Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
hile, but recently it was discovered that a malicious administrator can inject Groovy code that can be executed remotely by a running Apache Syncope Core instance. Users are recommended to upgrade to version 3.0.14 / 4.0.2, which fix this issue by forcing the Groovy code to run in a sandbox. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/x7cv6xv7z76y49grdr1hgj1pzw5zbby6
CVE ID: CVE-2025-57740 State: PUBLISHED Published: 2025-10-14T15:22:54.733Z Last Updated: 2025-10-16T03:57:10.945Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Fortinet Products: FortiPAM, FortiOS, FortiProxy Problem Types: CWE-122 Description: An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions and FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions RDP boo
all versions and FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions RDP bookmark connection may allow an authenticated user to execute unauthorized code via crafted requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-25-756
CVE ID: CVE-2025-57741 State: PUBLISHED Published: 2025-10-14T15:22:49.758Z Last Updated: 2025-10-16T03:57:09.905Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Fortinet Products: FortiClientMac Problem Types: CWE-732 Description: An Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in FortiClientMac 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local attacker to run arbitrary code or commands via LaunchDaemon hijacking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-25-664
CVE ID: CVE-2025-57742 State: REJECTED Published: N/A Last Updated: 2025-08-20T02:55:08.633Z Description: No description available.
CVE ID: CVE-2025-57743 State: REJECTED Published: N/A Last Updated: 2025-08-20T02:55:08.124Z Description: No description available.
CVE ID: CVE-2025-57744 State: REJECTED Published: N/A Last Updated: 2025-08-20T02:55:07.586Z Description: No description available.
CVE ID: CVE-2025-57745 State: REJECTED Published: N/A Last Updated: 2025-08-20T02:55:07.112Z Description: No description available.
CVE ID: CVE-2025-57746 State: REJECTED Published: N/A Last Updated: 2025-08-20T02:55:06.631Z Description: No description available.
CVE ID: CVE-2025-57747 State: REJECTED Published: N/A Last Updated: 2025-08-20T02:55:05.998Z Description: No description available.
CVE ID: CVE-2025-57748 State: REJECTED Published: N/A Last Updated: 2025-08-20T02:55:05.403Z Description: No description available.
CVE ID: CVE-2025-57749 State: PUBLISHED Published: 2025-08-20T21:46:39.926Z Last Updated: 2025-08-21T14:48:02.396Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: n8n-io Products: n8n Problem Types: CWE-59 Description: n8n is a workflow automation platform. Before 1.106.0, a symlink traversal vulnerability was discovered in the Read/Write File node in n8n. While the node attempts to restrict access to sensitive directories and files, it does not properly account for symbolic links (symlinks). An attacker with the ability to create symlinks—such as by using the Execute Command node—could exploit this to bypass the intended directory restrictions and read from
such as by using the Execute Command node—could exploit this to bypass the intended directory restrictions and read from or write to otherwise inaccessible paths. Users of n8n.cloud are not impacted. Affected users should update to version 1.106.0 or later. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/n8n-io/n8n/security/advisories/GHSA-ggjm-f3g4-rwmm - https://github.com/n8n-io/n8n/pull/17735
CVE ID: CVE-2025-57751 State: PUBLISHED Published: 2025-08-21T18:27:04.620Z Last Updated: 2025-08-21T18:42:16.688Z Vendors: pyload Products: pyload Problem Types: CWE-400 Description: pyLoad is the free and open-source Download Manager written in pure Python. The jk parameter is received in pyLoad CNL Blueprint. Due to the lack of jk parameter verification, the jk parameter input by the user is directly determined as dykpy.evaljs(), resulting in the server CPU being fully occupied and the web-ui becoming unresponsive. This vulnerability is fixed in 0.5.0b3.dev92. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pyload/pyload/security/advisories/GHSA-9gjj-6g
Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pyload/pyload/security/advisories/GHSA-9gjj-6gj7-c4wj
