Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-11697 State: PUBLISHED Published: 2024-11-26T13:33:59.551Z Last Updated: 2025-11-03T21:52:01.996Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Improper Keypress Handling in Executable File Confirmation Dialog Description: When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?
nalyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1842187 - https://www.mozilla.org/security/advisories/mfsa2024-63/ - https://www.mozilla.org/security/advisories/mfsa2024-64/ - https://www.mozilla.org/security/advisories/mfsa2024-67/ - https://www.mozilla.org/security/advisories/mfsa2024-68/
CVE ID: CVE-2024-11698 State: PUBLISHED Published: 2024-11-26T13:34:00.682Z Last Updated: 2024-11-27T15:20:24.730Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Fullscreen Lock-Up When Modal Dialog Interrupts Transition on macOS Description: A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen mode when a modal dialog was opened during the transition. This issue left users unable to exit fullscreen mode using standard actions like pressing "Esc" or accessing right-click menus, resulting in a disrupted browsing experience until the browser is restarted. *This bug only affects the application when ru
ulting in a disrupted browsing experience until the browser is restarted. *This bug only affects the application when running on macOS. Other operating systems are unaffected.* This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1916152 - https://www.mozilla.org/security/advisories/mfsa2024-63/ - https://www.mozilla.org/security/advisories/mfsa2024-64/ - https://www.mozilla.org/security/advisories/mfsa2024-67/ - https://www.mozilla.org/security/advisories/mfsa2024-68/
CVE ID: CVE-2024-11699 State: PUBLISHED Published: 2024-11-26T13:34:02.646Z Last Updated: 2025-11-03T21:52:03.576Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 133, Firefox ESR 128.5, and Thunderbird 128.5 Description: Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program
SR < 128.5, Thunderbird < 133, and Thunderbird < 128.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1880582%2C1929911 - https://www.mozilla.org/security/advisories/mfsa2024-63/ - https://www.mozilla.org/security/advisories/mfsa2024-64/ - https://www.mozilla.org/security/advisories/mfsa2024-67/ - https://www.mozilla.org/security/advisories/mfsa2024-68/
CVE ID: CVE-2024-11700 State: PUBLISHED Published: 2024-11-26T13:33:56.353Z Last Updated: 2025-01-06T17:46:01.565Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Potential Tapjacking Exploit for Intent Confirmation on Android Description: Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1836921 - https://www.mozilla.or
es: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1836921 - https://www.mozilla.org/security/advisories/mfsa2024-63/ - https://www.mozilla.org/security/advisories/mfsa2024-67/
CVE ID: CVE-2024-11701 State: PUBLISHED Published: 2024-11-26T13:33:56.951Z Last Updated: 2024-11-27T15:44:38.510Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Misleading Address Bar State During Navigation Interruption Description: The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 133 and Thunderbird < 133. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1914797 - https://www.mozilla.org/security/advisories/mfsa2024-63/ - https://www.mozilla.org/securit
org/show_bug.cgi?id=1914797 - https://www.mozilla.org/security/advisories/mfsa2024-63/ - https://www.mozilla.org/security/advisories/mfsa2024-67/
CVE ID: CVE-2024-11702 State: PUBLISHED Published: 2024-11-26T13:33:57.291Z Last Updated: 2024-11-27T15:40:39.380Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Inadequate Clipboard Protection in Private Browsing Mode on Android Description: Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox < 133 and Thunderbird < 133. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1918884 - https://www.mozilla.org/security/advisories/mfsa2024-63/ - https://www.mozilla.org/se
illa.org/show_bug.cgi?id=1918884 - https://www.mozilla.org/security/advisories/mfsa2024-63/ - https://www.mozilla.org/security/advisories/mfsa2024-67/
CVE ID: CVE-2024-11703 State: PUBLISHED Published: 2024-11-26T13:33:58.796Z Last Updated: 2024-12-04T14:19:10.237Z Vendors: Mozilla Products: Firefox Problem Types: Password access without authentication via PIN bypass on Android Description: On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox < 133. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1928779 - https://www.mozilla.org/security/advisories/mfsa2024-63/
