Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-39165 State: PUBLISHED Published: 2021-08-26T20:25:12 Last Updated: 2024-08-04T01:58:18.142Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: fiveai Products: Cachet Problem Types: CWE-287, CWE-89 Description: Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in the `SearchableTrait#scopeSearch()`. Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator's password and session. The original repository of Cachet <https://github.com/CachetHQ/Cachet> is not active, the stable version 2.3.18 and it's developin
al repository of Cachet <https://github.com/CachetHQ/Cachet> is not active, the stable version 2.3.18 and it's developing 2.4 branch is affected. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fiveai/Cachet/security/advisories/GHSA-79mg-4w23-4fqc - https://github.com/fiveai/Cachet/commit/27bca8280419966ba80c6fa283d985ddffa84bb6
CVE ID: CVE-2021-39166 State: PUBLISHED Published: 2021-09-01T14:00:11 Last Updated: 2024-08-04T01:58:18.273Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: pimcore Products: pimcore Problem Types: CWE-79 Description: Pimcore is an open source data & experience management platform. Prior to version 10.1.2, text-values were not properly escaped before printed in the version preview. This allowed XSS by authenticated users with access to the resources. This issue is patched in Pimcore version 10.1.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pimcore/pimcore/security/advisories/GHSA-w6j8-jc36-x5q9 - https://github.com/pimc
iner: References: - https://github.com/pimcore/pimcore/security/advisories/GHSA-w6j8-jc36-x5q9 - https://github.com/pimcore/pimcore/pull/10170
CVE ID: CVE-2021-39167 State: PUBLISHED Published: 2021-08-26T23:35:16 Last Updated: 2024-08-04T01:58:18.229Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: OpenZeppelin Products: openzeppelin-contracts Problem Types: CWE-269 Description: OpenZepplin is a library for smart contract development. In affected versions a vulnerability in TimelockController allowed an actor with the executor role to escalate privileges. Further details about the vulnerability will be disclosed at a later date. As a workaround revoke the executor role from accounts not strictly under the team's control. We recommend revoking all executors that are not also proposers. When applyi
unts not strictly under the team's control. We recommend revoking all executors that are not also proposers. When applying this mitigation, ensure there is at least one proposer and executor remaining. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenZeppelin/openzeppelin-contracts/commit/cec4f2ef57495d8b1742d62846da212515d99dd5 - https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/CHANGELOG.md#431 - https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-fg47-3c2x-m2wr
CVE ID: CVE-2021-39168 State: PUBLISHED Published: 2021-08-26T23:35:11 Last Updated: 2024-08-04T01:58:18.167Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: OpenZeppelin Products: openzeppelin-contracts-upgradeable Problem Types: CWE-269 Description: OpenZepplin is a library for smart contract development. In affected versions a vulnerability in TimelockController allowed an actor with the executor role to escalate privileges. Further details about the vulnerability will be disclosed at a later date. As a workaround revoke the executor role from accounts not strictly under the team's control. We recommend revoking all executors that are not also proposers.
le from accounts not strictly under the team's control. We recommend revoking all executors that are not also proposers. When applying this mitigation, ensure there is at least one proposer and executor remaining. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/security/advisories/GHSA-vrw4-w73r-6mm8 - https://github.com/OpenZeppelin/openzeppelin-contracts/commit/cec4f2ef57495d8b1742d62846da212515d99dd5 - https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/CHANGELOG.md#431
CVE ID: CVE-2021-39169 State: PUBLISHED Published: 2021-08-27T12:40:09 Last Updated: 2024-08-04T01:58:18.216Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: misskey-dev Products: misskey Problem Types: CWE-79 Description: Misskey is a decentralized microblogging platform. In versions of Misskey prior to 12.51.0, malicious actors can use the web client built-in dialog to display a malicious string, leading to cross-site scripting (XSS). XSS could compromise the API request token. This issue has been fixed in version 12.51.0. There are no known workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mi
workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/misskey-dev/misskey/security/advisories/GHSA-pmmv-jwqh-f5ww - https://github.com/misskey-dev/misskey/commit/ec203f7f795766f76b55fecc9248168c1cdf6c99
CVE ID: CVE-2021-39170 State: PUBLISHED Published: 2021-09-01T14:10:12 Last Updated: 2024-08-04T01:58:18.275Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: pimcore Products: pimcore Problem Types: CWE-116 Description: Pimcore is an open source data & experience management platform. Prior to version 10.1.2, an authenticated user could add XSS code as a value of custom metadata on assets. There is a patch for this issue in Pimcore version 10.1.2. As a workaround, users may apply the patch manually. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pimcore/pimcore/security/advisories/GHSA-2v88-qq7x-xq5f - https://github.com/pimco
