Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-0379 State: PUBLISHED Published: 2024-02-20T18:56:23.650Z Last Updated: 2024-08-08T18:52:01.296Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: smashballoon Products: Custom Twitter Feeds – A Tweets Widget or X Feed Widget Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the ctf_auto_save_tokens function. This makes it possible for unauthenticated attackers to update the site's twitter API token an
uto_save_tokens function. This makes it possible for unauthenticated attackers to update the site's twitter API token and secret via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/29e2ff11-053b-45cc-adf1-d276f1ee576e?source=cve - https://plugins.trac.wordpress.org/browser/custom-twitter-feeds/trunk/custom-twitter-feed.php - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3032345%40custom-twitter-feeds%2Ftrunk&new=3032345%40custom-twitter-feeds%2Ft
ngeset?sfp_email=&sfph_mail=&reponame=&old=3032345%40custom-twitter-feeds%2Ftrunk&new=3032345%40custom-twitter-feeds%2Ftrunk&sfp_email=&sfph_mail=#file3
CVE ID: CVE-2024-0380 State: PUBLISHED Published: 2024-02-05T21:21:42.972Z Last Updated: 2024-08-01T18:04:49.644Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: brechtvds Products: WP Recipe Maker Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The WP Recipe Maker plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 9.1.0 via the 'icon' attribute used in Shortcodes. This makes it possible for authenticated attackers, with contributor-level access and above, to include the contents of SVG files on the server, which can be leveraged for Cross-Site Scri
r-level access and above, to include the contents of SVG files on the server, which can be leveraged for Cross-Site Scripting. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/457c4e56-c2a0-451f-a4a6-e7fb7bf7b0e0?source=cve - https://plugins.trac.wordpress.org/changeset/3019769/wp-recipe-maker/trunk/includes/public/class-wprm-icon.php
CVE ID: CVE-2024-0381 State: PUBLISHED Published: 2024-01-18T07:30:25.510Z Last Updated: 2025-06-02T15:04:16.077Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: brechtvds Products: WP Recipe Maker Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the use of the 'tag' attribute in the wprm-recipe-name, wprm-recipe-date, and wprm-recipe-counter shortcodes in all versions up to, and including, 9.1.0. This makes it possible for authenticated attackers with contributor-level and above permissions to injec
cluding, 9.1.0. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a7c949f0-fcd1-4984-95a2-b19fb72f04bb?source=cve - https://plugins.trac.wordpress.org/changeset/3019769/wp-recipe-maker/trunk/includes/public/shortcodes/recipe/class-wprm-sc-name.php - https://plugins.trac.wordpress.org/changeset/3019769/wp-recipe-maker/trunk/includes/public/shortcodes/recipe/class-wprm-sc-counter.php - https://plugins.t
/changeset/3019769/wp-recipe-maker/trunk/includes/public/shortcodes/recipe/class-wprm-sc-counter.php - https://plugins.trac.wordpress.org/changeset/3019769/wp-recipe-maker/trunk/includes/public/shortcodes/recipe/class-wprm-sc-date.php
CVE ID: CVE-2024-0382 State: PUBLISHED Published: 2024-02-05T21:21:36.490Z Last Updated: 2024-08-01T18:04:49.665Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: brechtvds Products: WP Recipe Maker Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 9.1.0 due to unrestricted use of the 'header_tag' attribute. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages tha
le for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1f463ed1-06ad-430f-b450-1a73dc54f8a7?source=cve - https://plugins.trac.wordpress.org/changeset/3019769/wp-recipe-maker/trunk/includes/public/shortcodes/class-wprm-shortcode-helper.php
CVE ID: CVE-2024-0383 State: PUBLISHED Published: 2024-06-19T08:33:56.641Z Last Updated: 2024-08-01T18:04:49.494Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: brechtvds Products: WP Recipe Maker Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [wprm-recipe-instructions] and [wprm-recipe-ingredients] shortcodes in all versions up to, and including, 9.1.0 due to insufficient restrictions on the 'group_tag' attribute . This makes it possible for authenticated attackers with contributor-l
icient restrictions on the 'group_tag' attribute . This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/104b3c01-4623-43cb-aed4-16e3be62e1f9?source=cve - https://plugins.trac.wordpress.org/changeset/3019769/wp-recipe-maker/trunk/includes/public/shortcodes/recipe/class-wprm-sc-instructions.php - https://plugins.trac.wordpress.org/changeset/3019769/wp-recipe-maker/trunk/includes/public/shortcodes/recipe/cl
