Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-32785 State: PUBLISHED Published: 2021-07-22T00:00:00 Last Updated: 2024-08-03T23:33:55.913Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: zmartzone Products: mod_auth_openidc Problem Types: CWE-134 Description: mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. When mod_auth_openidc versions prior to 2.4.9 are configured to use an unencrypted Redis cache (`OIDCCacheEncrypt off`, `OIDCSessionType server-cache`, `OIDCCacheType redis`), `mod_auth_openidc` wrongly performed argument interpolation b
`, `OIDCSessionType server-cache`, `OIDCCacheType redis`), `mod_auth_openidc` wrongly performed argument interpolation before passing Redis requests to `hiredis`, which would perform it again and lead to an uncontrolled format string bug. Initial assessment shows that this bug does not appear to allow gaining arbitrary code execution, but can reliably provoke a denial of service by repeatedly crashing the Apache workers. This bug has been corrected in version 2.4.9 by performing argument interpolation only once, using the `hiredis` API. As a workaround, this vulnerability can be mitigated by setting `OIDCCacheEncrypt` to `on`, as cache keys are cryptographically hashed before use when this o
an be mitigated by setting `OIDCCacheEncrypt` to `on`, as cache keys are cryptographically hashed before use when this option is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-55r8-6w97-xxr4 - https://github.com/zmartzone/mod_auth_openidc/commit/dc672688dc1f2db7df8ad4abebc367116017a449 - https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20210902-0001/ - https://lists.debian.org/debian-lts-announce/2023/04/msg00034.html
CVE ID: CVE-2021-32786 State: PUBLISHED Published: 2021-07-22T00:00:00 Last Updated: 2024-08-03T23:33:55.659Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: zmartzone Products: mod_auth_openidc Problem Types: CWE-601 Description: mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9, `oidc_validate_redirect_url()` does not parse URLs the same way as most browsers do. As a result, this function can be bypassed and leads to an Open Redirect vulnerability in the logout functionality. This bug
result, this function can be bypassed and leads to an Open Redirect vulnerability in the logout functionality. This bug has been fixed in version 2.4.9 by replacing any backslash of the URL to redirect with slashes to address a particular breaking change between the different specifications (RFC2396 / RFC3986 and WHATWG). As a workaround, this vulnerability can be mitigated by configuring `mod_auth_openidc` to only allow redirection whose destination matches a given regular expression. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9 - https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-xm4c
tzone/mod_auth_openidc/releases/tag/v2.4.9 - https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-xm4c-5wm5-jqv7 - https://github.com/zmartzone/mod_auth_openidc/commit/3a115484eb927bc6daa5737dd84f88ff4bbc5544 - https://daniel.haxx.se/blog/2017/01/30/one-url-standard-please/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZVF6BSJLRQZ7PFFR4X5JSU6KUJYNOCU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXAWKPT5LXZSUTFSJ6IWSZC7RMYYQXQD/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20210902-0001/ - https://lists.debian.or
com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20210902-0001/ - https://lists.debian.org/debian-lts-announce/2023/04/msg00034.html
CVE ID: CVE-2021-32787 State: PUBLISHED Published: 2021-08-02T22:00:12 Last Updated: 2024-08-03T23:33:55.836Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: sourcegraph Products: sourcegraph Problem Types: CWE-200 Description: Sourcegraph is a code search and navigation engine. Sourcegraph before version 3.30.0 has two potential information leaks. The site-admin area can be accessed by regular users and all information and features are properly protected except for daily usage statistics and code intelligence uploads and indexes. It is not possible to alter the information, nor interact with any other features in the site-admin area. The issue is patched in ve
ssible to alter the information, nor interact with any other features in the site-admin area. The issue is patched in version 3.30.0, where the information cannot be accessed by unprivileged users. There are no workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sourcegraph/sourcegraph/security/advisories/GHSA-mq5p-477h-xgwv - https://github.com/sourcegraph/sourcegraph/commit/6e51f4546368d959a1f9f173d16e5f20c55deb56
CVE ID: CVE-2021-32788 State: PUBLISHED Published: 2021-07-27T21:40:11 Last Updated: 2024-08-03T23:33:55.835Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: discourse Products: discourse Problem Types: CWE-668 Description: Discourse is an open source discussion platform. In versions prior to 2.7.7 there are two bugs which led to the post creator of a whisper post being revealed to non-staff users. 1: Staff users that creates a whisper post in a personal message is revealed to non-staff participants of the personal message even though the whisper post cannot be seen by them. 2: When a whisper post is before the last post in a post stream, deleting the last p
