Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-25276 State: PUBLISHED Published: 2025-04-15T21:25:26.240Z Last Updated: 2025-04-16T15:08:00.599Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Growatt Products: Cloud portal Problem Types: CWE-639 Description: An unauthenticated attacker can hijack other users' devices and potentially control them. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04
CVE ID: CVE-2025-25278 State: PUBLISHED Published: 2025-08-11T02:36:43.941Z Last Updated: 2025-08-11T20:40:11.802Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-362 Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-08.md
CVE ID: CVE-2025-25279 State: PUBLISHED Published: 2025-02-24T07:25:26.792Z Last Updated: 2025-02-24T11:22:50.849Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Mattermost Products: Mattermost Problem Types: CWE-22 Description: Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to properly validate board blocks when importing boards which allows an attacker could read any arbitrary file on the system via importing and exporting a specially crafted import archive in Boards. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-25280 State: PUBLISHED Published: 2025-03-03T08:25:16.938Z Last Updated: 2025-03-03T14:53:08.462Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Century Systems Co., Ltd. Products: FutureNet AS-250/S, FutureNet AS-250/F-SC, FutureNet AS-250/F-KO, FutureNet AS-250/NL, FutureNet AS-250/KL, FutureNet AS-250/KL Rev2, FutureNet AS-250/L, FutureNet AS-M250/L, FutureNet AS-M250/KL, FutureNet AS-M250/NL, FutureNet AS-P250/NL, FutureNet AS-P250/KL, FutureNet AS-210/U4, FutureNet FA-210, FutureNet FA-215 Problem Types: CWE-120 Description: Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Convers
iption: Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.centurysys.co.jp/backnumber/common/jvnvu96398949.html - https://jvn.jp/en/vu/JVNVU96398949/
CVE ID: CVE-2025-25281 State: PUBLISHED Published: 2025-02-13T21:18:56.425Z Last Updated: 2025-02-14T15:47:48.300Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Outback Power Products: Mojave Inverter Problem Types: CWE-200 Description: An attacker may modify the URL to discover sensitive information about the target network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-17 - https://old.outbackpower.com/about-outback/contact/contact-us
CVE ID: CVE-2025-25282 State: PUBLISHED Published: 2025-02-21T21:04:34.731Z Last Updated: 2025-02-24T14:49:12.014Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: infiniflow Products: ragflow Problem Types: CWE-639 Description: RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine based on deep document understanding. An authenticated user can exploit the Insecure Direct Object Reference (IDOR) vulnerability that may lead to unauthorized cross-tenant access (list tenant user accounts, add user account into other tenant). Unauthorized cross-tenant access: list user from other tenant (e.g., via GET /<tenant_id>/user/list), add user account to oth
horized cross-tenant access: list user from other tenant (e.g., via GET /<tenant_id>/user/list), add user account to other tenant (POST /<tenant_id>/user). This issue has not yet been patched. Users are advised to reach out to the project maintainers to coordinate a fix. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/infiniflow/ragflow/security/advisories/GHSA-wc5v-g79p-7hch
CVE ID: CVE-2025-25283 State: PUBLISHED Published: 2025-02-12T18:21:48.693Z Last Updated: 2025-02-12T19:25:45.402Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: jkroso Products: parse-duration Problem Types: CWE-1333 Description: parse-duraton is software that allows users to convert a human readable duration to milliseconds. Versions prior to 2.1.3 are vulnerable to an event loop delay due to the CPU-bound operation of resolving the provided string, from a 0.5ms and up to ~50ms per one operation, with a varying size from 0.01 MB and up to 4.3 MB respectively, and an out of memory that would crash a running Node.js application due to a string size of roughly
4.3 MB respectively, and an out of memory that would crash a running Node.js application due to a string size of roughly 10 MB that utilizes unicode characters. Version 2.1.3 contains a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jkroso/parse-duration/security/advisories/GHSA-hcrg-fc28-fcg5 - https://github.com/jkroso/parse-duration/commit/9e88421bfd41806fa4b473bfb28a9ee9dafc27d7 - https://github.com/jkroso/parse-duration/releases/tag/v2.1.3
CVE ID: CVE-2025-25284 State: PUBLISHED Published: 2025-02-18T18:42:55.190Z Last Updated: 2025-02-18T19:29:53.596Z Vendors: ZOO-Project Products: ZOO-Project Problem Types: CWE-22 Description: The ZOO-Project is an open source processing platform, released under MIT/X11 Licence. A vulnerability in ZOO-Project's WPS (Web Processing Service) implementation allows unauthorized access to files outside the intended directory through path traversal. Specifically, the Gdal_Translate service, when processing VRT (Virtual Format) files, does not properly validate file paths referenced in the VRTRasterBand element, allowing attackers to read arbitrary files on the system. The vulnerability exists beca
