Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-45041 State: PUBLISHED Published: 2024-09-09T14:54:31.066Z Last Updated: 2024-09-09T17:11:22.575Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: external-secrets Products: external-secrets Problem Types: CWE-269 Description: External Secrets Operator is a Kubernetes operator that integrates external secret management systems. The external-secrets has a deployment called default-external-secrets-cert-controller, which is bound with a same-name ClusterRole. This ClusterRole has "get/list" verbs of secrets resources. It also has path/update verb of validatingwebhookconfigurations resources. This can be used to abuse the SA token of the deploymen
s path/update verb of validatingwebhookconfigurations resources. This can be used to abuse the SA token of the deployment to retrieve or get ALL secrets in the whole cluster, capture and log all data from requests attempting to update Secrets, or make a webhook deny all Pod create and update requests. This vulnerability is fixed in 0.10.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/external-secrets/external-secrets/security/advisories/GHSA-qwgc-rr35-h4x9 - https://github.com/external-secrets/external-secrets/commit/428a452fd2ad45935312f2c2c0d40bc37ce6e67c
CVE ID: CVE-2024-45042 State: PUBLISHED Published: 2024-09-26T17:04:59.235Z Last Updated: 2025-03-12T21:17:22.281Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: ory Products: kratos Problem Types: CWE-287 Description: Ory Kratos is an identity, user management and authentication system for cloud services. Prior to version 1.3.0, given a number of preconditions, the `highest_available` setting will incorrectly assume that the identity’s highest available AAL is `aal1` even though it really is `aal2`. This means that the `highest_available` configuration will act as if the user has only one factor set up, for that particular user. This means that they can ca
configuration will act as if the user has only one factor set up, for that particular user. This means that they can call the settings and whoami endpoint without a `aal2` session, even though that should be disallowed. An attacker would need to steal or guess a valid login OTP of a user who has only OTP for login enabled and who has an incorrect `available_aal` value stored, to exploit this vulnerability. All other aspects of the session (e.g. the session’s aal) are not impacted by this issue. On the Ory Network, only 0.00066% of registered users were affected by this issue, and most of those users appeared to be test users. Their respective AAL values have since been updated and they are
ue, and most of those users appeared to be test users. Their respective AAL values have since been updated and they are no longer vulnerable to this attack. Version 1.3.0 is not affected by this issue. As a workaround, those who require MFA should disable the passwordless code login method. If that is not possible, check the sessions `aal` to identify if the user has `aal1` or `aal2`. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ory/kratos/security/advisories/GHSA-wc43-73w7-x2f5
CVE ID: CVE-2024-45043 State: PUBLISHED Published: 2024-08-28T20:06:34.510Z Last Updated: 2024-08-28T20:20:49.512Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: open-telemetry Products: opentelemetry-collector-contrib Problem Types: CWE-200, CWE-863 Description: The OpenTelemetry Collector module AWS firehose receiver is for ingesting AWS Kinesis Data Firehose delivery stream messages and parsing the records received based on the configured record type. `awsfirehosereceiver` allows unauthenticated remote requests, even when configured to require a key. OpenTelemetry Collector can be configured to receive CloudWatch metrics via an AWS Firehose Stream. Fireh
require a key. OpenTelemetry Collector can be configured to receive CloudWatch metrics via an AWS Firehose Stream. Firehose sets the header `X-Amz-Firehose-Access-Key` with an arbitrary configured string. The OpenTelemetry Collector awsfirehosereceiver can optionally be configured to require this key on incoming requests. However, when this is configured it **still accepts incoming requests with no key**. Only OpenTelemetry Collector users configured with the “alpha” `awsfirehosereceiver` module are affected. This module was added in version v0.49.0 of the “Contrib” distribution (or may be included in custom builds). There is a risk of unauthorized users writing metrics. Carefully crafted me