hisper post cannot be seen by them. 2: When a whisper post is before the last post in a post stream, deleting the last post will result in the creator of the whisper post to be revealed to non-staff users as the last poster of the topic. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/discourse/discourse/security/advisories/GHSA-v6xg-q577-vc92 - https://github.com/discourse/discourse/commit/680024f9071b7696e5a444a58791016c6dc1f1e5 - https://github.com/discourse/discourse/commit/dbdf61196d9e964e8823793d2e7f856595fea4d9
CVE ID: CVE-2021-32789 State: PUBLISHED Published: 2021-07-26T15:30:12 Last Updated: 2024-08-03T23:33:56.078Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: woocommerce Products: woocommerce-gutenberg-products-block Problem Types: CWE-89 Description: woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks. An SQL injection vulnerability impacts all WooCommerce sites running the WooCommerce Blocks feature plugin between version 2.5.0 and prior to version 2.5.16. Via a carefully crafted URL, an exploit can be executed against the `wc/store/products/collection-data?calculate_attribute_counts[][taxonomy]` endpoint that allows the
executed against the `wc/store/products/collection-data?calculate_attribute_counts[][taxonomy]` endpoint that allows the execution of a read only sql query. There are patches for many versions of this package, starting with version 2.5.16. There are no known workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/woocommerce/woocommerce-gutenberg-products-block/security/advisories/GHSA-6hq4-w6wv-8wrp - https://github.com/woocommerce/woocommerce-gutenberg-products-block-ghsa-6hq4-w6wv-8wrp/pull/1 - https://hackerone.com/reports/1260787 - https://woocommerce.com/posts/critical-vulnerability-detected-july-2021/ - https://wooengineeri
ne.com/reports/1260787 - https://woocommerce.com/posts/critical-vulnerability-detected-july-2021/ - https://wooengineering.wordpress.com/2021/07/14/incident-report-sql-injection-via-store-api/
CVE ID: CVE-2021-32790 State: PUBLISHED Published: 2021-07-26T16:30:12 Last Updated: 2024-08-03T23:33:55.956Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: woocommerce Products: woocommerce Problem Types: CWE-89 Description: Woocommerce is an open source eCommerce plugin for WordPress. An SQL injection vulnerability impacts all WooCommerce sites running the WooCommerce plugin between version 3.3.0 and 3.3.6. Malicious actors (already) having admin access, or API keys to the WooCommerce site can exploit vulnerable endpoints of `/wp-json/wc/v3/webhooks`, `/wp-json/wc/v2/webhooks` and other webhook listing API. Read-only SQL queries can be executed using this
/v3/webhooks`, `/wp-json/wc/v2/webhooks` and other webhook listing API. Read-only SQL queries can be executed using this exploit, while data will not be returned, by carefully crafting `search` parameter information can be disclosed using timing and related attacks. Version 3.3.6 is the earliest version of Woocommerce with a patch for this vulnerability. There are no known workarounds other than upgrading. Additional Analyst Notes: - CVE Program Container: References: - https://woocommerce.com/posts/critical-vulnerability-detected-july-2021/ - https://github.com/woocommerce/woocommerce/security/advisories/GHSA-7vx5-x39w-q24g
CVE ID: CVE-2021-32791 State: PUBLISHED Published: 2021-07-26T00:00:00 Last Updated: 2024-08-03T23:33:56.106Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: zmartzone Products: mod_auth_openidc Problem Types: CWE-323, CWE-330 Description: mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, the AES GCM encryption in mod_auth_openidc uses a static IV and AAD. It is important to fix because this creates a static nonce and since aes-gcm is a stream cipher, this can lead to kno
D. It is important to fix because this creates a static nonce and since aes-gcm is a stream cipher, this can lead to known cryptographic issues, since the same key is being reused. From 2.4.9 onwards this has been patched to use dynamic values through usage of cjose AES encryption routines. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9 - https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-px3c-6x7j-3r9r - https://github.com/zmartzone/mod_auth_openidc/commit/375407c16c61a70b56fdbe13b0d2c8f11398e92c - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/me
0b56fdbe13b0d2c8f11398e92c - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZVF6BSJLRQZ7PFFR4X5JSU6KUJYNOCU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXAWKPT5LXZSUTFSJ6IWSZC7RMYYQXQD/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://lists.debian.org/debian-lts-announce/2023/04/msg00034.html
CVE ID: CVE-2021-32792 State: PUBLISHED Published: 2021-07-26T00:00:00 Last Updated: 2024-08-03T23:33:55.936Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: zmartzone Products: mod_auth_openidc Problem Types: CWE-79 Description: mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, there is an XSS vulnerability in when using `OIDCPreservePost On`. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9 -
