Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-4462 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-02-28T21:27:23.832Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. This vulnerability could allow a user to unmask the Discord Webhook URL through viewing the raw API response. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/git
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/385669 - https://hackerone.com/reports/1796210 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4462.json
CVE ID: CVE-2022-4463 State: REJECTED Published: N/A Last Updated: 2023-04-12T20:24:49.864Z Description: No description available.
CVE ID: CVE-2022-4464 State: PUBLISHED Published: 2023-01-16T15:37:47.997Z Last Updated: 2025-04-08T20:02:14.832Z Vendors: Unknown Products: Themify Portfolio Post Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: Themify Portfolio Post WordPress plugin before 1.2.1 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privileged users such as admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1d3636c1-976f-4c84-8c
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1d3636c1-976f-4c84-8cca-413e38170d0c
CVE ID: CVE-2022-4465 State: PUBLISHED Published: 2023-01-16T15:37:40.280Z Last Updated: 2025-04-07T18:12:55.224Z Vendors: Unknown Products: WP Video Lightbox Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Video Lightbox WordPress plugin before 1.9.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/28abe589-1371-4ed2-90b6-2bb96c93
gram Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/28abe589-1371-4ed2-90b6-2bb96c93832c
CVE ID: CVE-2022-4466 State: PUBLISHED Published: 2023-03-13T16:03:37.989Z Last Updated: 2025-02-27T15:43:23.179Z Vendors: Unknown Products: WordPress Infinite Scroll Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WordPress Infinite Scroll WordPress plugin before 5.6.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/497d0bf9-b750-4293-9662-1722a74442e2
CVE ID: CVE-2022-4467 State: PUBLISHED Published: 2023-01-23T14:31:52.174Z Last Updated: 2025-04-02T14:43:46.414Z Vendors: Unknown Products: Search & Filter Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Search & Filter WordPress plugin before 1.2.16 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/54168861-c0b8-4de6-a9af-0ad5c20b4a4
m Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/54168861-c0b8-4de6-a9af-0ad5c20b4a45
CVE ID: CVE-2022-4468 State: PUBLISHED Published: 2023-01-09T22:13:32.184Z Last Updated: 2025-04-09T19:01:04.612Z Vendors: Unknown Products: WP Recipe Maker Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Recipe Maker WordPress plugin before 8.6.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a3bf24af-417e-4ca2-886c-bb36bb2d952b
CVE ID: CVE-2022-4469 State: PUBLISHED Published: 2023-01-16T15:37:43.390Z Last Updated: 2025-04-08T19:32:43.711Z Vendors: Unknown Products: Simple Membership Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Simple Membership WordPress plugin before 4.2.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b195c373-1db9-4fd7-98d0-0860dacd
gram Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b195c373-1db9-4fd7-98d0-0860dacd189e
CVE ID: CVE-2022-4470 State: PUBLISHED Published: 2023-01-30T20:31:57.105Z Last Updated: 2025-03-27T15:36:20.070Z Vendors: Unknown Products: Widgets for Google Reviews Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Widgets for Google Reviews WordPress plugin before 9.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/7c4e51b3-87ef-4
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/7c4e51b3-87ef-4afc-ab53-9a9bbdcfc9d7
CVE ID: CVE-2022-4471 State: PUBLISHED Published: 2023-02-13T14:32:30.170Z Last Updated: 2025-03-21T19:47:47.404Z Vendors: Unknown Products: YARPP Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c6cf792b-054c-4d77-bcae-3b700f42130b
CVE ID: CVE-2022-4472 State: PUBLISHED Published: 2023-01-30T20:31:35.144Z Last Updated: 2025-03-28T14:05:14.424Z Vendors: Unknown Products: Simple Sitemap Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Simple Sitemap WordPress plugin before 3.5.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2b685a12-2ca3-42dd-84fe-4a463a082c2a
CVE ID: CVE-2022-4473 State: PUBLISHED Published: 2023-02-13T14:31:58.526Z Last Updated: 2025-03-21T14:46:57.796Z Vendors: Unknown Products: Widget Shortcode Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Widget Shortcode WordPress plugin through 0.3.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5117b2e9-75b5-459a-b22a-b0e1b074
