Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-27075 State: PUBLISHED Published: 2024-05-01T13:04:44.494Z Last Updated: 2025-05-04T12:55:28.632Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: avoid stack overflow warnings with clang A previous patch worked around a KASAN issue in stv0367, now a similar problem showed up with clang: drivers/media/dvb-frontends/stv0367.c:1222:12: error: stack frame size (3624) exceeds limit (2048) in 'stv0367ter_set_frontend' [-Werror,-Wframe-larger-than] 1214 | static int stv0367ter_set_frontend(struct dvb_frontend *fe) Rework the stv0367_writereg() function to be simpler and mark both register access f
t_frontend(struct dvb_frontend *fe) Rework the stv0367_writereg() function to be simpler and mark both register access functions as noinline_for_stack so the temporary i2c_msg structures do not get duplicated on the stack when KASAN_STACK is enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/c073c8cede5abd3836e83d70d72606d11d0759d4 - https://git.kernel.org/stable/c/fa8b472952ef46eb632825051078c21ce0cafe55 - https://git.kernel.org/stable/c/fb07104a02e87c06c39914d13ed67fd8f839ca82 - https://git.kernel.org/stable/c/d20b64f156de5d10410963fe238d82a4e7e97a2f - https://git.kernel.org/stable/c/107052a8cfeff3a97326277192b
rnel.org/stable/c/d20b64f156de5d10410963fe238d82a4e7e97a2f - https://git.kernel.org/stable/c/107052a8cfeff3a97326277192b4f052e4860a8a - https://git.kernel.org/stable/c/8fad9c5bb00d3a9508d18bbfe832e33a47377730 - https://git.kernel.org/stable/c/d6b4895197ab5a47cb81c6852d49320b05052960 - https://git.kernel.org/stable/c/ed514ecf4f29c80a2f09ae3c877059b401efe893 - https://git.kernel.org/stable/c/7a4cf27d1f0538f779bf31b8c99eda394e277119
CVE ID: CVE-2024-27076 State: PUBLISHED Published: 2024-05-01T13:04:48.074Z Last Updated: 2025-05-04T09:03:47.372Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak Free the memory allocated in v4l2_ctrl_handler_init on release. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/8c2e4efe1278cd2b230cdbf90a6cefbf00acc282 - https://git.kernel.org/stable/c/5d9fe604bf9b5b09d2215225df55f22a4cbbc684 - https://git.kernel.org/stable/c/b1d0eebaf87cc9ccd05f779ec4a0589f95d6c18b - https://git.kernel.org/stable/c/8df9
bbc684 - https://git.kernel.org/stable/c/b1d0eebaf87cc9ccd05f779ec4a0589f95d6c18b - https://git.kernel.org/stable/c/8df9a3c7044b847e9c4dc7e683fd64c6b873f328 - https://git.kernel.org/stable/c/d164ddc21e986dd9ad614b4b01746e5457aeb24f - https://git.kernel.org/stable/c/42492b00156c03a79fd4851190aa63045d6a15ce - https://git.kernel.org/stable/c/6c92224721a439d6350db5933a1060768dcd565e - https://git.kernel.org/stable/c/4797a3dd46f220e6d83daf54d70c5b33db6deb01
CVE ID: CVE-2024-27077 State: PUBLISHED Published: 2024-05-01T13:04:51.518Z Last Updated: 2025-05-04T09:03:48.825Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity The entity->name (i.e. name) is allocated in v4l2_m2m_register_entity but isn't freed in its following error-handling paths. This patch adds such deallocation to prevent memleak of entity->name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/3dd8abb0ed0e0a7c66d6d677c86ccb188cc39333 - https://git.kernel.org/stable/c/0175f2d34c85744f9a
://git.kernel.org/stable/c/3dd8abb0ed0e0a7c66d6d677c86ccb188cc39333 - https://git.kernel.org/stable/c/0175f2d34c85744f9ad6554f696cf0afb5bd04e4 - https://git.kernel.org/stable/c/afd2a82fe300032f63f8be5d6cd6981e75f8bbf2 - https://git.kernel.org/stable/c/dc866b69cc51af9b8509b4731b8ce2a4950cd0ef - https://git.kernel.org/stable/c/0c9550b032de48d6a7fa6a4ddc09699d64d9300d - https://git.kernel.org/stable/c/90029b9c979b60de5cb2b70ade4bbf61d561bc5d - https://git.kernel.org/stable/c/5dc319cc3c4f7b74f7dfba349aa26f87efb52458 - https://git.kernel.org/stable/c/9c23ef30e840fedc66948299509f6c2777c9cf4f - https://git.kernel.org/stable/c/8f94b49a5b5d386c038e355bef6347298aabd211
CVE ID: CVE-2024-27078 State: PUBLISHED Published: 2024-05-01T13:04:54.979Z Last Updated: 2025-05-04T09:03:50.095Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: fix some memleaks in tpg_alloc In tpg_alloc, resources should be deallocated in each and every error-handling paths, since they are allocated in for statements. Otherwise there would be memleaks because tpg_free is called only when tpg_alloc return 0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/0de691ff547d86dd54c24b40a81f9c925df8dd77 - https://git.kernel.org/stable/c/8269ab1
