Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-29866 State: PUBLISHED Published: 2024-03-21T00:00:00 Last Updated: 2024-08-02T14:15:57.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Datalust Seq before 2023.4.11151 and 2024 before 2024.1.11146 has Incorrect Access Control because a Project Owner or Organization Owner can escalate to System privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://datalust.co - https://github.com/datalust/seq-tickets/issues/2127
CVE ID: CVE-2024-29868 State: PUBLISHED Published: 2024-06-24T09:59:39.941Z Last Updated: 2024-09-13T16:03:11.423Z Vendors: Apache Software Foundation Products: Apache StreamPipes Problem Types: CWE-338 Description: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Apache StreamPipes user self-registration and password recovery mechanism. This allows an attacker to guess the recovery token in a reasonable time and thereby to take over the attacked user's account. This issue affects Apache StreamPipes: from 0.69.0 through 0.93.0. Users are recommended to upgrade to version 0.95.0, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CV
recommended to upgrade to version 0.95.0, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/g7t7zctvq2fysrw1x17flnc12592nhx7
CVE ID: CVE-2024-29869 State: PUBLISHED Published: 2025-01-28T21:31:43.422Z Last Updated: 2025-01-29T14:26:24.306Z Vendors: Apache Software Foundation Products: Apache Hive Problem Types: CWE-732 Description: Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly. Any unauthorized user having access to the directory can read the sensitive information written into this file. Users are recommended to upgrade to version 4.0.1, which fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/hive - https://github.com/apac
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/hive - https://github.com/apache/hive/commit/20106e254527f7d71b2e34455c4322e14950c620 - https://issues.apache.org/jira/browse/HIVE-28134 - https://lists.apache.org/thread/h27ohpyrqf9w1m3c0tqr7x8jg59rcrv6
CVE ID: CVE-2024-29870 State: PUBLISHED Published: 2024-03-21T13:45:29.880Z Last Updated: 2024-08-02T01:17:58.141Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sentrifugo Products: Sentrifugo Problem Types: CWE-89 Description: SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter./sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data from it. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contai
to the server and extract all the data from it. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sentrifugo
CVE ID: CVE-2024-29871 State: PUBLISHED Published: 2024-03-21T13:46:02.703Z Last Updated: 2024-08-02T01:17:58.039Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sentrifugo Products: Sentrifugo Problem Types: CWE-89 Description: SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/sentrifugo/index.php/index/updatecontactnumber, 'id' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data from it. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cer
ional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sentrifugo
CVE ID: CVE-2024-29872 State: PUBLISHED Published: 2024-03-21T13:46:47.072Z Last Updated: 2024-08-27T17:23:07.439Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sentrifugo Products: Sentrifugo Problem Types: CWE-89 Description: SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/empscreening/add, 'agencyids' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data from it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sen
: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sentrifugo
CVE ID: CVE-2024-29873 State: PUBLISHED Published: 2024-03-21T13:47:49.005Z Last Updated: 2025-04-10T20:15:41.718Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sentrifugo Products: Sentrifugo Problem Types: CWE-89 Description: SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/reports/businessunits/format/html, 'bunitname' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data from it. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vu
ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sentrifugo
CVE ID: CVE-2024-29874 State: PUBLISHED Published: 2024-03-21T13:48:04.330Z Last Updated: 2024-08-12T20:46:23.515Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sentrifugo Products: Sentrifugo Problem Types: CWE-89 Description: SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/default/reports/activeuserrptpdf, 'sort_name' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data from it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vul
rogram Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sentrifugo
