Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
//github.com/Combodo/iTop/security/advisories/GHSA-ghqc-r8f6-q9m9 - https://github.com/Combodo/iTop/commit/43daa2ef088bf928a2386fa19324628c3f19b807 - https://github.com/Combodo/iTop/commit/6be9a87c150978752bc68baae1a5c4833ddadfec
CVE ID: CVE-2021-32664 State: PUBLISHED Published: 2021-10-19T17:45:12 Last Updated: 2024-08-03T23:25:31.081Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: Combodo Products: iTop Problem Types: CWE-79 Description: Combodo iTop is an open source web based IT Service Management tool. In affected versions there is a XSS vulnerability on "run query" page when logged as administrator. This has been resolved in versions 2.6.5 and 2.7.5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Combodo/iTop/security/advisories/GHSA-j758-ggwg-9mpj - https://github.com/Combodo/iTop/commit/4f5c987d8b1bd12814dc606ea69b6cfb88490704 - https://gi
ories/GHSA-j758-ggwg-9mpj - https://github.com/Combodo/iTop/commit/4f5c987d8b1bd12814dc606ea69b6cfb88490704 - https://github.com/Combodo/iTop/commit/84741c19f0af6fa8e7082a8807eb089182e7b88a - https://github.com/Combodo/iTop/commit/86f649affc12b5078efc86d9439d67d98f4cb2f6
CVE ID: CVE-2021-32665 State: PUBLISHED Published: 2021-06-03T21:00:12 Last Updated: 2024-08-03T23:25:31.122Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wireapp Products: wire-ios Problem Types: CWE-345 Description: wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug in which a conversation could be incorrectly set to "unverified. This occurs when: - Self user is added to a new conversation - Self user is added to an existing conversation - All the participants in the conversation were previously marked as verified. The vulnerability is patched in wire-ios version 3.8.1. As a workaround,
onversation were previously marked as verified. The vulnerability is patched in wire-ios version 3.8.1. As a workaround, one can unverify & verify a device in the conversation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wireapp/wire-ios/security/advisories/GHSA-mc65-7w99-c6qv - https://github.com/wireapp/wire-ios-data-model/commit/bf9db85886b12a20c8374f55b7c4a610e8ae9220
CVE ID: CVE-2021-32666 State: PUBLISHED Published: 2021-06-03T21:35:10 Last Updated: 2024-08-03T23:25:31.090Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: wireapp Products: wire-ios Problem Types: CWE-20 Description: wire-ios is the iOS version of Wire, an open-source secure messaging app. In wire-ios versions 3.8.0 and prior, a vulnerability exists that can cause a denial of service between users. If a user has an invalid assetID for their profile picture and it contains the " character, it will cause the iOS client to crash. The vulnerability is patched in wire-ios version 3.8.1. Additional Analyst Notes: - CVE Program Container: References: - https://g
ability is patched in wire-ios version 3.8.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wireapp/wire-ios/security/advisories/GHSA-2x9x-vh27-h4rv - https://github.com/wireapp/wire-ios-data-model/commit/35af3f632085f51a2ce7f608fdaeffd1a69ad89f
CVE ID: CVE-2021-32667 State: PUBLISHED Published: 2021-07-20T14:40:11 Last Updated: 2024-08-03T23:25:31.059Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: TYPO3 Products: TYPO3.CMS Problem Types: CWE-79 Description: TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0 have a cross-site scripting vulnerability. When _Page TSconfig_ settings are not properly encoded, corresponding page preview module (_Web>View_) is vulnerable to persistent cross-site scripting. A valid backend user account is needed to exploit this vulnerability. TYPO3 versions 9.5.29, 10.4.18, 11.
