Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
to their account because the bad actor's Access Token stays on the list as a valid token. The user will have to manually delete the bad actor's Access Token to secure their account. The list of Access Tokens has a generic Description which makes it hard to pinpoint a bad actor in a list of Access Tokens. A known patched version of Memos isn't available. To improve Memos security, all Access Tokens will need to be revoked when a user changes their password. This removes the session for all the user's devices and prompts the user to log in again. One can treat the old Access Tokens as "invalid" because those Access Tokens were created with the older password. Additional Analyst Notes: - CISA A
Tokens as "invalid" because those Access Tokens were created with the older password. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/security/advisories/GHSA-mr34-8733-grr2
CVE ID: CVE-2024-21636 State: PUBLISHED Published: 2024-01-04T20:09:08.564Z Last Updated: 2025-06-17T20:29:11.989Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: ViewComponent Products: view_component Problem Types: CWE-79 Description: view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. Versions prior to 3.9.0 and 2.83.0 have a cross-site scripting vulnerability that has the potential to impact anyone rendering a component directly from a controller with the view_component gem. Note that only components that define a `#call` method (i.e. instead of using a sidecar template) are affected. The retu
Note that only components that define a `#call` method (i.e. instead of using a sidecar template) are affected. The return value of the `#call` method is not sanitized and can include user-defined content. In addition, the return value of the `#output_postamble` methodis not sanitized, which can also lead to cross-site scripting issues. Versions 3.9.0 and 2.83.0 have been released and fully mitigate both the `#call` and the `#output_postamble` vulnerabilities. As a workaround, sanitize the return value of `#call`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ViewComponent/view_component/security/advisories/GHSA-wf2x-8w6j-qw37 -
P Vulnrichment: References: - https://github.com/ViewComponent/view_component/security/advisories/GHSA-wf2x-8w6j-qw37 - https://github.com/ViewComponent/view_component/pull/1950 - https://github.com/ViewComponent/view_component/pull/1962 - https://github.com/ViewComponent/view_component/commit/0d26944a8d2730ea40e60eae23d70684483e5017 - https://github.com/ViewComponent/view_component/commit/c43d8bafa7117cbce479669a423ab266de150697
CVE ID: CVE-2024-21637 State: PUBLISHED Published: 2024-01-11T05:49:44.123Z Last Updated: 2025-06-17T21:09:15.907Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: goauthentik Products: authentik Problem Types: CWE-79 Description: Authentik is an open-source Identity Provider. Authentik is a vulnerable to a reflected Cross-Site Scripting vulnerability via JavaScript-URIs in OpenID Connect flows with `response_mode=form_post`. This relatively user could use the described attacks to perform a privilege escalation. This vulnerability has been patched in versions 2023.10.6 and 2023.8.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
ched in versions 2023.10.6 and 2023.8.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/goauthentik/authentik/security/advisories/GHSA-rjpr-7w8c-gv3j - https://github.com/goauthentik/authentik/releases/tag/version%2F2023.10.6 - https://github.com/goauthentik/authentik/releases/tag/version%2F2023.8.6
CVE ID: CVE-2024-21638 State: PUBLISHED Published: 2024-01-10T21:44:23.080Z Last Updated: 2025-06-03T14:27:29.665Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Azure Products: ipam Problem Types: CWE-269 Description: Azure IPAM (IP Address Management) is a lightweight solution developed on top of the Azure platform designed to help Azure customers manage their IP Address space easily and effectively. By design there is no write access to customers' Azure environments as the Service Principal used is only assigned the Reader role at the root Management Group level. Until recently, the solution lacked the validation of the passed in authentication token w
root Management Group level. Until recently, the solution lacked the validation of the passed in authentication token which may result in attacker impersonating any privileged user to access data stored within the IPAM instance and subsequently from Azure, causing an elevation of privilege. This vulnerability has been patched in version 3.0.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Azure/ipam/security/advisories/GHSA-m8mp-jq4c-g8j6 - https://github.com/Azure/ipam/pull/218 - https://github.com/Azure/ipam/commit/64ef2d07edf16ffa50f29c7e0e25d32d974b367f
CVE ID: CVE-2024-21639 State: PUBLISHED Published: 2024-01-12T21:16:06.709Z Last Updated: 2024-08-01T22:27:36.148Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: chromiumembedded Products: cef Problem Types: CWE-125 Description: CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory` does not check the size of the shared memory, which leads to out-of-bounds read outside the sandbox. This vulnerability was patched in commit 1f55d2e. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/chro
55d2e. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/chromiumembedded/cef/security/advisories/GHSA-m375-jw5x-x8mg - https://github.com/chromiumembedded/cef/commit/1f55d2e12f62cfdfbf9da6968fde2f928982670b