ution (or may be included in custom builds). There is a risk of unauthorized users writing metrics. Carefully crafted metrics could hide other malicious activity. There is no risk of exfiltrating data. It’s likely these endpoints will be exposed to the public internet, as Firehose does not support private HTTP endpoints. A fix was introduced in PR #34847 and released with v0.108.0. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-prf6-xjxh-p698 - https://github.com/open-telemetry/opentelemetry-colle
emetry-collector-contrib/security/advisories/GHSA-prf6-xjxh-p698 - https://github.com/open-telemetry/opentelemetry-collector-contrib/pull/34847 - https://github.com/open-telemetry/opentelemetry-collector-releases/pull/74 - https://docs.aws.amazon.com/firehose/latest/dev/controlling-access.html#using-iam-http - https://docs.aws.amazon.com/firehose/latest/dev/httpdeliveryrequestresponse.html - https://github.com/open-telemetry/opentelemetry-collector#alpha - https://github.com/open-telemetry/opentelemetry-collector-contrib/tree/main/receiver/awsfirehosereceiver - https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.108.0 - https://github.com/open-telemetry/opentel
ub.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.108.0 - https://github.com/open-telemetry/opentelemetry-collector-releases/tree/main/distributions/otelcol-contrib
CVE ID: CVE-2024-45044 State: PUBLISHED Published: 2024-09-10T14:57:57.464Z Last Updated: 2024-09-10T19:23:58.214Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: bareos Products: bareos Problem Types: CWE-285 Description: Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation (i.e. "w" for "whoami") the ACL check did not apply to the full form (i.e. "whoami") but to the abbreviated form (i.e. "w"). If the command ACL is configured with negative ACL that should forbid using the "whoami" command, you could still use "w" or "w
command ACL is configured with negative ACL that should forbid using the "whoami" command, you could still use "w" or "who" as a command successfully. Fixes for the problem are shipped in Bareos versions 23.0.4, 22.1.6 and 21.1.11. If only positive command ACLs are used without any negation, the problem does not occur. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bareos/bareos/security/advisories/GHSA-jfww-q346-r2r8 - https://github.com/bareos/bareos/pull/1875 - https://github.com/bareos/bareos/commit/2a026698b87d13bd1c6275726b5e826702f81dd5
CVE ID: CVE-2024-45045 State: PUBLISHED Published: 2024-08-29T16:49:12.270Z Last Updated: 2024-08-29T17:07:43.388Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: CollaboraOnline Products: online Problem Types: CWE-84 Description: Collabora Online is a collaborative online office suite based on LibreOffice technology. In the mobile (Android/iOS) device variants of Collabora Online it was possible to inject JavaScript via url encoded values in links contained in documents. Since the Android JavaScript interface allows access to internal functions, the likelihood that the app could be compromised via this vulnerability is considered high. Non-mobile variants a
tions, the likelihood that the app could be compromised via this vulnerability is considered high. Non-mobile variants are not affected. Mobile variants should update to the latest version provided by the platform appstore. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/CollaboraOnline/online/security/advisories/GHSA-78cg-rg4q-26qv
CVE ID: CVE-2024-45046 State: PUBLISHED Published: 2024-08-28T20:41:23.628Z Last Updated: 2024-08-29T13:11:25.969Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: PHPOffice Products: PhpSpreadsheet Problem Types: CWE-79 Description: PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In affected versions `\PhpOffice\PhpSpreadsheet\Writer\Html` doesn't sanitize spreadsheet styling information such as font names, allowing an attacker to inject arbitrary JavaScript on the page. As a result an attacker may used a crafted spreadsheet to fully takeover a session of a user viewing spreadsheet files as HTML. This issue has been addressed