ns.php - https://plugins.trac.wordpress.org/changeset/3019769/wp-recipe-maker/trunk/includes/public/shortcodes/recipe/class-wprm-sc-ingredients.php
CVE ID: CVE-2024-0384 State: PUBLISHED Published: 2024-02-05T21:21:49.490Z Last Updated: 2024-08-01T18:04:49.693Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: brechtvds Products: WP Recipe Maker Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Recipe Notes in all versions up to, and including, 9.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that
e for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/749c5d09-1e9a-4aa1-b7c2-6f9d24f3a09b?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3019769%40wp-recipe-maker&new=3019769%40wp-recipe-maker&sfp_email=&sfph_mail=
CVE ID: CVE-2024-0385 State: PUBLISHED Published: 2024-03-13T15:26:35.905Z Last Updated: 2024-08-01T18:04:49.785Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: frenify Products: Categorify – WordPress Media Library Category & File Manager Problem Types: CWE-862 Missing Authorization Description: The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the categorifyAjaxAddCategory function in all versions up to, and including, 1.0.7.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to add categories. Additional Analyst Notes: - CISA ADP Vulnrichm
ted attackers, with subscriber-level access and above, to add categories. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1c7c74cf-a109-4f77-a740-5a43ccd4e96a?source=cve - https://plugins.trac.wordpress.org/changeset/3034410/categorify
CVE ID: CVE-2024-0386 State: PUBLISHED Published: 2024-03-12T21:34:34.174Z Last Updated: 2024-08-01T18:04:49.553Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: boldgrid Products: weForms – Easy Drag & Drop Contact Form Builder For WordPress Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The weForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Referer' HTTP header in all versions up to, and including, 1.6.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page
zation and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f436ab65-a59c-4b2a-abc8-a7fc038678dd?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3047406%40weforms&new=3047406%40weforms&sfp_email=&sfph_mail=
CVE ID: CVE-2024-0387 State: PUBLISHED Published: 2024-02-26T13:26:56.551Z Last Updated: 2024-10-28T06:15:50.712Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: Moxa Products: EDS-4008 Series, EDS-4009 Series, EDS-4012 Series, EDS-4014 Series, EDS-G4008 Series, EDS-G4012 Series, EDS-G4014 Series Problem Types: CWE-1188 Description: The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users cannot deactivate. An attacker may be able to send requests to the product and have it forwarded to the target. An attacker can bypass access controls or hide the source of malicious requests. Additional Analyst Notes: - CISA ADP Vulnric
tacker can bypass access controls or hide the source of malicious requests. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-237129-eds-4000-g4000-series-ip-forwarding-vulnerability?viewmode=0
CVE ID: CVE-2024-0389 State: PUBLISHED Published: 2024-01-10T14:00:04.963Z Last Updated: 2025-05-09T18:36:29.502Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Student Attendance System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Student Attendance System 1.0. Affected is an unknown function of the file attendance_report.php. The manipulation of the argument class_id leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-250230 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: -
used. VDB-250230 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250230 - https://vuldb.com/?ctiid.250230 - https://drive.google.com/file/d/1Vi-IGjAZbitDqEvmd9ONrxE0MgB8-v1I/view?usp=sharing
CVE ID: CVE-2024-0390 State: PUBLISHED Published: 2024-02-15T09:11:14.559Z Last Updated: 2025-03-13T17:58:39.772Z Vendors: INPRAX Products: iZZi connect Problem Types: CWE-798 Description: INPRAX "iZZi connect" application on Android contains hard-coded MQTT queue credentials. The same MQTT queue is used by corresponding physical recuperation devices. Exploiting this vulnerability could potentially allow unauthorized access to manage and read parameters of the recuperation unit "reQnet iZZi".This issue affects "iZZi connect" application versions before 2024010401. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.pl/en/posts/2024/02/CVE-20
l Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.pl/en/posts/2024/02/CVE-2024-0390/ - https://cert.pl/posts/2024/02/CVE-2024-0390/
CVE ID: CVE-2024-0392 State: PUBLISHED Published: 2025-02-27T07:04:53.234Z Last Updated: 2025-02-27T14:41:22.634Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: WSO2 Products: WSO2 Enterprise Integrator Problem Types: CWE-352 Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in the management console of WSO2 Enterprise Integrator 6.6.0 due to the absence of CSRF token validation. This flaw allows attackers to craft malicious requests that can trigger state-changing operations on behalf of an authenticated user, potentially compromising account settings and data integrity. The vulnerability only affects a limited set of state-changing ope
lly compromising account settings and data integrity. The vulnerability only affects a limited set of state-changing operations, and successful exploitation requires social engineering to trick a user with access to the management console into performing the malicious action. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2023-2987/
CVE ID: CVE-2024-0393 State: REJECTED Published: N/A Last Updated: 2024-01-12T05:31:59.836987Z Description: No description available.
CVE ID: CVE-2024-0394 State: PUBLISHED Published: 2024-04-03T13:32:07.211Z Last Updated: 2024-08-22T14:59:24.319Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Rapid7 Products: Minerva Problem Types: CWE-862 Description: Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges and execute arbitrary code with SYSTEM privilege. The vulnerability is caused by the product's implementation of OpenSSL's`OPENSSLDIR` parameter where it is set to a path accessible to low-privileged users. The vulnerability has been remediated and fixed in version 4.5.5. Additional Analyst Notes
ible to low-privileged users. The vulnerability has been remediated and fixed in version 4.5.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2024/04/03/cve-2024-0394-rapid7-minerva-armor-privilege-escalation-fixed/
CVE ID: CVE-2024-0395 State: REJECTED Published: N/A Last Updated: 2024-01-10T14:08:46.444Z Description: No description available.
CVE ID: CVE-2024-0396 State: PUBLISHED Published: 2024-01-17T15:56:41.390Z Last Updated: 2024-11-13T19:52:11.923Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: Progress Software Corporation Products: MOVEit Transfer Problem Types: CWE-20 Description: In Progress MOVEit Transfer versions released before 2022.0.10 (14.0.10), 2022.1.11 (14.1.11), 2023.0.8 (15.0.8), 2023.1.3 (15.1.3), an input validation issue was discovered. An authenticated user can manipulate a parameter in an HTTPS transaction. The modified transaction could lead to computational errors within MOVEit Transfer and potentially result in a denial of service. Additional Analyst Notes: - CVE Prog
tional errors within MOVEit Transfer and potentially result in a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.progress.com/moveit - https://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-January-2024
CVE ID: CVE-2024-0397 State: PUBLISHED Published: 2024-06-17T15:09:40.896Z Last Updated: 2025-11-03T21:50:55.091Z Vendors: Python Software Foundation Products: CPython Description: A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Referen
10.14, 3.11.9, 3.12.3, and 3.13.0a5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/python/cpython/issues/114572 - https://github.com/python/cpython/pull/114573 - https://mail.python.org/archives/list/security-announce@python.org/thread/BMAK5BCGKYWNJOACVUSLUF6SFGBIM4VP/ - https://github.com/python/cpython/commit/01c37f1d0714f5822d34063ca7180b595abf589d - https://github.com/python/cpython/commit/29c97287d205bf2f410f4895ebce3f43b5160524 - https://github.com/python/cpython/commit/37324b421b72b7bc9934e27aba85d48d4773002e - https://github.com/python/cpython/commit/542f3272f56f31ed04e74c40635a913fbc12d286 - https://github.com/python/cpy
002e - https://github.com/python/cpython/commit/542f3272f56f31ed04e74c40635a913fbc12d286 - https://github.com/python/cpython/commit/b228655c227b2ca298a8ffac44d14ce3d22f6faa - https://github.com/python/cpython/commit/bce693111bff906ccf9281c22371331aaff766ab - http://www.openwall.com/lists/oss-security/2024/06/17/2
CVE ID: CVE-2024-0398 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:32.597Z Description: No description available.
