Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
an `href` attribute set to a user-provided link, that link could potentially execute JavaScript when clicked by another user. If you splat user-provided attributes when rendering any HTML tag, malicious event attributes could be included in the output, executing JavaScript when the events are triggered by another user. Patches are available on RubyGems for all 1.x minor versions. Users are advised to upgrade. Users unable to upgrade should consider configuring a content security policy that does not allow `unsafe-inline`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/phlex-ruby/phlex/security/advisories/GHSA-242p-4v39-2v8g - htt
- CVE Program Container: References: - https://github.com/phlex-ruby/phlex/security/advisories/GHSA-242p-4v39-2v8g - https://github.com/phlex-ruby/phlex/commit/aa50c604cdee1d0ce7ef068a4c66cbd5d43f96a1 - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#unsafe-inline
CVE ID: CVE-2024-28200 State: PUBLISHED Published: 2024-07-01T20:49:38.092Z Last Updated: 2024-08-02T00:48:49.431Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: N-able Products: N-central Problem Types: CWE-288 Description: The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the wild. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.n-able.com/N-central/Re
yst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.n-able.com/N-central/Release_Notes/GA/Content/2024.2%20Release%20Notes.htm - https://me.n-able.com/s/security-advisory/aArVy0000000673KAA/cve202428200-ncentral-authentication-bypass
CVE ID: CVE-2024-28211 State: PUBLISHED Published: 2024-03-07T04:49:21.951Z Last Updated: 2024-08-05T20:05:34.960Z Vendors: NAVER Products: nGrinder Problem Types: CWE-502 Description: nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cve.naver.com/detail/cve-2024-28211.html
CVE ID: CVE-2024-28212 State: PUBLISHED Published: 2024-03-07T04:49:37.921Z Last Updated: 2024-08-12T19:41:41.104Z Vendors: NAVER Products: nGrinder Problem Types: CWE-502 Description: nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via unsafe deserialization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cve.naver.com/detail/cve-2024-28212.html
CVE ID: CVE-2024-28213 State: PUBLISHED Published: 2024-03-07T04:49:47.237Z Last Updated: 2024-08-22T20:01:34.318Z Vendors: NAVER Products: nGrinder Problem Types: CWE-502 Description: nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote attacker to execute arbitrary code via unsafe Java objects deserialization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cve.naver.com/detail/cve-2024-28213.html
CVE ID: CVE-2024-28214 State: PUBLISHED Published: 2024-03-07T04:49:57.531Z Last Updated: 2024-11-08T17:07:55.690Z Vendors: NAVER Products: nGrinder Problem Types: CWE-405 Description: nGrinder before 3.5.9 allows to set delay without limitation, which could be the cause of Denial of Service by remote attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cve.naver.com/detail/cve-2024-28214.html
CVE ID: CVE-2024-28215 State: PUBLISHED Published: 2024-03-07T04:50:08.422Z Last Updated: 2024-09-06T04:15:12.049Z Vendors: NAVER Products: nGrinder Problem Types: CWE-862 Description: nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cve.naver.com/detail/cve-2024-28215.html
CVE ID: CVE-2024-28216 State: PUBLISHED Published: 2024-03-07T04:50:15.338Z Last Updated: 2024-09-06T04:17:45.466Z Vendors: NAVER Products: nGrinder Problem Types: CWE-862 Description: nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cve.naver.com/detail/cve-2024-28216.html
CVE ID: CVE-2024-28219 State: PUBLISHED Published: 2024-04-03T00:00:00.000Z Last Updated: 2025-11-04T18:30:27.655Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pillow.readthedocs.io/en/stable/releasenotes/10.3.0.html#security - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4XLPUT3VK4GQ6EVY525TT2QNUIXNRU5M/ - https://lists.debian.org/debian-lts-announce
ounce%40lists.fedoraproject.org/message/4XLPUT3VK4GQ6EVY525TT2QNUIXNRU5M/ - https://lists.debian.org/debian-lts-announce/2024/04/msg00008.html
CVE ID: CVE-2024-28222 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-11-15T19:13:08.179Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and execute a custom file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS23-010
CVE ID: CVE-2024-28224 State: PUBLISHED Published: 2024-04-08T00:00:00.000Z Last Updated: 2025-03-26T20:00:51.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby letting an unauthorized user chat with a large language model, delete a model, or cause a denial of service (resource exhaustion). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nccgroup.trust/us/our-research/?research=Technical+advisories - https://github.com/ollama/ollama/releases - https://research.nccgroup.com/2024/04/08/technical-advisory-ol
+advisories - https://github.com/ollama/ollama/releases - https://research.nccgroup.com/2024/04/08/technical-advisory-ollama-dns-rebinding-attack-cve-2024-28224/
