workspace. This behavior required deliberate promptin
ted context, to automatically write to files outside of the opened workspace. This behavior required deliberate prompting, making successful exploitation highly impractical in real-world scenarios. Furthermore, the edited file was still displayed in the UI as usual for user review, making it unlikely for the edit to go unnoticed by the user. This vulnerability is fixed in 0.48.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/getcursor/cursor/security/advisories/GHSA-qjh8-mh96-fc86
CVE ID: CVE-2025-32019 State: PUBLISHED Published: 2025-07-23T20:38:10.966Z Last Updated: 2025-07-23T20:47:47.745Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: goharbor Products: harbor Problem Types: CWE-79 Description: Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed in versions 2.11.3 and 2.12.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goharbor/harbor/security/advis
12.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goharbor/harbor/security/advisories/GHSA-f9vc-vf3r-pqqq - https://github.com/goharbor/harbor/commit/76c2c5f7cfd9edb356cbb373889a59cc3217a058 - https://github.com/goharbor/harbor/commit/a13a16383a41a8e20f524593cb290dc52f86f088 - https://github.com/goharbor/harbor/commit/f019430872118852f83f96cac9c587b89052d1e5
CVE ID: CVE-2025-32020 State: PUBLISHED Published: 2025-04-08T15:05:26.333Z Last Updated: 2025-04-08T15:39:55.126Z Vendors: Guichaguri Products: crud-query-parser Problem Types: CWE-89 Description: The crud-query-parser library parses query parameters from HTTP requests and converts them to database queries. Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if you are using the TypeORM adapter, ordering is enabled and you have not set-up a property filter. This vulnerability is fixed in 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Guichaguri/crud-query-pa
d in 0.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Guichaguri/crud-query-parser/security/advisories/GHSA-9r25-rp3p-h2w4
CVE ID: CVE-2025-32021 State: PUBLISHED Published: 2025-04-15T20:39:09.253Z Last Updated: 2025-04-16T14:49:51.412Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: WeblateOrg Products: weblate Problem Types: CWE-598 Description: Weblate is a web based localization tool. Prior to version 5.11, when creating a new component from an existing component that has a source code repository URL specified in settings, this URL is included in the client's URL parameters during the creation process. If, for example, the source code repository URL contains GitHub credentials, the confidential PAT and username are shown in plaintext and get saved into browser history. Moreove
GitHub credentials, the confidential PAT and username are shown in plaintext and get saved into browser history. Moreover, if the request URL is logged, the credentials are written to logs in plaintext. If using Weblate official Docker image, nginx logs the URL and the token in plaintext. This issue is patched in version 5.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/WeblateOrg/weblate/security/advisories/GHSA-m67m-3p5g-cw9j - https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.11
CVE ID: CVE-2025-32022 State: PUBLISHED Published: 2025-05-06T16:57:30.855Z Last Updated: 2025-05-06T17:22:16.925Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:L) Vendors: troglobit Products: finit Problem Types: CWE-787 Description: Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is enabled by default, so this bug affects everyone using Finit 4.2 or later that do not explicitly disable the plugin at build time. This bug is fixed in Finit 4.12. Those who cannot upgr
or later that do not explicitly disable the plugin at build time. This bug is fixed in Finit 4.12. Those who cannot upgrade or backport the fix to urandom.c are strongly recommended to disable the plugin in the call to the `configure` script. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/troglobit/finit/security/advisories/GHSA-fv6v-vw8h-9x79 - https://github.com/troglobit/finit/commit/3feff37ba51fa0a6a0a06f59682a0918aa5b04de
CVE ID: CVE-2025-32023 State: PUBLISHED Published: 2025-07-07T15:22:19.155Z Last Updated: 2025-07-07T15:43:15.696Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: redis Products: redis Problem Types: CWE-680 Description: Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. An addi
rsions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing hyperloglog operations. This can be done using ACL to restrict HLL commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43 - https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445 - https://github.com/redis/redis/releases/tag/6.2.19 - https://github.com/redis/redis/releases/tag/7.2.10 - https://github.com/redis/redis/releases/tag/7.4.5 - http
g/6.2.19 - https://github.com/redis/redis/releases/tag/7.2.10 - https://github.com/redis/redis/releases/tag/7.4.5 - https://github.com/redis/redis/releases/tag/8.0.3
CVE ID: CVE-2025-32024 State: PUBLISHED Published: 2025-04-08T15:10:42.867Z Last Updated: 2025-04-08T15:39:08.609Z Vendors: bep Products: imagemeta Problem Types: CWE-770 Description: bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image meta data from JPEG, TIFF, PNG, and WebP files. The EXIF data format allows for defining excessively large data structures in relatively small payloads. Before v0.10.0, If you didn't trust the input images, this could be abused to construct denial-of-service attacks. v0.10.0 added LimitNumTags (default 5000) and LimitTagSize (default 10000) options. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bep/imagemeta
efault 10000) options. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bep/imagemeta/security/advisories/GHSA-q7rw-w4cq-2j6w - https://github.com/bep/imagemeta/commit/4fd89616d8bf7f9bb892360d3fb19080ec2b4602