Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-10101 State: PUBLISHED Published: 2024-10-17T18:12:21.623Z Last Updated: 2024-12-20T20:53:16.445Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: binary-husky Products: binary-husky/gpt_academic Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs at the /file endpoint, which renders HTML files. Malicious HTML files containing XSS payloads can be uploaded and stored in the backend, leading to the execution of the payload in the victim's browser when the file is accessed. This can result in the theft of session cookies or other sensitive
ad in the victim's browser when the file is accessed. This can result in the theft of session cookies or other sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/0436d96a-a2c4-4ca5-9f3c-fd68eb74d2cb
CVE ID: CVE-2024-10102 State: PUBLISHED Published: 2025-01-07T06:00:02.472Z Last Updated: 2025-01-07T16:20:52.715Z Vendors: Unknown Products: Photo Gallery, Images, Slider in Rbs Image Gallery Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its Gallery settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3b34d1ec-5370-40a8-964e-663f4f9f42f8/
CVE ID: CVE-2024-10103 State: PUBLISHED Published: 2024-11-19T06:00:02.348Z Last Updated: 2024-11-19T14:19:15.314Z Vendors: Unknown Products: MailPoet Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/89660883-5f34-426a-ad06-741c0c213ecc/
CVE ID: CVE-2024-10104 State: PUBLISHED Published: 2024-11-15T06:00:02.677Z Last Updated: 2024-11-15T18:44:55.432Z Vendors: Unknown Products: Jobs for WordPress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Jobs for WordPress plugin before 2.7.8 does not sanitise and escape some of its Job settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f0a9c8ae-f2cf-4322-8216-4778b0e37a48/
CVE ID: CVE-2024-10105 State: PUBLISHED Published: 2025-03-25T06:00:03.871Z Last Updated: 2025-03-25T14:00:35.394Z Vendors: Unknown Products: Job Postings Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Job Postings WordPress plugin before 2.7.11 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4477db12-26e9-4c6d-8b71-f3f6a0d19813/
CVE ID: CVE-2024-10106 State: PUBLISHED Published: 2025-01-09T14:56:47.355Z Last Updated: 2025-01-09T15:26:15.263Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: silabs.com Products: Ember ZNet SDK Problem Types: CWE-120 Description: A buffer overflow vulnerability in the packet handoff plugin allows an attacker to overwrite memory outside the plugin's buffer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/SiliconLabs/simplicity_sdk/releases - https://community.silabs.com/069Vm00000I1JawIAF
CVE ID: CVE-2024-10107 State: PUBLISHED Published: 2025-05-15T20:06:41.208Z Last Updated: 2025-05-20T15:56:49.030Z Vendors: Unknown Products: Giveaways and Contests by RafflePress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Giveaways and Contests by RafflePress WordPress plugin before 1.12.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/83590cad-6bfb-4dc7-b8fd-aecbc66f3c33/
CVE ID: CVE-2024-10108 State: PUBLISHED Published: 2024-10-30T06:43:36.814Z Last Updated: 2024-10-30T13:06:47.598Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: gwin Products: WPAdverts – Classifieds Plugin Problem Types: CWE-79 Description: The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's adverts_add shortcode in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes:
ct arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8b213c3b-3907-47d9-9826-379936f15078?source=cve - https://wordpress.org/plugins/wpadverts/#developers - https://plugins.trac.wordpress.org/changeset/3178088/
CVE ID: CVE-2024-10109 State: PUBLISHED Published: 2025-03-20T10:09:27.423Z Last Updated: 2025-03-20T18:38:52.636Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-863 Description: A vulnerability in the mintplex-labs/anything-llm repository, as of commit 5c40419, allows low privilege users to access the sensitive API endpoint "/api/system/custom-models". This access enables them to modify the model's API key and base path, leading to potential API key leakage and denial of service on chats. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/ad3c9e76-6
