Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-16177 State: PUBLISHED Published: 2019-09-09T20:39:19 Last Updated: 2024-08-05T01:10:41.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Limesurvey before 3.17.14, the entire database is exposed through browser caching. Additional Analyst Notes: - CVE Program Container: References: - https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released - https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R53
CVE ID: CVE-2019-16178 State: PUBLISHED Published: 2019-09-09T20:38:26 Last Updated: 2024-08-05T01:10:41.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows authenticated users with correct permissions to inject arbitrary web script or HTML via titles of admin box buttons on the home page. Additional Analyst Notes: - CVE Program Container: References: - https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released - https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R39
CVE ID: CVE-2019-16179 State: PUBLISHED Published: 2019-09-09T20:36:12 Last Updated: 2024-08-05T01:10:41.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released - https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R42
CVE ID: CVE-2019-16180 State: PUBLISHED Published: 2019-09-09T20:31:59 Last Updated: 2024-08-05T01:10:41.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Limesurvey before 3.17.14 allows remote attackers to bruteforce the login form and enumerate usernames when the LDAP authentication method is used. Additional Analyst Notes: - CVE Program Container: References: - https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released - https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R44
CVE ID: CVE-2019-16181 State: PUBLISHED Published: 2019-09-09T20:31:16 Last Updated: 2024-08-05T01:10:41.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Limesurvey before 3.17.14, admin users can mark other users' notifications as read. Additional Analyst Notes: - CVE Program Container: References: - https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released - https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R52
CVE ID: CVE-2019-16182 State: PUBLISHED Published: 2019-09-09T20:29:56 Last Updated: 2024-08-05T01:10:41.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to inject arbitrary web script or HTML via extensions of uploaded files. Additional Analyst Notes: - CVE Program Container: References: - https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released - https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R57
CVE ID: CVE-2019-16183 State: PUBLISHED Published: 2019-09-09T20:28:29 Last Updated: 2024-08-05T01:10:41.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Limesurvey before 3.17.14, admin users can run an integrity check without proper permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released - https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R50
CVE ID: CVE-2019-16184 State: PUBLISHED Published: 2019-09-09T20:27:17 Last Updated: 2024-08-05T01:10:41.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their survey responses that will be included in the export CSV file. Additional Analyst Notes: - CVE Program Container: References: - https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released - https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R46
CVE ID: CVE-2019-16185 State: PUBLISHED Published: 2019-09-09T20:25:35 Last Updated: 2024-08-05T01:10:41.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries without proper permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released - https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R51
CVE ID: CVE-2019-16186 State: PUBLISHED Published: 2019-09-09T20:22:24 Last Updated: 2024-08-05T01:10:41.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released - https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R49
CVE ID: CVE-2019-16187 State: PUBLISHED Published: 2019-09-09T20:21:15 Last Updated: 2024-08-05T01:10:41.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie value via a client-side script. Additional Analyst Notes: - CVE Program Container: References: - https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released - https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R48
CVE ID: CVE-2019-16188 State: PUBLISHED Published: 2019-09-25T16:06:01 Last Updated: 2024-08-05T01:10:41.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: HCL AppScan Source before 9.03.13 is susceptible to XML External Entity (XXE) attacks in multiple locations. In particular, an attacker can send a specially crafted .ozasmt file to a targeted victim and ask the victim to open it. When the victim imports the .ozasmt file in AppScan Source, the content of any file in the local file system (to which the victim as read access) can be exfiltrated to a remote listener under the attacker's control. The product does not disable external XML Entity Processing, which can lead to inform
ener under the attacker's control. The product does not disable external XML Entity Processing, which can lead to information disclosure and denial of services attacks. Additional Analyst Notes: - CVE Program Container: References: - https://hclpnpsupport.hcltech.com/csm?id=kb_article&sys_id=0812a9961b0c885077761fc58d4bcb06
CVE ID: CVE-2019-16190 State: PUBLISHED Published: 2019-09-09T19:54:36 Last Updated: 2024-08-05T01:10:41.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authentication Bypass, as demonstrated by a direct request to folder_view.php or category_view.php. Additional Analyst Notes: - CVE Program Container: References: - https://cyberloginit.com/2019/09/10/dlink-shareport-web-access-authentication-bypass.html