ed in the VRTRasterBand element, allowing attackers to read arbitrary files on the system. The vulnerability exists because the service doesn't properly sanitize the SourceFilename parameter in VRT files, allowing relative path traversal sequences (../). When combined with VRT's raw data handling capabilities, this allows reading arbitrary files as raw binary data and converting them to TIFF format, effectively exposing their contents. This vulnerability is particularly severe because it allows attackers to read sensitive system files, potentially exposing configuration data, credentials, or other confidential information stored on the server. An unauthenticated attacker can read arbitrary f
a, credentials, or other confidential information stored on the server. An unauthenticated attacker can read arbitrary files from the system through path traversal, potentially accessing sensitive information such as configuration files, credentials, or other confidential data stored on the server. The vulnerability requires no authentication and can be exploited remotely through the WPS service. This issue has been addressed in commit `5f155a8` and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ZOO-Project/ZOO-Project/security/advisories/GHSA-8c27-wmvv-3p38 - https:/
Vulnrichment: References: - https://github.com/ZOO-Project/ZOO-Project/security/advisories/GHSA-8c27-wmvv-3p38 - https://github.com/ZOO-Project/ZOO-Project/commit/5f155a8
CVE ID: CVE-2025-25285 State: PUBLISHED Published: 2025-02-14T19:31:44.827Z Last Updated: 2025-02-14T19:44:09.952Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: octokit Products: endpoint.js Problem Types: CWE-1333 Description: @octokit/endpoint turns REST API endpoints into generic request options. Starting in version 4.1.0 and prior to version 10.1.3, by crafting specific `options` parameters, the `endpoint.parse(options)` call can be triggered, leading to a regular expression denial-of-service (ReDoS) attack. This causes the program to hang and results in high CPU utilization. The issue occurs in the `parse` function within the `parse.ts` file of the np
hang and results in high CPU utilization. The issue occurs in the `parse` function within the `parse.ts` file of the npm package `@octokit/endpoint`. Version 10.1.3 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/octokit/endpoint.js/security/advisories/GHSA-x4c5-c7rf-jjgv - https://github.com/octokit/endpoint.js/commit/6c9c5be033c450d436efb37de41b6470c22f7db8 - https://github.com/octokit/endpoint.js/blob/main/src/parse.ts
CVE ID: CVE-2025-25286 State: PUBLISHED Published: 2025-02-13T00:36:55.558Z Last Updated: 2025-02-13T15:08:05.551Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Islandora Products: Crayfish Problem Types: CWE-150, CWE-157 Description: Crayfish is a collection of Islandora 8 microservices, one of which, Homarus, provides FFmpeg as a microservice. Prior to Crayfish version 4.1.0, remote code execution may be possible in web-accessible installations of Homarus in certain configurations. The issue has been patched in `islandora/crayfish:4.1.0`. Some workarounds are available. The exploit requires making a request against the Homarus's `/convert` endpoint; th
.0`. Some workarounds are available. The exploit requires making a request against the Homarus's `/convert` endpoint; therefore, the ability to exploit is much reduced if the microservice is not directly accessible from the Internet, so: Prevent general access from the Internet from hitting Homarus. Alternatively or additionally, configure auth in Crayfish to be more strongly required, such that requests with `Authorization` headers that do not validate are rejected before the problematic CLI interpolation occurs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Islandora/Crayfish/security/advisories/GHSA-mm6v-68qp-f9fw - https://github.com/Islandora/Crayfi
s: - https://github.com/Islandora/Crayfish/security/advisories/GHSA-mm6v-68qp-f9fw - https://github.com/Islandora/Crayfish/commit/64cb4cec688928798cc40e6f0a0e863d7f69fd89
CVE ID: CVE-2025-25287 State: PUBLISHED Published: 2025-02-13T15:28:40.074Z Last Updated: 2025-07-21T12:37:21.292Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: lakejason0 Products: mediawiki-skins-Lakeus Problem Types: CWE-79 Description: Lakeus is a simple skin made for MediaWiki. Starting in version 1.0.8 and prior to versions 1.3.1+REL1.39, 1.3.1+REL1.42, and 1.4.0, Lakeus is vulnerable to store cross-site scripting via malicious system messages, though editing the messages requires high privileges. Those with `(editinterface)` rights can edit system messages that are improperly handled in order to send raw HTML. In the case of `lakeus-footermessage`,
