Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-32925 State: PUBLISHED Published: 2025-05-19T19:56:57.237Z Last Updated: 2025-05-19T21:18:48.593Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: FantasticPlugins Products: SUMO Reward Points Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in FantasticPlugins SUMO Reward Points allows PHP Local File Inclusion.This issue affects SUMO Reward Points: from n/a through 30.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rewardsystem/vulnerability/wordpress-sumo-reward-points-p
References: - https://patchstack.com/database/wordpress/plugin/rewardsystem/vulnerability/wordpress-sumo-reward-points-plugin-30-7-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32926 State: PUBLISHED Published: 2025-05-19T19:55:38.253Z Last Updated: 2025-05-19T21:18:56.145Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ThemeGoods Products: Grand Restaurant WordPress Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeGoods Grand Restaurant WordPress allows Path Traversal.This issue affects Grand Restaurant WordPress: from n/a through 7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/grandrestaurant/vulnerability/wordpress-grand-restaurant-wordpress-theme-7-0-pat
patchstack.com/database/wordpress/theme/grandrestaurant/vulnerability/wordpress-grand-restaurant-wordpress-theme-7-0-path-traversal-to-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32927 State: PUBLISHED Published: 2025-05-19T19:54:47.090Z Last Updated: 2025-05-19T21:19:03.811Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Chimpstudio Products: FoodBakery Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Chimpstudio FoodBakery allows Object Injection.This issue affects FoodBakery: from n/a through 3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-foodbakery/vulnerability/wordpress-foodbakery-plugin-3-3-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32928 State: PUBLISHED Published: 2025-05-19T19:53:26.530Z Last Updated: 2025-05-19T21:19:12.047Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ThemeGoods Products: Altair Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in ThemeGoods Altair allows Object Injection.This issue affects Altair: from n/a through 5.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/altair/vulnerability/wordpress-altair-theme-5-2-2-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32929 State: PUBLISHED Published: 2025-04-15T11:58:09.738Z Last Updated: 2025-04-15T13:19:22.546Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Dmitry V. (CEO of "UKR Solution") Products: Barcode Generator for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Generator for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Barcode Generator for WooCommerce: from n/a through 2.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/embedding-barcodes-
alyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/embedding-barcodes-into-product-pages-and-orders/vulnerability/wordpress-barcode-generator-for-woocommerce-plugin-2-0-4-arbitrary-content-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32930 State: REJECTED Published: 2025-04-14T00:00:00.000Z Last Updated: 2025-04-14T14:46:56.370Z Description: No description available.
CVE ID: CVE-2025-32931 State: PUBLISHED Published: 2025-04-14T00:00:00.000Z Last Updated: 2025-04-14T18:20:41.641Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: DevDojo Products: Voyager Problem Types: CWE-88 Description: DevDojo Voyager 1.4.0 through 1.8.0, when Laravel 8 or later is used, allows authenticated administrators to execute arbitrary OS commands via a specific php artisan command. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lishihihi/voyager-issue-report/ - https://github.com/thedevdojo/voyager/blob/1.8/docs/core-concepts/compass.md - https://github.com/thedevdojo/voyager/blob/7e7e0f4f0e115d2d9e0481a86
jo/voyager/blob/1.8/docs/core-concepts/compass.md - https://github.com/thedevdojo/voyager/blob/7e7e0f4f0e115d2d9e0481a86153a1ceff194c00/resources/views/compass/includes/commands.blade.php#L11-L16
CVE ID: CVE-2025-32932 State: PUBLISHED Published: 2025-08-12T19:00:01.506Z Last Updated: 2025-08-13T20:13:36.224Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiSOAR Problem Types: CWE-79 Description: An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in FortiSOAR version 7.6.1 and below, version 7.5.1 and below, 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions WEB UI may allow an authenticated remote attacker to perform an XSS attack via stored malicious service requests Additional Analyst Notes: - CISA ADP Vulnrichment
ttacker to perform an XSS attack via stored malicious service requests Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-513
CVE ID: CVE-2025-32933 State: REJECTED Published: N/A Last Updated: 2025-04-15T02:55:08.322Z Description: No description available.