fted spreadsheet to fully takeover a session of a user viewing spreadsheet files as HTML. This issue has been addressed in release version 2.1.0. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-wgmf-q9vr-vww6 - https://github.com/PHPOffice/PhpSpreadsheet/pull/3957 - https://github.com/PHPOffice/PhpSpreadsheet/commit/f7cf378faed2e11cf4825bf8bafea4922ae44667
CVE ID: CVE-2024-45047 State: PUBLISHED Published: 2024-08-30T16:55:39.106Z Last Updated: 2024-08-30T18:11:07.734Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: sveltejs Products: svelte Problem Types: CWE-79 Description: svelte performance oriented web framework. A potential mXSS vulnerability exists in Svelte for versions up to but not including 4.2.19. Svelte improperly escapes HTML on server-side rendering. The assumption is that attributes will always stay as such, but in some situation the final DOM tree rendered on browsers is different from what Svelte expects on server-side rendering. This may be leveraged to perform XSS attacks, and a type of the
erent from what Svelte expects on server-side rendering. This may be leveraged to perform XSS attacks, and a type of the XSS is known as mXSS (mutation XSS). More specifically, this can occur when injecting malicious content into an attribute within a `noscript` tag. This issue has been addressed in release version 4.2.19. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sveltejs/svelte/security/advisories/GHSA-8266-84wp-wv5c
CVE ID: CVE-2024-45048 State: PUBLISHED Published: 2024-08-28T20:38:29.486Z Last Updated: 2024-08-29T13:10:20.156Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: PHPOffice Products: PhpSpreadsheet Problem Types: CWE-611 Description: PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Affected versions are subject to a bypassing of a filter which allows for an XXE-attack. This in turn allows attacker to obtain contents of local files, even if error reporting is muted. This vulnerability has been addressed in release version 2.2.1. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Ana
e version 2.2.1. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-ghg6-32f9-2jp7 - https://github.com/PHPOffice/PhpSpreadsheet/commit/bea2d4b30f24bcc8a7712e208d1359e603b45dda
CVE ID: CVE-2024-45049 State: PUBLISHED Published: 2024-08-27T20:33:01.326Z Last Updated: 2024-08-28T14:03:00.616Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: NixOS Products: hydra Problem Types: CWE-306 Description: Hydra is a Continuous Integration service for Nix based projects. It is possible to trigger evaluations in Hydra without any authentication. Depending on the size of evaluations, this can impact the availability of systems. The problem can be fixed by applying https://github.com/NixOS/hydra/commit/f73043378907c2c7e44f633ad764c8bdd1c947d5 to any Hydra package. Users are advised to upgrade. Users unable to upgrade should deny the `/api/push` rou
c8bdd1c947d5 to any Hydra package. Users are advised to upgrade. Users unable to upgrade should deny the `/api/push` route in a reverse proxy. This also breaks the "Evaluate jobset" button in the frontend. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/NixOS/hydra/security/advisories/GHSA-xv29-v93r-2f5v - https://github.com/NixOS/nixpkgs/pull/337766 - https://github.com/NixOS/hydra/commit/f73043378907c2c7e44f633ad764c8bdd1c947d5 - https://mastodon.delroth.net/@delroth/113029832631860419
CVE ID: CVE-2024-45050 State: PUBLISHED Published: 2024-09-04T15:39:50.991Z Last Updated: 2024-09-04T16:20:46.182Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Lif-Platforms Products: New-Ringer-Server Problem Types: CWE-862 Description: Ringer server is the server code for the Ringer messaging app. Prior to version 1.3.1, there is an issue with the messages loading route where Ringer Server does not check to ensure that the user loading the conversation is actually a member of that conversation. This allows any user with a Lif Account to load any conversation between two users without permission. This issue had been patched in version 1.3.1. There is no ac
load any conversation between two users without permission. This issue had been patched in version 1.3.1. There is no action required for users. Lif Platforms will update their servers with the patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Lif-Platforms/New-Ringer-Server/security/advisories/GHSA-cpc7-79cg-qv65 - https://github.com/Lif-Platforms/New-Ringer-Server/commit/ae795ff47b2ac2656ac6a099a0e7954ca7d9ba53