service on chats. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/ad3c9e76-679d-4775-b203-96947ff73551 - https://github.com/mintplex-labs/anything-llm/commit/8d302c3f670c582b09d47e96132c248101447a11
CVE ID: CVE-2024-10110 State: PUBLISHED Published: 2025-03-20T10:09:22.842Z Last Updated: 2025-03-20T18:55:48.687Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: aimhubio Products: aimhubio/aim Problem Types: CWE-400 Description: In version 3.23.0 of aimhubio/aim, the ScheduledStatusReporter object can be instantiated to run on the main thread of the tracking server, leading to the main thread being blocked indefinitely. This results in a denial of service as the tracking server becomes unable to respond to other requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/5ea6cf56-7b4c-4dce-9b6c-3e910fbb1ae4
CVE ID: CVE-2024-10111 State: PUBLISHED Published: 2024-12-12T03:23:10.001Z Last Updated: 2024-12-12T15:55:19.489Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: cyberlord92 Products: OAuth Single Sign On – SSO (OAuth Client) Problem Types: CWE-287 Description: The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 6.26.3. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username
ated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username and the user does not have an already-existing account for the service returning the token. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ddd83877-739f-4c21-8179-20de8bbc4936?source=cve - https://wordpress.org/plugins/miniorange-login-with-eve-online-google-facebook/
CVE ID: CVE-2024-10112 State: PUBLISHED Published: 2024-10-25T08:34:41.251Z Last Updated: 2024-10-25T15:19:02.347Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: mortenpeterandersen Products: Simple News Problem Types: CWE-79 Description: The Simple News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'news' shortcode in all versions up to, and including, 2.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an
tributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/79147dad-4bce-40fb-b9c1-e211845251a0?source=cve - https://wordpress.org/plugins/simple-news/#developers
CVE ID: CVE-2024-10113 State: PUBLISHED Published: 2024-11-15T05:30:54.671Z Last Updated: 2024-11-15T17:54:59.295Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpeka-club Products: WP AdCenter – Ad Manager & Adsense Ads Problem Types: CWE-79 Description: The WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpadcenter_ad shortcode in all versions up to, and including, 2.5.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts i
akes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0597a63d-2627-477f-874a-c35b6df7afd5?source=cve - https://wordpress.org/plugins/wpadcenter/#developers
CVE ID: CVE-2024-10114 State: PUBLISHED Published: 2024-11-05T08:31:36.630Z Last Updated: 2025-02-19T17:42:37.265Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: WPWeb Products: WooCommerce - Social Login Problem Types: CWE-287 Description: The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.7.7. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email and the user does not have an already-e
ing user on the site, such as an administrator, if they have access to the email and the user does not have an already-existing account for the service returning the token. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/71df23bf-8f51-4260-be1f-ed5bc29d4afe?source=cve - https://www.wpwebelite.com/changelogs/woocommerce-social-login/changelog.txt
CVE ID: CVE-2024-10115 State: REJECTED Published: N/A Last Updated: 2024-10-18T18:19:34.309Z Description: No description available.
