Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-1449 State: PUBLISHED Published: 2025-03-31T16:00:56.951Z Last Updated: 2025-03-31T18:24:38.780Z Vendors: Rockwell Automation Products: Verve Asset Manager Problem Types: CWE -1287 Improper Validation of Specified Type of Input Description: A vulnerability exists in the Rockwell Automation Verve Asset Manager due to insufficient variable sanitizing. A portion of the administrative web interface for Verve's Legacy Agentless Device Inventory (ADI) capability (deprecated since the 1.36 release) allows users to change a variable with inadequate sanitizing. If exploited, it could allow a threat actor with administrative access to run arbitrary commands in the context of the conta
xploited, it could allow a threat actor with administrative access to run arbitrary commands in the context of the container running the service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1723.html
CVE ID: CVE-2025-1450 State: PUBLISHED Published: 2025-02-27T09:21:48.750Z Last Updated: 2025-02-27T14:32:44.387Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: galdub Products: Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty Problem Types: CWE-79 Description: The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-hover’ parameter in all versions up to, and including, 3.3.5 due to insufficient input sanitization and output escaping. T
ver’ parameter in all versions up to, and including, 3.3.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a87d0966-3fd4-46f8-acd5-1cf0cb18af42?source=cve - https://plugins.trac.wordpress.org/browser/chaty/tags/3.3.4/js/cht-front-script.js#L389 - https://plugins.trac.wordpress.org/browser/chaty/tags/3.3.5/js/cht-front-script.min.js - https://plugins.trac.wordpress.org
ps://plugins.trac.wordpress.org/browser/chaty/tags/3.3.5/js/cht-front-script.min.js - https://plugins.trac.wordpress.org/changeset/3246336/
CVE ID: CVE-2025-1451 State: PUBLISHED Published: 2025-03-20T10:10:49.648Z Last Updated: 2025-10-15T12:50:05.646Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: parisneo Products: parisneo/lollms-webui Problem Types: CWE-770 Description: A vulnerability in parisneo/lollms-webui v13 arises from the server's handling of multipart boundaries in file uploads. The server does not limit or validate the length of the boundary or the characters appended to it, allowing an attacker to craft requests with excessively long boundaries, leading to resource exhaustion and eventual denial of service (DoS). Despite an attempted patch in commit 483431bb, which blocked hyphen
ce exhaustion and eventual denial of service (DoS). Despite an attempted patch in commit 483431bb, which blocked hyphen characters from being appended to the multipart boundary, the fix is insufficient. The server remains vulnerable if other characters (e.g., '4', 'a') are used instead of hyphens. This allows attackers to exploit the vulnerability using different characters, causing resource exhaustion and service unavailability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/63f5aea4-953b-4b38-9f10-3afe425be1d4
CVE ID: CVE-2025-1452 State: PUBLISHED Published: 2025-03-25T06:00:14.469Z Last Updated: 2025-03-25T14:10:52.427Z Vendors: Unknown Products: Favorites Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Favorites WordPress plugin before 2.3.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/47365daf-7ef5-471a-ab0e-f6d1b40ca56c/
CVE ID: CVE-2025-1453 State: PUBLISHED Published: 2025-04-24T06:00:02.636Z Last Updated: 2025-04-24T14:39:50.000Z Vendors: Unknown Products: Category Posts Widget Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Category Posts Widget WordPress plugin before 4.9.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6bf93a34-a19f-4266-a95d-033551db43e6/
CVE ID: CVE-2025-1454 State: PUBLISHED Published: 2025-05-15T20:07:26.908Z Last Updated: 2025-05-16T20:24:28.480Z Vendors: Unknown Products: Ninja Pages Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Ninja Pages WordPress plugin through 1.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0089f813-82fa-4ffc-acd6-a70e67edc8ea/
CVE ID: CVE-2025-1455 State: PUBLISHED Published: 2025-04-12T08:22:39.981Z Last Updated: 2025-05-12T15:44:30.150Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wproyal Products: Royal Elementor Addons and Templates Problem Types: CWE-79 Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Woo Grid widget in all versions up to, and including, 1.7.1012 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses
Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5666e2b7-acb3-4abb-ac2a-1575206435cf?source=cve - https://plugins.trac.wordpress.org/browser/royal-elementor-addons/trunk/modules/woo-grid/widgets/wpr-woo-grid.php#L9280 - https://plugins.trac.wordpress.org/changeset/3262790/royal-elementor-addons/tags/1.7.1013/modules/woo-grid/widgets/wpr-woo-grid.php?old=3255849&old_path=royal-elementor-addons%2Ftags%2F1.7.1012%2Fmodules%2Fwoo-grid%2Fwidgets%2Fwpr-woo-grid.php
CVE ID: CVE-2025-1456 State: PUBLISHED Published: 2025-04-12T08:22:40.950Z Last Updated: 2025-04-14T18:05:48.768Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wproyal Products: Royal Elementor Addons and Templates Problem Types: CWE-79 Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `widgetGrid`, `widgetCountDown`, and `widgetInstagramFeed` methods in all versions up to, and including, 1.7.1012 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts
makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/68c6e428-b9cf-442f-a896-a8ceb4b9be0e?source=cve - https://plugins.trac.wordpress.org/browser/royal-elementor-addons/trunk/assets/js/frontend.min.js - https://plugins.trac.wordpress.org/changeset/3262790/royal-elementor-addons/tags/1.7.1013/assets/js/frontend.js?old=3255849&old_path=royal-elementor-addons%2Ftags%2F1.7.1012%2Fassets%2Fjs%2Ffrontend.js
CVE ID: CVE-2025-1457 State: PUBLISHED Published: 2025-04-19T03:21:24.783Z Last Updated: 2025-04-21T02:41:47.033Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: bdthemes Products: Element Pack Addons for Elementor – Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder Problem Types: CWE-79 Description: The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Wrapper Link, Countdown and Gallery widgets in all versions up to, and including, 5.10.28 due to insufficient input sanitization and output escaping. This makes
ts in all versions up to, and including, 5.10.28 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c6ac5484-3caa-4821-990b-cd49c2c4873d?source=cve - https://plugins.trac.wordpress.org/browser/bdthemes-element-pack-lite/trunk/assets/js/modules/ep-wrapper-link.min.js - https://plugins.trac.wordpress.org/browser/bdthemes-element-pack-lite/trunk/assets/js/modules/ep-countdo
r-link.min.js - https://plugins.trac.wordpress.org/browser/bdthemes-element-pack-lite/trunk/assets/js/modules/ep-countdown.min.js - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3272946%40bdthemes-element-pack-lite&new=3272946%40bdthemes-element-pack-lite&sfp_email=&sfph_mail=#file1097 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3272946%40bdthemes-element-pack-lite&new=3272946%40bdthemes-element-pack-lite&sfp_email=&sfph_mail=#file1095
CVE ID: CVE-2025-1458 State: PUBLISHED Published: 2025-04-26T05:34:23.210Z Last Updated: 2025-04-28T21:56:10.556Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: bdthemes Products: Element Pack Addons for Elementor – Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder Problem Types: CWE-79 Description: The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets like Dual Button, Creative Button, Image Stack and more in all versions up to, and including, 5.10.29 due to insufficient input sanitization and outp
tton, Image Stack and more in all versions up to, and including, 5.10.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7fbd3170-a45b-4ae6-bc59-4cfb92f6c2a6?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3277466%40bdthemes-element-pack-lite&new=3277466%40bdthemes-element-pack-lite&sfp_email=&sfph_mail=
CVE ID: CVE-2025-1459 State: PUBLISHED Published: 2025-03-01T06:39:28.906Z Last Updated: 2025-03-03T17:38:27.944Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: gpriday Products: Page Builder by SiteOrigin Problem Types: CWE-79 Description: The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Embedded Video(PB) widget in all versions up to, and including, 2.31.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected
-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e14c12ef-0774-4459-9a2c-9a4b633a0efe?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3247428%40siteorigin-panels&new=3247428%40siteorigin-panels&sfp_email=&sfph_mail=
CVE ID: CVE-2025-1460 State: REJECTED Published: N/A Last Updated: 2025-02-26T22:15:50.311Z Description: No description available.