ner: References: - https://github.com/pimcore/pimcore/security/advisories/GHSA-2v88-qq7x-xq5f - https://github.com/pimcore/pimcore/pull/10178 - https://github.com/pimcore/pimcore/pull/10178.patch - https://huntr.dev/bounties/e4cb9cd8-89cf-427c-8d2e-37ca40099bf2/
CVE ID: CVE-2021-39171 State: PUBLISHED Published: 2021-08-27T22:05:11 Last Updated: 2024-08-04T01:58:18.150Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: node-saml Products: passport-saml Problem Types: CWE-400 Description: Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. Prior to version 3.1.0, a malicious SAML payload can require transforms that consume significant system resources to process, thereby resulting in reduced or denied service. This would be an effective way to perform a denial-of-service attack. This has been resolved in version 3.1.0. The resolution is to limit the number of allowable
a denial-of-service attack. This has been resolved in version 3.1.0. The resolution is to limit the number of allowable transforms to 2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/node-saml/passport-saml/security/advisories/GHSA-5379-r78w-42h2 - https://github.com/node-saml/passport-saml/pull/595
CVE ID: CVE-2021-39172 State: PUBLISHED Published: 2021-08-27T22:50:09 Last Updated: 2024-08-04T01:58:18.282Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: fiveai Products: Cachet Problem Types: CWE-93 Description: Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges (User or Admin), can exploit a new line injection in the configuration edition feature (e.g. mail settings) and gain arbitrary code execution on the server. This issue was addressed in version 2.5.1 by improving `UpdateConfigCommandHandler` and preventing the use of new lines characters in new configuration values. As a workarou
g `UpdateConfigCommandHandler` and preventing the use of new lines characters in new configuration values. As a workaround, only allow trusted source IP addresses to access to the administration dashboard. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fiveai/Cachet/security/advisories/GHSA-9jxw-cfrh-jxq6 - https://github.com/fiveai/Cachet/releases/tag/v2.5.1 - https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/
CVE ID: CVE-2021-39173 State: PUBLISHED Published: 2021-08-27T23:00:09 Last Updated: 2024-08-04T01:58:18.192Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: fiveai Products: Cachet Problem Types: CWE-704 Description: Cachet is an open source status page system. Prior to version 2.5.1 authenticated users, regardless of their privileges (User or Admin), can trick Cachet and install the instance again, leading to arbitrary code execution on the server. This issue was addressed in version 2.5.1 by improving the middleware `ReadyForUse`, which now performs a stricter validation of the instance name. As a workaround, only allow trusted source IP addresses to access
w performs a stricter validation of the instance name. As a workaround, only allow trusted source IP addresses to access to the administration dashboard. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fiveai/Cachet/releases/tag/v2.5.1 - https://github.com/fiveai/Cachet/security/advisories/GHSA-r67m-m8c7-jp83 - https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/
CVE ID: CVE-2021-39174 State: PUBLISHED Published: 2021-08-27T23:25:08 Last Updated: 2024-08-04T01:58:18.255Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: fiveai Products: Cachet Problem Types: CWE-75 Description: Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges (User or Admin), can leak the value of any configuration entry of the dotenv file, e.g. the application secret (`APP_KEY`) and various passwords (email, database, etc). This issue was addressed in version 2.5.1 by improving `UpdateConfigCommandHandler` and preventing the use of nested variables in the resulting dotenv configurat
by improving `UpdateConfigCommandHandler` and preventing the use of nested variables in the resulting dotenv configuration file. As a workaround, only allow trusted source IP addresses to access to the administration dashboard. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fiveai/Cachet/releases/tag/v2.5.1 - https://github.com/fiveai/Cachet/security/advisories/GHSA-88f9-7xxh-c688 - https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/
CVE ID: CVE-2021-39175 State: PUBLISHED Published: 2021-08-30T20:40:13 Last Updated: 2024-08-04T01:58:18.195Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: hedgedoc Products: hedgedoc Problem Types: CWE-74, CWE-346 Description: HedgeDoc is a platform to write and share markdown. In versions prior to 1.9.0, an unauthenticated attacker can inject arbitrary JavaScript into the speaker-notes of the slide-mode feature by embedding an iframe hosting the malicious code into the slides or by embedding the HedgeDoc instance into another page. The problem is patched in version 1.9.0. There are no known workarounds aside from upgrading. Additional Analyst Notes: - CVE
oblem is patched in version 1.9.0. There are no known workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-j748-779h-9697 - https://github.com/hedgedoc/hedgedoc/pull/1369 - https://github.com/hedgedoc/hedgedoc/pull/1375 - https://github.com/hedgedoc/hedgedoc/pull/1513
