Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
makes it possible for authenticated attackers, with editor-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/52f9db86-7fed-4b32-8384-3ceb300f9249?source=cve - https://plugins.trac.wordpress.org/browser/mailchimp-wp/trunk/includes/eoi-functions.php#L91 - https://plugins.trac.wordpress.org/browser/mailchimp-wp/trunk/includes/eoi-functions.php#L166
CVE ID: CVE-2024-7490 State: PUBLISHED Published: 2024-08-08T15:01:09.055Z Last Updated: 2025-08-29T20:23:53.142Z Vendors: Microchip Techology Products: Advanced Software Framework Problem Types: CWE-120 Description: Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer overflow. This vulnerability is associated with program files tinydhcpserver.C and program routines lwip_dhcp_find_option. This issue affects Advanced Software Framework: through 3.52.0.2574. ASF is no longer being supported. Apply provided workaround or migrate to an actively maintained framework. Additional Analyst Note
onger being supported. Apply provided workaround or migrate to an actively maintained framework. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.microchip.com/en-us/tools-resources/develop/libraries/advanced-software-framework
CVE ID: CVE-2024-7491 State: PUBLISHED Published: 2024-09-25T02:05:25.979Z Last Updated: 2024-09-27T15:18:11.641Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: realmag777 Products: HUSKY – Products Filter Professional for WooCommerce Problem Types: CWE-862 Description: The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.6.1 via the woof_messenger_remove_subscr AJAX action due to missing validation on the 'key' user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to unsubscribe user
led key. This makes it possible for authenticated attackers, with subscriber-level access and above, to unsubscribe users from a product notification sign-ups, if they can successfully obtain or brute force the key value for users who signed up to receive notifications. This vulnerability requires the plugin's Products Messenger extension to be enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/daf6b0d5-79a6-4b8f-924e-9e78cb2b5742?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3156511%40woocommerce-products-filter&old=3129454%40woocommerce-products-filter&sfp_email=
ail=&sfph_mail=&reponame=&new=3156511%40woocommerce-products-filter&old=3129454%40woocommerce-products-filter&sfp_email=&sfph_mail=
CVE ID: CVE-2024-7492 State: PUBLISHED Published: 2024-08-08T02:32:08.923Z Last Updated: 2024-08-08T15:28:04.017Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: mainwp Products: MainWP Child Reports Problem Types: CWE-352 Description: The MainWP Child Reports plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the network_options_action() function. This makes it possible for unauthenticated attackers to update arbitrary options that can be leveraged for privilege escalation via a forged request granted they can trick a site administrator into perfor
t can be leveraged for privilege escalation via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This is only exploitable on multisite instances. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cdd7971c-6f1c-437a-832c-e2b2817a197e?source=cve - https://plugins.trac.wordpress.org/browser/mainwp-child-reports/trunk/classes/class-network.php#L346 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3131718%40mainwp-child-reports&new=3131718%40mainwp-child-reports&sfp_email=&sfph_mail=#file4
CVE ID: CVE-2024-7493 State: PUBLISHED Published: 2024-09-06T13:55:20.451Z Last Updated: 2024-09-06T14:10:08.217Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: whyun Products: WPCOM Member Problem Types: CWE-269 Description: The WPCOM Member plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.5.2.1. This is due to the plugin allowing arbitrary data to be passed to wp_insert_user() during registration. This makes it possible for unauthenticated attackers to update their role to that of an administrator during registration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.