CVE ID: CVE-2024-21640 State: PUBLISHED Published: 2024-01-13T07:40:10.324Z Last Updated: 2025-06-17T21:09:22.073Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: chromiumembedded Products: cef Problem Types: CWE-125 Description: Chromium Embedded Framework (CEF) is a simple framework for embedding Chromium-based browsers in other applications.`CefVideoConsumerOSR::OnFrameCaptured` does not check `pixel_format` properly, which leads to out-of-bounds read out of the sandbox. This vulnerability was patched in commit 1f55d2e. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chromiumembedded/cef/securit
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chromiumembedded/cef/security/advisories/GHSA-3h3j-38xq-v7hh - https://github.com/chromiumembedded/cef/commit/1f55d2e12f62cfdfbf9da6968fde2f928982670b
CVE ID: CVE-2024-21641 State: PUBLISHED Published: 2024-01-05T21:02:56.513Z Last Updated: 2025-06-03T14:40:49.162Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: flarum Products: framework Problem Types: CWE-601 Description: Flarum is open source discussion platform software. Prior to version 1.8.5, the Flarum `/logout` route includes a redirect parameter that allows any third party to redirect users from a (trusted) domain of the Flarum installation to redirect to any link. For logged-in users, the logout must be confirmed. Guests are immediately redirected. This could be used by spammers to redirect to a web address using a trusted domain of a running Fla
ediately redirected. This could be used by spammers to redirect to a web address using a trusted domain of a running Flarum installation. The vulnerability has been fixed and published as flarum/core v1.8.5. As a workaround, some extensions modifying the logout route can remedy this issue if their implementation is safe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/flarum/framework/security/advisories/GHSA-733r-8xcp-w9mr - https://github.com/flarum/flarum-core/commit/ee8b3b4ad1413a2b0971fdd9e40f812d2a3a9d3a - https://github.com/flarum/framework/commit/7d70328471cf3091d92d95c382d277aec7996176
CVE ID: CVE-2024-21642 State: PUBLISHED Published: 2024-01-05T21:11:41.528Z Last Updated: 2025-06-17T20:29:14.066Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: man-group Products: dtale Problem Types: CWE-918 Description: D-Tale is a visualizer for Pandas data structures. Users hosting versions D-Tale prior to 3.9.0 publicly can be vulnerable to server-side request forgery (SSRF), allowing attackers to access files on the server. Users should upgrade to version 3.9.0, where the `Load From the Web` input is turned off by default. The only workaround for versions earlier than 3.9.0 is to only host D-Tale to trusted users. Additional Analyst Notes: - CVE Progr
orkaround for versions earlier than 3.9.0 is to only host D-Tale to trusted users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/man-group/dtale/security/advisories/GHSA-7hfx-h3j3-rwq4 - https://github.com/man-group/dtale/commit/954f6be1a06ff8629ead2c85c6e3f8e2196b3df2 - https://github.com/man-group/dtale?tab=readme-ov-file#load-data--sample-datasets
CVE ID: CVE-2024-21643 State: PUBLISHED Published: 2024-01-10T04:13:16.959Z Last Updated: 2025-06-10T16:07:50.948Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: AzureAD Products: azure-activedirectory-identitymodel-extensions-for-dotnet Problem Types: CWE-94 Description: IdentityModel Extensions for .NET provide assemblies for web developers that wish to use federated identity providers for establishing the caller's identity. Anyone leveraging the `SignedHttpRequest`protocol or the `SignedHttpRequestValidator`is vulnerable. Microsoft.IdentityModel trusts the `jku`claim by default for the `SignedHttpRequest`protocol. This raises the possibility to make any re
tyModel trusts the `jku`claim by default for the `SignedHttpRequest`protocol. This raises the possibility to make any remote or local `HTTP GET` request. The vulnerability has been fixed in Microsoft.IdentityModel.Protocols.SignedHttpRequest. Users should update all their Microsoft.IdentityModel versions to 7.1.2 (for 7x) or higher, 6.34.0 (for 6x) or higher. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/security/advisories/GHSA-rv9j-c866-gp5h - https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/6.34.0 - https://github
ttps://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/6.34.0 - https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/7.1.2 - https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/wiki/jkucve
CVE ID: CVE-2024-21644 State: PUBLISHED Published: 2024-01-08T13:20:55.182Z Last Updated: 2025-06-17T20:39:15.676Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: pyload Products: pyload Problem Types: CWE-284 Description: pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the `SECRET_KEY` variable. This issue has been patched in version 0.5.0b3.dev77. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pyload/pyload/security/advisories/GHSA-mqpq-2p68-46fv - https://github.com/pyload/pyloa
References: - https://github.com/pyload/pyload/security/advisories/GHSA-mqpq-2p68-46fv - https://github.com/pyload/pyload/commit/bb22063a875ffeca357aaf6e2edcd09705688c40
CVE ID: CVE-2024-21645 State: PUBLISHED Published: 2024-01-08T13:20:47.181Z Last Updated: 2024-11-14T17:38:32.866Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: pyload Products: pyload Problem Types: CWE-74 Description: pyLoad is the free and open-source Download Manager written in pure Python. A log injection vulnerability was identified in `pyload` allowing any unauthenticated actor to inject arbitrary messages into the logs gathered by `pyload`. Forged or otherwise, corrupted log files can be used to cover an attacker’s tracks or even to implicate another party in the commission of a malicious act. This vulnerability has been patched in version 0.5.0b3.