CVE ID: CVE-2024-28226 State: PUBLISHED Published: 2024-04-02T06:23:07.999Z Last Updated: 2024-08-12T13:12:08.610Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-20 Description: in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-04.md
CVE ID: CVE-2024-28228 State: PUBLISHED Published: 2024-03-07T11:39:59.443Z Last Updated: 2024-08-27T16:35:50.911Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-290 Description: In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-28229 State: PUBLISHED Published: 2024-03-07T11:39:59.851Z Last Updated: 2025-04-16T15:52:17.045Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-863 Description: In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-28230 State: PUBLISHED Published: 2024-03-07T11:40:00.296Z Last Updated: 2024-08-02T00:48:49.436Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-862 Description: In JetBrains YouTrack before 2024.1.25893 attaching/detaching workflow to a project was possible without project admin permissions Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-28231 State: PUBLISHED Published: 2024-03-20T20:03:18.402Z Last Updated: 2024-08-02T00:48:49.620Z Severity: CRITICAL (CVSS 9.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: eProsima Products: Fast-DDS Problem Types: CWE-122 Description: eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.14.0, 2.13.4, 2.12.3, 2.10.4, and 2.6.8, manipulated DATA Submessage can cause a heap overflow error in the Fast-DDS process, causing the process to be terminated remotely. Additionally, the payload_size in the DATA Submessage packet is declared as uint32_t. When a negative number, such as -1, is inp
ally, the payload_size in the DATA Submessage packet is declared as uint32_t. When a negative number, such as -1, is input into this variable, it results in an Integer Overflow (for example, -1 gets converted to 0xFFFFFFFF). This eventually leads to a heap-buffer-overflow, causing the program to terminate. Versions 2.14.0, 2.13.4, 2.12.3, 2.10.4, and 2.6.8 contain a fix for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-9m2j-qw67-ph4w - https://github.com/eProsima/Fast-DDS/commit/355706386f4af9ce74125eeec3c449b06113112b
CVE ID: CVE-2024-28232 State: PUBLISHED Published: 2024-04-01T16:42:05.726Z Last Updated: 2024-08-02T00:48:49.710Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IceWhaleTech Products: CasaOS-UserService Problem Types: CWE-204 Description: Go package IceWhaleTech/CasaOS-UserService provides user management functionalities to CasaOS. The Casa OS Login page has disclosed the username enumeration vulnerability in the login page which was patched in version 0.4.7. This issue in CVE-2024-28232 has been patched in version 0.4.8 but that version has not yet been uploaded to Go's package manager. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Cont
has not yet been uploaded to Go's package manager. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/IceWhaleTech/CasaOS-UserService/security/advisories/GHSA-hcw2-2r9c-gc6p - https://github.com/IceWhaleTech/CasaOS-UserService/commit/dd927fe1c805e53790f73cfe10c7a4ded3bc5bdb
CVE ID: CVE-2024-28233 State: PUBLISHED Published: 2024-03-27T18:16:24.308Z Last Updated: 2024-08-15T14:46:24.624Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: jupyterhub Products: jupyterhub Problem Types: CWE-79, CWE-352, CWE-565 Description: JupyterHub is an open source multi-user server for Jupyter notebooks. By tricking a user into visiting a malicious subdomain, the attacker can achieve an XSS directly affecting the former's session. More precisely, in the context of JupyterHub, this XSS could achieve full access to JupyterHub API and user's single-user server. The affected configurations are single-origin JupyterHub deployments and JupyterHub deploym
d user's single-user server. The affected configurations are single-origin JupyterHub deployments and JupyterHub deployments with user-controlled applications running on subdomains or peer subdomains of either the Hub or a single-user server. This vulnerability is fixed in 4.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-7r3h-4ph8-w38g - https://github.com/jupyterhub/jupyterhub/commit/e2798a088f5ad45340fe79cdf1386198e664f77f
CVE ID: CVE-2024-28234 State: PUBLISHED Published: 2024-04-09T13:59:41.300Z Last Updated: 2024-08-02T00:48:49.568Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: contao Products: contao Problem Types: CWE-74 Description: Contao is an open source content management system. Starting in version 2.0.0 and prior to versions 4.13.40 and 5.3.4, it is possible to inject CSS styles via BBCode in comments. Installations are only affected if BBCode is enabled. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a workaround, disable BBCode for comments. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gith
ode for comments. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/contao/contao/security/advisories/GHSA-j55w-hjpj-825g - https://github.com/contao/contao/commit/55b995d8d35da0d36bc6a22c53fe6423ab0c4ae2 - https://github.com/contao/contao/commit/6d42e667177c972ae7c219645593c262d7764ce2 - https://contao.org/en/security-advisories/insufficient-bbcode-sanitization