ministrator during registration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ec7f3e0c-a07c-4082-9b6b-12d0fbe0fdc8?source=cve - https://plugins.trac.wordpress.org/browser/wpcom-member/tags/1.5.2/includes/form-validation.php#L267
CVE ID: CVE-2024-7494 State: PUBLISHED Published: 2024-08-05T23:00:10.193Z Last Updated: 2024-08-06T15:17:53.604Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Clinics Patient Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is some unknown functionality of the file /new_prescription.php. The manipulation of the argument patient leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273620. Addi
. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273620. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273620 - https://vuldb.com/?ctiid.273620 - https://vuldb.com/?submit.385828 - https://github.com/lche511/cve/blob/main/sql2.md
CVE ID: CVE-2024-7495 State: PUBLISHED Published: 2024-08-06T01:00:10.350Z Last Updated: 2024-08-07T20:46:35.885Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Laravel Accounting System Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, was found in itsourcecode Laravel Accounting System 1.0. This affects an unknown part of the file app/Http/Controllers/HomeController.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273621 was assigned to this vulnerability. Additiona
as been disclosed to the public and may be used. The identifier VDB-273621 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273621 - https://vuldb.com/?ctiid.273621 - https://vuldb.com/?submit.385829 - https://github.com/DeepMountains/Mirage/blob/main/CVE13-1.md
CVE ID: CVE-2024-7496 State: PUBLISHED Published: 2024-08-06T01:31:04.440Z Last Updated: 2024-08-06T14:34:08.990Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Airline Reservation System Problem Types: CWE-73 Description: A vulnerability has been found in itsourcecode Airline Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273622 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichm
may be used. VDB-273622 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273622 - https://vuldb.com/?ctiid.273622 - https://vuldb.com/?submit.385892 - https://github.com/DeepMountains/zzz/blob/main/CVE1-1.md
CVE ID: CVE-2024-7497 State: PUBLISHED Published: 2024-08-06T02:00:10.828Z Last Updated: 2024-08-06T13:42:05.875Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Airline Reservation System Problem Types: CWE-73 Description: A vulnerability was found in itsourcecode Airline Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273623. Additional Analyst Notes: - CISA ADP Vul
and may be used. The associated identifier of this vulnerability is VDB-273623. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273623 - https://vuldb.com/?ctiid.273623 - https://vuldb.com/?submit.385893 - https://github.com/DeepMountains/zzz/blob/main/CVE1-2.md
CVE ID: CVE-2024-7498 State: PUBLISHED Published: 2024-08-06T02:31:04.558Z Last Updated: 2024-08-06T13:36:12.219Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Airline Reservation System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been classified as critical. Affected is the function login/login2 of the file /admin/login.php of the component Admin Login Page. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273624. Ad
ly. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273624. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273624 - https://vuldb.com/?ctiid.273624 - https://vuldb.com/?submit.385894 - https://github.com/DeepMountains/zzz/blob/main/CVE1-3.md
CVE ID: CVE-2024-7499 State: PUBLISHED Published: 2024-08-06T03:00:07.599Z Last Updated: 2024-08-06T14:32:56.335Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Airline Reservation System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file flights.php. The manipulation of the argument departure_airport_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273625 was assigned to this vulnerability. Additiona
as been disclosed to the public and may be used. The identifier VDB-273625 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273625 - https://vuldb.com/?ctiid.273625 - https://vuldb.com/?submit.385895 - https://github.com/DeepMountains/zzz/blob/main/CVE1-4.md
CVE ID: CVE-2024-7500 State: PUBLISHED Published: 2024-08-06T03:31:03.854Z Last Updated: 2024-08-06T15:42:18.792Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Airline Reservation System Problem Types: CWE-434 Description: A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been rated as critical. Affected by this issue is the function save_settings of the file admin/admin_class.php. The manipulation of the argument img leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-273626 is the identifier assigned to this vulnerability. Additional Analyst
isclosed to the public and may be used. VDB-273626 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273626 - https://vuldb.com/?ctiid.273626 - https://vuldb.com/?submit.385896 - https://github.com/DeepMountains/zzz/blob/main/CVE1-5.md
CVE ID: CVE-2024-7501 State: PUBLISHED Published: 2024-08-16T06:40:59.954Z Last Updated: 2024-09-13T14:06:00.805Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: algoritmika Products: Download Plugins and Themes in ZIP from Dashboard Problem Types: CWE-352 Description: The Download Plugins and Themes in ZIP from Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.7. This is due to missing or incorrect nonce validation on the download_theme() function. This makes it possible for unauthenticated attackers to download arbitrary themes from the website via a forged request granted they can trick a
r unauthenticated attackers to download arbitrary themes from the website via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. In versions prior to 1.8.6 it was possible to download the entire sites files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dcbfcaeb-2635-4b11-b426-ee04345d5f36?source=cve - https://plugins.trac.wordpress.org/changeset/3136231/download-plugins-dashboard/tags/1.8.8/includes/class-alg-download-plugins-core.php