CVE ID: CVE-2024-29875 State: PUBLISHED Published: 2024-03-21T13:48:16.943Z Last Updated: 2024-08-02T15:00:00.883Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sentrifugo Products: Sentrifugo Problem Types: CWE-89 Description: SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/default/reports/exportactiveuserrpt, 'sort_name' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data from it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-
E Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sentrifugo
CVE ID: CVE-2024-29876 State: PUBLISHED Published: 2024-03-21T13:48:29.374Z Last Updated: 2024-08-12T20:46:01.284Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sentrifugo Products: Sentrifugo Problem Types: CWE-89 Description: SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/reports/activitylogreport, 'sortby' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data from it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabiliti
tainer: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sentrifugo
CVE ID: CVE-2024-29877 State: PUBLISHED Published: 2024-03-21T13:50:17.298Z Last Updated: 2024-08-02T01:17:58.097Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Sentrifugo Products: Sentrifugo Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/expenses/expensecategories/edit, 'expense_category_name' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/avis
Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sentrifugo
CVE ID: CVE-2024-29878 State: PUBLISHED Published: 2024-03-21T13:51:14.819Z Last Updated: 2024-08-02T01:17:58.152Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Sentrifugo Products: Sentrifugo Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/sitepreference/add, 'description' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilit
ichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sentrifugo
CVE ID: CVE-2024-29879 State: PUBLISHED Published: 2024-03-21T13:51:40.293Z Last Updated: 2024-08-02T01:17:58.386Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Sentrifugo Products: Sentrifugo Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multipl
CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sentrifugo
CVE ID: CVE-2024-29880 State: PUBLISHED Published: 2024-03-21T13:56:45.387Z Last Updated: 2024-08-02T01:17:58.391Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: JetBrains Products: TeamCity Problem Types: CWE-749 Description: In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions of the user running the agent process Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-29881 State: PUBLISHED Published: 2024-03-26T13:31:15.375Z Last Updated: 2024-08-02T17:59:24.301Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: tinymce Products: tinymce Problem Types: CWE-79 Description: TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s content loading and content inserting code. A SVG image could be loaded though an `object` or `embed` element and that image could potentially contain a XSS payload. This vulnerability is fixed in 6.8.1 and 7.0.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tiny
7.0.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tinymce/tinymce/security/advisories/GHSA-5359-pvf2-pw78 - https://github.com/tinymce/tinymce/commit/bcdea2ad14e3c2cea40743fb48c63bba067ae6d1 - https://www.tiny.cloud/docs/tinymce/6/6.8.1-release-notes/#new-convert_unsafe_embeds-option-that-controls-whether-object-and-embed-elements-will-be-converted-to-more-restrictive-alternatives-namely-img-for-image-mime-types-video-for-video-mime-types-audio-audio-mime-types-or-iframe-for-other-or-unspecified-mime-types - https://www.tiny.cloud/docs/tinymce/7/7.0-release-notes/#convert_unsafe_embeds-editor-option-is-now-defaulted-to-true
CVE ID: CVE-2024-29882 State: PUBLISHED Published: 2024-03-28T13:33:42.500Z Last Updated: 2024-08-21T22:48:54.619Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: ossrs Products: srs Problem Types: CWE-79 Description: SRS is a simple, high-efficiency, real-time video server. SRS's `/api/v1/vhosts/vid-<id>?callback=<payload>` endpoint didn't filter the callback function name which led to injecting malicious javascript payloads and executing XSS ( Cross-Site Scripting). This vulnerability is fixed in 5.0.210 and 6.0.121. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ossrs/srs/security/advisories/GHSA
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ossrs/srs/security/advisories/GHSA-gv9r-qcjc-5hj7 - https://github.com/ossrs/srs/commit/244ce7bc013a0b805274a65132a2980680ba6b9d