CVE ID: CVE-2019-16192 State: PUBLISHED Published: 2019-09-09T20:39:05 Last Updated: 2024-08-05T01:10:41.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SuperSalsa20/Doccms-Execute-Code/blob/master/README.md
CVE ID: CVE-2019-16193 State: PUBLISHED Published: 2019-09-11T11:53:30 Last Updated: 2024-08-05T01:10:41.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ArcGIS Enterprise 10.6.1, a crafted IFRAME element can be used to trigger a Cross Frame Scripting (XFS) attack through the EDIT MY PROFILE feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/Huang.YuHsiang.Phone/posts/1795457353931689
CVE ID: CVE-2019-16194 State: PUBLISHED Published: 2019-09-25T15:21:40 Last Updated: 2024-08-05T01:10:41.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerabilities in Centreon through 19.04 allow attacks via the svc_id parameter in include/monitoring/status/Services/xml/makeXMLForOneService.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/centreon/centreon/pull/7862 - https://github.com/centreon/centreon/releases
CVE ID: CVE-2019-16195 State: PUBLISHED Published: 2019-11-26T17:03:34 Last Updated: 2024-08-05T01:10:41.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Centreon before 2.8.30, 18.x before 18.10.8, and 19.x before 19.04.5 allows XSS via myAccount alias and name fields. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/centreon/centreon/pull/7876 - https://github.com/centreon/centreon/pull/7877 - https://github.com/centreon/centreon/releases/tag/19.04.5 - https://github.com/centreon/centreon/releases/tag/2.8.30 - https://github.com/centreon/centreon/releases/tag/18.10.8
CVE ID: CVE-2019-16197 State: PUBLISHED Published: 2019-09-16T12:02:45 Last Updated: 2024-08-05T01:10:41.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/154481/Dolibarr-ERP-CRM-10.0.1-Cross-Site-Scripting.html
CVE ID: CVE-2019-16198 State: PUBLISHED Published: 2019-10-03T20:09:30 Last Updated: 2024-08-05T01:10:41.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: KSLabs KSWEB 3.93 allows ../ directory traversal, as demonstrated by the hostFile parameter. Additional Analyst Notes: - CVE Program Container: References: - https://rastating.github.io/ksweb-android-remote-code-execution/
CVE ID: CVE-2019-16199 State: PUBLISHED Published: 2019-09-17T20:53:22 Last Updated: 2024-08-05T01:10:41.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to the web interface via an HTTP POST request to certain URLs related to the ReGa core process. Additional Analyst Notes: - CVE Program Container: References: - https://psytester.github.io/CVE-2019-16199/
CVE ID: CVE-2019-16200 State: PUBLISHED Published: 2019-11-20T12:58:14 Last Updated: 2024-08-05T01:10:41.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to the /cgi-bin/reader URI. The attacker must include a Content-length header with a large positive value that, when represented in 32 bit binary, evaluates to a negative number. The problem exists in the http_cgi_write function under http-cgi.c; however, exploitation might show svz_envblock_add in libserveez/passthrough.c as the location of the heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References
ough.c as the location of the heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/agadient/SERVEEZ-CVE
CVE ID: CVE-2019-16201 State: PUBLISHED Published: 2019-11-26T00:00:00 Last Updated: 2024-08-05T01:10:41.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/661722 - https://lists.debian.org/debian-lts-announce/2019/11/msg00025.html - https://lists.debian.org/debian-lts-announce/2019/12/msg00009.html - https://seclists.o
announce/2019/11/msg00025.html - https://lists.debian.org/debian-lts-announce/2019/12/msg00009.html - https://seclists.org/bugtraq/2019/Dec/31 - https://seclists.org/bugtraq/2019/Dec/32 - https://www.debian.org/security/2019/dsa-4587 - https://www.oracle.com/security-alerts/cpujan2020.html - https://security.gentoo.org/glsa/202003-06 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00027.html - https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html
CVE ID: CVE-2019-16202 State: PUBLISHED Published: 2019-09-10T13:07:53 Last Updated: 2024-08-05T01:10:41.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions function with a "This could be an indication of an attempted privilege escalation on older vulnerable versions of MISP (<2.4.115)" message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/75acd63c46506ad404764c3a3de7d4ca11d0560f - https://github.com/MISP/MISP/compare/v2.4.114...v2.4.115 - https://excellium-services.com
6ad404764c3a3de7d4ca11d0560f - https://github.com/MISP/MISP/compare/v2.4.114...v2.4.115 - https://excellium-services.com/cert-xlm-advisory/cve-2019-16202/
CVE ID: CVE-2019-16203 State: PUBLISHED Published: 2020-02-05T15:16:01 Last Updated: 2024-08-05T01:10:41.488Z Vendors: Brocade Products: Brocade Fabric OS Problem Types: Information Exposure Description: Brocade Fabric OS Versions before v8.2.2a and v8.2.1d could expose the credentials of the remote ESRS server when these credentials are given as a command line option when configuring the ESRS client. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-906 - https://security.netapp.com/advisory/ntap-20200511-0008/
CVE ID: CVE-2019-16204 State: PUBLISHED Published: 2020-02-05T15:16:23 Last Updated: 2024-08-05T01:10:41.440Z Vendors: Brocade Products: Brocade Fabric OS Problem Types: Information Exposure Description: Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets or authentication keys used between the switch and an external server. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-905 - https://security.netapp.com/advisory/ntap-20200511-0007/
CVE ID: CVE-2019-16205 State: PUBLISHED Published: 2019-11-08T17:17:16 Last Updated: 2024-08-05T01:10:41.612Z Vendors: Brocade Communications Systems, Inc. Products: Brocade SANnav Problem Types: Information exposure Description: A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-864
