Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4016 State: PUBLISHED Published: 2020-06-01T06:35:31.473688Z Last Updated: 2024-09-16T16:49:09.315Z Vendors: Atlassian Products: Crucible, Fisheye Problem Types: Information Disclosure Description: The /plugins/servlet/jira-blockers/ resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to get the ID of configured Jira application links via an information disclosure vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/CRUC-8469 - https://jira.atlassian.com/browse/FE-7285
CVE ID: CVE-2020-4017 State: PUBLISHED Published: 2020-06-01T06:35:31.961847Z Last Updated: 2024-09-16T22:24:51.577Z Vendors: Atlassian Products: Crucible, Fisheye Problem Types: Information Disclosure Description: The /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to get information about any configured Jira application links via an information disclosure vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/CRUC-8470 - https://jira.atlassian.com/browse/FE-7286
CVE ID: CVE-2020-4018 State: PUBLISHED Published: 2020-06-01T06:35:32.401398Z Last Updated: 2024-09-16T19:14:26.996Z Vendors: Atlassian Products: Crucible, Fisheye Problem Types: Cross-Site Request Forgery (CSRF) Description: The setup resources in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to complete the setup process via a cross-site request forgery (CSRF) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/FE-7287 - https://jira.atlassian.com/browse/CRUC-8471
CVE ID: CVE-2020-4019 State: PUBLISHED Published: 2020-06-01T06:35:32.935956Z Last Updated: 2024-09-16T17:19:04.361Z Vendors: Atlassian Products: Companion App Problem Types: Untrusted Search Path Description: The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place of the app's cmd.exe via a untrusted search path vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/CONFSERVER-59734
CVE ID: CVE-2020-4020 State: PUBLISHED Published: 2020-06-01T06:35:33.411293Z Last Updated: 2024-09-16T17:29:09.909Z Vendors: Atlassian Products: Companion App Problem Types: Protected Mechanism Failure Description: The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who control a Confluence Server instance that the Companion App is connected to, execute arbitrary .exe files via a Protection Mechanism Failure. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/CONFSERVER-59733
CVE ID: CVE-2020-4021 State: PUBLISHED Published: 2020-06-01T06:35:33.848709Z Last Updated: 2024-09-16T16:47:43.937Z Vendors: Atlassian Products: Jira Server and Data Center Problem Types: Cross-Site Scripting (XSS) Description: Affected versions are: Before 8.5.5, and from 8.6.0 before 8.8.1 of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the XML export view. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-70923
CVE ID: CVE-2020-4022 State: PUBLISHED Published: 2020-07-01T01:35:27.992219Z Last Updated: 2024-09-17T03:43:04.895Z Vendors: Atlassian Products: Jira Server and Data Center Problem Types: Cross-Site Scripting (XSS) Description: The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a mixed multipart content type. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-71107
CVE ID: CVE-2020-4023 State: PUBLISHED Published: 2020-06-01T06:35:34.336809Z Last Updated: 2024-09-17T03:42:59.732Z Vendors: Atlassian Products: Crucible, Fisheye Problem Types: Cross Site Scripting (XSS) Description: The review coverage resource in Atlassian Fisheye and Crucible before version 4.8.2 allows remote attackers to inject arbitrary HTML or Javascript via a cross site scripting (XSS) vulnerability through the committerFilter parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/FE-7298 - https://jira.atlassian.com/browse/CRUC-8482
CVE ID: CVE-2020-4024 State: PUBLISHED Published: 2020-07-01T01:35:28.416457Z Last Updated: 2024-09-16T17:15:19.346Z Vendors: Atlassian Products: Jira Server and Data Center Problem Types: Cross-Site Scripting (XSS) Description: The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a vnd.wap.xhtml+xml content type. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-71113
CVE ID: CVE-2020-4025 State: PUBLISHED Published: 2020-07-01T01:35:28.857321Z Last Updated: 2024-09-16T22:03:15.966Z Vendors: Atlassian Products: Jira Server and Data Center Problem Types: Cross-Site Scripting (XSS) Description: The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a rdf content type. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/
a rdf content type. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-71114