CVE ID: CVE-2024-29883 State: PUBLISHED Published: 2024-03-26T13:37:48.662Z Last Updated: 2024-08-02T17:16:09.525Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: miraheze Products: CreateWiki Problem Types: CWE-200 Description: CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. Suppression of wiki requests does not work as intended, and always restricts visibility to those with the `(createwiki)` user right regardless of the settings one sets on a given wiki request. This may expose information to users who are not supposed to be able to access it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
ot supposed to be able to access it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/miraheze/CreateWiki/security/advisories/GHSA-8wjf-mxjg-j8p9 - https://gist.githubusercontent.com/redbluegreenhat/0da1ebb7185b241ce1ac6ba1e8f0b98d/raw/44c4a229aacc8233808c767a79af9e4fd581ae68/T11993.patch - https://issue-tracker.miraheze.org/T11993
CVE ID: CVE-2024-29885 State: PUBLISHED Published: 2024-07-17T19:35:58.914Z Last Updated: 2024-08-02T01:17:58.155Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: silverstripe Products: silverstripe-reports Problem Types: CWE-200 Description: silverstripe/reports is an API for creating backend reports in the Silverstripe Framework. In affected versions reports can be accessed by their direct URL by any user who has access to view the reports admin section, even if the `canView()` method for that report returns `false`. This issue has been addressed in version 5.2.3. All users are advised to upgrade. There are no known workarounds for this vulnerability. Addi
ddressed in version 5.2.3. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/silverstripe/silverstripe-reports/security/advisories/GHSA-89q6-98xx-4ffw - https://github.com/silverstripe/silverstripe-reports/commit/0351106c18ad4246d983b5f4e082c09c382121f4 - https://www.silverstripe.org/download/security-releases/cve-2024-29885
CVE ID: CVE-2024-29886 State: PUBLISHED Published: 2024-03-27T18:42:45.113Z Last Updated: 2024-08-02T01:17:58.459Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: serverpod Products: serverpod Problem Types: CWE-916 Description: Serverpod is an app and web server, built for the Flutter and Dart ecosystem. An issue was identified with the old password hash algorithm that made it susceptible to rainbow attacks if the database was compromised. This vulnerability is fixed by 1.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/serverpod/serverpod/security/advisories/GHSA-r75m-26cq-mjxc - https://gith
m Container: References: - https://github.com/serverpod/serverpod/security/advisories/GHSA-r75m-26cq-mjxc - https://github.com/serverpod/serverpod/commit/a78b9e9f1de74d1300633a122b6cc0f064139ad6
CVE ID: CVE-2024-29887 State: PUBLISHED Published: 2024-03-27T18:46:32.750Z Last Updated: 2024-08-27T20:30:09.237Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: serverpod Products: serverpod Problem Types: CWE-295 Description: Serverpod is an app and web server, built for the Flutter and Dart ecosystem. This bug bypassed the validation of TSL certificates on all none web HTTP clients in the `serverpod_client` package. Making them susceptible to a man in the middle attack against encrypted traffic between the client device and the server. An attacker would need to be able to intercept the traffic and highjack the connection to the server for this vulnerabilit
attacker would need to be able to intercept the traffic and highjack the connection to the server for this vulnerability to be used. Upgrading to version `1.2.6` resolves this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/serverpod/serverpod/security/advisories/GHSA-h6x7-r5rg-x5fw - https://github.com/serverpod/serverpod/commit/d55bf8d12967fc7955a875cb3e0f9693bd6d2c71
CVE ID: CVE-2024-29888 State: PUBLISHED Published: 2024-03-27T18:53:44.698Z Last Updated: 2024-08-02T01:17:58.440Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: saleor Products: saleor Problem Types: CWE-359 Description: Saleor is an e-commerce platform that serves high-volume companies. When using `Pickup: Local stock only` click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes its address as click-and-collect address. This issue has been patched in versions: `3.14.61`, `3.15.37`, `3.16.34`, `3.17.32`, `3.18.28`, `3.19.15`. Additional Analyst Notes: - CISA ADP Vulnrichme