to implicate another party in the commission of a malicious act. This vulnerability has been patched in version 0.5.0b3.dev77. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pyload/pyload/security/advisories/GHSA-ghmw-rwh8-6qmr - https://github.com/pyload/pyload/commit/4159a1191ec4fe6d927e57a9c4bb8f54e16c381d
CVE ID: CVE-2024-21646 State: PUBLISHED Published: 2024-01-09T00:04:53.587Z Last Updated: 2025-06-16T19:52:58.874Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Azure Products: azure-uamqp-c Problem Types: CWE-94 Description: Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP protocol communication. When clients using this library receive a crafted binary type data, an integer overflow or wraparound or memory safety issue can occur and may cause remote code execution. This vulnerability has been patched in release 2024-01-01. Additional Analyst Notes: - CVE Program Container: - CISA ADP
This vulnerability has been patched in release 2024-01-01. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Azure/azure-uamqp-c/security/advisories/GHSA-j29m-p99g-7hpv - https://github.com/Azure/azure-uamqp-c/commit/12ddb3a31a5a97f55b06fa5d74c59a1d84ad78fe
CVE ID: CVE-2024-21647 State: PUBLISHED Published: 2024-01-08T13:45:27.510Z Last Updated: 2025-11-03T21:53:27.921Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: puma Products: puma Problem Types: CWE-444 Description: Puma is a web server for Ruby/Rack applications built for parallelism. Prior to version 6.4.2, puma exhibited incorrect behavior when parsing chunked transfer encoding bodies in a way that allowed HTTP request smuggling. Fixed versions limits the size of chunk extensions. Without this limit, an attacker could cause unbounded resource (CPU, network bandwidth) consumption. This vulnerability has been fixed in versions 6.4.2 and 5.6.8. Additional
resource (CPU, network bandwidth) consumption. This vulnerability has been fixed in versions 6.4.2 and 5.6.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/puma/puma/security/advisories/GHSA-c2f4-cvqm-65w2 - https://github.com/puma/puma/commit/5fc43d73b6ff193325e657a24ed76dec79133e93
CVE ID: CVE-2024-21648 State: PUBLISHED Published: 2024-01-08T23:31:50.298Z Last Updated: 2025-06-17T20:39:15.793Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-274 Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The rollback action is missing a right protection, a user can rollback to a previous version of the page to gain rights they don't have anymore. The problem has been patched in XWiki 14.10.17, 15.5.3 and 15.8-rc-1 by ensuring that the rights are checked before performing the rollback. Additional Analyst Notes: - CVE Program Container
y ensuring that the rights are checked before performing the rollback. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-xh35-w7wg-95v3 - https://github.com/xwiki/xwiki-platform/commit/4de72875ca49602796165412741033bfdbf1e680 - https://jira.xwiki.org/browse/XWIKI-21257
CVE ID: CVE-2024-21649 State: PUBLISHED Published: 2024-01-30T15:33:03.404Z Last Updated: 2025-05-29T15:05:10.990Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: vantage6 Products: vantage6 Problem Types: CWE-94 Description: The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). Prior to 4.2.0, authenticated users could inject code into algorithm environment variables, resulting in remote code execution. This vulnerability is patched in 4.2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vantage6/vantage6
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vantage6/vantage6/security/advisories/GHSA-w9h2-px87-74vx - https://github.com/vantage6/vantage6/commit/eac19db737145d3ca987adf037a454fae0790ddd
CVE ID: CVE-2024-21650 State: PUBLISHED Published: 2024-01-08T15:18:12.782Z Last Updated: 2025-06-17T20:39:15.923Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-95 Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to a remote code execution (RCE) attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the "first name" or "last name" fields during user registration. This impacts all installations that have user registration enabled for guests
ast name" fields during user registration. This impacts all installations that have user registration enabled for guests. This vulnerability has been patched in XWiki 14.10.17, 15.5.3 and 15.8 RC1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-rj7p-xjv7-7229 - https://github.com/xwiki/xwiki-platform/commit/b290bfd573c6f7db6cc15a88dd4111d9fcad0d31 - https://jira.xwiki.org/browse/XWIKI-21173