CVE ID: CVE-2024-0399 State: PUBLISHED Published: 2024-04-15T05:00:01.875Z Last Updated: 2025-03-27T20:44:28.266Z Vendors: Unknown Products: WooCommerce Customers Manager Problem Types: CWE-89 SQL Injection Description: The WooCommerce Customers Manager WordPress plugin before 29.7 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to an SQL injection exploitable by Subscriber+ role. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1550e30c-bf80-48e0-bc51-67d29ebe7272/
CVE ID: CVE-2024-0400 State: PUBLISHED Published: 2024-03-27T02:03:57.253Z Last Updated: 2025-10-16T08:07:33.107Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Hitachi Energy Products: MACH SCM Problem Types: CWE-94 Description: SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability. Additional Analyst Notes: - CVE Program Container: - C
clients can execute any command by using this RCE vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://publisher.hitachienergy.com/preview?DocumentId=8DBD000189&languageCode=en&Preview=true
CVE ID: CVE-2024-0401 State: PUBLISHED Published: 2024-05-20T16:55:18.891Z Last Updated: 2025-11-22T12:25:40.045Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUS Products: ExpertWiFi, RT-AX55, RT-AX58U, RT-AC67U, RT-AC68R, RT-AC68U, RT-AX86 Series, RT-AC86U, RT-AX88U, RT-AX3000 Problem Types: CWE-78 Description: ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS ExpertWiFi, ASUS RT-AX55, ASUS RT-AX58U, ASUS RT-AC67U, ASUS RT-AC68R, ASUS RT-AC68U, ASUS RT
ected routers include ASUS ExpertWiFi, ASUS RT-AX55, ASUS RT-AX58U, ASUS RT-AC67U, ASUS RT-AC68R, ASUS RT-AC68U, ASUS RT-AX86, ASUS RT-AC86U, ASUS RT-AX88U, and ASUS RT-AX3000. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vulncheck.com/advisories/asus-ovpn-rce
CVE ID: CVE-2024-0402 State: PUBLISHED Published: 2024-01-26T01:02:39.052Z Last Updated: 2025-06-03T18:01:33.069Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-22 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-rele
DP Vulnrichment: References: - https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ - https://gitlab.com/gitlab-org/gitlab/-/issues/437819
CVE ID: CVE-2024-0403 State: PUBLISHED Published: 2024-02-29T23:31:15.060Z Last Updated: 2025-05-19T14:55:16.551Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Recipes Products: Recipes Problem Types: CWE-918 Description: Recipes version 1.5.10 allows arbitrary HTTP requests to be made through the server. This is possible because the application is vulnerable to SSRF. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/harris/ - https://github.com/TandoorRecipes/recipes/
CVE ID: CVE-2024-0404 State: PUBLISHED Published: 2024-04-16T00:00:13.577Z Last Updated: 2024-08-01T18:04:49.675Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-915 Description: A mass assignment vulnerability exists in the `/api/invite/:code` endpoint of the mintplex-labs/anything-llm repository, allowing unauthorized creation of high-privileged accounts. By intercepting and modifying the HTTP request during the account creation process via an invitation link, an attacker can add a `role` property with `admin` value, thereby gaining administrative access. This issue arises due to the l
cker can add a `role` property with `admin` value, thereby gaining administrative access. This issue arises due to the lack of property allowlisting and blocklisting, enabling the attacker to exploit the system and perform actions as an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/b4355bae-766a-4bb0-942b-607bc491b23d - https://github.com/mintplex-labs/anything-llm/commit/8cd3a92c660b202655d99bee90b2864694c99946