Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-26131 State: PUBLISHED Published: 2024-02-20T18:17:01.583Z Last Updated: 2024-08-01T23:59:32.646Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: element-hq Products: element-android Problem Types: CWE-923, CWE-940 Description: Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to intent redirection, allowing a third-party malicious application to start any internal activity by passing some extra parameters. Possible impact includes making Element Android display an arbitrary web page, executing arbitrary JavaScript; bypassing PIN code protection; and account takeover by spawning a login scr
ry web page, executing arbitrary JavaScript; bypassing PIN code protection; and account takeover by spawning a login screen to send credentials to an arbitrary home server. This issue is fixed in Element Android 1.6.12. There is no known workaround to mitigate the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/element-hq/element-android/security/advisories/GHSA-j6pr-fpc8-q9vm - https://github.com/element-hq/element-android/commit/53734255ec270b0814946350787393dfcaa2a5a9 - https://element.io/blog/security-release-element-android-1-6-12 - https://support.google.com/faqs/answer/9267555?hl=en
CVE ID: CVE-2024-26132 State: PUBLISHED Published: 2024-02-20T18:30:26.803Z Last Updated: 2024-08-01T23:59:32.399Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: element-hq Products: element-android Problem Types: CWE-200 Description: Element Android is an Android Matrix Client. A third-party malicious application installed on the same phone can force Element Android, version 0.91.0 through 1.6.12, to share files stored under the `files` directory in the application's private data directory to an arbitrary room. The impact of the attack is reduced by the fact that the databases stored in this folder are encrypted. However, it contains some other potentially s
educed by the fact that the databases stored in this folder are encrypted. However, it contains some other potentially sensitive information, such as the FCM token. Forks of Element Android which have set `android:exported="false"` in the `AndroidManifest.xml` file for the `IncomingShareActivity` activity are not impacted. This issue is fixed in Element Android 1.6.12. There is no known workaround to mitigate the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/element-hq/element-android/security/advisories/GHSA-8wj9-cx7h-pvm4 - https://github.com/element-hq/element-android/commit/8f9695a9a8d944cb9b92568cbd76578c51d32e07 - ht
GHSA-8wj9-cx7h-pvm4 - https://github.com/element-hq/element-android/commit/8f9695a9a8d944cb9b92568cbd76578c51d32e07 - https://element.io/blog/security-release-element-android-1-6-12
CVE ID: CVE-2024-26133 State: PUBLISHED Published: 2024-02-21T16:49:32.426Z Last Updated: 2024-08-01T23:59:32.615Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L) Vendors: EventStore Products: EventStore Problem Types: CWE-256 Description: EventStoreDB (ESDB) is an operational database built to store events. A vulnerability has been identified in the projections subsystem in versions 20 prior to 20.10.6, 21 prior to 21.10.11, 22 prior to 22.10.5, and 23 prior to 23.10.1. Only database instances that use custom projections are affected by this vulnerability. User passwords may become accessible to those who have access to the chunk files on disk, and users who have re
ability. User passwords may become accessible to those who have access to the chunk files on disk, and users who have read access to system streams. Only users in the `$admins` group can access system streams by default. ESDB 23.10.1, 22.10.5, 21.10.11, and 20.10.6 contain a patch for this issue. Users should upgrade EventStoreDB, reset the passwords for current and previous members of `$admins` and `$ops` groups, and, if a password was reused in any other system, reset it in those systems to a unique password to follow best practices. If an upgrade cannot be done immediately, reset the passwords for current and previous members of `$admins` and `$ops` groups. Avoid creating custom projectio
ly, reset the passwords for current and previous members of `$admins` and `$ops` groups. Avoid creating custom projections until the patch has been applied. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/EventStore/EventStore/security/advisories/GHSA-6r53-v8hj-x684 - https://github.com/EventStore/EventStore/commit/6d4edee18c7fe886abffe58fa1f97d72681b24bf - https://developers.eventstore.com/cloud/ops/#upgrading-eventstoredb-version - https://developers.eventstore.com/server/v22.10/upgrade-guide.html#upgrade-guide-for-eventstoredb-22-10 - https://www.eventstore.com/blog/eventstoredb-security-release-23.10-22.10-21.10-and-20.10-for-c
for-eventstoredb-22-10 - https://www.eventstore.com/blog/eventstoredb-security-release-23.10-22.10-21.10-and-20.10-for-cve-2024-26133 - https://www.eventstore.com/blog/new-version-strategy