CVE ID: CVE-2020-4026 State: PUBLISHED Published: 2020-06-02T23:40:12.121427Z Last Updated: 2024-09-17T04:05:05.012Z Vendors: Atlassian Products: Navigator Links, Crucible, Fisheye Problem Types: Incorrect Authorization Description: The CustomAppsRestResource list resource in Atlassian Navigator Links before version 3.3.23, from version 4.0.0 before version 4.3.7, from version 5.0.0 before 5.0.1, and from version 5.1.0 before 5.1.1 allows remote attackers to enumerate all linked applications, including those that are restricted or otherwise hidden, through an incorrect authorization check. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/FE-7
orization check. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/FE-7299 - https://jira.atlassian.com/browse/CRUC-8485
CVE ID: CVE-2020-4027 State: PUBLISHED Published: 2020-07-01T01:35:29.292383Z Last Updated: 2024-09-17T01:56:01.138Z Vendors: Atlassian Products: Confluence Server, Confluence Data Center Problem Types: Injection Description: Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros. The affected versions are before version 7.4.5, and from version 7.5.0 before 7.5.1. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/CONFSERVER-59898
CVE ID: CVE-2020-4028 State: PUBLISHED Published: 2020-06-23T12:55:12.201289Z Last Updated: 2024-09-16T16:48:18.602Z Vendors: Atlassian Products: Jira Server and Data Center Problem Types: Sensitive Information Disclosure Description: Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this may have allowed unauthorised attackers to determine if certain resources exist or not through an Information Disclosure vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-71175
CVE ID: CVE-2020-4029 State: PUBLISHED Published: 2020-07-01T01:35:29.763354Z Last Updated: 2024-09-16T17:54:34.534Z Vendors: Atlassian Products: Jira Server and Data Center Problem Types: Improper authorization Description: The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-70926
CVE ID: CVE-2020-4030 State: PUBLISHED Published: 2020-06-22T00:00:00 Last Updated: 2024-08-04T07:52:20.821Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-125 Description: In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.freerdp.com/2020/06/22/2_1_2-released - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fjr5-97f5-qq98 - https://github.com/FreeRDP/FreeRDP/commit/05cd9ea2290d23931f615c1b004d4b2e690
/security/advisories/GHSA-fjr5-97f5-qq98 - https://github.com/FreeRDP/FreeRDP/commit/05cd9ea2290d23931f615c1b004d4b2e69074e27 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/ - https://usn.ubuntu.com/4481-1/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE ID: CVE-2020-4031 State: PUBLISHED Published: 2020-06-22T00:00:00 Last Updated: 2024-08-04T07:52:20.811Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-416 Description: In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.freerdp.com/2020/06/22/2_1_2-released - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-gwcq-hpq2-m74g - https://github.com/FreeRDP/FreeRDP/commit/6d86e20e1e7caaab4f0
/FreeRDP/FreeRDP/security/advisories/GHSA-gwcq-hpq2-m74g - https://github.com/FreeRDP/FreeRDP/commit/6d86e20e1e7caaab4f0c7f89e36d32914dbccc52 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/ - https://usn.ubuntu.com/4481-1/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE ID: CVE-2020-4032 State: PUBLISHED Published: 2020-06-22T00:00:00 Last Updated: 2024-08-04T07:52:20.674Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-681 Description: In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.freerdp.com/2020/06/22/2_1_2-released - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3898-mc89-x2vc - https://github.com/FreeRDP/FreeRDP/commit/e7bffa64ef5e
hub.com/FreeRDP/FreeRDP/security/advisories/GHSA-3898-mc89-x2vc - https://github.com/FreeRDP/FreeRDP/commit/e7bffa64ef5ed70bac94f823e2b95262642f5296 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/ - https://usn.ubuntu.com/4481-1/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE ID: CVE-2020-4033 State: PUBLISHED Published: 2020-06-22T00:00:00 Last Updated: 2024-08-04T07:52:20.833Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-125 Description: In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth < 32 are affected. This is fixed in version 2.1.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.freerdp.com/2020/06/22/2_1_2-released - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7rhj-856w-82p8 - https://github.com/FreeRDP/FreeRDP/commit/0a98c450c58ec150e44781c89