CVE ID: CVE-2024-10116 State: PUBLISHED Published: 2024-11-23T03:25:52.398Z Last Updated: 2024-11-23T13:18:20.541Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: alexmoss Products: FireCask’s Twitter Follow Button Problem Types: CWE-79 Description: The Twitter Follow Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'username' parameter in all versions up to, and including, 0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page
l access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fac89439-bd0a-4772-858d-d11dd0de54b6?source=cve - https://wordpress.org/plugins/twitter-follow/#developers - https://plugins.trac.wordpress.org/browser/twitter-follow/trunk/twitter-follow.php#L34 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3194573%40twitter-follow%2Ftrunk&old=1852833%40twitter-follow%2Ftrunk
CVE ID: CVE-2024-10117 State: PUBLISHED Published: 2024-10-26T11:18:19.212Z Last Updated: 2024-10-28T17:29:52.336Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: themeum Products: WP Crowdfunding Problem Types: CWE-79 Description: The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpcf_donate shortcode in all versions up to, and including, 2.1.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses
contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7813dfdc-06e0-4fa9-aabe-b5b9772368c2?source=cve - https://wordpress.org/plugins/wp-crowdfunding/#developers - https://plugins.trac.wordpress.org/changeset/3174230/#file19 - https://plugins.trac.wordpress.org/changeset/3174230/ - https://docs.themeum.com/wp-crowdfunding/
CVE ID: CVE-2024-10118 State: PUBLISHED Published: 2024-10-18T04:03:58.106Z Last Updated: 2024-10-18T16:46:48.733Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SECOM Products: WRTR-304GN-304TW-UPSC Problem Types: CWE-78 Description: SECOM WRTR-304GN-304TW-UPSC does not properly filter user input in the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8154-69fa5-1.html - https://www.twcert.org.tw/en/cp-139-8155-c1ea6-2.html
CVE ID: CVE-2024-10119 State: PUBLISHED Published: 2024-10-18T04:09:15.991Z Last Updated: 2024-10-18T16:41:22.656Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SECOM Products: WRTM326 Problem Types: CWE-78 Description: The wireless router WRTM326 from SECOM does not properly validate a specific parameter. An unauthenticated remote attacker could execute arbitrary system commands by sending crafted requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8156-81c9d-1.html - https://www.twcert.org.tw/en/cp-139-8157-e0461-2.html
CVE ID: CVE-2024-10120 State: PUBLISHED Published: 2024-10-18T17:00:06.212Z Last Updated: 2024-10-18T18:57:59.149Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: wfh45678 Products: Radar Problem Types: CWE-434 Description: A vulnerability has been found in wfh45678 Radar up to 1.0.8 and classified as critical. This vulnerability affects unknown code of the file /services/v1/common/upload. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vuln
ndor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280912 - https://vuldb.com/?ctiid.280912 - https://vuldb.com/?submit.420959 - https://github.com/weliveby/ForCVE/blob/main/radar%20Arbitrary%20file%20upload%20vulnerability.md
CVE ID: CVE-2024-10121 State: PUBLISHED Published: 2024-10-18T18:31:04.852Z Last Updated: 2024-10-18T18:48:19.916Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: wfh45678 Products: Radar Problem Types: CWE-639 Description: A vulnerability was found in wfh45678 Radar up to 1.0.8 and classified as critical. This issue affects some unknown processing of the component Interface Handler. The manipulation with the input /../ leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This appears not to be a path traversal weakness. The vendor was contacted early about this disclosure but did not respond in any wa
not to be a path traversal weakness. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280913 - https://vuldb.com/?ctiid.280913 - https://vuldb.com/?submit.420960 - https://github.com/weliveby/ForCVE/blob/main/radar%20Authentication%20bypass%20vulnerability.md
CVE ID: CVE-2024-10122 State: PUBLISHED Published: 2024-10-18T19:00:05.789Z Last Updated: 2024-10-18T19:56:36.020Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:P/I:N/A:N) Vendors: Topdata Products: Inner Rep Plus WebServer Problem Types: CWE-549 Description: A vulnerability was found in Topdata Inner Rep Plus WebServer 2.01. It has been classified as problematic. Affected is an unknown function of the file /InnerRepPlus.html of the component Operator Details Form. The manipulation leads to missing password field masking. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichm
was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280914 - https://vuldb.com/?ctiid.280914 - https://vuldb.com/?submit.421292
