Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-49776 State: PUBLISHED Published: 2023-12-20T15:35:57.714Z Last Updated: 2024-08-02T22:01:25.939Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Hakan Demiray Products: Sayfa Sayac Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hakan Demiray Sayfa Sayac.This issue affects Sayfa Sayac: from n/a through 2.6. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/sayfa-sayac/wordpress-sayfa-sayac-plugin-2-6-unauthenticated-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-49777 State: PUBLISHED Published: 2023-12-31T10:11:30.776Z Last Updated: 2024-08-02T22:01:25.864Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: YITH Products: YITH WooCommerce Product Add-Ons Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/yith-woocommerce-product-add-ons/wordpress-yith-woocommerce-product-add-ons-extra-options-plugin-4-3-0-php-object-injection-vulnerability?_s
duct-add-ons/wordpress-yith-woocommerce-product-add-ons-extra-options-plugin-4-3-0-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-49778 State: PUBLISHED Published: 2023-12-21T12:37:02.566Z Last Updated: 2025-04-24T14:51:19.949Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Hakan Demiray Products: Sayfa Sayac Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Hakan Demiray Sayfa Sayac.This issue affects Sayfa Sayac: from n/a through 2.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/sayfa-sayac/wordpress-sayfa-sayac-plugin-2-6-unauthenticated-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-49779 State: PUBLISHED Published: 2023-12-26T07:21:06.972Z Last Updated: 2024-08-02T22:01:25.681Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Cross-site scripting (XSS) Description: Stored cross-site scripting vulnerability exists in the anchor tag of GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/ - https://jvn.jp/en/jp/JVN18715935/
CVE ID: CVE-2023-49780 State: PUBLISHED Published: 2025-02-12T07:42:56.826Z Last Updated: 2025-02-18T17:39:45.337Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Extra Innovation Inc. Products: acmailer CGI Problem Types: CWE-79 Description: Cross-site scripting vulnerability exists in acmailer CGI ver.4.0.5 and earlier. An arbitrary script may be executed on the web browser of the user who accessed the management page of the affected product. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://acmailer.jp/info/de.cgi?id=113 - https://jvn.jp/en/jp/JVN84319378/
CVE ID: CVE-2023-49781 State: PUBLISHED Published: 2024-05-13T18:54:54.196Z Last Updated: 2024-08-02T22:01:25.824Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: nocodb Products: nocodb Problem Types: CWE-79 Description: NocoDB is software for building databases as spreadsheets. Prior to 0.202.9, a stored cross-site scripting vulnerability exists within the Formula virtual cell comments functionality. The nc-gui/components/virtual-cell/Formula.vue displays a v-html tag with the value of "urls" whose contents are processed by the function replaceUrlsWithLink(). This function recognizes the pattern URI::(XXX) and creates a hyperlink tag <a> with href=XXX. Howev
laceUrlsWithLink(). This function recognizes the pattern URI::(XXX) and creates a hyperlink tag <a> with href=XXX. However, it leaves all the other contents outside of the pattern URI::(XXX) unchanged. This vulnerability is fixed in 0.202.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/nocodb/nocodb/security/advisories/GHSA-h6r4-xvw6-jc5h - https://github.com/nocodb/nocodb/commit/7f58ce3726dfec71537d8b80474a0f95a48a1574
CVE ID: CVE-2023-49782 State: PUBLISHED Published: 2023-12-08T20:04:11.692Z Last Updated: 2024-08-02T22:01:25.983Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: CollaboraOnline Products: online Problem Types: CWE-79 Description: Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with `Collabora Online - Built-in CODE Server` app can be vulnerable to attack via proxy.php. The bug was fixed in Collabora Online - Built-in CODE Server (richdocumentscode) release 23.5.601. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container:
d to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CollaboraOnline/online/security/advisories/GHSA-8xm5-pgfr-8mjr - https://apps.nextcloud.com/apps/richdocumentscode