ite scripting. A valid backend user account is needed to exploit this vulnerability. TYPO3 versions 9.5.29, 10.4.18, 11.3.1 contain a patch for this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-8mq9-fqv8-59wf - https://typo3.org/security/advisory/typo3-core-sa-2021-009
CVE ID: CVE-2021-32668 State: PUBLISHED Published: 2021-07-20T14:45:13 Last Updated: 2024-08-03T23:25:31.124Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: TYPO3 Products: TYPO3.CMS Problem Types: CWE-79 Description: TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0 have a cross-site scripting vulnerability. When error messages are not properly encoded, the components _QueryGenerator_ and _QueryView_ are vulnerable to both reflected and persistent cross-site scripting. A valid backend user account having administrator privileges is needed to exploit this vulnera
ent cross-site scripting. A valid backend user account having administrator privileges is needed to exploit this vulnerability. TYPO3 versions 9.5.29, 10.4.18, 11.3.1 contain a patch for this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-6mh3-j5r5-2379 - https://typo3.org/security/advisory/typo3-core-sa-2021-010
CVE ID: CVE-2021-32669 State: PUBLISHED Published: 2021-07-20T15:35:11 Last Updated: 2024-08-03T23:25:31.073Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: TYPO3 Products: TYPO3.CMS Problem Types: CWE-79 Description: TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0 have a cross-site scripting vulnerability. When settings for _backend layouts_ are not properly encoded, the corresponding grid view is vulnerable to persistent cross-site scripting. A valid backend user account is needed to exploit this vulnerability. TYPO3 versions 9.5.29, 10.4.18, 11.3.1 contain a
. A valid backend user account is needed to exploit this vulnerability. TYPO3 versions 9.5.29, 10.4.18, 11.3.1 contain a patch for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-rgcg-28xm-8mmw - https://typo3.org/security/advisory/typo3-core-sa-2021-011
CVE ID: CVE-2021-32670 State: PUBLISHED Published: 2021-06-07T21:20:13 Last Updated: 2024-08-03T23:25:31.015Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: simonw Products: datasette Problem Types: CWE-79 Description: Datasette is an open source multi-tool for exploring and publishing data. The `?_trace=1` debugging feature in Datasette does not correctly escape generated HTML, resulting in a [reflected cross-site scripting](https://owasp.org/www-community/attacks/xss/#reflected-xss-attacks) vulnerability. This vulnerability is particularly relevant if your Datasette installation includes authenticated features using plugins such as [datasette-auth-passwords
relevant if your Datasette installation includes authenticated features using plugins such as [datasette-auth-passwords](https://datasette.io/plugins/datasette-auth-passwords) as an attacker could use the vulnerability to access protected data. Datasette 0.57 and 0.56.1 both include patches for this issue. If you run Datasette behind a proxy you can workaround this issue by rejecting any incoming requests with `?_trace=` or `&_trace=` in their query string parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/simonw/datasette/security/advisories/GHSA-xw7c-jx9m-xh5g - https://github.com/simonw/datasette/issues/1360 - https://datasette.io/plugins/data
ity/advisories/GHSA-xw7c-jx9m-xh5g - https://github.com/simonw/datasette/issues/1360 - https://datasette.io/plugins/datasette-auth-passwords - https://owasp.org/www-community/attacks/xss/#reflected-xss-attacks - https://pypi.org/project/datasette/
CVE ID: CVE-2021-32671 State: PUBLISHED Published: 2021-06-07T21:25:12 Last Updated: 2024-08-03T23:25:31.102Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: flarum Products: core Problem Types: CWE-79 Description: Flarum is a forum software for building communities. Flarum's translation system allowed for string inputs to be converted into HTML DOM nodes when rendered. This change was made after v0.1.0-beta.16 (our last beta before v1.0.0) and was not noticed or documented. This allowed for any user to type malicious HTML markup within certain user input fields and have this execute on client browsers. The example which led to the discovery of this vulnera
rtain user input fields and have this execute on client browsers. The example which led to the discovery of this vulnerability was in the forum search box. Entering faux-malicious HTML markup, such as <script>alert('test')</script> resulted in an alert box appearing on the forum. This attack could also be modified to perform AJAX requests on behalf of a user, possibly deleting discussions, modifying their settings or profile, or even modifying settings on the Admin panel if the attack was targetted towards a privileged user. All Flarum communities that run flarum v1.0.0 or v1.0.1 are impacted. The vulnerability has been fixed and published as flarum/core v1.0.2. All communities running Flaru
v1.0.1 are impacted. The vulnerability has been fixed and published as flarum/core v1.0.2. All communities running Flarum v1.0 have to upgrade as soon as possible to v1.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flarum/core/security/advisories/GHSA-5qjq-69w6-fg57 - https://github.com/flarum/core/commit/440bed81b8019dff00642c8f493b4909d505a28a - https://packagist.org/packages/flarum/core
CVE ID: CVE-2021-32672 State: PUBLISHED Published: 2021-10-04T17:40:10 Last Updated: 2024-08-03T23:25:31.094Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: redis Products: redis Problem Types: CWE-125 Description: Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support (3.2 or newer). The problem is fixed in versions 6.2.6, 6.0.16 and 5.0.14. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/redis/
ons 6.2.6, 6.0.16 and 5.0.14. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/redis/redis/security/advisories/GHSA-9mj9-xx53-qmxm - https://github.com/redis/redis/commit/6ac3c0b7abd35f37201ed2d6298ecef4ea1ae1dd - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VL5KXFN3ATM7IIM7Q4O4PWTSRGZ5744Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HTYQ5ZF37HNGTZWVNJD3VXP7I6MEEF42/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WR5WKJWXD4D6S3DJCZ56V74ESLTDQRAB/ - https://www.debian.org/security/2021/dsa-5001 - http
lists.fedoraproject.org/message/WR5WKJWXD4D6S3DJCZ56V74ESLTDQRAB/ - https://www.debian.org/security/2021/dsa-5001 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20211104-0003/ - https://security.gentoo.org/glsa/202209-17
CVE ID: CVE-2021-32673 State: PUBLISHED Published: 2021-06-08T17:00:13 Last Updated: 2024-08-03T23:25:31.122Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L) Vendors: reg-viz Products: reg-suit Problem Types: CWE-94 Description: reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/reg-viz/reg-suit/security/advisories/GHSA-49q3-8867-5wmp - https://github.
