Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
et_stack_info_noinstr+0x12/0xe0 [ 1211.841798] ? bpf_ksym_find+0x56/0xe0 [ 1211.841807] ? __rcu_read_unlock+0x2a/0x70 [ 1211.841819] nft_trace_init+0x1b9/0x1c0 [nf_tables] [ 1211.841895] ? nft_trace_notify+0x830/0x830 [nf_tables] [ 1211.841964] ? get_stack_info+0x2b/0x80 [ 1211.841975] ? nft_do_chain_arp+0x80/0x80 [nf_tables] [ 1211.842044] nft_do_chain+0x79c/0x850 [nf_tables] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/eb03d9826aa646577342a952d658d4598381c035 - https://git.kernel.org/stable/c/4afbac11f2f629d1e62817c4e210bdfaa7521107 - https://git.kernel.org/stable/c/c5d21aabf1b31a79f228508af33aee83456bc1b0 - https
bac11f2f629d1e62817c4e210bdfaa7521107 - https://git.kernel.org/stable/c/c5d21aabf1b31a79f228508af33aee83456bc1b0 - https://git.kernel.org/stable/c/120f1c857a73e52132e473dee89b340440cb692b
CVE ID: CVE-2024-42322 State: PUBLISHED Published: 2024-08-17T09:09:34.295Z Last Updated: 2025-11-03T22:04:41.614Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ipvs: properly dereference pe in ip_vs_add_service Use pe directly to resolve sparse warning: net/netfilter/ipvs/ip_vs_ctl.c:1471:27: warning: dereference of noderef expression Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/36c997f1e03601475ad0fda0e0f59b7a209e756b - https://git.kernel.org/stable/c/211168339657f36f32fb597afd0e3ac82d726119 - https://git.kernel.org/stable/c/b2c664df3bb46aabac6a5fd7
.kernel.org/stable/c/211168339657f36f32fb597afd0e3ac82d726119 - https://git.kernel.org/stable/c/b2c664df3bb46aabac6a5fd78aaa5bd614cfad97 - https://git.kernel.org/stable/c/3dd428039e06e1967ce294e2cd6342825aaaad77 - https://git.kernel.org/stable/c/c420cd5d5bc6797f3a8824e7d74f38f0c286fca5 - https://git.kernel.org/stable/c/cbd070a4ae62f119058973f6d2c984e325bce6e7
CVE ID: CVE-2024-42323 State: PUBLISHED Published: 2024-09-21T09:30:15.295Z Last Updated: 2024-09-23T15:23:37.578Z Vendors: Apache Software Foundation Products: Apache HertzBeat Problem Types: CWE-502 Description: SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating). This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat (incubating): before 1.6.0. Users are recommended to upgrade to version 1.6.0, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/r0c4tost4bllqc1n9q6rmzs1slgsq63t - https://lists.apache.org/thread/dwpwm5
References: - https://lists.apache.org/thread/r0c4tost4bllqc1n9q6rmzs1slgsq63t - https://lists.apache.org/thread/dwpwm572sbwon1mknlwhkpbom2y7skbx
CVE ID: CVE-2024-42325 State: PUBLISHED Published: 2025-04-02T06:12:24.516Z Last Updated: 2025-11-03T19:30:34.900Z Vendors: Zabbix Products: Zabbix Problem Types: CWE-359 Description: Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-26258
CVE ID: CVE-2024-42326 State: PUBLISHED Published: 2024-11-27T12:03:37.611Z Last Updated: 2024-11-27T14:57:07.595Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: Zabbix Products: Zabbix Problem Types: CWE-416 Description: There was discovered a use after free bug in browser.c in the es_browser_get_variant function Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zabbix.com/browse/ZBX-25622
CVE ID: CVE-2024-42327 State: PUBLISHED Published: 2024-11-27T12:04:31.950Z Last Updated: 2024-12-04T04:55:21.730Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Zabbix Products: Zabbix Problem Types: CWE-89 Description: A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the CUser.get function which is available for every user who has API access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zabbix.com/browse/ZBX-25623
CVE ID: CVE-2024-42328 State: PUBLISHED Published: 2024-11-27T12:04:53.864Z Last Updated: 2024-11-27T14:56:15.833Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Zabbix Products: Zabbix Problem Types: CWE-690, CWE-476 Description: When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_write_cb when receiving data. If the server's response is an empty document, then wd->data in the code below will remain NULL and an attempt to read from it will result in a crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zabbix.com/browse/ZBX-25624
CVE ID: CVE-2024-42329 State: PUBLISHED Published: 2024-11-27T12:05:21.915Z Last Updated: 2024-11-27T14:55:58.417Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Zabbix Products: Zabbix Problem Types: CWE-690, CWE-476 Description: The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for various reasons without an error description and then the wd->error will be NULL and trying to read from it will result in a crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zabbix.com/browse/ZBX-25625