CVE ID: CVE-2024-11704 State: PUBLISHED Published: 2024-11-26T13:33:59.991Z Last Updated: 2025-11-03T20:36:29.923Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Potential double-free vulnerability in PKCS#7 decryption handling Description: A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path. Under specific conditions, the same symmetric key could have been freed twice, potentially leading to memory corruption. This vulnerability affects Firefox < 133, Thunderbird < 133, Firefox ESR < 128.7, and Thunderbird < 128.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http
and Thunderbird < 128.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1899402 - https://www.mozilla.org/security/advisories/mfsa2024-63/ - https://www.mozilla.org/security/advisories/mfsa2024-67/ - https://www.mozilla.org/security/advisories/mfsa2025-09/ - https://www.mozilla.org/security/advisories/mfsa2025-10/
CVE ID: CVE-2024-11705 State: PUBLISHED Published: 2024-11-26T13:34:01.020Z Last Updated: 2024-11-27T15:14:36.319Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Null Pointer Dereference in NSC_DeriveKey Description: `NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was passed as NULL, a segmentation fault (SEGV) occurred, leading to crashes. This behavior conflicted with the PKCS#11 v3.0 specification, which allows `phKey` to be NULL for certain mechanisms. This vulnerability affects Firefox < 133 and Thunderbird < 133. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1921
133. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1921768 - https://www.mozilla.org/security/advisories/mfsa2024-63/ - https://www.mozilla.org/security/advisories/mfsa2024-67/
CVE ID: CVE-2024-11706 State: PUBLISHED Published: 2024-11-26T13:34:01.638Z Last Updated: 2024-11-26T16:32:23.217Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Null Pointer Dereference in PKCS#12 Utility Description: A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when handling malformed or improperly formatted input files. This vulnerability affects Firefox < 133 and Thunderbird < 133. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1923767 - https://www.mozilla.org/security/advisories/mfsa2024-63/ - https://www.mozilla.org/sec
lla.org/show_bug.cgi?id=1923767 - https://www.mozilla.org/security/advisories/mfsa2024-63/ - https://www.mozilla.org/security/advisories/mfsa2024-67/
CVE ID: CVE-2024-11707 State: PUBLISHED Published: 2024-12-03T07:34:57.388Z Last Updated: 2024-12-03T11:23:42.773Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: wphocus Products: My auctions allegro Problem Types: CWE-79 Description: The My auctions allegro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 3.6.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Addition
pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/57a78696-5892-4621-992f-5e4a7d8fa965?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3197924%40my-auctions-allegro-free-edition&new=3197924%40my-auctions-allegro-free-edition&sfp_email=&sfph_mail= - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3198824%40my-auctions-allegro-free-edition&new=3198824%40my-auctions-allegro-free-edition&sfp_email=&sfph_mail=
CVE ID: CVE-2024-11708 State: PUBLISHED Published: 2024-11-26T13:34:02.250Z Last Updated: 2024-11-27T15:10:55.501Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Data race with PlaybackParams Description: Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure. This vulnerability affects Firefox < 133 and Thunderbird < 133. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1922912 - https://www.mozilla.org/security/advisories/mfsa2024-63/ - https://www.mozilla.org/security/advisories/mfsa2024-67/
CVE ID: CVE-2024-11709 State: PUBLISHED Published: 2024-12-12T04:23:15.579Z Last Updated: 2024-12-12T15:46:40.246Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: kekotron Products: AI Post Generator | AutoWriter Problem Types: CWE-862 Description: The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ai_post_generator_delete_Post AJAX action in all versions up to, and including, 3.5. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary pages and posts. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
utor-level access and above, to delete arbitrary pages and posts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f00ac468-870a-4c43-af25-9febea5e4d67?source=cve - https://plugins.trac.wordpress.org/browser/ai-post-generator/trunk/inc/insert-head.php#L430 - https://plugins.trac.wordpress.org/browser/ai-post-generator/trunk/inc/insert-head.php#L512