es: - https://git.kernel.org/stable/c/0de691ff547d86dd54c24b40a81f9c925df8dd77 - https://git.kernel.org/stable/c/8269ab16415f2065cd792c49b0475543936cbd79 - https://git.kernel.org/stable/c/94303a06e1852a366e9671fff46d19459f88cb28 - https://git.kernel.org/stable/c/770a57922ce36a8476c43f7400b6501c554ea511 - https://git.kernel.org/stable/c/6bf5c2fade8ed53b2d26fa9875e5b04f36c7145d - https://git.kernel.org/stable/c/4c86c772fef06f5d7a66151bac42366825db0941 - https://git.kernel.org/stable/c/31096da07933598da8522c54bd007376fb152a09 - https://git.kernel.org/stable/c/622b1cf38521569869c8f7b9fbe9e4f1a289add7 - https://git.kernel.org/stable/c/8cf9c5051076e0eb958f4361d50d8b0c3ee6691c
CVE ID: CVE-2024-27079 State: PUBLISHED Published: 2024-05-01T13:04:58.511Z Last Updated: 2025-05-04T09:03:51.621Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix NULL domain on device release In the kdump kernel, the IOMMU operates in deferred_attach mode. In this mode, info->domain may not yet be assigned by the time the release_device function is called. It leads to the following crash in the crash kernel: BUG: kernel NULL pointer dereference, address: 000000000000003c ... RIP: 0010:do_raw_spin_lock+0xa/0xa0 ... _raw_spin_lock_irqsave+0x1b/0x30 intel_iommu_release_device+0x96/0x170 iommu_deinit_device+0x39/0xf
in_lock+0xa/0xa0 ... _raw_spin_lock_irqsave+0x1b/0x30 intel_iommu_release_device+0x96/0x170 iommu_deinit_device+0x39/0xf0 __iommu_group_remove_device+0xa0/0xd0 iommu_bus_notifier+0x55/0xb0 notifier_call_chain+0x5a/0xd0 blocking_notifier_call_chain+0x41/0x60 bus_notify+0x34/0x50 device_del+0x269/0x3d0 pci_remove_bus_device+0x77/0x100 p2sb_bar+0xae/0x1d0 ... i801_probe+0x423/0x740 Use the release_domain mechanism to fix it. The scalable mode context entry which is not part of release domain should be cleared in release_device(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/333fe86968482ca701c609af590003bcea450e8f - ht
nt: - CVE Program Container: References: - https://git.kernel.org/stable/c/333fe86968482ca701c609af590003bcea450e8f - https://git.kernel.org/stable/c/81e921fd321614c2ad8ac333b041aae1da7a1c6d
CVE ID: CVE-2024-27080 State: PUBLISHED Published: 2024-05-01T13:05:02.022Z Last Updated: 2025-05-04T12:55:29.707Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race when detecting delalloc ranges during fiemap For fiemap we recently stopped locking the target extent range for the whole duration of the fiemap call, in order to avoid a deadlock in a scenario where the fiemap buffer happens to be a memory mapped range of the same file. This use case is very unlikely to be useful in practice but it may be triggered by fuzz testing (syzbot, etc). This however introduced a race that makes us miss delalloc ranges for file
y be triggered by fuzz testing (syzbot, etc). This however introduced a race that makes us miss delalloc ranges for file regions that are currently holes, so the caller of fiemap will not be aware that there's data for some file regions. This can be quite serious for some use cases - for example in coreutils versions before 9.0, the cp program used fiemap to detect holes and data in the source file, copying only regions with data (extents or delalloc) from the source file to the destination file in order to preserve holes (see the documentation for its --sparse command line option). This means that if cp was used with a source file that had delalloc in a hole, the destination file could end
option). This means that if cp was used with a source file that had delalloc in a hole, the destination file could end up without that data, which is effectively a data loss issue, if it happened to hit the race described below. The race happens like this: 1) Fiemap is called, without the FIEMAP_FLAG_SYNC flag, for a file that has delalloc in the file range [64M, 65M[, which is currently a hole; 2) Fiemap locks the inode in shared mode, then starts iterating the inode's subvolume tree searching for file extent items, without having the whole fiemap target range locked in the inode's io tree - the change introduced recently by commit b0ad381fa769 ("btrfs: fix deadlock with fiemap and extent