m Container: References: - https://github.com/reg-viz/reg-suit/security/advisories/GHSA-49q3-8867-5wmp - https://github.com/reg-viz/reg-suit/commit/f84ad9c7a22144d6c147dc175c52756c0f444d87 - https://github.com/reg-viz/reg-suit/releases/tag/v0.10.16 - https://www.npmjs.com/package/reg-keygen-git-hash-plugin
CVE ID: CVE-2021-32674 State: PUBLISHED Published: 2021-06-08T17:45:12 Last Updated: 2024-08-03T23:25:31.128Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: zopefoundation Products: Zope Problem Types: CWE-22 Description: Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TAL expression traversal vulnerabilities. Most Python modules are not available for using in TAL expressions that you can add through-the-web, for example in Zope Page Templates. This restriction avoids file system access, for example via the 'os'
hrough-the-web, for example in Zope Page Templates. This restriction avoids file system access, for example via the 'os' module. But some of the untrusted modules are available indirectly through Python modules that are available for direct use. By default, you need to have the Manager role to add or edit Zope Page Templates through the web. Only sites that allow untrusted users to add/edit Zope Page Templates through the web are at risk. The problem has been fixed in Zope 5.2.1 and 4.6.1. The workaround is the same as for https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36: A site administrator can restrict adding/editing Zope Page Templates through the web using
isories/GHSA-5pr9-v234-jw36: A site administrator can restrict adding/editing Zope Page Templates through the web using the standard Zope user/role permission mechanisms. Untrusted users should not be assigned the Zope Manager role and adding/editing Zope Page Templates through the web should be restricted to trusted users only. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zopefoundation/Zope/security/advisories/GHSA-rpcg-f9q6-2mq6 - https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 - https://github.com/zopefoundation/Zope/commit/1d897910139e2c0b11984fc9b78c1da1365bec21 - https://pypi.org/project/Zope/
CVE ID: CVE-2021-32675 State: PUBLISHED Published: 2021-10-04T17:50:11 Last Updated: 2024-08-03T23:25:31.170Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: redis Products: redis Problem Types: CWE-770 Description: Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol (RESP) request, Redis allocates memory according to user-specified values which determine the number of elements (in the multi-bulk header) and size of each element (in the bulk header). An attacker delivering specially crafted requests over multiple connections can cause the server to allocate significant amount of memory. Because th
lly crafted requests over multiple connections can cause the server to allocate significant amount of memory. Because the same parsing mechanism is used to handle authentication requests, this vulnerability can also be exploited by unauthenticated users. The problem is fixed in Redis versions 6.2.6, 6.0.16 and 5.0.14. An additional workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in different ways: Using network access control tools like firewalls, iptables, security groups, etc. or Enabling TLS and requiring users to authenticate using client side certificates. Addi
iptables, security groups, etc. or Enabling TLS and requiring users to authenticate using client side certificates. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/redis/redis/security/advisories/GHSA-f6pw-v9gw-v64p - https://github.com/redis/redis/commit/5674b0057ff2903d43eaff802017eddf37c360f8 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VL5KXFN3ATM7IIM7Q4O4PWTSRGZ5744Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HTYQ5ZF37HNGTZWVNJD3VXP7I6MEEF42/ - https://lists.apache.org/thread.html/ra603ff6e04549d7f290f61f9b11e2d2e4dba693b05ff053f4ec6bc47%40%3
VNJD3VXP7I6MEEF42/ - https://lists.apache.org/thread.html/ra603ff6e04549d7f290f61f9b11e2d2e4dba693b05ff053f4ec6bc47%40%3Cnotifications.geode.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WR5WKJWXD4D6S3DJCZ56V74ESLTDQRAB/ - https://www.debian.org/security/2021/dsa-5001 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20211104-0003/ - https://security.gentoo.org/glsa/202209-17
CVE ID: CVE-2021-32676 State: PUBLISHED Published: 2021-06-16T00:05:10 Last Updated: 2024-08-03T23:25:31.060Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-384 Description: Nextcloud Talk is a fully on-premises audio/video and chat communication service. Password protected shared chats in Talk before version 9.0.10, 10.0.8 and 11.2.2 did not rotate the session cookie after a successful authentication event. It is recommended that the Nextcloud Talk App is upgraded to 9.0.10, 10.0.8 or 11.2.2. No workarounds for this vulnerability are known to exist. Additional Analyst Notes: - CVE Program Container