CVE ID: CVE-2021-39176 State: PUBLISHED Published: 2021-08-31T18:05:12 Last Updated: 2024-08-04T01:58:18.257Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: sonicdoe Products: detect-character-encoding Problem Types: CWE-401 Description: detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sonicdoe/detect-character-encoding/security/advisories/GHSA-5rwj-j5m3-3chj - https://github.com/sonicdoe/detect-c
ub.com/sonicdoe/detect-character-encoding/security/advisories/GHSA-5rwj-j5m3-3chj - https://github.com/sonicdoe/detect-character-encoding/pull/6 - https://github.com/sonicdoe/detect-character-encoding/commit/d44356927b92e3b13e178071bf6d7c671766f588 - https://github.com/sonicdoe/detect-character-encoding/releases/tag/v0.3.1
CVE ID: CVE-2021-39177 State: PUBLISHED Published: 2021-08-30T23:00:12 Last Updated: 2024-08-04T01:58:18.223Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: GeyserMC Products: Geyser Problem Types: CWE-287 Description: Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition. Versions of Geyser prior to 1.4.2-SNAPSHOT allow anyone that can connect to the server to forge a LoginPacket with manipulated JWT token allowing impersonation as any user. Version 1.4.2-SNAPSHOT contains a patch for the issue. There are no known workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/
n workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GeyserMC/Geyser/security/advisories/GHSA-h77f-xxx7-4858 - https://github.com/GeyserMC/Geyser/commit/b9541505af68ac7b7c093206ac7b1ba88957a5a6 - https://updates.playhive.com/weekend-maintenance-disclosure-2kJMaY
CVE ID: CVE-2021-39178 State: PUBLISHED Published: 2021-08-30T23:55:09 Last Updated: 2024-08-04T01:58:18.141Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vercel Products: next.js Problem Types: CWE-79 Description: Next.js is a React framework. Versions of Next.js between 10.0.0 and 11.0.0 contain a cross-site scripting vulnerability. In order for an instance to be affected by the vulnerability, the `next.config.js` file must have `images.domains` array assigned and the image host assigned in `images.domains` must allow user-provided SVG. If the `next.config.js` file has `images.loader` assigned to something other than default or the instance is deployed on
If the `next.config.js` file has `images.loader` assigned to something other than default or the instance is deployed on Vercel, the instance is not affected by the vulnerability. The vulnerability is patched in Next.js version 11.1.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vercel/next.js/security/advisories/GHSA-9gr3-7897-pp7m - https://github.com/vercel/next.js/releases/tag/v11.1.1
CVE ID: CVE-2021-39179 State: PUBLISHED Published: 2021-10-29T13:20:10 Last Updated: 2024-08-04T01:58:18.289Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: dhis2 Products: dhis2-core Problem Types: CWE-89 Description: DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL Injection vulnerability in the Tracker component in DHIS2 Server allows authenticated remote attackers to execute arbitrary SQL commands via unspecified vectors. This vulnerability affects the `/api/trackedEntityInstances` and `/api/trackedEntityInstances/query` API endpoints in all DHIS2 versions 2.34, 2.35, and 2.36. It also affects ve
es` and `/api/trackedEntityInstances/query` API endpoints in all DHIS2 versions 2.34, 2.35, and 2.36. It also affects versions 2.32 and 2.33 which have reached _end of support_ - exceptional security updates have been added to the latest *end of support* builds for these versions. Versions 2.31 and older are unaffected. The system is vulnerable to attack only from users that are logged in to DHIS2, and there is no known way of exploiting the vulnerability without first being logged in as a DHIS2 user. The vulnerability is not exposed to a non-malicious user - the vulnerability requires a conscious attack to be exploited. A successful exploit of this vulnerability could allow the malicious us
ity requires a conscious attack to be exploited. A successful exploit of this vulnerability could allow the malicious user to read, edit and delete data in the DHIS2 instance. There are no known exploits of the security vulnerabilities addressed by these patch releases. Security patches are available in DHIS2 versions 2.32-EOS, 2.33-EOS, 2.34.7, 2.35.7, and 2.36.4. There is no straightforward known workaround for DHIS2 instances using the Tracker functionality other than upgrading the affected DHIS2 server to one of the patches in which this vulnerability has been fixed. For implementations which do NOT use Tracker functionality, it may be possible to block all network access to POST to the
r implementations which do NOT use Tracker functionality, it may be possible to block all network access to POST to the `/api/trackedEntityInstances`, and `/api/trackedEntityInstances/query` endpoints as a temporary workaround while waiting to upgrade. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dhis2/dhis2-core/security/advisories/GHSA-cmpc-frjv-rrmw - https://github.com/dhis2/dhis2-core/pull/8771 - https://github.com/dhis2/dhis2-core/commit/16674ac75127b0e83691c6b1c9ce745e67ab58b6