CVE ID: CVE-2024-45051 State: PUBLISHED Published: 2024-10-07T20:23:01.955Z Last Updated: 2024-10-08T18:26:35.183Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: discourse Products: discourse Problem Types: CWE-287 Description: Discourse is an open source platform for community discussion. A maliciously crafted email address could allow an attacker to bypass domain-based restrictions and gain access to private sites, categories and/or groups. This issue has been patched in the latest stable, beta and tests-passed version of Discourse. All users area are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA
ers area are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-2vjv-pgh4-6rmq
CVE ID: CVE-2024-45052 State: PUBLISHED Published: 2024-09-04T15:43:52.056Z Last Updated: 2024-09-04T16:19:47.481Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ethyca Products: fides Problem Types: CWE-208 Description: Fides is an open-source privacy engineering platform. Prior to version 2.44.0, a timing-based username enumeration vulnerability exists in Fides Webserver authentication. This vulnerability allows an unauthenticated attacker to determine the existence of valid usernames by analyzing the time it takes for the server to respond to login requests. The discrepancy in response times between valid and invalid usernames can be leveraged to enumera
ond to login requests. The discrepancy in response times between valid and invalid usernames can be leveraged to enumerate users on the system. This vulnerability enables a timing-based username enumeration attack. An attacker can systematically guess and verify which usernames are valid by measuring the server's response time to authentication requests. This information can be used to conduct further attacks on authentication such as password brute-forcing and credential stuffing. The vulnerability has been patched in Fides version `2.44.0`. Users are advised to upgrade to this version or later to secure their systems against this threat. There are no workarounds. Additional Analyst Notes:
this version or later to secure their systems against this threat. There are no workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ethyca/fides/security/advisories/GHSA-2h46-8gf5-fmxv - https://github.com/ethyca/fides/commit/457b0e9df9f0d337133d6078bca6ed88bbc745f4
CVE ID: CVE-2024-45053 State: PUBLISHED Published: 2024-09-04T16:04:03.741Z Last Updated: 2024-09-04T18:02:37.351Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: ethyca Products: fides Problem Types: CWE-1336 Description: Fides is an open-source privacy engineering platform. Starting in version 2.19.0 and prior to version 2.44.0, the Email Templating feature uses Jinja2 without proper input sanitization or rendering environment restrictions, allowing for Server-Side Template Injection that grants Remote Code Execution to privileged users. A privileged user refers to an Admin UI user with the default `Owner` or `Contributor` role, who can escalate their ac
. A privileged user refers to an Admin UI user with the default `Owner` or `Contributor` role, who can escalate their access and execute code on the underlying Fides Webserver container where the Jinja template rendering function is executed. The vulnerability has been patched in Fides version `2.44.0`. Users are advised to upgrade to this version or later to secure their systems against this threat. There are no workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ethyca/fides/security/advisories/GHSA-c34r-238x-f7qx - https://github.com/ethyca/fides/commit/829cbd9cb5ef9c814fbac1ed6800e8d939d359c5
CVE ID: CVE-2024-45054 State: PUBLISHED Published: 2024-08-28T19:50:22.959Z Last Updated: 2024-08-28T20:09:27.302Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N) Vendors: hwameistor Products: hwameistor Problem Types: CWE-200 Description: Hwameistor is an HA local storage system for cloud-native stateful workloads. This ClusterRole has * verbs of * resources. If a malicious user can access the worker node which has hwameistor's deployment, he/she can abuse these excessive permissions to do whatever he/she likes to the whole cluster, resulting in a cluster-level privilege escalation. This issue has been patched in version 0.14.6. All users are advised to upgrade. Users