he inode's io tree - the change introduced recently by commit b0ad381fa769 ("btrfs: fix deadlock with fiemap and extent locking"). It only locks ranges in the io tree when it finds a hole or prealloc extent since that commit; 3) Note that fiemap clones each leaf before using it, and this is to avoid deadlocks when locking a file range in the inode's io tree and the fiemap buffer is memory mapped to some file, because writing to the page with btrfs_page_mkwrite() will wait on any ordered extent for the page's range and the ordered extent needs to lock the range and may need to modify the same leaf, therefore leading to a deadlock on the leaf; 4) While iterating the file extent items in the cl
to modify the same leaf, therefore leading to a deadlock on the leaf; 4) While iterating the file extent items in the cloned leaf before finding the hole in the range [64M, 65M[, the delalloc in that range is flushed and its ordered extent completes - meaning the corresponding file extent item is in the inode's subvolume tree, but not present in the cloned leaf that fiemap is iterating over; 5) When fiemap finds the hole in the [64M, 65M[ range by seeing the gap in the cloned leaf (or a file extent item with disk_bytenr == 0 in case the NO_HOLES feature is not enabled), it will lock that file range in the inode's io tree and then search for delalloc by checking for the EXTENT_DELALLOC bit in
will lock that file range in the inode's io tree and then search for delalloc by checking for the EXTENT_DELALLOC bit in the io tree for that range and ordered extents (with btrfs_find_delalloc_in_range()). But it finds nothing since the delalloc in that range was already flushed and the ordered extent completed and is gone - as a result fiemap will not report that there's delalloc or an extent for the range [64M, 65M[, so user space will be mislead into thinking that there's a hole in that range. This could actually be sporadically triggered with test case generic/094 from fstests, which reports a missing extent/delalloc range like this: generic/094 2s ... - output mismatch (see /home/fdman
fstests, which reports a missing extent/delalloc range like this: generic/094 2s ... - output mismatch (see /home/fdmanana/git/hub/xfstests/results//generic/094.out.bad) --- tests/generic/094.out 2020-06-10 19:29:03.830519425 +0100 +++ /home/fdmanana/git/hub/xfstests/results//generic/094.out.bad 2024-02-28 11:00:00.381071525 +0000 @@ -1,3 +1,9 @@ QA output created by 094 fiemap run with sync fiemap run without sync +ERROR: couldn't find extent at 7 +map is 'HHDDHPPDPHPH' +logical: [ 5.. 6] phys: ---truncated--- Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/49d640d2946c35a17b051d54171a032dd95b0f50 - https://git.kerne
am Container: References: - https://git.kernel.org/stable/c/49d640d2946c35a17b051d54171a032dd95b0f50 - https://git.kernel.org/stable/c/ced63fffd63072c0ca55d5a451010d71bf08c0b3 - https://git.kernel.org/stable/c/978b63f7464abcfd364a6c95f734282c50f3decf
CVE ID: CVE-2024-27081 State: PUBLISHED Published: 2024-02-26T16:29:21.620Z Last Updated: 2024-08-27T20:29:19.155Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: esphome Products: esphome Problem Types: CWE-22 Description: ESPHome is a system to control your ESP8266/ESP32. A security misconfiguration in the edit configuration file API in the dashboard component of ESPHome version 2023.12.9 (command line installation) allows authenticated remote attackers to read and write arbitrary files under the configuration directory rendering remote code execution possible. This vulnerability is patched in 2024.2.1. Additional Analyst Notes: - CVE Program Container: - CI
e execution possible. This vulnerability is patched in 2024.2.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/esphome/esphome/security/advisories/GHSA-8p25-3q46-8q2p - https://github.com/esphome/esphome/commit/d814ed1d4adc71fde47c4df41215bee449884513
CVE ID: CVE-2024-27082 State: PUBLISHED Published: 2024-05-13T13:49:10.484Z Last Updated: 2024-08-02T00:27:57.834Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H) Vendors: Cacti Products: cacti Problem Types: CWE-79 Description: Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-site scripting, a type of cross-site scripting where malicious scripts are permanently stored on a target server and served to users who access a particular page. Version 1.2.27 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gi