CVE ID: CVE-2021-39180 State: PUBLISHED Published: 2021-08-31T17:55:14 Last Updated: 2024-08-04T01:58:18.226Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: OpenOLAT Products: OpenOLAT Problem Types: CWE-22 Description: OpenOLAT is a web-based learning management system (LMS). A path traversal vulnerability exists in versions prior to 15.3.18, 15.5.3, and 16.0.0. Using a specially prepared ZIP file, it is possible to overwrite any file that is writable by the application server user (e.g. the tomcat user). Depending on the configuration this can be limited to files of the OpenOlat user data directory, however, if not properly set up, the attack could also be
can be limited to files of the OpenOlat user data directory, however, if not properly set up, the attack could also be used to overwrite application server config files, java code or even operating system files. The attack could be used to corrupt or modify any OpenOlat file such as course structures, config files or temporary test data. Those attack would require in-depth knowledge of the installation and thus more theoretical. If the app server configuration allows the execution of jsp files and the path to the context is known, it is also possible to execute java code. If the app server runs with the same user that is used to deploy the OpenOlat code or has write permissions on the OpenO
If the app server runs with the same user that is used to deploy the OpenOlat code or has write permissions on the OpenOlat code files and the path to the context is know, code injection is possible. The attack requires an OpenOlat user account to upload a ZIP file and trigger the unzip method. It can not be exploited by unregistered users. The problem is fixed in versions 15.3.18, 15.5.3 and 16.0.0. There are no known workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenOLAT/OpenOLAT/security/advisories/GHSA-x95v-2pgj-9x8j - https://github.com/OpenOLAT/OpenOLAT/commit/2cf73c972e23ccd69cc1e103e43c2c8253571d3e - https://gith
HSA-x95v-2pgj-9x8j - https://github.com/OpenOLAT/OpenOLAT/commit/2cf73c972e23ccd69cc1e103e43c2c8253571d3e - https://github.com/OpenOLAT/OpenOLAT/commit/5668a41ab3f1753102a89757be013487544279d5 - https://github.com/OpenOLAT/OpenOLAT/commit/699490be8e931af0ef1f135c55384db1f4232637 - https://jira.openolat.org/browse/OO-5549
CVE ID: CVE-2021-39181 State: PUBLISHED Published: 2021-09-01T19:45:11 Last Updated: 2024-08-04T01:58:18.230Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenOLAT Products: OpenOLAT Problem Types: CWE-91 Description: OpenOlat is a web-based learning management system (LMS). Prior to version 15.3.18, 15.5.3, and 16.0.0, using a prepared import XML file (e.g. a course) any class on the Java classpath can be instantiated, including spring AOP bean factories. This can be used to execute code arbitrary code by the attacker. The attack requires an OpenOlat user account with the authoring role. It can not be exploited by unregistered users. The problem is fixed i
an OpenOlat user account with the authoring role. It can not be exploited by unregistered users. The problem is fixed in versions 15.3.18, 15.5.3, and 16.0.0. There are no known workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenOLAT/OpenOLAT/security/advisories/GHSA-596v-3gwh-2m9w - https://github.com/OpenOLAT/OpenOLAT/commit/3f219ac457afde82e3be57bc614352ab92c05684 - https://jira.openolat.org/browse/OO-5548
CVE ID: CVE-2021-39182 State: PUBLISHED Published: 2021-11-08T14:15:11 Last Updated: 2024-08-04T01:58:18.261Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Morgan-Phoenix Products: EnroCrypt Problem Types: CWE-327, CWE-328, CWE-916 Description: EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The vulnerability is patched in v1.1.4 of the product. As a workaround, users can remove the `MD5` hashing function from the file `hashing.py`. Additional Analyst Note
roduct. As a workaround, users can remove the `MD5` hashing function from the file `hashing.py`. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Morgan-Phoenix/EnroCrypt/security/advisories/GHSA-35m5-8cvj-8783 - https://github.com/Morgan-Phoenix/EnroCrypt/commit/e652d56ac60eadfc26489ab83927af13a9b9d8ce
CVE ID: CVE-2021-39183 State: PUBLISHED Published: 2021-12-14T20:05:12 Last Updated: 2024-08-04T01:58:18.143Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:L) Vendors: owncast Products: owncast Problem Types: CWE-79 Description: Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0.9 by blocking unsafe-inline Content Security Policy and specifying the script-src. The worker-src is required to be set to blob for the video player. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/owncast/owncas
for the video player. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/owncast/owncast/security/advisories/GHSA-2hfj-cxw7-g45p
CVE ID: CVE-2021-39184 State: PUBLISHED Published: 2021-10-12T19:05:11 Last Updated: 2024-08-04T01:58:18.275Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: electron Products: electron Problem Types: CWE-668 Description: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to 11.5.0, 12.1.0, and 13.3.0 allows a sandboxed renderer to request a "thumbnail" image of an arbitrary file on the user's system. The thumbnail can potentially include significant parts of the original file, including textual data in many cases. Versions 15.0.0-alpha.10, 14.0.0, 13.3.0, 12.1.0, and 11.5