can edit system messages that are improperly handled in order to send raw HTML. In the case of `lakeus-footermessage`, this will affect all users if the server is configured to link back to this repository. Otherwise, the system messages in themeDesigner.js are only used when the user enables it in their preferences. Versions 1.3.1+REL1.39, 1.3.1+REL1.42, and 1.4.0 contain a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lakejason0/mediawiki-skins-Lakeus/security/advisories/GHSA-mq77-3q68-v64v - https://github.com/lakejason0/mediawiki-skins-Lakeus/commit/fb79928f06efa47677fff27e0f4755eb32b1c8d9 - https://github.com/lakejason0/mediawiki-skins-Lakeu
awiki-skins-Lakeus/commit/fb79928f06efa47677fff27e0f4755eb32b1c8d9 - https://github.com/lakejason0/mediawiki-skins-Lakeus/blob/82ad2cd341f85b814a6a0f37969e6210ebf2521d/includes/SkinLakeus.php#L27 - https://github.com/lakejason0/mediawiki-skins-Lakeus/blob/82ad2cd341f85b814a6a0f37969e6210ebf2521d/resources/themeDesigner.js
CVE ID: CVE-2025-25288 State: PUBLISHED Published: 2025-02-14T19:33:43.428Z Last Updated: 2025-02-14T20:18:26.404Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: octokit Products: plugin-paginate-rest.js Problem Types: CWE-1333 Description: @octokit/plugin-paginate-rest is the Octokit plugin to paginate REST API endpoint responses. For versions starting in 1.0.0 and prior to 11.4.1 of the npm package `@octokit/plugin-paginate-rest`, when calling `octokit.paginate.iterator()`, a specially crafted `octokit` instance—particularly with a malicious `link` parameter in the `headers` section of the `request`—can trigger a ReDoS attack. Version 11.4.1 contains a fi
ious `link` parameter in the `headers` section of the `request`—can trigger a ReDoS attack. Version 11.4.1 contains a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/octokit/plugin-paginate-rest.js/security/advisories/GHSA-h5c3-5r3r-rr8q - https://github.com/octokit/plugin-paginate-rest.js/commit/bb6c4f945d8023902cf387391d2b2209261044ab - https://github.com/octokit/plugin-paginate-rest.js/blob/main/src/iterator.ts
CVE ID: CVE-2025-25289 State: PUBLISHED Published: 2025-02-14T19:35:19.998Z Last Updated: 2025-02-14T20:08:32.674Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: octokit Products: request-error.js Problem Types: CWE-1333 Description: @octokit/request-error is an error class for Octokit request errors. Starting in version 1.0.0 and prior to version 6.1.7, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the processing of HTTP request headers. By sending an authorization header containing an excessively long sequence of spaces followed by a newline and "@", an attacker can exploit inefficient regular expression processing, leading to exc
spaces followed by a newline and "@", an attacker can exploit inefficient regular expression processing, leading to excessive resource consumption. This can significantly degrade server performance or cause a denial-of-service (DoS) condition, impacting availability. Version 6.1.7 contains a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/octokit/request-error.js/security/advisories/GHSA-xx4v-prfh-6cgc - https://github.com/octokit/request-error.js/commit/d558320874a4bc8d356babf1079e6f0056a59b9e - https://github.com/octokit/request-error.js/blob/main/src/index.ts
CVE ID: CVE-2025-25290 State: PUBLISHED Published: 2025-02-14T19:37:47.110Z Last Updated: 2025-02-14T20:04:42.662Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: octokit Products: request.js Problem Types: CWE-1333 Description: @octokit/request sends parameterized requests to GitHub’s APIs with sensible defaults in browsers and Node. Starting in version 1.0.0 and prior to version 9.2.1, the regular expression `/<([^>]+)>; rel="deprecation"/` used to match the `link` header in HTTP responses is vulnerable to a ReDoS (Regular Expression Denial of Service) attack. This vulnerability arises due to the unbounded nature of the regex's matching behavior, which can
al of Service) attack. This vulnerability arises due to the unbounded nature of the regex's matching behavior, which can lead to catastrophic backtracking when processing specially crafted input. An attacker could exploit this flaw by sending a malicious `link` header, resulting in excessive CPU usage and potentially causing the server to become unresponsive, impacting service availability. Version 9.2.1 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/octokit/request.js/security/advisories/GHSA-rmvr-2pp2-xj38 - https://github.com/octokit/request.js/commit/34ff07ee86fc5c20865982d77391bc910ef19c68
CVE ID: CVE-2025-25291 State: PUBLISHED Published: 2025-03-12T20:16:12.181Z Last Updated: 2025-11-03T19:44:59.719Z Vendors: SAML-Toolkits Products: ruby-saml Problem Types: CWE-347, CWE-436 Description: ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently; the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.