gram Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5117b2e9-75b5-459a-b22a-b0e1b0744bd3
CVE ID: CVE-2022-4474 State: PUBLISHED Published: 2023-01-23T14:31:37.923Z Last Updated: 2025-04-02T15:43:21.574Z Vendors: Unknown Products: Easy Social Feed Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Easy Social Feed WordPress plugin before 6.4.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3acc6940-13ec-40fb-8471-6b2f0445c5
am Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3acc6940-13ec-40fb-8471-6b2f0445c543
CVE ID: CVE-2022-4475 State: PUBLISHED Published: 2023-01-23T14:31:34.811Z Last Updated: 2025-04-02T15:47:15.251Z Vendors: Unknown Products: Collapse-O-Matic Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Collapse-O-Matic WordPress plugin before 1.8.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3b5c377c-3148-4373-996c-89851d5e39
am Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3b5c377c-3148-4373-996c-89851d5e39e5
CVE ID: CVE-2022-4476 State: PUBLISHED Published: 2023-01-16T15:38:02.126Z Last Updated: 2025-04-04T17:53:03.723Z Vendors: Unknown Products: Download Manager Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Download Manager WordPress plugin before 3.2.62 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/856cac0f-2526-4978-acad-d6d82a0bec45
CVE ID: CVE-2022-4477 State: PUBLISHED Published: 2023-01-16T15:38:01.295Z Last Updated: 2025-04-04T17:55:02.332Z Vendors: Unknown Products: Smash Balloon Social Post Feed Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Smash Balloon Social Post Feed WordPress plugin before 4.1.6 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c32a4c58-9f2b-4afa-9a21-4b4a5c4c4c41
CVE ID: CVE-2022-4478 State: PUBLISHED Published: 2023-01-16T15:37:57.578Z Last Updated: 2025-04-07T16:27:11.529Z Vendors: Unknown Products: Font Awesome Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Font Awesome WordPress plugin before 4.3.2 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4de75de5-e557-46df-9675-e3f0220f4003
CVE ID: CVE-2022-4479 State: PUBLISHED Published: 2023-01-09T22:13:33.711Z Last Updated: 2025-04-09T18:49:55.896Z Vendors: Unknown Products: Table of Contents Plus Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Table of Contents Plus WordPress plugin before 2212 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/10f63d30-1b36-459b-80e
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/10f63d30-1b36-459b-80eb-509caaf5d377
CVE ID: CVE-2022-4480 State: PUBLISHED Published: 2023-01-16T15:37:48.826Z Last Updated: 2025-04-04T18:26:18.544Z Vendors: Unknown Products: Click to Chat Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Click to Chat WordPress plugin before 3.18.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1666f91d-3aa2-487d-a31b-44d051ab0124
CVE ID: CVE-2022-4481 State: PUBLISHED Published: 2023-01-16T15:37:56.741Z Last Updated: 2025-04-07T17:01:05.299Z Vendors: Unknown Products: Mesmerize Companion Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Mesmerize Companion WordPress plugin before 1.6.135 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9dc9d377-635d-4d4f-9916-3
CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9dc9d377-635d-4d4f-9916-33bcedbba6f0
CVE ID: CVE-2022-4482 State: PUBLISHED Published: 2023-01-16T15:37:58.516Z Last Updated: 2025-04-04T18:09:19.092Z Vendors: Unknown Products: Carousel, Slider, Gallery by WP Carousel Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.5.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com
as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/389b71d6-b0e6-4e36-b9ca-9d8dab75bb0a
CVE ID: CVE-2022-4483 State: PUBLISHED Published: 2023-01-16T15:38:03.732Z Last Updated: 2025-04-04T17:49:21.106Z Vendors: Unknown Products: Insert Pages Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Insert Pages WordPress plugin before 3.7.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a1786400-dc62-489c-b986-ba17c9833179
CVE ID: CVE-2022-4484 State: PUBLISHED Published: 2023-01-16T15:38:07.767Z Last Updated: 2025-04-08T20:09:00.562Z Vendors: Unknown Products: Social Share, Social Login and Social Comments Plugin Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.44 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