CVE ID: CVE-2024-42330 State: PUBLISHED Published: 2024-11-27T12:05:47.722Z Last Updated: 2025-11-03T22:04:43.106Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Zabbix Products: Zabbix Problem Types: CWE-134 Description: The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - ht
dden properties of objects. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-25626
CVE ID: CVE-2024-42331 State: PUBLISHED Published: 2024-11-27T12:06:12.250Z Last Updated: 2025-11-03T22:04:44.569Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Zabbix Products: Zabbix Problem Types: CWE-416 Description: In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is subsequently utilized by the browser_push_error method in the src/libs/zbxembed/browser_error.c file. A use-after-free bug can occur at this stage if the wd->browser heap pointer is freed by garbage collection. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Reference
er is freed by garbage collection. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-25627
CVE ID: CVE-2024-42332 State: PUBLISHED Published: 2024-11-27T12:06:44.515Z Last Updated: 2025-11-03T22:04:46.012Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Zabbix Products: Zabbix Problem Types: CWE 117 Improper Output Neutralization for Logs Description: The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attack requires an SNMP item to be configured as text on the target host. Additional Analyst Notes: - CISA ADP Vul
. The attack requires an SNMP item to be configured as text on the target host. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-25628
CVE ID: CVE-2024-42333 State: PUBLISHED Published: 2024-11-27T12:07:11.159Z Last Updated: 2025-11-03T22:04:47.471Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Zabbix Products: Zabbix Problem Types: CWE-126 Description: The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-25629
CVE ID: CVE-2024-42334 State: REJECTED Published: 2024-08-20T12:16:27.447Z Last Updated: 2024-09-08T11:44:58.797Z Description: No description available.
CVE ID: CVE-2024-42335 State: PUBLISHED Published: 2024-08-20T12:18:13.779Z Last Updated: 2024-08-20T13:31:02.187Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: 7Twenty Products: 7Twenty Bot Problem Types: CWE-79 Description: 7Twenty - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-42336 State: PUBLISHED Published: 2024-08-20T12:26:28.120Z Last Updated: 2024-08-20T13:29:46.227Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N) Vendors: Servision Products: Servision IVG Webmax 1.0.57 Problem Types: CWE-287 Description: Servision - CWE-287: Improper Authentication Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-42337 State: PUBLISHED Published: 2024-08-25T07:03:24.805Z Last Updated: 2024-08-28T14:17:41.642Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: CyberArk Products: CyberArk Identity Management Problem Types: CWE-200 Description: CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-42338 State: PUBLISHED Published: 2024-08-25T07:07:59.731Z Last Updated: 2024-08-26T15:24:55.654Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: CyberArk Products: CyberArk Identity Management Problem Types: CWE-200 Description: CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-42339 State: PUBLISHED Published: 2024-08-25T07:08:37.856Z Last Updated: 2024-08-28T16:01:09.988Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: CyberArk Products: CyberArk Identity Management Problem Types: CWE-200 Description: CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-42340 State: PUBLISHED Published: 2024-08-25T07:12:05.219Z Last Updated: 2024-08-26T19:18:05.719Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: CyberArk Products: CyberArk Identity Management Problem Types: CWE-602 Description: CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-42341 State: PUBLISHED Published: 2024-09-08T11:57:12.622Z Last Updated: 2024-09-10T14:48:14.955Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Loway Products: QueueMetrics Problem Types: CWE-601 Description: Loway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect') Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-42342 State: PUBLISHED Published: 2024-09-08T11:58:22.888Z Last Updated: 2024-09-10T14:49:43.707Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Loway Products: QueueMetrics Problem Types: CWE-444 Description: Loway - CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-42343 State: PUBLISHED Published: 2024-09-08T11:59:14.034Z Last Updated: 