CVE ID: CVE-2023-49783 State: PUBLISHED Published: 2024-01-23T13:54:51.301Z Last Updated: 2025-06-17T21:19:26.608Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: silverstripe Products: silverstripe-admin Problem Types: CWE-863 Description: Silverstripe Admin provides a basic management interface for the Silverstripe Framework. In versions on the 1.x branch prior to 1.13.19 and on the 2.x branch prior to 2.1.8, users who don't have edit or delete permissions for records exposed in a `ModelAdmin` can still edit or delete records using the CSV import form, provided they have create permissions. The likelihood of a user having create permissions but not having
V import form, provided they have create permissions. The likelihood of a user having create permissions but not having edit or delete permissions is low, but it is possible. Note that this doesn't affect any `ModelAdmin` which has had the import form disabled via the `showImportForm` public property. Versions 1.13.19 and 2.1.8 contain a patch for the issue. Those who have a custom implementation of `BulkLoader` should update their implementations to respect permissions when the return value of `getCheckPermissions()` is true. Those who use any `BulkLoader` in their own project logic, or maintain a module which uses it, should consider passing `true` to `setCheckPermissions()` if the data is
ject logic, or maintain a module which uses it, should consider passing `true` to `setCheckPermissions()` if the data is provided by users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/silverstripe/silverstripe-admin/security/advisories/GHSA-j3m6-gvm8-mhvw - https://www.silverstripe.org/download/security-releases/CVE-2023-49783
CVE ID: CVE-2023-49785 State: PUBLISHED Published: 2024-03-11T23:26:10.773Z Last Updated: 2024-08-19T07:48:00.560Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: ChatGPTNextWeb Products: NextChat Problem Types: CWE-918, CWE-79 Description: NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP endpoints but also write access using HTTP POST, PUT, and other methods. Attackers can also use this vulnerability to mask their source IP by forwarding malicious tr
ST, PUT, and other methods. Attackers can also use this vulnerability to mask their source IP by forwarding malicious traffic intended for other Internet targets through these open proxies. As of time of publication, no patch is available, but other mitigation strategies are available. Users may avoid exposing the application to the public internet or, if exposing the application to the internet, ensure it is an isolated network with no access to any other internal resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.horizon3.ai/attack-research/attack-blogs/nextchat-an-ai-chatbot-that-lets-you-talk-to-anyone-you-want-to/ - https://g
ww.horizon3.ai/attack-research/attack-blogs/nextchat-an-ai-chatbot-that-lets-you-talk-to-anyone-you-want-to/ - https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web
CVE ID: CVE-2023-49786 State: PUBLISHED Published: 2023-12-14T19:47:46.306Z Last Updated: 2025-02-13T17:18:55.224Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: asterisk Products: asterisk Problem Types: CWE-703 Description: Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1; as well as certified-asterisk prior to 18.9-cert6; Asterisk is susceptible to a DoS due to a race condition in the hello handshake phase of the DTLS protocol when handling DTLS-SRTP for media setup. This attack can be done continuously, thus denying new DTLS-SRTP encrypted calls during the attack. Abuse of
dia setup. This attack can be done continuously, thus denying new DTLS-SRTP encrypted calls during the attack. Abuse of this vulnerability may lead to a massive Denial of Service on vulnerable Asterisk servers for calls that rely on DTLS-SRTP. Commit d7d7764cb07c8a1872804321302ef93bf62cba05 contains a fix, which is part of versions 18.20.1, 20.5.1, 21.0.1, amd 18.9-cert6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/asterisk/asterisk/security/advisories/GHSA-hxj9-xwr8-w8pq - https://github.com/asterisk/asterisk/commit/d7d7764cb07c8a1872804321302ef93bf62cba05 - https://github.com/EnableSecurity/advisories/tree/master/ES2023-01-as
/commit/d7d7764cb07c8a1872804321302ef93bf62cba05 - https://github.com/EnableSecurity/advisories/tree/master/ES2023-01-asterisk-dtls-hello-race - http://www.openwall.com/lists/oss-security/2023/12/15/7 - http://packetstormsecurity.com/files/176251/Asterisk-20.1.0-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2023/Dec/24 - https://lists.debian.org/debian-lts-announce/2023/12/msg00019.html
CVE ID: CVE-2023-49787 State: REJECTED Published: N/A Last Updated: 2023-12-07T17:59:41.227Z Description: No description available.