CVE ID: CVE-2024-26134 State: PUBLISHED Published: 2024-02-19T22:13:47.173Z Last Updated: 2025-02-13T17:41:03.627Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: agronholm Products: cbor2 Problem Types: CWE-120 Description: cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a service using cbor2 to parse a CBOR binary by sending a long enough object. Version 5.6.2 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/agronholm/c
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/agronholm/cbor2/security/advisories/GHSA-375g-39jq-vq7m - https://github.com/agronholm/cbor2/pull/204 - https://github.com/agronholm/cbor2/commit/387755eacf0be35591a478d3c67fe10618a6d542 - https://github.com/agronholm/cbor2/commit/4de6991ba29bf2290d7b9d83525eda7d021873df - https://github.com/agronholm/cbor2/releases/tag/5.6.2 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GX524ZG2XJWFV37UQKQ4LWIH4UICSGEQ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BT42VXZMMMCSSHMA65KKPOZCXJEYHNR5/ -
sts.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BT42VXZMMMCSSHMA65KKPOZCXJEYHNR5/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PWC3VU6YV6EXKCSX5GTKWLBZIDIJNQJY/
CVE ID: CVE-2024-26135 State: PUBLISHED Published: 2024-02-20T19:50:30.723Z Last Updated: 2025-04-22T16:26:34.189Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Ylianst Products: MeshCentral Problem Types: CWE-346 Description: MeshCentral is a full computer management web site. Versions prior to 1.1.21 a cross-site websocket hijacking (CSWSH) vulnerability within the control.ashx endpoint. This component is the primary mechanism used within MeshCentral to perform administrative actions on the server. The vulnerability is exploitable when an attacker is able to convince a victim end-user to click on a malicious link to a page hosting an attacker-controlled si
attacker is able to convince a victim end-user to click on a malicious link to a page hosting an attacker-controlled site. The attacker can then originate a cross-site websocket connection using client-side JavaScript code to connect to `control.ashx` as the victim user within MeshCentral. Version 1.1.21 contains a patch for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Ylianst/MeshCentral/security/advisories/GHSA-cp68-qrhr-g9h8 - https://github.com/Ylianst/MeshCentral/commit/f2e43cc6da9f5447dbff0948e6c6024c8a315af3
CVE ID: CVE-2024-26136 State: PUBLISHED Published: 2024-02-20T21:40:53.562Z Last Updated: 2024-08-28T16:52:25.209Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: kedi Products: ElectronCord Problem Types: CWE-200 Description: kedi ElectronCord is a bot management tool for Discord. Commit aaaeaf4e6c99893827b2eea4dd02f755e1e24041 exposes an account access token in the `config.json` file. Malicious actors could potentially exploit this vulnerability to gain unauthorized access to sensitive information or perform malicious actions on behalf of the repository owner. As of time of publication, it is unknown whether the owner of the repository has rotated the token
he repository owner. As of time of publication, it is unknown whether the owner of the repository has rotated the token or taken other mitigation steps aside from informing users of the situation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kedi/ElectronCord/security/advisories/GHSA-ppwc-5vwp-mhw8 - https://github.com/kedi/ElectronCord/commit/aaaeaf4e6c99893827b2eea4dd02f755e1e24041
CVE ID: CVE-2024-26138 State: PUBLISHED Published: 2024-02-21T16:52:25.022Z Last Updated: 2025-04-22T16:23:41.846Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: xwikisas Products: application-licensing Problem Types: CWE-862 Description: The XWiki licensor application, which manages and enforce application licenses for paid extensions, includes the document `Licenses.Code.LicenseJSON` that provides information for admins regarding active licenses. This document is public and thus exposes this information publicly. The information includes the instance's id as well as first and last name and email of the license owner. This is a leak of information that isn
the instance's id as well as first and last name and email of the license owner. This is a leak of information that isn't supposed to be public. The instance id allows associating data on the active installs data with the concrete XWiki instance. Active installs assures that "there's no way to find who's having a given UUID" (referring to the instance id). Further, the information who the license owner is and information about the obtained licenses can be used for targeted phishing attacks. Also, while user information is normally public, email addresses might only be displayed obfuscated, depending on the configuration. This has been fixed in Application Licensing 1.24.2. There are no know
layed obfuscated, depending on the configuration. This has been fixed in Application Licensing 1.24.2. There are no known workarounds besides upgrading. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/xwikisas/application-licensing/security/advisories/GHSA-4hfp-m9gv-m753 - https://github.com/xwikisas/application-licensing/commit/d168fb88fc0d121bf95e769ea21c55c00bebe5a6 - https://extensions.xwiki.org/xwiki/bin/view/Extension/Active%20Installs%202%20API