CVE ID: CVE-2025-32934 State: REJECTED Published: N/A Last Updated: 2025-04-15T02:55:07.868Z Description: No description available.
CVE ID: CVE-2025-32935 State: REJECTED Published: N/A Last Updated: 2025-04-15T02:55:07.409Z Description: No description available.
CVE ID: CVE-2025-32936 State: REJECTED Published: N/A Last Updated: 2025-04-15T02:55:06.943Z Description: No description available.
CVE ID: CVE-2025-32937 State: REJECTED Published: N/A Last Updated: 2025-04-15T02:55:06.427Z Description: No description available.
CVE ID: CVE-2025-32938 State: REJECTED Published: N/A Last Updated: 2025-04-15T02:55:05.919Z Description: No description available.
CVE ID: CVE-2025-32939 State: REJECTED Published: N/A Last Updated: 2025-04-15T02:55:05.421Z Description: No description available.
CVE ID: CVE-2025-32940 State: REJECTED Published: N/A Last Updated: 2025-04-15T02:55:04.944Z Description: No description available.
CVE ID: CVE-2025-32941 State: REJECTED Published: N/A Last Updated: 2025-04-15T02:55:04.315Z Description: No description available.
CVE ID: CVE-2025-32942 State: PUBLISHED Published: 2025-10-02T00:00:00.000Z Last Updated: 2025-10-02T19:47:50.861Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L) Vendors: SSH Products: Tectia Server Problem Types: CWE-670 Description: SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session traffic. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://info.ssh.com/tectia-vulnerability-cve-2025-32942
CVE ID: CVE-2025-32943 State: PUBLISHED Published: 2025-04-15T10:24:00.296Z Last Updated: 2025-04-15T12:58:25.936Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Problem Types: CWE-22 Description: The vulnerability allows any authenticated user to leak the contents of arbitrary “.m3u8” files from the PeerTube server due to a path traversal in the HLS endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chocobozzz/PeerTube/releases/tag/v7.1.1 - https://research.jfrog.com/vulnerabilities/peertube-hls-path-traversal/
CVE ID: CVE-2025-32944 State: PUBLISHED Published: 2025-04-15T12:50:38.735Z Last Updated: 2025-04-15T13:30:20.412Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Problem Types: CWE-248 Description: The vulnerability allows any authenticated user to cause the PeerTube server to stop functioning in a persistent manner. If user import is enabled (which is the default setting), any registered user can upload an archive for importing. The code uses the yauzl library for reading the archive. If the yauzl library encounters a filename that is considered illegal, it raises an exception that is uncaught by PeerTube, leading to a crash which repeats infinitely on startup. Add
llegal, it raises an exception that is uncaught by PeerTube, leading to a crash which repeats infinitely on startup. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chocobozzz/PeerTube/releases/tag/v7.1.1 - https://research.jfrog.com/vulnerabilities/peertube-archive-persistent-dos/
CVE ID: CVE-2025-32945 State: PUBLISHED Published: 2025-04-15T12:56:32.873Z Last Updated: 2025-04-15T13:27:20.179Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Problem Types: CWE-282 Description: The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube REST API. The vulnerable code sets the owner of the new playlist to be the user who performed the request, and then sets the associated channel to the channel ID supplied by the request, without checking if it belongs to the user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chocobozzz/PeerTube/releases/tag/v7.1.1 - https://res
t Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chocobozzz/PeerTube/releases/tag/v7.1.1 - https://research.jfrog.com/vulnerabilities/peertube-arbitrary-playlist-creation-rest/
CVE ID: CVE-2025-32946 State: PUBLISHED Published: 2025-04-15T12:58:08.024Z Last Updated: 2025-04-15T14:11:03.150Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Problem Types: CWE-282 Description: This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub protocol. The vulnerable code sets the owner of the new playlist to be the user who performed the request, and then sets the associated channel to the channel ID supplied by the request, without checking if it belongs to the user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chocobozzz/PeerTube/releases/tag/v7.1.1 - https://res
t Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chocobozzz/PeerTube/releases/tag/v7.1.1 - https://research.jfrog.com/vulnerabilities/peertube-arbitrary-playlist-creation-activitypub/
CVE ID: CVE-2025-32947 State: PUBLISHED Published: 2025-04-15T14:45:29.905Z Last Updated: 2025-08-20T08:58:08.702Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Problem Types: CWE-835 Description: This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPub activities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chocobozzz/PeerTube/releases/tag/v7.1.1 - https://research.jfrog.com/vulnerabilities/peertube-activitypub-crawl-dos/ - https://github.com/Chocobozzz/PeerTube/commit/76226d85685220db1495025300eca784d03
ties/peertube-activitypub-crawl-dos/ - https://github.com/Chocobozzz/PeerTube/commit/76226d85685220db1495025300eca784d0336f7d
CVE ID: CVE-2025-32948 State: PUBLISHED Published: 2025-04-15T14:50:09.204Z Last Updated: 2025-04-15T15:18:36.978Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Problem Types: CWE-843 Description: The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs (Blind SSRF). Attackers can send ActivityPub activities to PeerTube's "inbox" endpoint. By abusing the "Create Activity" functionality, it is possible to create crafted playlists which will cause either denial of service or an attacker-controlled blind SSRF. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github
ce or an attacker-controlled blind SSRF. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chocobozzz/PeerTube/releases/tag/v7.1.1 - https://research.jfrog.com/vulnerabilities/peertube-activitypub-playlist-creation-blind-ssrf-dos/
CVE ID: CVE-2025-32949 State: PUBLISHED Published: 2025-04-15T14:57:57.207Z Last Updated: 2025-04-15T15:18:02.548Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Problem Types: CWE-409 Description: This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk space when extracting a Zip Bomb. If user import is enabled (which is the default setting), any registered user can upload an archive for importing. The code uses the yauzl library for reading the archive. The yauzl library does not contain any mechanism to detect or prevent extraction of a Zip Bomb https://en.wikipedia.org/wiki/Zip_bomb . Therefore, when using the U
anism to detect or prevent extraction of a Zip Bomb https://en.wikipedia.org/wiki/Zip_bomb . Therefore, when using the User Import functionality with a Zip Bomb, PeerTube will try extracting the archive which will cause a disk space resource exhaustion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chocobozzz/PeerTube/releases/tag/v7.1.1 - https://research.jfrog.com/vulnerabilities/peertube-archive-resource-exhaustion/
CVE ID: CVE-2025-32950 State: PUBLISHED Published: 2025-04-22T17:14:43.211Z Last Updated: 2025-05-27T17:07:11.796Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: jmix-framework Products: jmix Problem Types: CWE-35, CWE-22 Description: Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, attackers could manipulate the FileRef parameter to access files on the system where the Jmix application is deployed, provided the application server has the necessary permissions. This can be accomplished either by modifying the FileRef directly in the database or by supplying a ha
sary permissions. This can be accomplished either by modifying the FileRef directly in the database or by supplying a harmful value in the fileRef parameter of the `/files` endpoint of the generic REST API. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jmix-framework/jmix/security/advisories/GHSA-jx4g-3xqm-62vh - https://github.com/jmix-framework/jmix/issues/3804 - https://github.com/jmix-framework/jmix/issues/3836 - https://github.com/jmix-framework/jmix/commit/6a66aa3adb967159a30d703e80403406f4c8f7a2 - https://github.com/jmix-framework/j
