Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-62763 State: PUBLISHED Published: 2025-10-21T00:00:00.000Z Last Updated: 2025-10-21T18:33:57.159Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: Zimbra Products: Collaboration Problem Types: CWE-918 Description: Zimbra Collaboration (ZCS) before 10.1.12 allows SSRF because of the configuration of the chat proxy. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.12 - https://blog.zimbra.com/2025/10/patch-release-update-zimbra-10-1-12/
CVE ID: CVE-2025-62765 State: PUBLISHED Published: 2025-11-14T23:27:55.174Z Last Updated: 2025-11-17T16:54:56.898Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: General Industrial Controls Products: Lynx+ Gateway Problem Types: CWE-319 Description: General Industrial Controls Lynx+ Gateway is vulnerable to a cleartext transmission vulnerability that could allow an attacker to observe network traffic to obtain sensitive information, including plaintext credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-08 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/20
cisa.gov/news-events/ics-advisories/icsa-25-317-08 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-317-08.json
CVE ID: CVE-2025-62771 State: PUBLISHED Published: 2025-10-22T00:00:00.000Z Last Updated: 2025-10-22T17:57:39.662Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mercku Products: M6a Problem Types: CWE-352 Description: Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2025/Oct/10 - https://blog.nullvoid.me/posts/mercku-exploits/
CVE ID: CVE-2025-62772 State: PUBLISHED Published: 2025-10-22T00:00:00.000Z Last Updated: 2025-10-22T15:52:01.896Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Mercku Products: M6a Problem Types: CWE-305 Description: On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2025/Oct/10 - https://blog.nullvoid.me/posts/mercku-exploits/
CVE ID: CVE-2025-62773 State: PUBLISHED Published: 2025-10-22T00:00:00.000Z Last Updated: 2025-10-22T15:49:34.134Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: Mercku Products: M6a Problem Types: CWE-912 Description: Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request by an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2025/Oct/10 - https://blog.nullvoid.me/posts/mercku-exploits/
CVE ID: CVE-2025-62774 State: PUBLISHED Published: 2025-10-22T00:00:00.000Z Last Updated: 2025-10-22T15:48:43.953Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Mercku Products: M6a Problem Types: CWE-331 Description: On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2025/Oct/10 - https://blog.nullvoid.me/posts/mercku-exploits/
CVE ID: CVE-2025-62775 State: PUBLISHED Published: 2025-10-22T00:00:00.000Z Last Updated: 2025-10-22T15:47:34.254Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Mercku Products: M6a Problem Types: CWE-669 Description: Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2025/Oct/10 - https://blog.nullvoid.me/posts/mercku-exploits/
CVE ID: CVE-2025-62776 State: PUBLISHED Published: 2025-10-29T04:29:44.387Z Last Updated: 2025-10-29T13:42:33.180Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Wireless Tsukamoto Co., Ltd. Products: WTW EAGLE (for Windows) Problem Types: CWE-427 Description: The installer of WTW EAGLE (for Windows) 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wtw.support/wtw/eagle-app-cms-win/ - https://jvn.jp/en/jp/JVN23394606/
CVE ID: CVE-2025-62777 State: PUBLISHED Published: 2025-10-28T04:53:00.768Z Last Updated: 2025-10-28T20:03:14.159Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: PLANEX COMMUNICATIONS INC. Products: MZK-DP300N Problem Types: CWE-798 Description: Use of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07 and earlier, which may allow an attacker within the local network to log in to the affected device via Telnet and execute arbitrary commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.planex.co.jp/products/mzk-dp300n/ - https://jvn.jp/en/jp/JVN00021602/
CVE ID: CVE-2025-62778 State: PUBLISHED Published: 2025-10-27T21:16:06.220Z Last Updated: 2025-10-28T13:38:07.740Z Vendors: frappe Products: lms Problem Types: CWE-425 Description: Frappe Learning is a learning management system. A security issue was identified in Frappe Learning 2.39.1 and earlier, where students were able to access the Quiz Form if they had the URL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/frappe/lms/security/advisories/GHSA-8xvv-6v89-xxgx - https://github.com/frappe/lms/commit/8749e21744547ae32f729bde05c854113e126750
CVE ID: CVE-2025-62779 State: PUBLISHED Published: 2025-10-27T21:19:03.978Z Last Updated: 2025-10-28T15:17:15.768Z Vendors: frappe Products: lms Problem Types: CWE-79 Description: Frappe Learning is a learning system that helps users structure their content. In Frappe Learning 2.39.1 and earlier, users were able to add HTML through input fields in the Job Form. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/frappe/lms/security/advisories/GHSA-j6h8-qg65-3fpx - https://github.com/frappe/lms/commit/75001b494d5d8198eab20b0cd85d5bd719448ea3