st high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/91252899-029d-49be-859e-7d2c4a70efea
CVE ID: CVE-2022-4485 State: PUBLISHED Published: 2023-01-23T14:31:58.019Z Last Updated: 2025-04-03T19:18:07.802Z Vendors: Unknown Products: Page-list Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Page-list WordPress plugin before 5.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/685b068e-0727-45fb-bd8c-66bb1dc3a8e7
CVE ID: CVE-2022-4486 State: PUBLISHED Published: 2023-01-16T15:37:42.618Z Last Updated: 2025-04-07T17:42:36.768Z Vendors: Unknown Products: Meteor Slides Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Meteor Slides WordPress plugin before 1.5.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d0afd17c-09cd-4ab5-95a5-6ac8c3c0a50b
CVE ID: CVE-2022-4487 State: PUBLISHED Published: 2023-01-16T15:37:46.455Z Last Updated: 2025-04-08T19:52:35.646Z Vendors: Unknown Products: Easy Accordion Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Easy Accordion WordPress plugin before 2.2.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6130958f-f549-4885-adb1-093aa025920e
CVE ID: CVE-2022-4488 State: PUBLISHED Published: 2023-02-13T14:32:29.402Z Last Updated: 2025-03-21T19:46:57.252Z Vendors: Unknown Products: Widgets on Pages Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Widgets on Pages WordPress plugin before 1.8.0 does not validate and escape its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e52c18a9-550a-40b1-a413-0e06e5b4aabc
CVE ID: CVE-2022-4489 State: PUBLISHED Published: 2023-02-06T19:59:48.440Z Last Updated: 2025-03-25T17:40:28.505Z Vendors: Unknown Products: HUSKY Problem Types: CWE-502 Deserialization of Untrusted Data Description: The HUSKY WordPress plugin before 1.3.2 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/067573f2-b1e6-49a9-8c5b-f91e3b9d722f
CVE ID: CVE-2022-4491 State: PUBLISHED Published: 2023-01-09T22:13:32.929Z Last Updated: 2025-04-09T18:59:47.057Z Vendors: Unknown Products: WP-Table Reloaded Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP-Table Reloaded WordPress plugin through 1.9.4 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b62d8fa6-d546-4794-8f7a-c5
VE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b62d8fa6-d546-4794-8f7a-c5e4a7f607dc
CVE ID: CVE-2022-4492 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-12T14:34:50.123Z Vendors: n/a Products: undertow Problem Types: ssrf Description: The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2153260 - https://access.redhat.com/security/cve/CVE-2022-4492 - https://security.netapp.com/advisory/ntap-20230324-0002/
CVE ID: CVE-2022-4493 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-15T13:04:29.996Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: unspecified Products: scifio Problem Types: CWE-22 Description: A vulnerability classified as critical was found in scifio. Affected by this vulnerability is the function downloadAndUnpackResource of the file src/test/java/io/scif/util/DefaultSampleFilesService.java of the component ZIP File Handler. The manipulation leads to path traversal. The attack can be launched remotely. The name of the patch is fcb0dbca0ec72b22fe0c9ddc8abc9cb188a0ff31. It is recommended to apply a patch to fix this issue. Th
name of the patch is fcb0dbca0ec72b22fe0c9ddc8abc9cb188a0ff31. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-215803. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/scifio/scifio/commit/fcb0dbca0ec72b22fe0c9ddc8abc9cb188a0ff31 - https://vuldb.com/?id.215803
CVE ID: CVE-2022-4494 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-15T13:04:23.065Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: bspkrs Products: MCPMappingViewer Problem Types: CWE-22 Description: A vulnerability, which was classified as critical, has been found in bspkrs MCPMappingViewer. Affected by this issue is the function extractZip of the file src/main/java/bspkrs/mmv/RemoteZipHandler.java of the component ZIP File Handler. The manipulation leads to path traversal. The attack may be launched remotely. The name of the patch is 6e602746c96b4756c271d080dae7d22ad804a1bd. It is recommended to apply a patch to fix this issu
. The name of the patch is 6e602746c96b4756c271d080dae7d22ad804a1bd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215804. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bspkrs/MCPMappingViewer/commit/6e602746c96b4756c271d080dae7d22ad804a1bd - https://vuldb.com/?id.215804