CVE ID: CVE-2025-57752 State: PUBLISHED Published: 2025-08-29T22:06:27.240Z Last Updated: 2025-09-02T19:23:39.835Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: vercel Products: next.js Problem Types: CWE-524 Description: Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization API routes are affected by cache key confusion. When images returned from API routes vary based on request headers (such as Cookie or Authorization), these responses could be incorrectly cached and served to unauthorized users due to a cache key confusion bug. This vulnerability has
es could be incorrectly cached and served to unauthorized users due to a cache key confusion bug. This vulnerability has been fixed in Next.js versions 14.2.31 and 15.4.5. All users are encouraged to upgrade if they use API routes to serve images that depend on request headers and have image optimization enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vercel/next.js/security/advisories/GHSA-g5qg-72qw-gw5v - https://github.com/vercel/next.js/pull/82114 - https://github.com/vercel/next.js/commit/6b12c60c61ee80cb0443ccd20de82ca9b4422ddd - https://vercel.com/changelog/cve-2025-57752
CVE ID: CVE-2025-57753 State: PUBLISHED Published: 2025-08-21T16:03:04.804Z Last Updated: 2025-08-21T17:32:07.786Z Vendors: sapphi-red Products: vite-plugin-static-copy Problem Types: CWE-22 Description: vite-plugin-static-copy is rollup-plugin-copy for Vite with dev server support. Files not included in src are accessible with a crafted request. The vulnerability is fixed in 2.3.2 and 3.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sapphi-red/vite-plugin-static-copy/security/advisories/GHSA-pp7p-q8fx-2968
CVE ID: CVE-2025-57754 State: PUBLISHED Published: 2025-08-21T16:14:29.391Z Last Updated: 2025-08-21T17:31:58.060Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: kristoferfannar Products: eslint-ban-moment Problem Types: CWE-260 Description: eslint-ban-moment is an Eslint plugin for final assignment in VIHU. In 3.0.0 and earlier, a sensitive Supabase URI is exposed in .env. A valid Supabase URI with embedded username and password will allow an attacker complete unauthorized access and control over database and user data. This could lead to data exfiltration, modification or deletion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
to data exfiltration, modification or deletion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kristoferfannar/eslint-ban-moment/security/advisories/GHSA-2486-4cjg-pw98 - https://github.com/kristoferfannar/eslint-ban-moment/commit/bc2d2f9d23e6ae961a23e0d769e0722870b11108
CVE ID: CVE-2025-57755 State: PUBLISHED Published: 2025-08-21T16:21:33.485Z Last Updated: 2025-08-21T17:31:44.119Z Vendors: musistudio Products: claude-code-router Problem Types: CWE-200, CWE-942 Description: claude-code-router is a powerful tool to route Claude Code requests to different models and customize any request. Due to improper Cross-Origin Resource Sharing (CORS) configuration, there is a risk that user API Keys or equivalent credentials may be exposed to untrusted domains. Attackers could exploit this misconfiguration to steal credentials, abuse accounts, exhaust quotas, or access sensitive data. The issue has been patched in v1.0.34. Additional Analyst Notes: - CISA ADP Vulnrich
t quotas, or access sensitive data. The issue has been patched in v1.0.34. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/musistudio/claude-code-router/security/advisories/GHSA-8hmm-4crw-vm2c
CVE ID: CVE-2025-57756 State: PUBLISHED Published: 2025-08-28T16:31:40.295Z Last Updated: 2025-08-28T17:49:26.154Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: contao Products: contao Problem Types: CWE-200, CWE-612 Description: Contao is an Open Source CMS. In versions starting from 4.9.14 and prior to 4.13.56, 5.3.38, and 5.6.1, protected content elements that are rendered as fragments are indexed and become publicly available in the front end search. This issue has been patched in versions 4.13.56, 5.3.38, and 5.6.1. A workaround involves disabling the front end search. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com
lves disabling the front end search. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/contao/contao/security/advisories/GHSA-2xmj-8wmq-7475 - https://github.com/contao/contao/commit/a03976c459b6f3985a28f6488b82a76ffb6c0514 - https://contao.org/en/security-advisories/information-disclosure-in-the-front-end-search-index