atch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Cacti/cacti/security/advisories/GHSA-j868-7vjp-rp9h
CVE ID: CVE-2024-27083 State: PUBLISHED Published: 2024-02-28T15:34:02.490Z Last Updated: 2024-08-08T19:24:18.993Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: dpgaspar Products: Flask-AppBuilder Problem Types: CWE-79 Description: Flask-AppBuilder is an application development framework, built on top of Flask. A Cross-Site Scripting (XSS) vulnerability has been discovered on the OAuth login page. An attacker could trick a user to follow a specially crafted URL to the OAuth login page. This URL could inject and execute malicious javascript code that would get executed on the user's browser. This issue was introduced on 4.1.4 and patched on 4.2.1. Additiona
t code that would get executed on the user's browser. This issue was introduced on 4.1.4 and patched on 4.2.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-fqxj-46wg-9v84 - https://github.com/dpgaspar/Flask-AppBuilder/commit/3d17741886e4b3c384d0570de69689e4117aa812
CVE ID: CVE-2024-27084 State: REJECTED Published: N/A Last Updated: 2024-02-26T17:26:26.605Z Description: No description available.
CVE ID: CVE-2024-27085 State: PUBLISHED Published: 2024-03-15T19:22:46.937Z Last Updated: 2024-08-21T23:12:39.336Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: discourse Products: discourse Problem Types: CWE-400 Description: Discourse is an open source platform for community discussion. In affected versions users that are allowed to invite others can inject arbitrarily large data in parameters used in the invite route. The problem has been patched in the latest version of Discourse. Users are advised to upgrade. Users unable to upgrade should disable invites or restrict access to them using the `invite allowed groups` site setting. Additional Analyst Not
should disable invites or restrict access to them using the `invite allowed groups` site setting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-cvp5-h7p8-mjj6 - https://github.com/discourse/discourse/commit/62ea382247c1f87361d186392c45ca74c83be295
CVE ID: CVE-2024-27086 State: PUBLISHED Published: 2024-04-16T21:34:25.839Z Last Updated: 2024-08-02T00:27:57.873Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: AzureAD Products: microsoft-authentication-library-for-dotnet Problem Types: CWE-926, CWE-863 Description: The MSAL library enabled acquisition of security tokens to call protected APIs. MSAL.NET applications targeting Xamarin Android and .NET Android (e.g., MAUI) using the library from versions 4.48.0 to 4.60.0 are impacted by a low severity vulnerability. A malicious application running on a customer Android device can cause local denial of service against applications that were built using MSAL.NET
nning on a customer Android device can cause local denial of service against applications that were built using MSAL.NET for authentication on the same device (i.e., prevent the user of the legitimate application from logging in) due to incorrect activity export configuration. MSAL.NET version 4.60.1 includes the fix. As a workaround, a developer may explicitly mark the MSAL.NET activity non-exported. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/security/advisories/GHSA-x674-v45j-fwxw - https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/commit/413e319472ccf4
ories/GHSA-x674-v45j-fwxw - https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/commit/413e319472ccf48c86647f19fa2aa49ff6038488
CVE ID: CVE-2024-27087 State: PUBLISHED Published: 2024-02-26T16:44:31.105Z Last Updated: 2024-08-02T00:27:57.813Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: getkirby Products: kirby Problem Types: CWE-79 Description: Kirby is a content management system. The new link field introduced in Kirby 4 allows several different link types that each validate the entered link to the relevant URL format. It also includes a "Custom" link type for advanced use cases that don't fit any of the pre-defined link formats. As the "Custom" link type is meant to be flexible, it also allows the javascript: URL scheme. In some use cases this can be intended, but it can also b