CVE ID: CVE-2025-1461 State: PUBLISHED Published: 2025-05-28T17:26:51.320Z Last Updated: 2025-05-29T19:02:08.446Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: N/A Products: Vuetify Problem Types: CWE-79 Description: Improper neutralization of the value of the 'eventMoreText' property of the 'VCalendar' component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting (XSS) https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the default Vuetify translator will return the translation key as the translation, if it can't find an actual translation. This issue affects Vuetify ver
ll return the translation key as the translation, if it can't find an actual translation. This issue affects Vuetify versions greater than or equal to 2.0.0 and less than 3.0.0. Note: Version 2.x of Vuetify is End-of-Life and will not receive any updates to address this issue. For more information see here https://v2.vuetifyjs.com/en/about/eol/ . Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.herodevs.com/vulnerability-directory/cve-2025-1461 - https://github.com/neverendingsupport/nes-vuetify-cve-2025-1461
CVE ID: CVE-2025-1463 State: PUBLISHED Published: 2025-03-05T11:22:07.965Z Last Updated: 2025-03-05T14:26:53.806Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: javmah Products: Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. Problem Types: CWE-352 Description: The Spreadsheet Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.2. This is due to improper nonce validation within the class-wpgsi-show.php script. This makes it possible for unauthenticated attackers to publish arbitrary posts, includ
the class-wpgsi-show.php script. This makes it possible for unauthenticated attackers to publish arbitrary posts, including private, granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/034ba83f-4ee3-40f1-a41a-8b3d0055a1ba?source=cve - https://wordpress.org/plugins/wpgsi/#developers - https://plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-show.php - https://plugins.trac.wordpress.org/changeset/3250077/#file352 - https://plugins.trac.wordpress.org/changeset/3250077/
CVE ID: CVE-2025-1464 State: PUBLISHED Published: 2025-02-19T13:31:03.827Z Last Updated: 2025-02-19T14:16:22.875Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Baiyi Products: Cloud Asset Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in Baiyi Cloud Asset Management System up to 20250204. This issue affects some unknown processing of the file /wuser/admin.house.collect.php. The manipulation of the argument project_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did
e exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296237 - https://vuldb.com/?ctiid.296237 - https://vuldb.com/?submit.494807 - https://github.com/stevenchen0x01/CVE/issues/2
CVE ID: CVE-2025-1465 State: PUBLISHED Published: 2025-02-19T15:31:05.020Z Last Updated: 2025-02-19T16:23:26.787Z Severity: N/A (CVSS 4.3 AV:N/AC:H/Au:M/C:P/I:P/A:P) Vendors: n/a Products: lmxcms Problem Types: CWE-94, CWE-74 Description: A vulnerability, which was classified as problematic, was found in lmxcms 1.41. Affected is an unknown function of the file db.inc.php of the component Maintenance. The manipulation leads to code injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but d
The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296238 - https://vuldb.com/?ctiid.296238 - https://vuldb.com/?submit.496877 - https://github.com/NeoVuln/CVE/issues/6
CVE ID: CVE-2025-1467 State: PUBLISHED Published: 2025-02-23T15:19:46.269Z Last Updated: 2025-02-24T14:48:30.328Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P) Vendors: n/a Products: tarteaucitronjs Problem Types: CWE-79 Description: Versions of the package tarteaucitronjs before 1.17.0 are vulnerable to Cross-site Scripting (XSS) via the getElemWidth() and getElemHeight(). This is related to [SNYK-JS-TARTEAUCITRONJS-8366541](https://security.snyk.io/vuln/SNYK-JS-TARTEAUCITRONJS-8366541) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-TARTEAUCITRONJS-8731160 - https://github.com/AmauriC/tarteaucitron.js/com
ences: - https://security.snyk.io/vuln/SNYK-JS-TARTEAUCITRONJS-8731160 - https://github.com/AmauriC/tarteaucitron.js/commit/12490579001d5caa187adcaecb01da570a12076b - https://github.com/AmauriC/tarteaucitron.js/issues/1184 - https://gist.github.com/Rudloff/d48f525215bd5426cbb076116c4422dd