sions: `3.14.61`, `3.15.37`, `3.16.34`, `3.17.32`, `3.18.28`, `3.19.15`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/saleor/saleor/security/advisories/GHSA-mrj3-f2h4-7w45 - https://github.com/saleor/saleor/pull/15694 - https://github.com/saleor/saleor/pull/15697 - https://github.com/saleor/saleor/commit/22a1aa3ef0bc54156405f69146788016a7f3f761 - https://github.com/saleor/saleor/commit/39abb0f4e4fe6503f81bfbb871227e4f70bcdd5c - https://github.com/saleor/saleor/commit/47cedfd7d6524d79bdb04708edcdbb235874de6b - https://github.com/saleor/saleor/commit/997f7ea4f576543ec88679a86bfe1b14f7f2ff26 - https://github.com/saleor/saleor/commi
ttps://github.com/saleor/saleor/commit/997f7ea4f576543ec88679a86bfe1b14f7f2ff26 - https://github.com/saleor/saleor/commit/b7cecda8b603f7472790150bb4508c7b655946d4 - https://github.com/saleor/saleor/commit/d8ba545c16ad3153febc5b5be8fd2ef75da9fc95 - https://github.com/saleor/saleor/commit/dccc2c842b4e2e09470929c80f07dc137e439182 - https://github.com/saleor/saleor/commit/ef003c76a304c89ddb2dc65b7f1d5b3b2ba1c640
CVE ID: CVE-2024-29889 State: PUBLISHED Published: 2024-05-07T14:05:31.713Z Last Updated: 2024-08-02T01:17:58.452Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-89 Description: GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability in the saved searches feature to alter another user account data take control of it. This vulnerability is fixed in 10.0.15. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-8xvf-v6vv-r75g - https://g
rogram Container: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-8xvf-v6vv-r75g - https://github.com/glpi-project/glpi/commit/0a6b28be4c0f848106c60b554c703ec2e178d6c7
CVE ID: CVE-2024-29890 State: PUBLISHED Published: 2024-03-29T15:00:10.774Z Last Updated: 2024-08-02T01:17:58.313Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: datalens-tech Products: datalens Problem Types: CWE-79 Description: DataLens is a business intelligence and data visualization system. A specifically crafted request allowed the creation of a special chart type with the ability to pass custom javascript code that would later be executed in an unprotected sandbox on subsequent requests to that chart. The problem was fixed in the datalens-ui version `0.1449.0`. Restricting access to the API for creating or modifying charts (`/charts/api/charts/v1/`) wo
lens-ui version `0.1449.0`. Restricting access to the API for creating or modifying charts (`/charts/api/charts/v1/`) would mitigate the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/datalens-tech/datalens/security/advisories/GHSA-6278-2wvc-4p93
CVE ID: CVE-2024-29891 State: PUBLISHED Published: 2024-03-27T19:18:08.078Z Last Updated: 2024-08-02T01:17:58.325Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: zitadel Products: zitadel Problem Types: CWE-434 Description: ZITADEL users can upload their own avatar image and various image types are allowed. Due to a missing check, an attacker could upload HTML and pretend it is an image to gain access to the victim's account in certain scenarios. A possible victim would need to directly open the supposed image in the browser, where a session in ZITADEL needs to be active for this exploit to work. The exploit could only be reproduced if the victim was using Fi
in ZITADEL needs to be active for this exploit to work. The exploit could only be reproduced if the victim was using Firefox. Chrome, Safari as well as Edge did not execute the code. This vulnerability is fixed in 2.48.3, 2.47.8, 2.46.5, 2.45.5, 2.44.7, 2.43.11, and 2.42.17. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/zitadel/zitadel/security/advisories/GHSA-hr5w-cwwq-2v4m - https://github.com/zitadel/zitadel/releases/tag/v2.42.17 - https://github.com/zitadel/zitadel/releases/tag/v2.43.11 - https://github.com/zitadel/zitadel/releases/tag/v2.44.7 - https://github.com/zitadel/zitadel/releases/tag/v2.45.5 - https://github.com/zit
/zitadel/zitadel/releases/tag/v2.44.7 - https://github.com/zitadel/zitadel/releases/tag/v2.45.5 - https://github.com/zitadel/zitadel/releases/tag/v2.46.5 - https://github.com/zitadel/zitadel/releases/tag/v2.47.8 - https://github.com/zitadel/zitadel/releases/tag/v2.48.3
CVE ID: CVE-2024-29892 State: PUBLISHED Published: 2024-03-27T19:59:24.734Z Last Updated: 2024-08-13T14:07:12.217Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: zitadel Products: zitadel Problem Types: CWE-863 Description: ZITADEL, open source authentication management software, uses Go templates to render the login UI. Under certain circumstances an action could set reserved claims managed by ZITADEL. For example it would be possible to set the claim `urn:zitadel:iam:user:resourceowner:name`. To compensate for this we introduced a protection that does prevent actions from changing claims that start with `urn:zitadel:iam`. This vulnerability is fixed in 2.