CVE ID: CVE-2024-28235 State: PUBLISHED Published: 2024-04-09T15:50:56.531Z Last Updated: 2024-08-02T00:48:49.584Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: contao Products: contao Problem Types: CWE-200 Description: Contao is an open source content management system. Starting in version 4.9.0 and prior to versions 4.13.40 and 5.3.4, when checking for broken links on protected pages, Contao sends the cookie header to external urls as well, the passed options for the http client are used for all requests. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a workaround, disable crawling protected pages. Additional Analyst Notes: - CISA ADP V
4 have a patch for this issue. As a workaround, disable crawling protected pages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/contao/contao/security/advisories/GHSA-9jh5-qf84-x6pr - https://github.com/contao/contao/commit/73a2770e2d3535ec9f1b03d54be00e56ebb8ff16 - https://github.com/contao/contao/commit/79b7620d01ce8f46ce2b331455e0d95e5208de3d - https://contao.org/en/security-advisories/session-cookie-disclosure-in-the-crawler - https://github.com/contao/contao/blob/14e9ef4bc8b82936ba2d0e04164581145a075e2a/core-bundle/src/Resources/contao/classes/Crawl.php#L129
CVE ID: CVE-2024-28236 State: PUBLISHED Published: 2024-03-12T20:41:09.271Z Last Updated: 2024-08-02T00:48:49.488Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: go-vela Products: worker Problem Types: CWE-532, CWE-200 Description: Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. Vela pipelines can use variable substitution combined with insensitive fields like `parameters`, `image` and `entrypoint` to inject secrets into a plugin/image and — by using common substitution string manipulation — can bypass log masking and expose secrets without the use of the commands block. This unexpected behavior primarily
on — can bypass log masking and expose secrets without the use of the commands block. This unexpected behavior primarily impacts secrets restricted by the "no commands" option. This can lead to unintended use of the secret value, and increased risk of exposing the secret during image execution bypassing log masking. **To exploit this** the pipeline author must be supplying the secrets to a plugin that is designed in such a way that will print those parameters in logs. Plugin parameters are not designed for sensitive values and are often intentionally printed throughout execution for informational/debugging purposes. Parameters should therefore be treated as insensitive. While Vela provides s
ution for informational/debugging purposes. Parameters should therefore be treated as insensitive. While Vela provides secrets masking, secrets exposure is not entirely solved by the masking process. A docker image (plugin) can easily expose secrets if they are not handled properly, or altered in some way. There is a responsibility on the end-user to understand how values injected into a plugin are used. This is a risk that exists for many CICD systems (like GitHub Actions) that handle sensitive runtime variables. Rather, the greater risk is that users who restrict a secret to the "no commands" option and use image restriction can still have their secret value exposed via substitution tinker
to the "no commands" option and use image restriction can still have their secret value exposed via substitution tinkering, which turns the image and command restrictions into a false sense of security. This issue has been addressed in version 0.23.2. Users are advised to upgrade. Users unable to upgrade should not provide sensitive values to plugins that can potentially expose them, especially in `parameters` that are not intended to be used for sensitive values, ensure plugins (especially those that utilize shared secrets) follow best practices to avoid logging parameters that are expected to be sensitive, minimize secrets with `pull_request` events enabled, as this allows users to change
s that are expected to be sensitive, minimize secrets with `pull_request` events enabled, as this allows users to change pipeline configurations and pull in secrets to steps not typically part of the CI process, make use of the build approval setting, restricting builds from untrusted users, and limit use of shared secrets, as they are less restrictive to access by nature. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/go-vela/worker/security/advisories/GHSA-pwx5-6wxg-px5h - https://github.com/go-vela/worker/commit/e1572743b008e4fbce31ebb1dcd23bf6a1a30297
CVE ID: CVE-2024-28237 State: PUBLISHED Published: 2024-03-18T21:17:08.139Z Last Updated: 2024-08-02T15:20:14.054Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: OctoPrint Products: OctoPrint Problem Types: CWE-79 Description: OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through the "Test" button included in the web interface will execute JavaScript code in the victims browser when attempting to render the snapshot image.
