Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-22936 State: PUBLISHED Published: 2021-08-16T18:38:52 Last Updated: 2024-08-03T18:58:25.950Z Vendors: n/a Products: Pulse Connect Secure Problem Types: CWE-79 Description: A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack against an authenticated administrator via an unsanitized web parameter. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC
CVE ID: CVE-2021-22937 State: PUBLISHED Published: 2021-08-16T18:38:54 Last Updated: 2024-08-03T18:58:25.940Z Vendors: n/a Products: Pulse Connect Secure Problem Types: CWE-434 Description: A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write via a maliciously crafted archive uploaded in the administrator web interface. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC
CVE ID: CVE-2021-22938 State: PUBLISHED Published: 2021-08-16T18:38:43 Last Updated: 2024-08-03T18:58:25.945Z Vendors: n/a Products: Pulse Connect Secure Problem Types: CWE-77 Description: A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter in the administrator web console. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC
CVE ID: CVE-2021-22939 State: PUBLISHED Published: 2021-08-16T00:00:00 Last Updated: 2025-04-30T22:24:36.404Z Vendors: NodeJS Products: Node Problem Types: CWE-295 Description: If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted. Additional Analyst Notes: - CVE Program Container: References: - https://nodejs.org/en/blog/vulnerability/aug-2021-security-releases/ - https://hackerone.com/reports/1278254 - https://www.oracle.com/security-alerts/cpuoct2021.html - https://security.netapp.com/advisory/ntap-20210917-0003/ - https://www.
www.oracle.com/security-alerts/cpuoct2021.html - https://security.netapp.com/advisory/ntap-20210917-0003/ - https://www.oracle.com/security-alerts/cpujan2022.html - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - https://www.oracle.com/security-alerts/cpujul2022.html - https://lists.debian.org/debian-lts-announce/2022/10/msg00006.html - https://security.gentoo.org/glsa/202401-02
CVE ID: CVE-2021-22940 State: PUBLISHED Published: 2021-08-16T00:00:00 Last Updated: 2025-04-30T22:24:35.552Z Vendors: NodeJS Products: Node Problem Types: CWE-416 Description: Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1238162 - https://nodejs.org/en/blog/vulnerability/aug-2021-security-releases/ - https://www.oracle.com/security-alerts/cpuoct2021.html - https://security.netapp.com/advisory/ntap-20210923-0001/ - https://www.oracle.com/security-alerts/cpujan2022.ht
1.html - https://security.netapp.com/advisory/ntap-20210923-0001/ - https://www.oracle.com/security-alerts/cpujan2022.html - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - https://www.oracle.com/security-alerts/cpujul2022.html - https://lists.debian.org/debian-lts-announce/2022/10/msg00006.html - https://security.gentoo.org/glsa/202401-02
CVE ID: CVE-2021-22941 State: PUBLISHED Published: 2021-09-23T12:44:31.000Z Last Updated: 2025-10-21T23:25:31.338Z Vendors: n/a Products: Citrix ShareFile storage zones controller Problem Types: CWE-284 Description: Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX328123
CVE ID: CVE-2021-22942 State: PUBLISHED Published: 2021-10-18T00:00:00 Last Updated: 2024-08-03T18:58:26.009Z Vendors: n/a Products: https://github.com/rails/rails Problem Types: CWE-601 Description: A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website. Additional Analyst Notes: - CVE Program Container: References: - https://weblog.rubyonrails.org/2021/8/19/Rails-6-0-4-1-and-6-1-4-1-have-been-released/ - http://www.openwall.com/lists/oss-security/2021/12/14/5 - https://www.debian.org/security/2023/dsa-5372 - https://security.netapp.com/advisory/ntap-20240202-0005/
CVE ID: CVE-2021-22943 State: PUBLISHED Published: 2021-08-31T16:53:19 Last Updated: 2024-08-03T18:58:25.950Z Vendors: n/a Products: UniFi Protect application Problem Types: CWE-287 Description: A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subsequently control the Protect camera(s) assigned to said network. This vulnerability is fixed in UniFi Protect application V1.19.0 and later. Additional Analyst Notes: - CVE Program Container: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-019-019/90a00abe-d6b6-43c6-92d4-0a0342f1506f
CVE ID: CVE-2021-22944 State: PUBLISHED Published: 2021-08-31T16:53:08 Last Updated: 2024-08-03T18:58:26.253Z Vendors: n/a Products: UniFi Protect application Problem Types: Privilege Escalation (CAPEC-233) Description: A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor with a view-only role and network access to gain the same privileges as the owner of the UniFi Protect application. This vulnerability is fixed in UniFi Protect application V1.19.0 and later. Additional Analyst Notes: - CVE Program Container: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-019-019/90a00abe-d6b6-43c6-92d4-0a0342f1506f