CVE ID: CVE-2023-49788 State: PUBLISHED Published: 2023-12-08T20:02:07.086Z Last Updated: 2024-08-02T22:01:26.035Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: CollaboraOnline Products: online Problem Types: CWE-501, CWE-22 Description: Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated Collabora Online server, the Built-in CODE Server (richdocumentscode) is run without chroot sandboxing. Vulnerable versions of the richdocumentscode app can be susceptible to attack via modified client->server commands to overwrite files outside the sub directory the server has provided for the transient ses
ified client->server commands to overwrite files outside the sub directory the server has provided for the transient session. Files which can be accessed are limited to those that the server process has access to. The bug was fixed in Collabora Online - Built-in CODE Server (richdocumentscode) release 23.5.602. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CollaboraOnline/online/security/advisories/GHSA-3r69-xvf7-v94j
CVE ID: CVE-2023-49790 State: PUBLISHED Published: 2023-12-22T16:19:28.440Z Last Updated: 2024-08-02T22:01:26.180Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: nextcloud Products: security-advisories Problem Types: CWE-287 Description: The Nextcloud iOS Files app allows users of iOS to interact with Nextcloud, a self-hosted productivity platform. Prior to version 4.9.2, the application can be used without providing the 4 digit PIN code. Nextcloud iOS Files app should be upgraded to 4.9.2 to receive the patch. No known workarounds are available. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/security-advisorie
ilable. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-j8g7-88vv-rggv - https://github.com/nextcloud/ios/pull/2665 - https://hackerone.com/reports/2245437
CVE ID: CVE-2023-49791 State: PUBLISHED Published: 2023-12-22T16:26:28.076Z Last Updated: 2024-09-12T12:36:45.577Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: nextcloud Products: security-advisories Problem Types: CWE-284, CWE-287 Description: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4; when an attacker manages to get access to an active session of another user via another way, they could delete and modify workflows by sending calls directly to the
active session of another user via another way, they could delete and modify workflows by sending calls directly to the API bypassing the password confirmation shown in the UI. Nextcloud Server versions 26.0.9 and 27.1.4 and Nextcloud Enterprise Server versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4 contain a patch for this issue. No known workarounds are available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3f8p-6qww-2prr - https://github.com/nextcloud/server/pull/41520 - https://hackerone.com/reports/2120667
CVE ID: CVE-2023-49792 State: PUBLISHED Published: 2023-12-22T16:31:17.833Z Last Updated: 2024-08-27T15:47:21.783Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: nextcloud Products: security-advisories Problem Types: CWE-307 Description: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4; when a (reverse) proxy is configured as trusted proxy the server could be tricked into reading a wrong remote address for an attacker, allowing them executing authentication
the server could be tricked into reading a wrong remote address for an attacker, allowing them executing authentication attempts than intended. Nextcloud Server versions 26.0.9 and 27.1.4 and Nextcloud Enterprise Server versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4 contain a patch for this issue. No known workarounds are available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5j2p-q736-hw98 - https://github.com/nextcloud/server/pull/41526 - https://hackerone.com/reports/2230915
CVE ID: CVE-2023-49793 State: PUBLISHED Published: 2024-06-24T17:36:21.827Z Last Updated: 2024-08-02T22:01:26.011Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Ericsson Products: codechecker Problem Types: CWE-22 Description: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Zip files uploaded to the server endpoint of `CodeChecker store` are not properly sanitized. An attacker, using a path traversal attack, can load and display files on the machine of `CodeChecker server`. The vulnerable endpoint is `/Default/v6.53/CodeCheckerService@massStoreRun`. The path traversal vulnerability allo
ver`. The vulnerable endpoint is `/Default/v6.53/CodeCheckerService@massStoreRun`. The path traversal vulnerability allows reading data on the machine of the `CodeChecker server`, with the same permission level as the `CodeChecker server`. The attack requires a user account on the `CodeChecker server`, with permission to store to a server, and view the stored report. This vulnerability has been patched in version 6.23. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Ericsson/codechecker/security/advisories/GHSA-h26w-r4m5-8rrf - https://github.com/Ericsson/codechecker/commit/46bada41e32f3ba0f6011d5c556b579f6dddf07a
CVE ID: CVE-2023-49794 State: PUBLISHED Published: 2024-01-02T19:58:56.152Z Last Updated: 2025-05-09T19:49:09.117Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: tiann Products: KernelSU Problem Types: CWE-290 Description: KernelSU is a Kernel-based root solution for Android devices. In versions 0.7.1 and prior, the logic of get apk path in KernelSU kernel module can be bypassed, which causes any malicious apk named `me.weishu.kernelsu` get root permission. If a KernelSU module installed device try to install any not checked apk which package name equal to the official KernelSU Manager, it can take over root privileges on the device. As of time of publicati