CVE ID: CVE-2025-1468 State: PUBLISHED Published: 2025-03-18T11:03:17.728Z Last Updated: 2025-03-18T13:16:26.068Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: CODESYS Products: CODESYS Runtime Toolkit Problem Types: CWE-203 Description: An unauthenticated remote attacker can gain access to sensitive information including authentication information when using CODESYS OPC UA Server with the non-default Basic128Rsa15 security policy. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2025-022
CVE ID: CVE-2025-1469 State: PUBLISHED Published: 2025-07-21T08:35:00.914Z Last Updated: 2025-07-21T17:25:16.332Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Turtek Software Products: Eyotek Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Turtek Software Eyotek allows Exploitation of Trusted Identifiers.This issue affects Eyotek: before 11.03.2025. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0163
CVE ID: CVE-2025-1470 State: PUBLISHED Published: 2025-02-21T10:03:24.829Z Last Updated: 2025-02-21T13:57:26.011Z Vendors: Eclipse Foundation Products: Eclipse OMR Problem Types: CWE-476 Description: In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities consumers of z/OS atoe functions do not check their return values for NULL memory pointers or for memory allocation failures. This can lead to NULL pointer dereference crashes. Beginning in version 0.5.0, internal OMR consumers of atoe functions handle NULL return values and memory allocation failures correctly. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gith
and memory allocation failures correctly. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-omr/omr/pull/7655 - https://github.com/eclipse-omr/omr/pull/7663 - https://gitlab.eclipse.org/security/cve-assignement/-/issues/54
CVE ID: CVE-2025-1471 State: PUBLISHED Published: 2025-02-21T10:07:22.507Z Last Updated: 2025-02-25T19:15:22.042Z Vendors: Eclipse Foundation Products: Eclipse OMR Problem Types: CWE-787 Description: In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS atoe print functions use a constant length buffer for string conversion. If the input format string and arguments are larger than the buffer size then buffer overflow occurs. Beginning in version 0.5.0, the conversion buffers are sized correctly and checked appropriately to prevent buffer overflows. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-omr/omr/pull/7658 - https://gitlab.eclipse.org/sec
es: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-omr/omr/pull/7658 - https://gitlab.eclipse.org/security/cve-assignement/-/issues/55
CVE ID: CVE-2025-1472 State: PUBLISHED Published: 2025-03-19T14:11:03.977Z Last Updated: 2025-03-19T14:40:59.930Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-863 Description: Mattermost versions 9.11.x <= 9.11.8 fail to properly perform authorization of the Viewer role which allows an attacker with the Viewer role configured with No Access to Reporting to still view team and site statistics. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-1473 State: PUBLISHED Published: 2025-03-20T10:10:20.747Z Last Updated: 2025-03-20T18:22:59.873Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: mlflow Products: mlflow/mlflow Problem Types: CWE-352 Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malicious user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/43dc50b6-7d1e-41b9-9f97-f28809df1d45 - https://github.com/mlflow/mlflow/comm
t: References: - https://huntr.com/bounties/43dc50b6-7d1e-41b9-9f97-f28809df1d45 - https://github.com/mlflow/mlflow/commit/ecfa61cb43d3303589f3b5834fd95991c9706628
CVE ID: CVE-2025-1474 State: PUBLISHED Published: 2025-03-20T10:10:20.888Z Last Updated: 2025-03-20T18:22:53.386Z Severity: LOW (CVSS 3.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: mlflow Products: mlflow/mlflow Problem Types: CWE-521 Description: In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password. This vulnerability could lead to security risks, as accounts without passwords may be susceptible to unauthorized access. Additionally, this issue violates best practices for secure user account management. The issue is fixed in version 2.19.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bountie
e is fixed in version 2.19.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/e79f7774-10fe-46b2-b522-e73b748e3b2d - https://github.com/mlflow/mlflow/commit/149c9e18aa219bc47e86b432e130e467a36f4a17