DP/FreeRDP/security/advisories/GHSA-7rhj-856w-82p8 - https://github.com/FreeRDP/FreeRDP/commit/0a98c450c58ec150e44781c89aa6f8e7e0f571f5 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/ - https://usn.ubuntu.com/4481-1/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE ID: CVE-2020-4035 State: PUBLISHED Published: 2020-06-03T16:50:12 Last Updated: 2024-08-04T07:52:20.760Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: Nozbe Products: WatermelonDB Problem Types: CWE-89 Description: In WatermelonDB (NPM package "@nozbe/watermelondb") before versions 0.15.1 and 0.16.2, a maliciously crafted record ID can exploit a SQL Injection vulnerability in iOS adapter implementation and cause the app to delete all or selected records from the database, generally causing the app to become unusable. This may happen in apps that don't validate IDs (valid IDs are `/^[a-zA-Z0-9_-.]+$/`) and use Watermelon Sync or low-level `database.adap
n apps that don't validate IDs (valid IDs are `/^[a-zA-Z0-9_-.]+$/`) and use Watermelon Sync or low-level `database.adapter.destroyDeletedRecords` method. The integrity risk is low due to the fact that maliciously deleted records won't synchronize, so logout-login will restore all data, although some local changes may be lost if the malicious deletion causes the sync process to fail to proceed to push stage. No way to breach confidentiality with this vulnerability is known. Full exploitation of SQL Injection is mitigated, because it's not possible to nest an insert/update query inside a delete query in SQLite, and it's not possible to pass a semicolon-separated second query. There's also no
uery inside a delete query in SQLite, and it's not possible to pass a semicolon-separated second query. There's also no known practicable way to breach confidentiality by selectively deleting records, because those records will not be synchronized. It's theoretically possible that selective record deletion could cause an app to behave insecurely if lack of a record is used to make security decisions by the app. This is patched in versions 0.15.1, 0.16.2, and 0.16.1-fix Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Nozbe/WatermelonDB/security/advisories/GHSA-38f9-m297-6q9g - https://github.com/Nozbe/WatermelonDB/commit/924c7ae2a8d7d6459656751e5b9b1bf91a21
urity/advisories/GHSA-38f9-m297-6q9g - https://github.com/Nozbe/WatermelonDB/commit/924c7ae2a8d7d6459656751e5b9b1bf91a218025
CVE ID: CVE-2020-4037 State: PUBLISHED Published: 2020-06-29T19:45:13 Last Updated: 2024-08-04T07:52:20.759Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: OAuth2 Proxy Products: OAuth2 Proxy Problem Types: CWE-601 Description: In OAuth2 Proxy from version 5.1.1 and less than version 6.0.0, users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow. This is expected to be the original URL that the user was trying to access. This redirect URL is checked within the proxy and validated before redirecting the user to prevent malicious actors providing redirects to potentially harmful sites. This ha
idated before redirecting the user to prevent malicious actors providing redirects to potentially harmful sites. This has been fixed in version 6.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-5m6c-jp6f-2vcv - https://github.com/oauth2-proxy/oauth2-proxy/commit/ee5662e0f5001d76ec76562bb605abbd07c266a2
CVE ID: CVE-2020-4038 State: PUBLISHED Published: 2020-06-08T20:40:12 Last Updated: 2024-08-04T07:52:20.823Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N) Vendors: prisma-labs Products: graphql-playground Problem Types: CWE-79 Description: GraphQL Playground (graphql-playground-html NPM package) before version 1.6.22 have a severe XSS Reflection attack vulnerability. All unsanitized user input passed into renderPlaygroundPage() method could trigger this vulnerability. This has been patched in graphql-playground-html version 1.6.22. Note that some of the associated dependent middleware packages are also affected including but not limited to graphql-playground-middlewa
the associated dependent middleware packages are also affected including but not limited to graphql-playground-middleware-express before version 1.7.16, graphql-playground-middleware-koa before version 1.6.15, graphql-playground-middleware-lambda before version 1.7.17, and graphql-playground-middleware-hapi before 1.6.13. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/prisma-labs/graphql-playground/security/advisories/GHSA-4852-vrh7-28rf - https://github.com/prisma-labs/graphql-playground/commit/bf1883db538c97b076801a60677733816cb3cfb7 - https://github.com/prisma-labs/graphql-playground#security-details
CVE ID: CVE-2020-4039 State: PUBLISHED Published: 2021-04-30T15:25:16 Last Updated: 2024-08-04T07:52:20.803Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: fossasia Products: susi_server Problem Types: CWE-23 Description: SUSI.AI is an intelligent Open Source personal assistant. SUSI.AI Server before version d27ed0f has a directory traversal vulnerability due to insufficient input validation. Any admin config and file readable by the app can be retrieved by the attacker. Furthermore, some files can also be moved or deleted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fossasia/susi_server/security/advisories/GHSA-wcm4-2j