CVE ID: CVE-2024-26139 State: PUBLISHED Published: 2024-05-23T11:47:44.488Z Last Updated: 2024-08-01T23:59:32.541Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: OpenCTI-Platform Products: opencti Problem Types: CWE-284, CWE-657 Description: OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionality, an authenticated attacker with low privileges can gain administrative privileges on the web application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/OpenCTI-
n. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-qx4j-f4f2-vjw9
CVE ID: CVE-2024-26140 State: PUBLISHED Published: 2024-02-20T21:47:08.027Z Last Updated: 2024-08-01T23:59:32.684Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: yetanalytics Products: lrs Problem Types: CWE-79 Description: com.yetanalytics/lrs is the Yet Analytics Core LRS Library. Prior to version 1.2.17 of the LRS library and version 0.7.5 of SQL LRS, a maliciously crafted xAPI statement could be used to perform script or other tag injection in the LRS Statement Browser. The problem is patched in version 1.2.17 of the LRS library and version 0.7.5 of SQL LRS. No known workarounds exist. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Con
rsion 0.7.5 of SQL LRS. No known workarounds exist. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yetanalytics/lrs/security/advisories/GHSA-7rw2-3hhp-rc46 - https://github.com/yetanalytics/lrs/commit/d7f4883bc2252337d25e8bba2c7f9d172f5b0621 - https://clojars.org/com.yetanalytics/lrs/versions/1.2.17 - https://github.com/yetanalytics/lrs/releases/tag/v1.2.17 - https://github.com/yetanalytics/lrsql/releases/tag/v0.7.5
CVE ID: CVE-2024-26141 State: PUBLISHED Published: 2024-02-28T23:28:10.503Z Last Updated: 2025-02-13T17:41:04.867Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: rack Products: rack Problem Types: CWE-400 Description: Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such large responses could lead to a denial of service issue. Vulnerable applications will use the `Rack::File` middleware or the `Rack::Utils.byte_ranges` methods (this includes Rails applications). The vulnerability is fixed in 3.0.9.1 and 2.2.8.1. Additional Analyst Notes: - CVE Prog
is includes Rails applications). The vulnerability is fixed in 3.0.9.1 and 2.2.8.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rack/rack/security/advisories/GHSA-xj5v-6v4g-jfw6 - https://github.com/rack/rack/commit/4849132bef471adb21131980df745f4bb84de2d9 - https://github.com/rack/rack/commit/62457686b26d33a15a254c7768c2076e8e02b48b - https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944 - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26141.yml - https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html - https://security.netapp.com/advisory/ntap-2024
ml - https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html - https://security.netapp.com/advisory/ntap-20240510-0007/
CVE ID: CVE-2024-26142 State: PUBLISHED Published: 2024-02-27T15:25:44.103Z Last Updated: 2025-02-13T17:41:05.743Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: rails Products: rails Problem Types: CWE-1333 Description: Rails is a web-application framework. Starting in version 7.1.0, there is a possible ReDoS vulnerability in the Accept header parsing routines of Action Dispatch. This vulnerability is patched in 7.1.3.1. Ruby 3.2 has mitigations for this problem, so Rails applications using Ruby 3.2 or newer are unaffected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rails/rails/security/adviso
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rails/rails/security/advisories/GHSA-jjhx-jhvp-74wq - https://github.com/rails/rails/commit/b4d3bfb5ed8a5b5a90aad3a3b28860c7a931e272 - https://discuss.rubyonrails.org/t/possible-redos-vulnerability-in-accept-header-parsing-in-action-dispatch/84946 - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26142.yml - https://security.netapp.com/advisory/ntap-20240503-0003/
CVE ID: CVE-2024-26143 State: PUBLISHED Published: 2024-02-27T15:33:54.643Z Last Updated: 2025-02-13T17:41:06.380Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: rails Products: rails Problem Types: CWE-79 Description: Rails is a web-application framework. There is a possible XSS vulnerability when using the translation helpers in Action Controller. Applications using translation methods like translate, or t on a controller, with a key ending in "_html", a :default key which contains untrusted user input, and the resulting string is used in a view, may be susceptible to an XSS vulnerability. The vulnerability is fixed in 7.1.3.1 and 7.0.8.1. Additional Anal
n a view, may be susceptible to an XSS vulnerability. The vulnerability is fixed in 7.1.3.1 and 7.0.8.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/rails/rails/security/advisories/GHSA-9822-6m93-xqf4 - https://github.com/rails/rails/commit/4c83b331092a79d58e4adffe4be5f250fa5782cc - https://github.com/rails/rails/commit/5187a9ef51980ad1b8e81945ebe0462d28f84f9e - https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947 - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26143.yml - https://security.netapp.com/advisory/ntap-20240510-0004/