ant to be flexible, it also allows the javascript: URL scheme. In some use cases this can be intended, but it can also be misused by attackers to execute arbitrary JavaScript code when a user or visitor clicks on a link that is generated from the contents of the link field. This vulnerability is patched in 4.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/getkirby/kirby/security/advisories/GHSA-63h4-w25c-3qv4 - https://github.com/getkirby/kirby/commit/cda3dd9a15228d35e62ff86cfa87a67e7c687437
CVE ID: CVE-2024-27088 State: PUBLISHED Published: 2024-02-26T16:50:05.714Z Last Updated: 2024-08-09T18:21:21.894Z Severity: NONE (CVSS N/A CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N) Vendors: medikoo Products: es5-ext Problem Types: CWE-400, CWE-1333 Description: es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into `function#copy` or `function#toStringTokens` may cause the script to stall. The vulnerability is patched in v0.10.63. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/medikoo/es5-ext/security/advisories/GHSA-4gmj-3p3h-gm8h - https://github.com/medikoo/e
References: - https://github.com/medikoo/es5-ext/security/advisories/GHSA-4gmj-3p3h-gm8h - https://github.com/medikoo/es5-ext/issues/201 - https://github.com/medikoo/es5-ext/commit/3551cdd7b2db08b1632841f819d008757d28e8e2 - https://github.com/medikoo/es5-ext/commit/a52e95736690ad1d465ebcd9791d54570e294602
CVE ID: CVE-2024-27089 State: REJECTED Published: N/A Last Updated: 2024-02-26T20:17:10.631Z Description: No description available.
CVE ID: CVE-2024-27090 State: PUBLISHED Published: 2024-07-10T18:25:26.241Z Last Updated: 2024-08-02T00:27:57.819Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: decidim Products: decidim Problem Types: CWE-200 Description: Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. If an attacker can infer the slug or URL of an unpublished or private resource, and this resource can be embbeded (such as a Participatory Process, an Assembly, a Proposal, a Result, etc), then some data of this resource could be accessed. This vulnerability is fixed in
Assembly, a Proposal, a Result, etc), then some data of this resource could be accessed. This vulnerability is fixed in 0.27.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/decidim/decidim/security/advisories/GHSA-qcj6-vxwx-4rqv - https://github.com/decidim/decidim/pull/12528 - https://github.com/decidim/decidim/commit/1756fa639ef393ca8e8bb16221cab2e2e7875705 - https://github.com/decidim/decidim/releases/tag/v0.27.6
CVE ID: CVE-2024-27091 State: PUBLISHED Published: 2024-03-27T13:01:49.004Z Last Updated: 2024-08-02T00:27:57.875Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: GeoNode Products: geonode Problem Types: CWE-79 Description: GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. An issue exists within GEONODE where the current rich text editor is vulnerable to Stored XSS. The applications cookies are set securely, but it is possible to retrieve a victims CSRF token and issue a request to change another user's email address to perform a full account takeover. Due to the script element not impacting
uest to change another user's email address to perform a full account takeover. Due to the script element not impacting the CORS policy, requests will succeed. This vulnerability is fixed in 4.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/GeoNode/geonode/security/advisories/GHSA-rwcv-whm8-fmxm - https://github.com/GeoNode/geonode/commit/e53bdeff331f4b577918927d60477d4b50cca02f
CVE ID: CVE-2024-27092 State: PUBLISHED Published: 2024-02-26T19:40:57.427Z Last Updated: 2024-08-02T00:27:57.835Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: hoppscotch Products: hoppscotch Problem Types: CWE-20, CWE-79 Description: Hoppscotch is an API development ecosystem. Due to lack of validation for fields like Label (Edit Team) - TeamName, bad actors can send emails with Spoofed Content as Hoppscotch. Part of payload (external link) is presented in clickable form - easier to achieve own goals by malicious actors. This issue is fixed in 2023.12.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git
ixed in 2023.12.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-8r6h-8r68-q3pp - https://github.com/hoppscotch/hoppscotch/commit/6827e97ec583b2534cdc1c2f33fa44973a0c2bf5 - https://github.com/hoppscotch/hoppscotch/blob/main/packages/hoppscotch-backend/src/team-invitation/team-invitation.service.ts#L153