2024-09-10T14:52:59.668Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Loway Products: QueueMetrics Problem Types: CWE-204 Description: Loway - CWE-204: Observable Response Discrepancy Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2024-42344 State: PUBLISHED Published: 2024-09-10T09:36:47.430Z Last Updated: 2024-09-10T14:54:10.749Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Client Problem Types: CWE-532 Description: A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive information into a log file which is readable by all legitimate users of the underlying system. This could allow an authenticated attacker to compromise the confidentiality of other users' configuration data. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
mise the confidentiality of other users' configuration data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-417159.html
CVE ID: CVE-2024-42345 State: PUBLISHED Published: 2024-09-10T09:36:48.651Z Last Updated: 2024-09-10T14:53:36.766Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-384 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2). The affected application does not properly handle user session establishment and invalidation. This could allow a remote attacker to circumvent the additional multi factor authentication for user session establishment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens
user session establishment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-869574.html
CVE ID: CVE-2024-42346 State: PUBLISHED Published: 2024-09-20T18:53:01.373Z Last Updated: 2024-09-20T20:09:40.416Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: galaxyproject Products: galaxy Problem Types: CWE-79 Description: Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations endpoint, can be used to store HTML tags and trigger javascript execution upon edit operation. All supported branches of Galaxy (and more back to release_20.05) were amended with the supplied patches. Users are advised to upgrade. There are n
alaxy (and more back to release_20.05) were amended with the supplied patches. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/galaxyproject/galaxy/security/advisories/GHSA-x6w7-3gwf-qr9r
CVE ID: CVE-2024-42347 State: PUBLISHED Published: 2024-08-06T17:16:14.143Z Last Updated: 2024-08-08T18:48:19.919Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: matrix-org Products: matrix-react-sdk Problem Types: CWE-359 Description: matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver could manipulate a user's account data to cause the client to enable URL previews in end-to-end encrypted rooms, in which case any URLs in encrypted messages would be sent to the server. This was patched in matrix-react-sdk 3.105.0. Deployments that trust their homeservers, as well as closed federations of trust
as patched in matrix-react-sdk 3.105.0. Deployments that trust their homeservers, as well as closed federations of trusted servers, are not affected. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-f83w-wqhc-cfp4 - https://github.com/matrix-org/matrix-react-sdk/releases/tag/v3.105.1
CVE ID: CVE-2024-42348 State: PUBLISHED Published: 2024-08-02T19:58:12.740Z Last Updated: 2024-08-05T15:16:30.380Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: FOGProject Products: fogproject Problem Types: CWE-77 Description: FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.2 can leak AD username and password when registering a computer. This vulnerability is fixed in 1.5.10.41.3 and 1.6.0-beta.1395. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FOGProject/fogproject/security/advisories/GHSA-456c-4gw3-c9xw
CVE ID: CVE-2024-42349 State: PUBLISHED Published: 2024-08-02T20:01:29.055Z Last Updated: 2024-08-05T19:46:15.123Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: FOGProject Products: fogproject Problem Types: CWE-532 Description: FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.4 and earlier can leak authorized and rejected logins via logs stored directly on the root of the web server. FOG Server creates 2 logs on the root of the web server (fog_login_accepted.log and fog_login_failed.log), exposing the name of the user account used to manage FOG, the IP address of the computer used to login and the User-Agent. This vu
he name of the user account used to manage FOG, the IP address of the computer used to login and the User-Agent. This vulnerability is fixed in 1.5.10.47. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FOGProject/fogproject/security/advisories/GHSA-697m-3c4p-g29h