nalyst Notes: - CVE Program Container: References: - https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9 - https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-458c-7pwg-3j7j - https://github.com/zmartzone/mod_auth_openidc/commit/00c315cb0c8ab77c67be4a2ac08a71a83ac58751 - https://github.com/zmartzone/mod_auth_openidc/commit/55ea0a085290cd2c8cdfdd960a230cbc38ba8b56 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZVF6BSJLRQZ7PFFR4X5JSU6KUJYNOCU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXAWKPT5LXZSUTFSJ6IWSZC7RMYYQXQD/ - https://www.oracle.com/security-a
package-announce%40lists.fedoraproject.org/message/QXAWKPT5LXZSUTFSJ6IWSZC7RMYYQXQD/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://lists.debian.org/debian-lts-announce/2023/04/msg00034.html
CVE ID: CVE-2021-32793 State: PUBLISHED Published: 2021-08-04T17:55:09 Last Updated: 2024-08-03T23:33:55.912Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H) Vendors: pi-hole Products: AdminLTE Problem Types: CWE-79 Description: Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the function to add domains to blocklists or allowlists is vulnerable to a stored cross-site-scripting vulnerability. User input added as a wildcard domain to a blocklist or allowlist is unfiltered in the web interface. Since the payload is stored permanently as a wildcard domain, th
cklist or allowlist is unfiltered in the web interface. Since the payload is stored permanently as a wildcard domain, this is a persistent XSS vulnerability. A remote attacker can therefore attack administrative user accounts through client-side attacks. Pi-hole Web Interface version 5.5.1 contains a patch for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pi-hole/AdminLTE/releases/tag/v5.5.1 - https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-g3w6-q4fg-p8x8
CVE ID: CVE-2021-32794 State: PUBLISHED Published: 2021-07-26T18:55:11 Last Updated: 2024-08-03T23:33:55.906Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: JustArchiNET Products: ArchiSteamFarm Problem Types: CWE-287 Description: ArchiSteamFarm is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. Due to a bug in ASF code `POST /Api/ASF` ASF API endpoint responsible for updating global ASF config incorrectly removed `IPCPassword` from the resulting config when the caller did not specify it explicitly. Due to the above, it was possible for the user to accidentally remove `IPCPassword` security measure from his
xplicitly. Due to the above, it was possible for the user to accidentally remove `IPCPassword` security measure from his IPC interface when updating global ASF config, which exists as part of global config update functionality in ASF-ui. Removal of `IPCPassword` possesses a security risk, as unauthorized users may in result access the IPC interface after such modification. The issue is patched in ASF V5.1.2.4 and future versions. We recommend to manually verify that `IPCPassword` is specified after update, and if not, set it accordingly. In default settings, ASF is configured to allow IPC access from `localhost` only and should not affect majority of users. Additional Analyst Notes: - CVE Pr
ed to allow IPC access from `localhost` only and should not affect majority of users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JustArchiNET/ArchiSteamFarm/security/advisories/GHSA-wxx4-66c2-vj2v - https://github.com/JustArchiNET/ArchiSteamFarm/pull/2379 - https://steamcommunity.com/groups/archiasf/discussions/6/3057365873428498659/
CVE ID: CVE-2021-32795 State: PUBLISHED Published: 2021-07-26T19:25:11 Last Updated: 2024-08-03T23:33:55.899Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: JustArchiNET Products: ArchiSteamFarm Problem Types: CWE-20 Description: ArchiSteamFarm is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. In versions prior to 4.3.1.0 a Denial of Service (aka DoS) vulnerability which allows attacker to remotely crash running ASF instance through sending a specifically-crafted Steam chat message exists. The user sending the message does not need to be authorized within the bot or ASF process. The attacker needs to know
. The user sending the message does not need to be authorized within the bot or ASF process. The attacker needs to know ASF's `CommandPrefix` in advance, but majority of ASF setups run with an unchanged default value. This attack does not allow attacker to gain any potentially-sensitive information, such as logins or passwords, does not allow to execute arbitrary commands and otherwise exploit the crash further. The issue is patched in ASF V4.3.1.0. The only workaround which guarantees complete protection is running all bots with `OnlineStatus` of `0` (Offline). In this setup, ASF is able to ignore even the specifically-crafted message without attempting to interpret it. Additional Analyst N
up, ASF is able to ignore even the specifically-crafted message without attempting to interpret it. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JustArchiNET/ArchiSteamFarm/security/advisories/GHSA-5v34-4prm-9474 - https://github.com/JustArchiNET/ArchiSteamFarm/commit/4cd581ec041912cf199c5512fe6d1dcaec0594c0 - https://steamcommunity.com/groups/archiasf/discussions/1/2935742047969570844/