CVE ID: CVE-2021-22945 State: PUBLISHED Published: 2021-09-23T00:00:00.000Z Last Updated: 2025-06-09T14:47:23.444Z Vendors: n/a Products: https://github.com/curl/curl Problem Types: CWE-415 Description: When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1269242 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/
sts.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/ - https://www.oracle.com/security-alerts/cpuoct2021.html - https://security.netapp.com/advisory/ntap-20211029-0003/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/ - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - https://support.apple.com/kb/HT213183 - http://seclists.org/fulldisclosure/2022/Mar/29 - https://www.debian.org/security/2022/dsa-5197 - https://security.gentoo.org/glsa/202212-01
CVE ID: CVE-2021-22946 State: PUBLISHED Published: 2021-09-29T00:00:00 Last Updated: 2024-08-03T18:58:26.135Z Vendors: n/a Products: https://github.com/curl/curl Problem Types: CWE-325 Description: A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibl
ake curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1334111 - https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/ - https://www.oracle.com/security-alerts/cpuoct2021.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/ - https://www.oracle.com/security-al
ackage-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/ - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.netapp.com/advisory/ntap-20211029-0003/ - https://security.netapp.com/advisory/ntap-20220121-0008/ - http://seclists.org/fulldisclosure/2022/Mar/29 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - https://support.apple.com/kb/HT213183 - https://www.oracle.com/security-alerts/cpujul2022.html - https://www.debian.org/security/2022/dsa-5197 - https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html - https://security.gentoo.org/glsa/202212-01
CVE ID: CVE-2021-22947 State: PUBLISHED Published: 2021-09-29T00:00:00 Last Updated: 2024-08-03T18:58:26.408Z Vendors: n/a Products: https://github.com/curl/curl Problem Types: CWE-310 Description: When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. curl would then upgrade to TLS but not flush the in-queue of cached responses but instead continue using and trustingthe responses it got *before* the TLS handshake as if they were authenticated.Using this flaw, it allows a Man-In-The-Middle attacker to first inject the fake responses, then
they were authenticated.Using this flaw, it allows a Man-In-The-Middle attacker to first inject the fake responses, then pass-through the TLS traffic from the legitimate server and trick curl into sending data back to the user thinking the attacker's injected data comes from the TLS-protected server. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1334763 - https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/ - https://www.oracle.com/security-alerts/cpuoct2021.html - https://lists.fedoraproject.org/ar
VEM2HWUBX67SDGPSY4CQB72OE/ - https://www.oracle.com/security-alerts/cpuoct2021.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/ - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.netapp.com/advisory/ntap-20211029-0003/ - http://seclists.org/fulldisclosure/2022/Mar/29 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - https://support.apple.com/kb/HT213183 - https://www.oracle.com/security-alerts/cpujul2022.html - https://www.debian.org/security/2022/dsa-5197 - https://lists.debian.org/debian-lts-announce/2022
erts/cpujul2022.html - https://www.debian.org/security/2022/dsa-5197 - https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html - https://security.gentoo.org/glsa/202212-01
CVE ID: CVE-2021-22948 State: PUBLISHED Published: 2021-09-23T12:44:20 Last Updated: 2024-08-03T18:58:26.133Z Vendors: n/a Products: https://github.com/revive-adserver/revive-adserver Problem Types: CWE-79 Description: Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqid() PHP function. Under some circumstances, an attacker could theoretically be able to brute force session IDs in order to take over a specific account. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1187820 - https://www.revive-adserver.com/security/revive-sa-2021-005/
CVE ID: CVE-2021-22949 State: PUBLISHED Published: 2021-09-23T12:40:45 Last Updated: 2024-08-03T18:58:26.117Z Vendors: n/a Products: https://github.com/concrete5/concrete5 Problem Types: CWE-352 Description: A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to duplicate files which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: "Solar Security CMS Research Team" Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1102225 - https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes
CVE ID: CVE-2021-22950 State: PUBLISHED Published: 2021-09-23T12:40:52 Last Updated: 2024-08-03T18:58:26.371Z Vendors: n/a Products: https://github.com/concrete5/concrete5 Problem Types: CWE-352 Description: Concrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachments to comments in the conversation section to be deleted.Credit for discovery: "Solar Security Research Team" Additional Analyst Notes: - CVE Program Container: References: - https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes - https://hackerone.com/reports/1102177
CVE ID: CVE-2021-22951 State: PUBLISHED Published: 2021-11-19T18:10:14 Last Updated: 2024-08-03T18:58:26.191Z Vendors: n/a Products: https://github.com/concrete5/concrete5 Problem Types: CWE-639 Description: Unauthorized individuals could view password protected files using view_inline in Concrete CMS (previously concrete 5) prior to version 8.5.7. Concrete CMS now checks to see if a file has a password in view_inline and, if it does, the file is not rendered.For version 8.5.6, the following mitigations were put in place a. restricting file types for view_inline to images only b. putting a warning in the file manager to advise users.Credit for discovery: "Solar Security Research Team"Concret
nly b. putting a warning in the file manager to advise users.Credit for discovery: "Solar Security Research Team"Concrete CMS security team CVSS scoring is 5.3: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NThis fix is also in Concrete version 9.0.0 Additional Analyst Notes: - CVE Program Container: References: - https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes - https://hackerone.com/reports/1102014
CVE ID: CVE-2021-22952 State: PUBLISHED Published: 2021-09-23T12:41:07 Last Updated: 2024-08-03T18:58:26.144Z Vendors: n/a Products: UniFi Talk application Problem Types: CWE-94 Description: A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained access to a network to subsequently control Talk device(s) assigned to said network if they are not yet adopted. This vulnerability is fixed in UniFi Talk application V1.12.5 and later. Additional Analyst Notes: - CVE Program Container: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-020-020/8ce6a7e6-0cce-4814-8bbe-ee812cb94b1a
CVE ID: CVE-2021-22953 State: PUBLISHED Published: 2021-09-23T12:42:12 Last Updated: 2024-08-03T18:58:25.986Z Vendors: n/a Products: https://github.com/concrete5/concrete5 Problem Types: CWE-352 Description: A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to clone topics which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: "Solar Security Research Team" Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1102225 - https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes
CVE ID: CVE-2021-22954 State: PUBLISHED Published: 2022-02-09T22:05:55 Last Updated: 2024-08-03T18:58:26.212Z Vendors: n/a Products: https://github.com/concrete5/concrete5 Problem Types: CWE-352 Description: A cross-site request forgery vulnerability exists in Concrete CMS <v9 that could allow an attacker to make requests on behalf of other users. Additional Analyst Notes: - CVE Program Container: References: - https://documentation.concretecms.org/developers/introduction/version-history/90-release-notes
CVE ID: CVE-2021-22955 State: PUBLISHED Published: 2021-12-07T13:12:33 Last Updated: 2024-08-03T18:58:25.965Z Vendors: n/a Products: Citrix ADC, Citrix Gateway Problem Types: CWE-400 Description: A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN (Gateway) or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX330728
CVE ID: CVE-2021-22956 State: PUBLISHED Published: 2021-12-07T13:12:38 Last Updated: 2024-08-03T18:58:26.260Z Vendors: n/a Products: Citrix ADC, Citrix Gateway, Citrix SDWAN Problem Types: CWE-400 Description: An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX330728
CVE ID: CVE-2021-22957 State: PUBLISHED Published: 2021-11-24T18:49:30 Last Updated: 2024-08-03T18:58:26.074Z Vendors: n/a Products: UniFi Protect application Problem Types: CWE-16 Description: A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has convinced a privileged user to access a URL with malicious code to take over said user’s account.This vulnerability is fixed in UniFi Protect application Version 1.20.0 and later. Additional Analyst Notes: - CVE Program Container: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-021-021/62bd8841-6603-4fee-9dba-73037148f173