CVE ID: CVE-2024-26144 State: PUBLISHED Published: 2024-02-27T15:44:04.166Z Last Updated: 2025-02-13T17:41:06.989Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: rails Products: rails Problem Types: CWE-200 Description: Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also sets Cache-Control to public. Certain proxies may cache the Set-Cookie, leading to an information leak. The vulnerability is fixed in 7.0.8.1 and 6.1.7.7. Additional Analyst Notes: - CVE
okie, leading to an information leak. The vulnerability is fixed in 7.0.8.1 and 6.1.7.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rails/rails/security/advisories/GHSA-8h22-8cf7-hq6g - https://github.com/rails/rails/commit/723f54566023e91060a67b03353e7c03e7436433 - https://github.com/rails/rails/commit/78fe149509fac5b05e54187aaaef216fbb5fd0d3 - https://discuss.rubyonrails.org/t/possible-sensitive-session-information-leak-in-active-storage/84945 - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activestorage/CVE-2024-26144.yml - https://security.netapp.com/advisory/ntap-20240510-0013/
CVE ID: CVE-2024-26145 State: PUBLISHED Published: 2024-02-21T17:19:11.128Z Last Updated: 2024-08-27T15:08:13.973Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: discourse Products: discourse-calendar Problem Types: CWE-863 Description: Discourse Calendar adds the ability to create a dynamic calendar in the first post of a topic on Discourse. Uninvited users are able to gain access to private events by crafting a request to update their attendance. This problem is resolved in commit dfc4fa15f340189f177a1d1ab2cc94ffed3c1190. As a workaround, one may use post visibility to limit access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
, one may use post visibility to limit access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse-calendar/security/advisories/GHSA-4hh7-6m34-p2jp - https://github.com/discourse/discourse-calendar/commit/dfc4fa15f340189f177a1d1ab2cc94ffed3c1190
CVE ID: CVE-2024-26146 State: PUBLISHED Published: 2024-02-28T23:28:01.158Z Last Updated: 2025-02-13T17:41:07.669Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: rack Products: rack Problem Types: CWE-1333 Description: Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1. Additional Analyst Notes: - CISA ADP Vulnrichm
d. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f - https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716 - https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582 - https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f - https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd - https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942 - https://github.com/rubysec/ruby-advisory-db
rg/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942 - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml - https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html - https://security.netapp.com/advisory/ntap-20240510-0006/
CVE ID: CVE-2024-26147 State: PUBLISHED Published: 2024-02-21T22:21:42.658Z Last Updated: 2024-08-14T19:55:28.698Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: helm Products: helm Problem Types: CWE-457 Description: Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an uninitialized variable vulnerability when Helm parses index and plugin yaml files missing expected content. When either an `index.yaml` file or a plugins `plugin.yaml` file were missing all metadata a panic would occur in Helm. In the Helm SDK, this is found when using the `LoadIndexFile` or `DownloadIndexFile` functions in the `repo` package or the `LoadDir
SDK, this is found when using the `LoadIndexFile` or `DownloadIndexFile` functions in the `repo` package or the `LoadDir` function in the `plugin` package. For the Helm client this impacts functions around adding a repository and all Helm functions if a malicious plugin is added as Helm inspects all known plugins on each invocation. This issue has been resolved in Helm v3.14.2. If a malicious plugin has been added which is causing all Helm client commands to panic, the malicious plugin can be manually removed from the filesystem. If using Helm SDK versions prior to 3.14.2, calls to affected functions can use `recover` to catch the panic. Additional Analyst Notes: - CVE Program Container: - C
calls to affected functions can use `recover` to catch the panic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/helm/helm/security/advisories/GHSA-r53h-jv2g-vpx6 - https://github.com/helm/helm/commit/bb4cc9125503a923afb7988f3eb478722a8580af
CVE ID: CVE-2024-26148 State: PUBLISHED Published: 2024-02-21T22:35:17.041Z Last Updated: 2024-08-22T13:27:05.633Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: pinterest Products: querybook Problem Types: CWE-79 Description: Querybook is a user interface for querying big data. Prior to version 3.31.1, there is a vulnerability in Querybook's rich text editor that enables users to input arbitrary URLs without undergoing necessary validation. This particular security flaw allows the use of `javascript:` protocol which can potentially trigger arbitrary client-side execution. The most extreme exploit of this flaw could occur when an admin user unknowingly clic