CVE ID: CVE-2024-7502 State: PUBLISHED Published: 2024-08-06T16:50:26.354Z Last Updated: 2024-08-06T17:55:44.063Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAScreen Problem Types: CWE-121 Description: A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-219-01
CVE ID: CVE-2024-7503 State: PUBLISHED Published: 2024-08-10T02:01:24.069Z Last Updated: 2024-08-13T15:18:37.863Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: WPWeb Products: WooCommerce - Social Login Problem Types: CWE-288 Description: The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.5. This is due to the use of loose comparison of the activation code in the 'woo_slg_confirm_email_user' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the userID. This requires the ema
in as any existing user on the site, such as an administrator, if they have access to the userID. This requires the email module to be enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f3b727ba-b39c-4a98-a6a6-ea33785079f6?source=cve - https://codecanyon.net/item/social-login-wordpress-woocommerce-plugin
CVE ID: CVE-2024-7505 State: PUBLISHED Published: 2024-08-06T04:00:08.556Z Last Updated: 2024-08-06T19:21:59.022Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Bike Delivery System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in itsourcecode Bike Delivery System 1.0. Affected is an unknown function of the file contact_us_action.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273648. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
may be used. The identifier of this vulnerability is VDB-273648. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273648 - https://vuldb.com/?ctiid.273648 - https://vuldb.com/?submit.385932 - https://github.com/CveSecLook/cve/issues/56
CVE ID: CVE-2024-7506 State: PUBLISHED Published: 2024-08-06T04:31:05.937Z Last Updated: 2024-08-06T16:13:18.907Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Tailoring Management System Problem Types: CWE-434 Description: A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /setlogo.php. The manipulation of the argument bgimg leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273649 was assigned to this vulnerability. Additional Analy
disclosed to the public and may be used. The identifier VDB-273649 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273649 - https://vuldb.com/?ctiid.273649 - https://vuldb.com/?submit.386053 - https://github.com/CveSecLook/cve/issues/57
CVE ID: CVE-2024-7507 State: PUBLISHED Published: 2024-08-14T19:35:55.326Z Last Updated: 2024-08-15T14:37:58.421Z Vendors: Rockwell Automation Products: CompactLogix 5380 (5069 – L3z), ControlLogix® 5580 (1756 –L8z), GuardLogix 5580 (1756-L8z), Compact GuardLogix 5380 (5069- L3zS2), CompactLogix 5480 (5069-L4) Problem Types: CWE-20 Description: CVE-2024-7507 IMPACT A denial-of-service vulnerability exists in the affected products. This vulnerability occurs when a malformed PCCC message is received, causing a fault in the controller. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201685.htm
richment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201685.html
CVE ID: CVE-2024-7508 State: PUBLISHED Published: 2024-11-22T21:31:38.790Z Last Updated: 2024-11-25T16:45:26.616Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Trimble Products: SketchUp Viewer Problem Types: CWE-122 Description: Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results
a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-19575. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1054/
CVE ID: CVE-2024-7509 State: PUBLISHED Published: 2024-11-22T21:31:56.368Z Last Updated: 2024-11-25T16:44:53.728Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Trimble Products: SketchUp Problem Types: CWE-121 Description: Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of pro
open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-19576. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1055/
CVE ID: CVE-2024-7510 State: PUBLISHED Published: 2024-11-22T21:32:07.921Z Last Updated: 2024-11-25T16:44:15.177Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Trimble Products: SketchUp Problem Types: CWE-416 Description: Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the e
ious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-19631. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1056/
CVE ID: CVE-2024-7511 State: PUBLISHED Published: 2024-11-22T21:32:18.052Z Last Updated: 2024-11-26T15:13:11.107Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Trimble Products: SketchUp Pro Problem Types: CWE-125 Description: Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSD files embedded in SKP files. The i
ous page or open a malicious file. The specific flaw exists within the parsing of PSD files embedded in SKP files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-23000. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1057/
CVE ID: CVE-2024-7512 State: PUBLISHED Published: 2024-08-09T00:19:14.082Z Last Updated: 2025-01-17T21:04:53.122Z Vendors: Concrete CMS Products: Concrete CMS Problem Types: CWE-20 Description: Concrete CMS versions 9.0.0 through 9.3.2 are affected by a stored XSS vulnerability in Board instances. A rogue administrator could inject malicious code. The Concrete CMS security team gave this vulnerability a CVSS 4.0 Score of 4.6 with vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N. Versions below 9 are not affected. Thanks, m3dium for reporting. (CNA updated AC score to L based on CVSS 4.0 documentation) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
ated AC score to L based on CVSS 4.0 documentation) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/2486344 - https://documentation.concretecms.org/9-x/developers/introduction/version-history/933-release-notes?pk_vid=e367a434ef4830491723055753d52041