be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-4vc4-m8qh-g8jm - https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xv - https://github.com/SAML-Toolkits/ruby-saml/commit/e76c5b36bac40aedbf1ba7ffaaf495be63328cd9 - https://github.com/SAML-Toolkits/ruby-saml/commit/e9c1cdbd0f9afa467b585de279db0cbd0fb8ae97 - https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released - https://github.blog/security/sign-
- https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released - https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4 - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0 - https://portswigger.net/research/saml-roulette-the-hacker-always-wins - https://securitylab.github.com/advisories/GHSL-2024-329_GHSL-2024-330_ruby-saml
CVE ID: CVE-2025-25292 State: PUBLISHED Published: 2025-03-12T20:53:24.353Z Last Updated: 2025-11-03T19:45:01.139Z Vendors: SAML-Toolkits Products: ruby-saml Problem Types: CWE-347, CWE-436 Description: ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently, the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.
be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 contain a patch for the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-754f-8gm6-c4r2 - https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xv - https://github.com/SAML-Toolkits/ruby-saml/commit/e76c5b36bac40aedbf1ba7ffaaf495be63328cd9 - https://github.com/SAML-Toolkits/ruby-saml/commit/e9c1cdbd0f9afa467b585de279db0cbd0fb8ae97 - https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released - https://github.blo
9db0cbd0fb8ae97 - https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released - https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4 - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0 - https://portswigger.net/research/saml-roulette-the-hacker-always-wins - https://securitylab.github.com/advisories/GHSL-2024-329_GHSL-2024-330_ruby-saml
CVE ID: CVE-2025-25293 State: PUBLISHED Published: 2025-03-12T20:11:08.860Z Last Updated: 2025-11-03T19:45:02.622Z Vendors: SAML-Toolkits Products: ruby-saml Problem Types: CWE-400 Description: ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.1
sage size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-92rq-c8cf-prrq - https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xv - https://github.com/SAML-Toolkits/ruby-saml/commit/acac9e9cc0b9a507882c614f25d41f8b47be349a - https://github.com/SAML-Toolkits/ruby-saml/commit/e2da4c6dae7dc01a4d9cd221395140a67e2b3eb1 - https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released - https://github.blog/s
40a67e2b3eb1 - https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released - https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4 - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0 - https://securitylab.github.com/advisories/GHSL-2024-355_ruby-saml
CVE ID: CVE-2025-25294 State: PUBLISHED Published: 2025-03-06T18:46:23.913Z Last Updated: 2025-03-06T20:34:27.649Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: envoyproxy Products: gateway Problem Types: CWE-117 Description: Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. In all Envoy Gateway versions prior to 1.2.7 and 1.3.1 a default Envoy Proxy access log configuration is used. This format is vulnerable to log injection attacks. If the attacker uses a specially crafted user-agent which performs json injection, then he could add and overwrite fields to the access log. This vulnera
crafted user-agent which performs json injection, then he could add and overwrite fields to the access log. This vulnerability is fixed in 1.3.1 and 1.2.7. One can overwrite the old text based default format with JSON formatter by modifying the "EnvoyProxy.spec.telemetry.accessLog" setting. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/envoyproxy/gateway/security/advisories/GHSA-mf24-chxh-hmvj - https://github.com/envoyproxy/gateway/commit/8f48f5199cf1bbb9a8ac0695c5171bfef6c9198a
CVE ID: CVE-2025-25295 State: PUBLISHED Published: 2025-02-14T16:50:26.336Z Last Updated: 2025-03-03T17:26:13.958Z Vendors: HumanSignal Products: label-studio Problem Types: CWE-22, CWE-26 Description: Label Studio is an open source data labeling tool. A path traversal vulnerability in Label Studio SDK versions prior to 1.0.10 allows unauthorized file access outside the intended directory structure. The flaw exists in the VOC, COCO and YOLO export functionalities. These functions invoke a `download` function on the `label-studio-sdk` python package, which fails to validate file paths when processing image references during task exports. By creating tasks with path traversal sequences in the