t Notes: - CVE Program Container: References: - https://github.com/fossasia/susi_server/security/advisories/GHSA-wcm4-2jp5-q269
CVE ID: CVE-2020-4040 State: PUBLISHED Published: 2020-06-08T22:00:16 Last Updated: 2024-08-04T07:52:20.663Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: bolt Products: bolt Problem Types: CWE-352 Description: Bolt CMS before version 3.7.1 lacked CSRF protection in the preview generating endpoint. Previews are intended to be generated by the admins, developers, chief-editors, and editors, who are authorized to create content in the application. But due to lack of proper CSRF protection, unauthorized users could generate a preview. This has been fixed in Bolt 3.7.1 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bolt/bolt/
been fixed in Bolt 3.7.1 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bolt/bolt/security/advisories/GHSA-2q66-6cc3-6xm8 - https://github.com/bolt/bolt/pull/7853 - https://github.com/bolt/bolt/commit/b42cbfcf3e3108c46a80581216ba03ef449e419f - http://packetstormsecurity.com/files/158299/Bolt-CMS-3.7.0-XSS-CSRF-Shell-Upload.html - http://seclists.org/fulldisclosure/2020/Jul/4
CVE ID: CVE-2020-4041 State: PUBLISHED Published: 2020-06-08T22:05:14 Last Updated: 2024-08-04T07:52:20.827Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N) Vendors: bolt Products: bolt Problem Types: CWE-79 Description: In Bolt CMS before version 3.7.1, the filename of uploaded files was vulnerable to stored XSS. It is not possible to inject javascript code in the file name when creating/uploading the file. But, once created/uploaded, it can be renamed to inject the payload in it. Additionally, the measures to prevent renaming the file to disallowed filename extensions could be circumvented. This is fixed in Bolt 3.7.1. Additional Analyst Notes: - CVE Program Containe
filename extensions could be circumvented. This is fixed in Bolt 3.7.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bolt/bolt/pull/7853 - https://github.com/bolt/bolt/commit/b42cbfcf3e3108c46a80581216ba03ef449e419f - https://github.com/bolt/bolt/security/advisories/GHSA-68q3-7wjp-7q3j - http://packetstormsecurity.com/files/158299/Bolt-CMS-3.7.0-XSS-CSRF-Shell-Upload.html - http://seclists.org/fulldisclosure/2020/Jul/4
CVE ID: CVE-2020-4042 State: PUBLISHED Published: 2020-07-10T19:30:14 Last Updated: 2024-08-04T07:52:20.708Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: bareos Products: bareos Problem Types: CWE-294 Description: Bareos before version 19.2.8 and earlier allows a malicious client to communicate with the director without knowledge of the shared secret if the director allows client initiated connection and connects to the client itself. The malicious client can replay the Bareos director's cram-md5 challenge to the director itself leading to the director responding to the replayed challenge. The response obtained is then a valid reply to the directors origi
to the director responding to the replayed challenge. The response obtained is then a valid reply to the directors original challenge. This is fixed in version 19.2.8. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bareos/bareos/security/advisories/GHSA-vqpj-2vhj-h752 - https://bugs.bareos.org/view.php?id=1250
CVE ID: CVE-2020-4043 State: PUBLISHED Published: 2020-06-10T19:40:15 Last Updated: 2024-08-04T07:52:20.782Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: phpMussel Products: phpMussel Problem Types: CWE-502 Description: phpMussel from versions 1.0.0 and less than 1.6.0 has an unserialization vulnerability in PHP's phar wrapper. Uploading a specially crafted file to an affected version allows arbitrary code execution (discovered, tested, and confirmed by myself), so the risk factor should be regarded as very high. Newer phpMussel versions don't use PHP's phar wrapper, and are therefore unaffected. This has been fixed in version 1.6.0. Additional Analyst Note
on't use PHP's phar wrapper, and are therefore unaffected. This has been fixed in version 1.6.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpMussel/phpMussel/security/advisories/GHSA-qr95-4mq5-r3fh - https://github.com/phpMussel/phpMussel/issues/167 - https://github.com/phpMussel/phpMussel/pull/173 - https://github.com/phpMussel/phpMussel/commit/97f25973433921c1f953430f32d3081adc4851a4 - https://github.com/phpMussel/phpMussel/security/policy#currently-known-vulnerabilities