CVE ID: CVE-2024-42350 State: PUBLISHED Published: 2024-08-05T19:47:44.903Z Last Updated: 2024-08-05T20:23:35.031Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N) Vendors: biscuit-auth Products: biscuit Problem Types: CWE-668 Description: Biscuit is an authorization token with decentralized verification, offline attenuation and strong security policy enforcement based on a logic language. Third-party blocks can be generated without transferring the whole token to the third-party authority. Instead, a `ThirdPartyBlock` request can be sent, providing only the necessary info to generate a third-party block and to sign it: 1. the public key of the previous block (used in the
the necessary info to generate a third-party block and to sign it: 1. the public key of the previous block (used in the signature), 2. the public keys part of the token symbol table (for public key interning in datalog expressions). A third-part block request forged by a malicious user can trick the third-party authority into generating datalog trusting the wrong keypair. Tokens with third-party blocks containing `trusted` annotations generated through a third party block request. This has been addressed in version 4 of the specification. Users are advised to update their implementations to conform. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP V
mplementations to conform. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/biscuit-auth/biscuit/security/advisories/GHSA-rgqv-mwc3-c78m - https://github.com/biscuit-auth/biscuit/commit/c87cbb5d778964d6574df3e9e6579567cad12fff
CVE ID: CVE-2024-42351 State: PUBLISHED Published: 2024-09-20T18:56:53.987Z Last Updated: 2024-09-20T20:08:03.491Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: galaxyproject Products: galaxy Problem Types: CWE-200 Description: Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. An attacker can potentially replace the contents of public datasets resulting in data loss or tampering. All supported branches of Galaxy (and more back to release_21.05) were amended with the below patch. Users are advised to upgrade. There are no known workarounds for this vulne
se_21.05) were amended with the below patch. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/galaxyproject/galaxy/security/advisories/GHSA-5639-cmph-9j4v - https://depot.galaxyproject.org/patch/GX-2024-0001/022da344a02bafd604402ac8e253e0014f6e2e08.patch - https://depot.galaxyproject.org/patch/GX-2024-0001/15060a6cb222f2fcfc687d0f0260f1eb1b9c757b.patch - https://depot.galaxyproject.org/patch/GX-2024-0001/235f1d8b400708556732b9dda788c919ebf3bb80.patch
CVE ID: CVE-2024-42352 State: PUBLISHED Published: 2024-08-05T20:38:08.419Z Last Updated: 2024-08-06T15:25:44.348Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: nuxt Products: icon Problem Types: CWE-918 Description: Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. `nuxt/icon` provides an API to allow client side icon lookup. This endpoint is at `/api/_nuxt_icon/[name]`. The proxied request path is improperly parsed, allowing an attacker to change the scheme and host of the request. This leads to SSRF, and could potentially lead to sensitive data exposure. The `new URL` constructor is used to parse the
is leads to SSRF, and could potentially lead to sensitive data exposure. The `new URL` constructor is used to parse the final path. This constructor can be passed a relative scheme or path in order to change the host the request is sent to. This constructor is also very tolerant of poorly formatted URLs. As a result we can pass a path prefixed with the string `http:`. This has the effect of changing the scheme to HTTP. We can then subsequently pass a new host, for example `http:127.0.0.1:8080`. This would allow us to send requests to a local server. This issue has been addressed in release version 1.4.5 and all users are advised to upgrade. There are no known workarounds for this vulnerabili
essed in release version 1.4.5 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nuxt/icon/security/advisories/GHSA-cxgv-px37-4mp2
CVE ID: CVE-2024-42353 State: PUBLISHED Published: 2024-08-14T20:12:30.077Z Last Updated: 2024-08-15T14:04:01.806Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Pylons Products: webob Problem Types: CWE-601 Description: WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected to with Python's urlparse, and joining it to the base URL. `urlparse` however treats a `//` at the start of a string as a URI without a scheme, and then treats the next part as the hostname. `urljoin` will then use that hostname from the second