CVE ID: CVE-2024-11710 State: PUBLISHED Published: 2024-12-14T06:45:16.471Z Last Updated: 2024-12-16T17:47:28.434Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: wpjobportal Products: WP Job Portal – A Complete Recruitment System for Company or Job Board website Problem Types: CWE-89 Description: The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'fieldfor', 'visibleParent' and 'id' parameters in all versions up to, and including, 2.2.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes
ficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/80fcaea8-5837-4d8c-afef-b9ed4fd31227?source=cve - https://gist.github.com/g1-nhantv/40e061bbd2aa26bb89060aff7879feb1 - https://plugins.trac.wordpress.org/changeset/3202327/wp-job-portal/tags/2.2.3/modules/fieldordering/model.php?old=3187129
ttps://plugins.trac.wordpress.org/changeset/3202327/wp-job-portal/tags/2.2.3/modules/fieldordering/model.php?old=3187129&old_path=wp-job-portal%2Ftags%2F2.2.2%2Fmodules%2Ffieldordering%2Fmodel.php
CVE ID: CVE-2024-11711 State: PUBLISHED Published: 2024-12-14T06:45:16.039Z Last Updated: 2024-12-16T17:47:38.917Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: wpjobportal Products: WP Job Portal – A Complete Recruitment System for Company or Job Board website Problem Types: CWE-89 Description: The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'resumeid' parameter in all versions up to, and including, 2.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthentica
supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5d8961fd-68ac-4a10-ab26-cfcda27c18e8?source=cve - https://gist.github.com/g1-nhantv/b388ef3b4ff57c69f719c363d7fea399#file-resume_model-php-L35 - https://plugins.trac.wordpress.org/changeset/3202327/wp-job-portal/tags/2.2.3/modules/resume/model.php?old=3187129&old_path=wp-job-portal%2Ftags%2F2.2.2%2Fmodules%2Fr
202327/wp-job-portal/tags/2.2.3/modules/resume/model.php?old=3187129&old_path=wp-job-portal%2Ftags%2F2.2.2%2Fmodules%2Fresume%2Fmodel.php
CVE ID: CVE-2024-11712 State: PUBLISHED Published: 2024-12-14T06:45:16.858Z Last Updated: 2024-12-16T16:41:03.343Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: wpjobportal Products: WP Job Portal – A Complete Recruitment System for Company or Job Board website Problem Types: CWE-359 Description: The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getResumeFileDownloadById() function in all versions up to, and including, 2.2.2. This makes it possible for unauthenticated attackers to download other users resumes. Addition
to, and including, 2.2.2. This makes it possible for unauthenticated attackers to download other users resumes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ecc87d5f-dba4-40f8-946f-f2634614b579?source=cve - https://gist.github.com/g1-nhantv/245d2829c1b489f61c9124086506b6b8 - https://gist.github.com/g1-nhantv/7a26a9681eb3413d8be9323fb151fdcd - https://plugins.trac.wordpress.org/changeset/3202327/wp-job-portal/tags/2.2.3/modules/resume/model.php?old=3187129&old_path=wp-job-portal%2Ftags%2F2.2.2%2Fmodules%2Fresume%2Fmodel.php
CVE ID: CVE-2024-11713 State: PUBLISHED Published: 2024-12-14T06:45:15.220Z Last Updated: 2024-12-16T17:47:54.904Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: wpjobportal Products: WP Job Portal – A Complete Recruitment System for Company or Job Board website Problem Types: CWE-89 Description: The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'page_id' parameter of the wpjobportal_deactivate() function in all versions up to, and including, 2.2.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quer
due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4d67675a-b77b-41c6-a94f-d9385e609b37?source=cve - https://gist.github.com/g1-nhantv/08ea67adc67d1ba98bf56c4fae5aec0f#file-deactivation-php-L11 - https://plugins.trac.wordpress.org/changeset/3202327/wp-job-portal/tags/2.2.3/incl
fae5aec0f#file-deactivation-php-L11 - https://plugins.trac.wordpress.org/changeset/3202327/wp-job-portal/tags/2.2.3/includes/deactivation.php?old=3187129&old_path=wp-job-portal%2Ftags%2F2.2.2%2Fincludes%2Fdeactivation.php
CVE ID: CVE-2024-11714 State: PUBLISHED Published: 2024-12-14T06:45:15.610Z Last Updated: 2024-12-16T17:47:47.634Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: wpjobportal Products: WP Job Portal – A Complete Recruitment System for Company or Job Board website Problem Types: CWE-89 Description: The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'ff' parameter of the getFieldsForVisibleCombobox() function in all versions up to, and including, 2.2.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quer
due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/505858dc-c420-484c-a067-6962836eea6a?source=cve - https://gist.github.com/g1-nhantv/60182158e1d763b2f4c3b5e2972b6961#file-fieldordering_model-php-L6 - https://plugins.trac.wordpress.org/changeset/3202327/wp-job-portal/tags/2.2.