age name equal to the official KernelSU Manager, it can take over root privileges on the device. As of time of publication, a patched version is not available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tiann/KernelSU/security/advisories/GHSA-8rc5-x54x-5qc4 - https://drive.google.com/file/d/1b9UrmG_co9EJXB_yMBneRArUIR5sTuaN/view?usp=drive_link
CVE ID: CVE-2023-49795 State: PUBLISHED Published: 2023-12-11T19:01:00.946Z Last Updated: 2024-08-02T22:01:26.010Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: mindsdb Products: mindsdb Problem Types: CWE-918 Description: MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a server-side request forgery vulnerability in `file.py`. This can lead to limited information disclosure. Users should use MindsDB's `staging` branch or v23.11.4.1, which contain a fix for the issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mindsdb/mindsdb/security/advisories/GHSA-34mr-6q8x-g9
t Notes: - CVE Program Container: References: - https://github.com/mindsdb/mindsdb/security/advisories/GHSA-34mr-6q8x-g9r6 - https://github.com/mindsdb/mindsdb/commit/8d13c9c28ebcf3b36509eb679378004d4648d8fe
CVE ID: CVE-2023-49796 State: PUBLISHED Published: 2023-12-11T20:38:25.330Z Last Updated: 2024-08-02T22:01:26.096Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: mindsdb Products: mindsdb Problem Types: CWE-20 Description: MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a limited file write vulnerability in `file.py` Users should use MindsDB's `staging` branch or v23.11.4.1, which contain a fix for the issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mindsdb/mindsdb/security/advisories/GHSA-crhp-7c74-cg4c - https://github.com/mindsdb/mindsdb/commit/8d13c9c28ebcf
ub.com/mindsdb/mindsdb/security/advisories/GHSA-crhp-7c74-cg4c - https://github.com/mindsdb/mindsdb/commit/8d13c9c28ebcf3b36509eb679378004d4648d8fe
CVE ID: CVE-2023-49797 State: PUBLISHED Published: 2023-12-09T00:42:46.182Z Last Updated: 2025-02-13T17:18:55.900Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: pyinstaller Products: pyinstaller Problem Types: CWE-379, CWE-732 Description: PyInstaller bundles a Python application and all its dependencies into a single package. A PyInstaller built application, elevated as a privileged process, may be tricked by an unprivileged attacker into deleting files the unprivileged user does not otherwise have access to. A user is affected if **all** the following are satisfied: 1. The user runs an application containing either `matplotlib` or `win32com`. 2. The applic
the following are satisfied: 1. The user runs an application containing either `matplotlib` or `win32com`. 2. The application is ran as administrator (or at least a user with higher privileges than the attacker). 3. The user's temporary directory is not locked to that specific user (most likely due to `TMP`/`TEMP` environment variables pointing to an unprotected, arbitrary, non default location). Either: A. The attacker is able to very carefully time the replacement of a temporary file with a symlink. This switch must occur exactly between `shutil.rmtree()`'s builtin symlink check and the deletion itself B: The application was built with Python 3.7.x or earlier which has no protection agains
k check and the deletion itself B: The application was built with Python 3.7.x or earlier which has no protection against Directory Junctions links. The vulnerability has been addressed in PR #7827 which corresponds to `pyinstaller >= 5.13.1`. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pyinstaller/pyinstaller/security/advisories/GHSA-9w2p-rh8c-v9g5 - https://github.com/pyinstaller/pyinstaller/pull/7827 - https://github.com/python/cpython/blob/0fb18b02c8ad56299d6a2910be0bab8ad601ef24/Lib/shutil.py#L623 - https://lists.fedoraproject.org/archives/list/package-announce@li
2c8ad56299d6a2910be0bab8ad601ef24/Lib/shutil.py#L623 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ISRWT34FAF23PUOLVZ7RVWBZMWPDR5U7/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2K2XIQLEMZIKUQUOWNDYWTEWYQTKMAN7/
CVE ID: CVE-2023-49798 State: PUBLISHED Published: 2023-12-08T23:35:24.467Z Last Updated: 2024-08-02T22:01:26.056Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: OpenZeppelin Products: openzeppelin-contracts Problem Types: CWE-670 Description: OpenZeppelin Contracts is a library for smart contract development. A merge issue when porting the 5.0.1 patch to the 4.9 branch caused a line duplication. In the version of `Multicall.sol` released in `@openzeppelin/contracts@4.9.4` and `@openzeppelin/contracts-upgradeable@4.9.4`, all subcalls are executed twice. Concretely, this exposes a user to unintentionally duplicate operations like asset transfers. The duplica
xecuted twice. Concretely, this exposes a user to unintentionally duplicate operations like asset transfers. The duplicated delegatecall was removed in version 4.9.5. The 4.9.4 version is marked as deprecated. Users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-699g-q6qh-q4v8 - https://github.com/OpenZeppelin/openzeppelin-contracts/commit/88ac712e06832bce73b41e8166cded2729e25205
CVE ID: CVE-2023-49799 State: PUBLISHED Published: 2023-12-08T23:45:18.581Z Last Updated: 2024-11-27T15:52:46.493Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: johannschopplich Products: nuxt-api-party Problem Types: CWE-918 Description: `nuxt-api-party` is an open source module to proxy API requests. nuxt-api-party attempts to check if the user has passed an absolute URL to prevent the aforementioned attack. This has been recently changed to use the regular expression `^https?://`, however this regular expression can be bypassed by an absolute URL with leading whitespace. For example `\nhttps://whatever.com` which has a leading newline. According to the fe