CVE ID: CVE-2024-10123 State: PUBLISHED Published: 2024-10-18T19:31:05.643Z Last Updated: 2024-10-18T20:42:45.158Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC8 Problem Types: CWE-121 Description: A vulnerability was found in Tenda AC8 16.03.34.06. It has been declared as critical. Affected by this vulnerability is the function compare_parentcontrol_time of the file /goform/saveParentControlInfo. The manipulation of the argument time leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This is not the same issue like CVE-2023-33671. The vendor was contacted early about this di
the public and may be used. This is not the same issue like CVE-2023-33671. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280915 - https://vuldb.com/?ctiid.280915 - https://vuldb.com/?submit.421340 - https://github.com/JohenanLi/router_vuls/blob/main/ac8v4/compare_parentcontrol_time_vul.md - https://www.tenda.com.cn/
CVE ID: CVE-2024-10124 State: PUBLISHED Published: 2024-12-12T05:24:21.899Z Last Updated: 2024-12-12T14:49:08.445Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: themehunk Products: Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce Problem Types: CWE-284 Description: The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation and activation due to a missing capability check on the tp_install() function in all versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins which can be leveraged t
This makes it possible for unauthenticated attackers to install and activate arbitrary plugins which can be leveraged to achieve remote code execution if another vulnerable plugin is installed and activated. This vulnerability was partially patched in version 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/81e7ab80-7df2-4ef4-80ee-a11d057151c4?source=cve - https://plugins.trac.wordpress.org/browser/vayu-blocks/trunk/inc/vayu-sites/core/class-installation.php#L29 - https://plugins.trac.wordpress.org/browser/vayu-blocks/trunk/inc/vayu-sites/app.php#L28 - https://plugins.trac.wordpress.org/browser/vayu-blocks/trun
s.org/browser/vayu-blocks/trunk/inc/vayu-sites/app.php#L28 - https://plugins.trac.wordpress.org/browser/vayu-blocks/trunk/inc/vayu-sites/app.php#L46 - https://plugins.trac.wordpress.org/changeset/3173408/ - https://plugins.trac.wordpress.org/changeset/3203532/vayu-blocks/tags/1.2.0/inc/vayu-sites/app.php
CVE ID: CVE-2024-10125 State: PUBLISHED Published: 2024-10-21T23:25:11.033Z Last Updated: 2025-10-14T19:02:26.003Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: Amazon Products: Amazon.ApplicationLoadBalancer.Identity.AspNetCore Middleware Problem Types: CWE-290 Description: The Amazon.ApplicationLoadBalancer.Identity.AspNetCore repo https://github.com/awslabs/aws-alb-identity-aspnetcore#validatetokensignature contains Middleware that can be used in conjunction with the Application Load Balancer (ALB) OpenId Connect integration and can be used in any ASP.NET https://dotnet.microsoft.com/apps/aspnet Core deployment scenario, including Fargate, EKS, ECS, EC2,
sed in any ASP.NET https://dotnet.microsoft.com/apps/aspnet Core deployment scenario, including Fargate, EKS, ECS, EC2, and Lambda. In the JWT handling code, it performs signature validation but fails to validate the JWT issuer and signer identity. The signer omission, if combined with a scenario where the infrastructure owner allows internet traffic to the ALB targets (not a recommended configuration), can allow for JWT signing by an untrusted entity and an actor may be able to mimic valid OIDC-federated sessions to the ALB targets. The repository/package has been deprecated, is end of life, and is no longer supported. As a security best practice, ensure that your ELB targets (e.g. EC2 Inst
ed, is end of life, and is no longer supported. As a security best practice, ensure that your ELB targets (e.g. EC2 Instances, Fargate Tasks etc.) do not have public IP addresses. Ensure any forked or derivative code validate that the signer attribute in the JWT match the ARN of the Application Load Balancer that the service is configured to use. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://aws.amazon.com/security/security-bulletins/AWS-2024-012/ - https://github.com/awslabs/aws-alb-identity-aspnetcore/security/advisories/GHSA-5gh5-cc5m-q244
CVE ID: CVE-2024-10126 State: PUBLISHED Published: 2024-11-20T08:37:41.265Z Last Updated: 2024-11-21T14:38:13.010Z Vendors: M-Files Corporation" Products: M-Files Server Problem Types: CWE-552 Description: Local File Inclusion vulnerability in M-Files Server in versions before 24.11 (excluding 24.8 SR1, 24.2 SR3 and 23.8 SR7) allows an authenticated user to read server local files of a limited set of filetypes via document preview. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://product.m-files.com/security-advisories/CVE-2024-10126