CVE ID: CVE-2021-22958 State: PUBLISHED Published: 2021-10-07T13:35:02 Last Updated: 2024-08-03T18:58:26.269Z Vendors: n/a Products: https://github.com/concrete5/concrete5 Problem Types: CWE-918 Description: A Server-Side Request Forgery vulnerability was found in concrete5 < 8.5.5 that allowed a decimal notation encoded IP address to bypass the limitations in place for localhost allowing interaction with local services. Impact can vary depending on services exposed.CVSSv2.0 AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/863221 - https://documentation.concretecms.org/developers/introduction/version-history/85
https://hackerone.com/reports/863221 - https://documentation.concretecms.org/developers/introduction/version-history/855-release-notes
CVE ID: CVE-2021-22959 State: PUBLISHED Published: 2021-11-15T14:45:16 Last Updated: 2025-04-30T22:24:37.284Z Vendors: NodeJS Products: Node Problem Types: CWE-444 Description: The parser in accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS) in llhttp < v2.1.4 and < v6.0.6. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1238709 - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.debian.org/security/2022/dsa-5170
CVE ID: CVE-2021-22960 State: PUBLISHED Published: 2021-11-03T19:22:42 Last Updated: 2025-04-30T22:24:38.152Z Vendors: NodeJS Products: Node Problem Types: CWE-444 Description: The parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body of chunked requests. This leads to HTTP Request Smuggling (HRS) under certain conditions. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1238099 - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.debian.org/security/2022/dsa-5170
CVE ID: CVE-2021-22961 State: PUBLISHED Published: 2021-10-18T12:48:05 Last Updated: 2024-08-03T18:58:26.242Z Vendors: n/a Products: GlassWire Problem Types: CWE-94 Description: A code injection vulnerability exists within the firewall software of GlassWire v2.1.167 that could lead to arbitrary code execution from a file in the user path on first execution. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1193641
CVE ID: CVE-2021-22962 State: PUBLISHED Published: 2023-12-19T15:43:26.251Z Last Updated: 2024-08-03T18:58:26.311Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Ivanti Products: Avalanche Description: An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Additional Analyst Notes: - CVE Program Container: References: - https://download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt
CVE ID: CVE-2021-22963 State: PUBLISHED Published: 2021-10-14T14:50:11 Last Updated: 2024-08-03T18:58:26.158Z Vendors: n/a Products: https://github.com/fastify/fastify-static Problem Types: CWE-601 Description: A redirect vulnerability in the fastify-static module version < 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: true option. By default, it is false. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1354255
CVE ID: CVE-2021-22964 State: PUBLISHED Published: 2021-10-14T14:50:07 Last Updated: 2024-08-03T18:58:26.128Z Vendors: n/a Products: https://github.com/fastify/fastify-static Problem Types: CWE-400 Description: A redirect vulnerability in the `fastify-static` module version >= 4.2.4 and < 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash `//` followed by a domain: `http://localhost:3000//a//youtube.com/%2e%2e%2f%2e%2e`.A DOS vulnerability is possible if the URL contains invalid characters `curl --path-as-is "http://localhost:3000//^/.."`The issue shows up on all the `fastify-static` applications that set `redirect: true` option. By defau
lhost:3000//^/.."`The issue shows up on all the `fastify-static` applications that set `redirect: true` option. By default, it is `false`. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1361804
CVE ID: CVE-2021-22965 State: PUBLISHED Published: 2021-11-19T18:10:38 Last Updated: 2024-08-03T18:58:26.149Z Vendors: n/a Products: Pulse Connect Secure Problem Types: CWE-400 Description: A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a denial of service when a malformed request is sent to the device. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF
CVE ID: CVE-2021-22966 State: PUBLISHED Published: 2021-11-19T18:09:48 Last Updated: 2024-08-03T18:58:26.123Z Vendors: n/a Products: https://github.com/concrete5/concrete5 Problem Types: Privilege Escalation (CAPEC-233) Description: Privilege escalation from Editor to Admin using Groups in Concrete CMS versions 8.5.6 and below. If a group is granted "view" permissions on the bulkupdate page, then users in that group can escalate to being an administrator with a specially crafted curl. Fixed by adding a check for group permissions before allowing a group to be moved. Concrete CMS Security team CVSS scoring: 7.1 AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HCredit for discovery: "Adrian Tiron from FORTBR