CVE ID: CVE-2021-32796 State: PUBLISHED Published: 2021-07-27T21:45:13 Last Updated: 2024-08-03T23:33:55.989Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: xmldom Products: xmldom Problem Types: CWE-116 Description: xmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes during XML processing in some downstream applications. This issue has been resolved in version 0.7.0. As a workaround downstream applications can validat
nstream applications. This issue has been resolved in version 0.7.0. As a workaround downstream applications can validate the input and reject the maliciously crafted documents. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities/ - https://github.com/xmldom/xmldom/security/advisories/GHSA-5fg8-2547-mr8q - https://github.com/xmldom/xmldom/commit/7b4b743917a892d407356e055b296dcd6d107e8b
CVE ID: CVE-2021-32797 State: PUBLISHED Published: 2021-08-09T20:45:10 Last Updated: 2024-08-03T23:33:56.163Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: jupyterlab Products: jupyterlab Problem Types: CWE-79 Description: JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted notebook can execute code on load. In particular JupyterLab doesn’t sanitize the action attribute of html `<form>`. Using this it is possible to trigger the form validation outside of the form itself. This is a remote code execution, but requires user action to open a notebook. Additional Analyst Not
of the form itself. This is a remote code execution, but requires user action to open a notebook. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-4952-p58q-6crx - https://github.com/jupyterlab/jupyterlab/commit/504825938c0abfa2fb8ff8d529308830a5ae42ed
CVE ID: CVE-2021-32798 State: PUBLISHED Published: 2021-08-09T20:50:10 Last Updated: 2024-08-03T23:33:55.864Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: jupyter Products: notebook Problem Types: CWE-79 Description: The Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can be used to trigger an XSS when a victim opens a malicious ipynb document in Jupyter Notebook. The XSS allows an attacker to execute arbitrary code on the victim computer using Jupyter API
ument in Jupyter Notebook. The XSS allows an attacker to execute arbitrary code on the victim computer using Jupyter APIs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jupyter/notebook/security/advisories/GHSA-hwvq-6gjx-j797 - https://github.com/jupyter/notebook/commit/79fc76e890a8ec42f73a3d009e44ef84c14ef0d5
CVE ID: CVE-2021-32800 State: PUBLISHED Published: 2021-09-07T21:35:11 Last Updated: 2024-08-03T23:33:56.162Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-306 Description: Nextcloud server is an open source, self hosted personal cloud. In affected versions an attacker is able to bypass Two Factor Authentication in Nextcloud. Thus knowledge of a password, or access to a WebAuthN trusted device of a user was sufficient to gain access to an account. It is recommended that the Nextcloud Server is upgraded to 20.0.12, 21.0.4 or 22.1.0. There are no workaround for this vulnerability. Additional Analyst No
d Server is upgraded to 20.0.12, 21.0.4 or 22.1.0. There are no workaround for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-gv5w-8q25-785v - https://github.com/nextcloud/server/pull/28078 - https://hackerone.com/reports/1271052 - https://security.gentoo.org/glsa/202208-17
CVE ID: CVE-2021-32801 State: PUBLISHED Published: 2021-09-07T21:40:11 Last Updated: 2024-08-03T23:33:56.245Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-532 Description: Nextcloud server is an open source, self hosted personal cloud. In affected versions logging of exceptions may have resulted in logging potentially sensitive key material for the Nextcloud Encryption-at-Rest functionality. It is recommended that the Nextcloud Server is upgraded to 20.0.12, 21.0.4 or 22.1.0. If upgrading is not an option users are advised to disable system logging to resolve this issue until such time that an upg
upgrading is not an option users are advised to disable system logging to resolve this issue until such time that an upgrade can be performed Note that ff you do not use the Encryption-at-Rest functionality of Nextcloud you are not affected by this bug. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-mcpf-v65v-359h - https://github.com/nextcloud/server/pull/28082 - https://hackerone.com/reports/1251776 - https://security.gentoo.org/glsa/202208-17
CVE ID: CVE-2021-32802 State: PUBLISHED Published: 2021-09-07T21:45:11 Last Updated: 2024-08-03T23:33:55.927Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: nextcloud Products: security-advisories Problem Types: CWE-829 Description: Nextcloud server is an open source, self hosted personal cloud. Nextcloud supports rendering image previews for user provided file content. For some image types, the Nextcloud server was invoking a third-party library that wasn't suited for untrusted user-supplied content. There are several security concerns with passing user-generated content to this library, such as Server-Side-Request-Forgery, file disclosure or potentially