CVE ID: CVE-2025-62780 State: PUBLISHED Published: 2025-11-10T21:18:52.945Z Last Updated: 2025-11-10T21:43:52.020Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: dgtlmoon Products: changedetection.io Problem Types: CWE-79 Description: changedetection.io is a free open source web page change detection tool. A Stored Cross Site Scripting is present in changedetection.io Watch update API in versions prior to 0.50.34 due to insufficient security checks. Two scenarios are possible. In the first, an attacker can insert a new watch with an arbitrary URL which really points to a web page. Once the HTML content is retrieved, the attacker updates the URL with a JavaScri
URL which really points to a web page. Once the HTML content is retrieved, the attacker updates the URL with a JavaScript payload. In the second, an attacker substitutes the URL in an existing watch with a new URL that is in reality a JavaScript payload. When the user clicks on *Preview* and then on the malicious link, the JavaScript malicious code is executed. Version 0.50.34 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-4c3j-3h7v-22q9
CVE ID: CVE-2025-62781 State: PUBLISHED Published: 2025-10-27T21:22:06.997Z Last Updated: 2025-10-28T15:08:38.476Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: THM-Health Products: PILOS Problem Types: CWE-613 Description: PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. Prior to 4.8.0, users with a local account can change their password while logged in. When doing so, all other active sessions are terminated, except for the currently active one. However, the current session’s token remains valid and is not refreshed. If an attacker has previously obtained this session token through another vulnerability, changing the
is not refreshed. If an attacker has previously obtained this session token through another vulnerability, changing the password will not invalidate their access. As a result, the attacker can continue to act as the user even after the password has been changed. This vulnerability is fixed in 4.8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/THM-Health/PILOS/security/advisories/GHSA-m8w5-8w3h-72wm
CVE ID: CVE-2025-62782 State: PUBLISHED Published: 2025-10-27T20:50:07.579Z Last Updated: 2025-10-28T14:33:18.973Z Vendors: Phoenix616 Products: InventoryGui Problem Types: CWE-837 Description: InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain a vulnerability where GUIs using GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved in version 1.6.4-SNAPSHOT. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Phoenix616/InventoryGui/security/advisories/GHSA-rgvh-4m82-fvjq - https://github.com/Phoenix616/In
- https://github.com/Phoenix616/InventoryGui/security/advisories/GHSA-rgvh-4m82-fvjq - https://github.com/Phoenix616/InventoryGui/issues/51 - https://github.com/Phoenix616/InventoryGui/commit/00e684bd689ebc60bcb5b83ce4ef3c5a01778494
CVE ID: CVE-2025-62783 State: PUBLISHED Published: 2025-10-27T20:54:36.254Z Last Updated: 2025-10-28T14:32:27.050Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: Phoenix616 Products: InventoryGui Problem Types: CWE-837 Description: InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.1-SNAPSHOT and earlier contain a vulnerability where any plugin using the `GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved in version 1.6.2-SNAPSHOT. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Phoenix616/Inven
ion 1.6.2-SNAPSHOT. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Phoenix616/InventoryGui/security/advisories/GHSA-598q-jw82-5w66 - https://github.com/Phoenix616/InventoryGui/issues/48 - https://github.com/Phoenix616/InventoryGui/commit/27a52ef6d934a1c232e110e0010e4aa810c27029
CVE ID: CVE-2025-62784 State: PUBLISHED Published: 2025-10-27T20:59:22.085Z Last Updated: 2025-10-28T14:32:11.543Z Vendors: Phoenix616 Products: InventoryGui Problem Types: CWE-837 Description: InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved in version 1.6.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Phoenix616/InventoryGui/security/advisories/GHSA-7wh
st Notes: - CISA ADP Vulnrichment: References: - https://github.com/Phoenix616/InventoryGui/security/advisories/GHSA-7whh-79j3-7c55 - https://github.com/Phoenix616/InventoryGui/commit/690fc91d137c6cc04f6ed3a89449050964dd8cb9
CVE ID: CVE-2025-62785 State: PUBLISHED Published: 2025-10-29T15:37:43.108Z Last Updated: 2025-10-29T16:10:18.690Z Vendors: wazuh Products: wazuh Problem Types: CWE-252, CWE-476 Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. fillData() implementation does not check whether value is NULL or not before calling os_strdup() on it. A compromised agent can cause a crash of analysisd by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can cause analysisd to crash and make it unavailable. This vulnerability is fixed in 4.10.2. Additional Analyst Notes:
can cause analysisd to crash and make it unavailable. This vulnerability is fixed in 4.10.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wazuh/wazuh/security/advisories/GHSA-mqpq-pcxc-8259 - https://github.com/wazuh/wazuh/commit/17f8dc23a6211cbb398a262fcd1b0fe61b0a8eb6
CVE ID: CVE-2025-62786 State: PUBLISHED Published: 2025-10-29T15:52:52.636Z Last Updated: 2025-10-29T16:20:18.469Z Vendors: wazuh Products: wazuh Problem Types: CWE-124 Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. A heap-based out-of-bounds WRITE occurs in decode_win_permissions, resulting in writing a NULL byte 2 bytes before the start of the buffer allocated to decoded_it. A compromised agent can potentially leverage this issue to perform remote code execution, by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can leverage this issue to po
h manager. An attacker who is able to craft and send an agent message to the wazuh manager can leverage this issue to potentially achieve remote code execution on the wazuh manager (the exploitability of this vulnerability depends on the specifics of the respective heap allocator). This vulnerability is fixed in 4.10.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wazuh/wazuh/security/advisories/GHSA-2c8r-p6r5-xxmr - https://github.com/wazuh/wazuh/commit/2257d7998aaff34263169d16f4afc491564a771c
CVE ID: CVE-2025-62787 State: PUBLISHED Published: 2025-10-29T16:30:26.950Z Last Updated: 2025-10-29T17:38:48.781Z Vendors: wazuh Products: wazuh Problem Types: CWE-126 Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.10.2, a buffer over-read occurs in DecodeWinevt() when child_attr[p]->attributes[j] is accessed, because the corresponding index (j) is incorrect. A compromised agent can cause a READ operation beyond the end of the allocated buffer (which may contain sensitive information) by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manag
ally crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can cause a buffer over-read and potentially access sensitive data. While the buffer over-read is always triggered while resolving the arguments of mdebug2, specific configuration options (analysisd.debug=2) need to be in place for the respective data to be leaked. This vulnerability is fixed in 4.10.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wazuh/wazuh/security/advisories/GHSA-3hhq-5367-98q6 - https://github.com/wazuh/wazuh/commit/267d5d55de490469a9ec24a2b936bb3c5aa8fdda
CVE ID: CVE-2025-62788 State: PUBLISHED Published: 2025-10-29T16:42:35.789Z Last Updated: 2025-10-29T19:15:30.726Z Vendors: wazuh Products: wazuh Problem Types: CWE-416 Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, w_copy_event_for_log() references memory (initially allocated in OS_CleanMSG()) after it has been freed. A compromised agent can potentially compromise the integrity of the application by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can leverage this issue to potentially compromise the integrity of the applicatio
an agent message to the wazuh manager can leverage this issue to potentially compromise the integrity of the application (the use of previously freed memory may corrupt valid data, if the memory area in question has been allocated and used properly elsewhere). This vulnerability is fixed in 4.11.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wazuh/wazuh/security/advisories/GHSA-qjcw-fjvh-8q4g
CVE ID: CVE-2025-62789 State: PUBLISHED Published: 2025-10-29T16:44:30.540Z Last Updated: 2025-10-29T19:09:13.693Z Vendors: wazuh Products: wazuh Problem Types: CWE-252, CWE-476 Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, fim_alert() implementation does not check whether the return value of ctime_r is NULL or not before calling strdup() on it. A compromised agent can cause a crash of analysisd by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can cause analysisd to crash and make it unavailable. This vulnerability is fixed
an agent message to the wazuh manager can cause analysisd to crash and make it unavailable. This vulnerability is fixed in 4.11.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wazuh/wazuh/security/advisories/GHSA-8rvq-mm2f-8q22
CVE ID: CVE-2025-62790 State: PUBLISHED Published: 2025-10-29T16:46:31.020Z Last Updated: 2025-10-29T19:08:06.068Z Vendors: wazuh Products: wazuh Problem Types: CWE-476, CWE-252 Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, fim_fetch_attributes_state() implementation does not check whether time_string is NULL or not before calling strlen() on it. A compromised agent can cause a crash of analysisd by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can cause analysisd to crash and make it unavailable. This vulnerability is fixed