d in the web interface will execute JavaScript code in the victims browser when attempting to render the snapshot image. An attacker who successfully talked a victim with admin rights into performing a snapshot test with such a crafted URL could use this to retrieve or modify sensitive configuration settings, interrupt prints or otherwise interact with the OctoPrint instance in a malicious way. The vulnerability is patched in version 1.10.0rc3. OctoPrint administrators are strongly advised to thoroughly vet who has admin access to their installation and what settings they modify based on instructions by strangers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
odify based on instructions by strangers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OctoPrint/OctoPrint/security/advisories/GHSA-x7mf-wrh9-r76c - https://github.com/OctoPrint/OctoPrint/commit/779894c1bc6478332d14bc9ed1006df1354eb517
CVE ID: CVE-2024-28238 State: PUBLISHED Published: 2024-03-12T20:24:28.321Z Last Updated: 2024-08-02T19:50:43.970Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: directus Products: directus Problem Types: CWE-200, CWE-598 Description: Directus is a real-time API and App dashboard for managing SQL database content. When reaching the /files page, a JWT is passed via GET request. Inclusion of session tokens in URLs poses a security risk as URLs are often logged in various places (e.g., web server logs, browser history). Attackers gaining access to these logs may hijack active user sessions, leading to unauthorized access to sensitive information or actions on beh
to these logs may hijack active user sessions, leading to unauthorized access to sensitive information or actions on behalf of the user. This issue has been addressed in version 10.10.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/directus/directus/security/advisories/GHSA-2ccr-g2rv-h677
CVE ID: CVE-2024-28239 State: PUBLISHED Published: 2024-03-12T20:23:37.857Z Last Updated: 2024-08-22T20:47:34.038Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: directus Products: directus Problem Types: CWE-601 Description: Directus is a real-time API and App dashboard for managing SQL database content. The authentication API has a `redirect` parameter that can be exploited as an open redirect vulnerability as the user tries to log in via the API URL. There's a redirect that is done after successful login via the Auth API GET request to `directus/auth/login/google?redirect=http://malicious-fishing-site.com`. While credentials don't seem to be passed to th
`directus/auth/login/google?redirect=http://malicious-fishing-site.com`. While credentials don't seem to be passed to the attacker site, the user can be phished into clicking a legitimate directus site and be taken to a malicious site made to look like a an error message "Your password needs to be updated" to phish out the current password. Users who login via OAuth2 into Directus may be at risk. This issue has been addressed in version 10.10.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/directus/directus/security/advisories/GHSA-fr3w-2p22-6w7
iner: - CISA ADP Vulnrichment: References: - https://github.com/directus/directus/security/advisories/GHSA-fr3w-2p22-6w7p - https://github.com/directus/directus/commit/5477d7d61babd7ffc2f835d399bf79611b15b203 - https://docs.directus.io/reference/authentication.html#login-using-sso-providers
CVE ID: CVE-2024-28240 State: PUBLISHED Published: 2024-04-25T16:37:32.215Z Last Updated: 2024-08-02T00:48:49.487Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: glpi-project Products: glpi-agent Problem Types: CWE-20 Description: The GLPI Agent is a generic management agent. A vulnerability that only affects GLPI-Agent installed on windows via MSI packaging can allow a local user to cause denial of agent service by replacing GLPI server url with a wrong url or disabling the service. Additionally, in the case the Deploy task is installed, a local malicious user can trigger privilege escalation configuring a malicious server providing its own deploy task paylo