ster-level privilege escalation. This issue has been patched in version 0.14.6. All users are advised to upgrade. Users unable to upgrade should update and limit the ClusterRole using security-role. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/hwameistor/hwameistor/security/advisories/GHSA-mgwr-h7mv-fh29 - https://github.com/hwameistor/hwameistor/issues/1457 - https://github.com/hwameistor/hwameistor/issues/1460 - https://github.com/hwameistor/hwameistor/commit/edf4cebed73cadd230bf97eab65c5311f2858450 - https://github.com/hwameistor/hwameistor/blob/main/helm/hwameistor/templates/clusterrole.yaml
CVE ID: CVE-2024-45056 State: PUBLISHED Published: 2024-08-29T16:55:53.281Z Last Updated: 2024-08-29T17:16:47.076Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: matter-labs Products: era-compiler-solidity Problem Types: CWE-682 Description: zksolc is a Solidity compiler for ZKsync. All LLVM versions since 2015 fold `(xor (shl 1, x), -1)` to `(rotl ~1, x)` if run with optimizations enabled. Here `~1` is generated as an unsigned 64 bits number (`2^64-1`). This number is zero-extended to 256 bits on EraVM target while it should have been sign-extended. Thus instead of producing `roti 2^256 - 1, x` the compiler produces `rotl 2^64 - 1, x`. Analysis has shown t
n-extended. Thus instead of producing `roti 2^256 - 1, x` the compiler produces `rotl 2^64 - 1, x`. Analysis has shown that no contracts were affected by the date of publishing this advisory. This issue has been addressed in version 1.5.3. Users are advised to upgrade and redeploy all contracts. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/matter-labs/era-compiler-solidity/security/advisories/GHSA-fpx7-8vc6-frjj - https://github.com/llvm/llvm-project/commit/e48237df95b49a36b8ffceb78c8a58f4be1b4344
CVE ID: CVE-2024-45057 State: PUBLISHED Published: 2024-08-28T20:17:27.748Z Last Updated: 2024-09-06T19:25:24.190Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: portabilis Products: i-educar Problem Types: CWE-79 Description: i-Educar is free, fully online school management software that can be used by school secretaries, teachers, coordinators, and area managers. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the dynamic generation of HTML fields prior to the 2.9 branch. The file located at `ieducar/intranet/include/clsCampos.inc.php` does not properly validate or sanitize user-controlled input, leading to the vulnerability. Any pa
de/clsCampos.inc.php` does not properly validate or sanitize user-controlled input, leading to the vulnerability. Any page that uses this implementation is vulnerable, such as `intranet/educar_curso_lst.php?nm_curso=<payload>`, `intranet/atendidos_lst.php?nm_pessoa=<payload>`, `intranet/educar_abandono_tipo_lst?nome=<payload>`. Commit f2d768534aabc09b2a1fc8a5cc5f9c93925cb273 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/portabilis/i-educar/security/advisories/GHSA-fqwh-c3c8-7gwj - https://github.com/portabilis/i-educar/commit/f2d768534aabc09b2a1fc8a5cc5f9c93925cb273
CVE ID: CVE-2024-45058 State: PUBLISHED Published: 2024-08-28T20:17:30.179Z Last Updated: 2024-09-06T19:25:03.651Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: portabilis Products: i-educar Problem Types: CWE-20, CWE-269 Description: i-Educar is free, fully online school management software that can be used by school secretaries, teachers, coordinators, and area managers. Prior to the 2.9 branch, an attacker with only minimal viewing privileges in the settings section is able to change their user type to Administrator (or another type with super-permissions) through a specifically crafted POST request to `/intranet/educar_usuario_cad.php`, modifying the `ni
super-permissions) through a specifically crafted POST request to `/intranet/educar_usuario_cad.php`, modifying the `nivel_usuario_` parameter. The vulnerability occurs in the file located at `ieducar/intranet/educar_usuario_cad.php`, which does not check the user's current permission level before allowing changes. Commit c25910cdf11ab50e50162a49dd44bef544422b6e contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/portabilis/i-educar/security/advisories/GHSA-53vj-fq8x-2mvg - https://github.com/portabilis/i-educar/commit/c25910cdf11ab50e50162a49dd44bef544422b6e