s://github.com/jmix-framework/jmix/commit/6a66aa3adb967159a30d703e80403406f4c8f7a2 - https://github.com/jmix-framework/jmix/commit/c589ef4e2b25620770b8036f4ad05f1a6250cb6a - https://github.com/jmix-framework/jmix/commit/cc97e6ff974b9e7af8160fab39cc5866169daa37 - https://github.com/jmix-framework/jmix/commit/f4e6fb05bd245cf36f3e9319aaa0fcd540d024aa - https://docs.jmix.io/jmix/files-vulnerabilities.html - https://docs.jmix.io/jmix/files-vulnerabilities.html#fix-path-traversal-in-jmix-application
CVE ID: CVE-2025-32951 State: PUBLISHED Published: 2025-04-22T17:32:23.401Z Last Updated: 2025-05-27T17:18:23.124Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: jmix-framework Products: jmix Problem Types: CWE-79 Description: Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with .html. This could allow malicious JavaScript code to be executed in the browser. For a successful attack, a malicious file needs to be u
d allow malicious JavaScript code to be executed in the browser. For a successful attack, a malicious file needs to be uploaded beforehand. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jmix-framework/jmix/security/advisories/GHSA-x27v-f838-jh93 - https://github.com/jmix-framework/jmix/issues/3804 - https://github.com/jmix-framework/jmix/issues/3836 - https://github.com/jmix-framework/jmix/commit/6a66aa3adb967159a30d703e80403406f4c8f7a2 - https://github.com/jmix-framework/jmix/commit/c589ef4e2b25620770b8036f4ad05f1a6250cb6a - https://githu
0403406f4c8f7a2 - https://github.com/jmix-framework/jmix/commit/c589ef4e2b25620770b8036f4ad05f1a6250cb6a - https://github.com/jmix-framework/jmix/commit/cc97e6ff974b9e7af8160fab39cc5866169daa37 - https://github.com/jmix-framework/jmix/commit/f4e6fb05bd245cf36f3e9319aaa0fcd540d024aa - https://docs.jmix.io/jmix/files-vulnerabilities.html - https://docs.jmix.io/jmix/files-vulnerabilities.html#disable-files-endpoint-in-jmix-application
CVE ID: CVE-2025-32952 State: PUBLISHED Published: 2025-04-22T17:32:11.966Z Last Updated: 2025-05-27T17:00:25.356Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: jmix-framework Products: jmix Problem Types: CWE-770 Description: Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the local file storage implementation does not restrict the size of uploaded files. An attacker could exploit this by uploading excessively large files, potentially causing the server to run out of space and return HTTP 500 error, resulting in a denial of service. This issue has been patche
g the server to run out of space and return HTTP 500 error, resulting in a denial of service. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jmix-framework/jmix/security/advisories/GHSA-f3gv-cwwh-758m - https://github.com/jmix-framework/jmix/issues/3804 - https://github.com/jmix-framework/jmix/issues/3836 - https://github.com/jmix-framework/jmix/commit/6a66aa3adb967159a30d703e80403406f4c8f7a2 - https://github.com/jmix-framework/jmix/commit/c589ef4e2b25620770b8036f4ad05f1a6250cb6a - https://github.com/jmix-framework/jmix/commit/cc97e6ff974b9
ework/jmix/commit/c589ef4e2b25620770b8036f4ad05f1a6250cb6a - https://github.com/jmix-framework/jmix/commit/cc97e6ff974b9e7af8160fab39cc5866169daa37 - https://github.com/jmix-framework/jmix/commit/f4e6fb05bd245cf36f3e9319aaa0fcd540d024aa - https://docs.jmix.io/jmix/files-vulnerabilities.html - https://docs.jmix.io/jmix/files-vulnerabilities.html#disable-files-endpoint-in-jmix-application
CVE ID: CVE-2025-32953 State: PUBLISHED Published: 2025-04-18T20:42:46.655Z Last Updated: 2025-04-21T02:49:18.601Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: udo-munk Products: z80pack Problem Types: CWE-200 Description: z80pack is a mature emulator of multiple platforms with 8080 and Z80 CPU. In version 1.38 and prior, the `makefile-ubuntu.yml` workflow file uses `actions/upload-artifact@v4` to upload the `z80pack-ubuntu` artifact. This artifact is a zip of the current directory, which includes the automatically generated `.git/config` file containing the run's GITHUB_TOKEN. Seeing as the artifact can be downloaded prior to the end of the workflow, there