CVE ID: CVE-2019-16206 State: PUBLISHED Published: 2019-11-08T17:18:31 Last Updated: 2024-08-05T01:10:41.537Z Vendors: Brocade Communications Systems, Inc. Products: Brocade SANnav Problem Types: Information Exposure Description: The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-865
CVE ID: CVE-2019-16207 State: PUBLISHED Published: 2019-11-08T17:02:32 Last Updated: 2024-08-05T01:10:41.592Z Vendors: Brocade Communications Systems, Inc. Products: Brocade SANnav Problem Types: Use of Hard-coded Credentials Description: Brocade SANnav versions before v2.0 use a hard-coded password, which could allow local authenticated attackers to access a back-end database and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-866
CVE ID: CVE-2019-16208 State: PUBLISHED Published: 2019-11-08T17:03:39 Last Updated: 2024-08-05T01:10:41.542Z Vendors: Brocade Communications Systems, Inc. Products: Brocade SANnav Problem Types: Use of a Broken or Risky Cryptographic Algorithm Description: Password-based encryption (PBE) algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services (Radius, TACAS, etc.). Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-867
CVE ID: CVE-2019-16209 State: PUBLISHED Published: 2019-11-08T17:19:12 Last Updated: 2024-08-05T01:10:41.681Z Vendors: Brocade Communications Systems, Inc. Products: Brocade SANnav Problem Types: Improper Certificate Validation Description: A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could allow an attacker to perform a man-in-the-middle attack against Secure Sockets Layer(SSL)connections. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-868
CVE ID: CVE-2019-16210 State: PUBLISHED Published: 2019-11-08T17:05:38 Last Updated: 2024-08-05T01:10:41.471Z Vendors: Brocade Communications Systems, Inc. Products: Brocade SANnav Problem Types: Information Exposure Description: Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-869
CVE ID: CVE-2019-16211 State: PUBLISHED Published: 2020-09-25T13:08:13 Last Updated: 2024-08-05T01:10:41.328Z Vendors: n/a Products: Brocade SANnav Problem Types: Unprotected Storage of Credentials Description: Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1076
CVE ID: CVE-2019-16212 State: PUBLISHED Published: 2020-09-25T13:07:20 Last Updated: 2024-08-05T01:10:41.414Z Vendors: n/a Products: Brocade SANnav Problem Types: LDAP injection Description: A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. The vulnerability could allow a remote attacker to bypass the authentication process. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1074
CVE ID: CVE-2019-16213 State: PUBLISHED Published: 2020-06-25T19:19:40 Last Updated: 2024-08-05T01:10:41.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted string, an attacker could modify the device name of an attached PLC adapter to inject and execute arbitrary commands on the system with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://securityintelligence.com/posts/vulnerable-powerline-extenders-underline-lax-iot-security/
CVE ID: CVE-2019-16214 State: PUBLISHED Published: 2019-09-11T03:51:57 Last Updated: 2024-08-05T01:10:41.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libra Core before 2019-09-03 has an erroneous regular expression for inline comments, which makes it easier for attackers to interfere with code auditing by using a nonstandard line-break character for a comment. For example, a Move module author can enter the // sequence (which introduces a single-line comment), followed by very brief comment text, the \r character, and code that has security-critical functionality. In many popular environments, this code is displayed on a separate line, and thus a reader may infer that the
ionality. In many popular environments, this code is displayed on a separate line, and thus a reader may infer that the code is executed. However, the code is NOT executed, because language/compiler/ir_to_bytecode/src/parser.rs allows the comment to continue after the \r character. Additional Analyst Notes: - CVE Program Container: References: - https://blog.openzeppelin.com/libra-vulnerability-summary/ - https://blog.openzeppelin.com/libra-vulnerability-release/ - https://github.com/libra/libra/commit/7efb0221989f17fdf7f8486730898ed947a1e19e
CVE ID: CVE-2019-16215 State: PUBLISHED Published: 2019-09-18T11:07:00 Last Updated: 2024-08-05T01:10:41.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to exponential backtracking. A user who is logged into the server could send a crafted message causing the server to spend an effectively arbitrary amount of CPU time and stall the processing of future messages. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zulip.org/2019/09/11/zulip-server-2-0-5-security-release/ - https://github.com/zulip/zulip/commit/5797f013b3be450c146a4141514bda525f2f1b51
CVE ID: CVE-2019-16216 State: PUBLISHED Published: 2019-09-18T11:08:09 Last Updated: 2024-08-05T01:10:41.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is logged into the server could upload files of certain types to mount a stored cross-site scripting attack on other logged-in users. On a Zulip server using the default local uploads backend, the attack is only effective against browsers lacking support for Content-Security-Policy such as Internet Explorer 11. On a Zulip server using the S3 uploads backend, the attack is confined to the origin of the configured S3 uploads hostname a
Zulip server using the S3 uploads backend, the attack is confined to the origin of the configured S3 uploads hostname and cannot reach the Zulip server itself. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zulip.org/2019/09/11/zulip-server-2-0-5-security-release/ - https://github.com/zulip/zulip/commit/1195841dfb9aa26b3b0dabc6f05d72e4af25be3e