CVE ID: CVE-2024-21651 State: PUBLISHED Published: 2024-01-08T23:30:03.580Z Last Updated: 2025-06-03T14:34:29.906Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-400 Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user able to attach a file to a page can post a malformed TAR file by manipulating file modification times headers, which when parsed by Tika, could cause a denial of service issue via CPU consumption. This vulnerability has been patched in XWiki 14.10.18, 15.5.3 and 15.8 RC1. Additional Analyst Notes: - CVE Program Container: -
erability has been patched in XWiki 14.10.18, 15.5.3 and 15.8 RC1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-8959-rfxh-r4j4 - https://jira.xwiki.org/browse/XCOMMONS-2796
CVE ID: CVE-2024-21652 State: PUBLISHED Published: 2024-03-18T17:14:02.995Z Last Updated: 2024-08-01T22:27:36.044Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: argoproj Products: argo-cd Problem Types: CWE-307 Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, an attacker can exploit a chain of vulnerabilities, including a Denial of Service (DoS) flaw and in-memory data storage weakness, to effectively bypass the application's brute force login protection. This is a critical security vulnerability that allows attackers to bypass the brute force login protection mechanism. N
This is a critical security vulnerability that allows attackers to bypass the brute force login protection mechanism. Not only can they crash the service affecting all users, but they can also make unlimited login attempts, increasing the risk of account compromise. Versions 2.8.13, 2.9.9, and 2.10.4 contain a patch for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/argoproj/argo-cd/security/advisories/GHSA-x32m-mvfj-52xv
CVE ID: CVE-2024-21653 State: PUBLISHED Published: 2024-01-30T15:39:30.554Z Last Updated: 2024-08-23T18:23:40.114Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: vantage6 Products: vantage6 Problem Types: CWE-284 Description: The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). Nodes and servers get a ssh config by default that permits root login with password authentication. In a proper deployment, the SSH service is not exposed so there is no risk, but not all deployments are ideal. The default should therefore be less permissive. The vulnerability can be mitiga
isk, but not all deployments are ideal. The default should therefore be less permissive. The vulnerability can be mitigated by removing the ssh part from the docker file and rebuilding the docker image. Version 4.2.0 patches the vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vantage6/vantage6/security/advisories/GHSA-2wgc-48g2-cj5w - https://github.com/vantage6/vantage6/commit/3fcc6e6a8bd1142fd7a558d8fdd2b246e55c8841
CVE ID: CVE-2024-21654 State: PUBLISHED Published: 2024-01-12T20:59:43.094Z Last Updated: 2024-10-24T15:27:56.733Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: rubygems Products: rubygems.org Problem Types: CWE-287 Description: Rubygems.org is the Ruby community's gem hosting service. Rubygems.org users with MFA enabled would normally be protected from account takeover in the case of email account takeover. However, a workaround on the forgotten password form allows an attacker to bypass the MFA requirement and takeover the account. This vulnerability has been patched in commit 0b3272a. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
vulnerability has been patched in commit 0b3272a. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rubygems/rubygems.org/security/advisories/GHSA-4v23-vj8h-7jp2 - https://github.com/rubygems/rubygems.org/commit/0b3272ac17b45748ee0d1867c49867c7deb26565
CVE ID: CVE-2024-21655 State: PUBLISHED Published: 2024-01-12T20:46:00.196Z Last Updated: 2025-06-03T14:03:56.412Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: discourse Products: discourse Problem Types: CWE-400 Description: Discourse is a platform for community discussion. For fields that are client editable, limits on sizes are not imposed. This allows a malicious actor to cause a Discourse instance to use excessive disk space and also often excessive bandwidth. The issue is patched 3.1.4 and 3.2.0.beta4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/
VE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-m5fc-94mm-38fx
CVE ID: CVE-2024-21658 State: PUBLISHED Published: 2024-08-30T17:18:40.593Z Last Updated: 2024-08-30T18:00:51.765Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: discourse Products: discourse-calendar Problem Types: CWE-400 Description: discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic. The limit on region value length is too generous. This allows a malicious actor to cause a Discourse instance to use excessive bandwidth and disk space. This issue has been patched in main the main branch. There are no workarounds for this vulnerability. Please upgrade as soon as possible. Additional Ana