file containing the run's GITHUB_TOKEN. Seeing as the artifact can be downloaded prior to the end of the workflow, there is a few seconds where an attacker can extract the token from the artifact and use it with the Github API to push malicious code or rewrite release commits in your repository. This issue has been fixed in commit bd95916. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/udo-munk/z80pack/security/advisories/GHSA-gpjj-f76m-9x3q - https://github.com/udo-munk/z80pack/commit/1e06c2fe498ca772002b5c4f6f9e3085061e47da - https://github.com/udo-munk/z80pack/commit/836c2e37b54f86bb4bed9e1406b67e52aa52308d - https://github.com/udo-munk/z80pack/commit/
ithub.com/udo-munk/z80pack/commit/836c2e37b54f86bb4bed9e1406b67e52aa52308d - https://github.com/udo-munk/z80pack/commit/95535987d690bd20849fbf143f267283f0e2db91 - https://github.com/udo-munk/z80pack/commit/bd9591615ae7b1e6229aa60a485447441c4a0c15
CVE ID: CVE-2025-32955 State: PUBLISHED Published: 2025-04-21T20:45:58.105Z Last Updated: 2025-04-22T02:19:09.748Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: step-security Products: harden-runner Problem Types: CWE-268, CWE-269 Description: Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Versions from 0.12.0 to before 2.12.0 are vulnerable to `disable-sudo` bypass. Harden-Runner includes a policy option `disable-sudo` to prevent the GitHub Actions runner user from using sudo. This is implemented by removing the runner user from the sudoers file. However, this control can be bypassed as the runner user, being part
by removing the runner user from the sudoers file. However, this control can be bypassed as the runner user, being part of the docker group, can interact with the Docker daemon to launch privileged containers or access the host filesystem. This allows the attacker to regain root access or restore the sudoers file, effectively bypassing the restriction. This issue has been patched in version 2.12.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/step-security/harden-runner/security/advisories/GHSA-mxr3-8whj-j74r - https://github.com/step-security/harden-runner/commit/0634a2670c59f64b4a01f0f96f84700a4088b9f0 - https://github.com/step-security/harden-runner
-security/harden-runner/commit/0634a2670c59f64b4a01f0f96f84700a4088b9f0 - https://github.com/step-security/harden-runner/releases/tag/v2.12.0
CVE ID: CVE-2025-32956 State: PUBLISHED Published: 2025-04-21T20:45:49.523Z Last Updated: 2025-05-12T15:40:28.138Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: miraheze Products: ManageWiki Problem Types: CWE-89 Description: ManageWiki is a MediaWiki extension allowing users to manage wikis. Versions before commit f504ed8, are vulnerable to SQL injection when renaming a namespace in Special:ManageWiki/namespaces when using a page prefix (namespace name, which is the current namespace you are renaming) with an injection payload. This issue has been patched in commit f504ed8. A workaround for this vulnerability involves setting `$wgManageWiki['namespaces'] = fa
s been patched in commit f504ed8. A workaround for this vulnerability involves setting `$wgManageWiki['namespaces'] = false;`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/miraheze/ManageWiki/security/advisories/GHSA-gg42-cv66-f5x7 - https://github.com/miraheze/ManageWiki/commit/f504ed8eeb59b57ebb90f93cd44f23da4c5bc4c9
CVE ID: CVE-2025-32958 State: PUBLISHED Published: 2025-04-21T20:45:40.082Z Last Updated: 2025-04-22T02:21:33.165Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AdeptLanguage Products: Adept Problem Types: CWE-200 Description: Adept is a language for general purpose programming. Prior to commit a1a41b7, the remoteBuild.yml workflow file uses actions/upload-artifact@v4 to upload the mac-standalone artifact. This artifact is a zip of the current directory, which includes the automatically generated .git/config file containing the run's GITHUB_TOKEN. Seeing as the artifact can be downloaded prior to the end of the workflow, there is a few seconds where an a