an agent message to the wazuh manager can cause analysisd to crash and make it unavailable. This vulnerability is fixed in 4.11.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wazuh/wazuh/security/advisories/GHSA-9xj3-vc52-48p9
CVE ID: CVE-2025-62791 State: PUBLISHED Published: 2025-10-29T16:48:25.220Z Last Updated: 2025-10-29T19:03:17.183Z Vendors: wazuh Products: wazuh Problem Types: CWE-252, CWE-476 Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, DecodeCiscat() implementation does not check the return the value of cJSON_GetObjectItem() for a possible NULL value in case of an error. A compromised agent can cause a crash of analysisd by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can cause analysisd to crash and make it unavailable. This vulnerabi
raft and send an agent message to the wazuh manager can cause analysisd to crash and make it unavailable. This vulnerability is fixed in 4.11.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wazuh/wazuh/security/advisories/GHSA-gcwf-6p6m-gvm7
CVE ID: CVE-2025-62792 State: PUBLISHED Published: 2025-10-29T16:50:05.994Z Last Updated: 2025-10-29T18:10:35.915Z Vendors: wazuh Products: wazuh Problem Types: CWE-126, CWE-170 Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.12.0, a buffer over-read occurs in w_expression_match() when strlen() is called on str_test, because the corresponding buffer is not being properly NULL terminated during its allocation in OS_CleanMSG(). A compromised agent can cause a READ operation beyond the end of the allocated buffer (which may contain sensitive information) by sending a specially crafted message to the wazuh manager. An attacker
uffer (which may contain sensitive information) by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can cause a buffer over-read and potentially access sensitive data. This vulnerability is fixed in 4.12.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wazuh/wazuh/security/advisories/GHSA-2672-vfhm-xhr6
CVE ID: CVE-2025-62793 State: PUBLISHED Published: 2025-10-27T21:25:45.642Z Last Updated: 2025-10-28T15:05:40.686Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: elabftw Products: elabftw Problem Types: CWE-79 Description: eLabFTW is an open source electronic lab notebook for research labs. The application served uploaded SVG files inline. Because SVG supports active content, an attacker could upload a crafted SVG that executes script when viewed, resulting in stored XSS under the application origin. A victim who opens the SVG URL or any page embedding it could have their session hijacked, data exfiltrated, or actions performed on their behalf. This vulnera
age embedding it could have their session hijacked, data exfiltrated, or actions performed on their behalf. This vulnerability is fixed n 5.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/elabftw/elabftw/security/advisories/GHSA-rq98-8jh9-684f - https://github.com/elabftw/elabftw/commit/09b95e38f82f041edac0dd6962c70499e2d8d8e2
CVE ID: CVE-2025-62794 State: PUBLISHED Published: 2025-10-28T20:53:14.167Z Last Updated: 2025-10-29T17:33:19.209Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: RichardoC Products: github-workflow-updater-extension Problem Types: CWE-522 Description: GitHub Workflow Updater is a VS Code extension that automatically pins GitHub Actions to specific commits for enhanced security. Before 0.0.7, any provided Github token would be stored in plaintext in the editor configuration as json on disk, rather than through the more secure "securestorage" api. An attacker with read only access to your home directory could have read this token and used it to perform actions w
pi. An attacker with read only access to your home directory could have read this token and used it to perform actions with that token. Update to 0.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RichardoC/github-workflow-updater-extension/security/advisories/GHSA-679x-97jw-8vjp - https://github.com/RichardoC/github-workflow-updater-extension/commit/b9518c38ac6bc2a9fda2242e6daef17f7184ad1f - https://github.com/microsoft/vscode-discussions/discussions/748
CVE ID: CVE-2025-62795 State: PUBLISHED Published: 2025-10-30T16:56:09.321Z Last Updated: 2025-10-31T18:37:42.071Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: jumpserver Products: jumpserver Problem Types: CWE-863 Description: JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.21-lts and v4.10.12-lts, a low-privileged authenticated user can invoke LDAP configuration tests and start LDAP synchronization by sending crafted messages to the /ws/ldap/ WebSocket endpoint, bypassing authorization checks and potentially exposing LDAP credentials or causing unintended sync operations. This vulnerability
uthorization checks and potentially exposing LDAP credentials or causing unintended sync operations. This vulnerability is fixed in v3.10.21-lts and v4.10.12-lts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jumpserver/jumpserver/security/advisories/GHSA-7893-256g-m822