2972b6961#file-fieldordering_model-php-L6 - https://plugins.trac.wordpress.org/changeset/3202327/wp-job-portal/tags/2.2.3/modules/fieldordering/model.php?old=3187129&old_path=wp-job-portal%2Ftags%2F2.2.2%2Fmodules%2Ffieldordering%2Fmodel.php
CVE ID: CVE-2024-11715 State: PUBLISHED Published: 2024-12-14T06:45:14.790Z Last Updated: 2024-12-16T17:48:03.674Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: wpjobportal Products: WP Job Portal – A Complete Recruitment System for Company or Job Board website Problem Types: CWE-862 Description: The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the assignUserRole() function in all versions up to, and including, 2.2.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an employer. Addition
2.2.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an employer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4107199d-e3c7-4379-b39d-1868de7d777b?source=cve - https://gist.github.com/tvnnn/9b706643c5f88989c98815be8b101e11 - https://plugins.trac.wordpress.org/changeset/3202327/wp-job-portal/tags/2.2.3/modules/user/controller.php?old=3187129&old_path=wp-job-portal%2Ftags%2F2.2.2%2Fmodules%2Fuser%2Fcontroller.php
CVE ID: CVE-2024-11716 State: PUBLISHED Published: 2025-01-02T16:07:46.868Z Last Updated: 2025-11-03T21:52:05.067Z Vendors: CTFd Products: CTFd Problem Types: CWE-837 Description: While assignment of a user to a team (bracket) in CTFd should be possible only once, at the registration, a flaw in logic implementation allows an authenticated user to reset it's bracket and then pick a new one, joining another team while a competition is already ongoing. This issue impacts releases from 3.7.0 up to 3.7.4 and was addressed by pull request 2636 https://github.com/CTFd/CTFd/pull/2636 included in 3.7.5 release. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
36 included in 3.7.5 release. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/CTFd/CTFd/pull/2636 - https://cert.pl/en/posts/2025/01/CVE-2024-11716 - https://ctfd.io/ - https://blog.ctfd.io/ctfd-3-7-5/ - https://seclists.org/fulldisclosure/2024/Dec/21
CVE ID: CVE-2024-11717 State: PUBLISHED Published: 2025-01-02T16:08:20.242Z Last Updated: 2025-11-03T21:52:06.554Z Vendors: CTFd Products: CTFd Problem Types: CWE-837, CWE-1391 Description: Tokens in CTFd used for account activation and password resetting can be used interchangeably for these operations. When used, they are sent to the server as a GET parameter and they are not single use, which means, that during token expiration time an on-path attacker might reuse such a token to change user's password and take over the account. Moreover, the tokens also include base64 encoded user email. This issue impacts releases up to 3.7.4 and was addressed by pull request 2679 https://github.com/CTF
ncoded user email. This issue impacts releases up to 3.7.4 and was addressed by pull request 2679 https://github.com/CTFd/CTFd/pull/2679 included in 3.7.5 release. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.pl/en/posts/2025/01/CVE-2024-11716 - https://ctfd.io/ - https://github.com/CTFd/CTFd/pull/2679 - https://blog.ctfd.io/ctfd-3-7-5/ - https://seclists.org/fulldisclosure/2024/Dec/21