8 or 11.2.2. No workarounds for this vulnerability are known to exist. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-p6h7-84v4-827r - https://hackerone.com/reports/1181962
CVE ID: CVE-2021-32677 State: PUBLISHED Published: 2021-06-09T17:30:12 Last Updated: 2024-08-03T23:25:31.094Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N) Vendors: tiangolo Products: fastapi Problem Types: CWE-352 Description: FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery (CSRF) attack. In versions lower than 0.65.2, FastAPI would try to read the request payload as JSON even if the content-type header sent was not set to application/
, FastAPI would try to read the request payload as JSON even if the content-type header sent was not set to application/json or a compatible JSON media type (e.g. application/geo+json). A request with a content type of text/plain containing JSON data would be accepted and the JSON data would be extracted. Requests with content type text/plain are exempt from CORS preflights, for being considered Simple requests. The browser will execute them right away including cookies, and the text content could be a JSON string that would be parsed and accepted by the FastAPI application. This is fixed in FastAPI 0.65.2. The request data is now parsed as JSON only if the content-type header is application
. This is fixed in FastAPI 0.65.2. The request data is now parsed as JSON only if the content-type header is application/json or another JSON compatible media type like application/geo+json. It's best to upgrade to the latest FastAPI, but if updating is not possible then a middleware or a dependency that checks the content-type header and aborts the request if it is not application/json or another JSON compatible content type can act as a mitigating workaround. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tiangolo/fastapi/security/advisories/GHSA-8h2j-cgx8-6xv7 - https://github.com/tiangolo/fastapi/commit/fa7e3c996edf2d5482fff8f9d890ac2390dede4d - https
sories/GHSA-8h2j-cgx8-6xv7 - https://github.com/tiangolo/fastapi/commit/fa7e3c996edf2d5482fff8f9d890ac2390dede4d - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MATAWX25TYKNEKLDMKWNLYDB34UWTROA/
CVE ID: CVE-2021-32678 State: PUBLISHED Published: 2021-07-12T12:25:11 Last Updated: 2024-08-03T23:25:31.071Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-799 Description: Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.0.11, and 21.0.3, ratelimits are not applied to OCS API responses. This affects any OCS API controller (`OCSController`) using the `@BruteForceProtection` annotation. Risk depends on the installed applications on the Nextcloud Server, but could range from bypassing authentication ratelimits or spamming other Nextcloud users. The vuln
e Nextcloud Server, but could range from bypassing authentication ratelimits or spamming other Nextcloud users. The vulnerability is patched in versions 19.0.13, 20.0.11, and 21.0.3. No workarounds aside from upgrading are known to exist. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-48rx-3gmf-g74j - https://github.com/nextcloud/server/pull/27329 - https://hackerone.com/reports/1214158 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J63NBVPR2AQCAWRNDOZSGRY5II4WS2CZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraprojec
/J63NBVPR2AQCAWRNDOZSGRY5II4WS2CZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BVZS26RDME2DYTKET5AECRIZDFUGR2AZ/ - https://security.gentoo.org/glsa/202208-17
CVE ID: CVE-2021-32679 State: PUBLISHED Published: 2021-07-12T12:50:10 Last Updated: 2024-08-03T23:25:31.075Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-116 Description: Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.0.11, and 21.0.3, filenames where not escaped by default in controllers using `DownloadResponse`. When a user-supplied filename was passed unsanitized into a `DownloadResponse`, this could be used to trick users into downloading malicious files with a benign file extension. This would show in UI behaviours where Nextcloud application
o downloading malicious files with a benign file extension. This would show in UI behaviours where Nextcloud applications would display a benign file extension (e.g. JPEG), but the file will actually be downloaded with an executable file extension. The vulnerability is patched in versions 19.0.13, 20.0.11, and 21.0.3. Administrators of Nextcloud instances do not have a workaround available, but developers of Nextcloud apps may manually escape the file name before passing it into `DownloadResponse`. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3hjp-26x8-mhf6 - https://github.com/nextcloud/server/pull
hub.com/nextcloud/security-advisories/security/advisories/GHSA-3hjp-26x8-mhf6 - https://github.com/nextcloud/server/pull/27354 - https://hackerone.com/reports/1215263 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J63NBVPR2AQCAWRNDOZSGRY5II4WS2CZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BVZS26RDME2DYTKET5AECRIZDFUGR2AZ/ - https://security.gentoo.org/glsa/202208-17