CVE ID: CVE-2025-57757 State: PUBLISHED Published: 2025-08-28T16:32:03.487Z Last Updated: 2025-08-28T17:48:36.124Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: contao Products: contao Problem Types: CWE-200, CWE-212 Description: Contao is an Open Source CMS. In versions starting from 5.0.0 and prior to 5.3.38 and 5.6.1, if a news feed contains protected news archives, their news items are not filtered and become publicly available in the RSS feed. This issue has been patched in versions 5.3.38 and 5.6.1. A workaround involves not adding protected news archives to the news feed page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
protected news archives to the news feed page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/contao/contao/security/advisories/GHSA-w53m-gxvg-vx7p - https://github.com/contao/contao/commit/e75f46b11974fbf7a4652e65c19ad6ca84c59271 - https://contao.org/en/security-advisories/information-disclosure-in-the-news-module
CVE ID: CVE-2025-57758 State: PUBLISHED Published: 2025-08-28T16:32:38.664Z Last Updated: 2025-08-28T17:20:01.087Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: contao Products: contao Problem Types: CWE-284 Description: Contao is an Open Source CMS. In versions starting from 5.0.0 and prior to 5.3.38 and 5.6.1, the table access voter in the back end doesn't check if a user is allowed to access the corresponding module. This issue has been patched in versions 5.3.38 and 5.6.1. A workaround involves not relying solely on the voter and additionally to check USER_CAN_ACCESS_MODULE. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://githu
tionally to check USER_CAN_ACCESS_MODULE. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/contao/contao/security/advisories/GHSA-7m47-r75r-cx8v - https://github.com/contao/contao/commit/3f05c603e1c94d34819f837f060df5d66447d0d7 - https://contao.org/en/security-advisories/improper-access-control-in-the-back-end-voters
CVE ID: CVE-2025-57759 State: PUBLISHED Published: 2025-08-28T16:32:59.022Z Last Updated: 2025-08-28T17:16:55.904Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: contao Products: contao Problem Types: CWE-269 Description: Contao is an Open Source CMS. In versions starting from 5.3.0 and prior to 5.3.38 and 5.6.1, under certain conditions, back end users may be able to edit fields of pages and articles without having the necessary permissions. This issue has been patched in versions 5.3.38 and 5.6.1. There are no workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/contao/contao/security/advisories/GHSA-qqfq-7cpp-h
lyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/contao/contao/security/advisories/GHSA-qqfq-7cpp-hcqj - https://github.com/contao/contao/commit/80ee7db12d55ad979d9b1b180f273d4e2668851f - https://contao.org/en/security-advisories/improper-privilege-management-for-page-and-article-fields
CVE ID: CVE-2025-57760 State: PUBLISHED Published: 2025-08-25T16:22:17.772Z Last Updated: 2025-08-25T20:34:14.809Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: langflow-ai Products: langflow Problem Types: CWE-269 Description: Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exists in Langflow containers where an authenticated user with RCE access can invoke the internal CLI command langflow superuser to create a new administrative user. This results in full superuser access, even if the user initially registered through the UI as a regular (non-admin) account. A patched version has not been
s, even if the user initially registered through the UI as a regular (non-admin) account. A patched version has not been made public at this time. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/langflow-ai/langflow/security/advisories/GHSA-4gv9-mp8m-592r - https://github.com/langflow-ai/langflow/commit/c188ec113c9ca46154ad01d0eded1754cc6bef97 - http://github.com/langflow-ai/langflow/pull/9152
CVE ID: CVE-2025-57761 State: PUBLISHED Published: 2025-08-21T16:40:16.191Z Last Updated: 2025-08-21T17:31:15.227Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is a Web manager for charitable institutions. Prior to 3.4.10, there is a SQL Injection vulnerability in the /html/funcionario/dependente_remover.php endpoint, specifically in the id_funcionario parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This vulnerability is fixed in 3.4.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/se
in 3.4.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-fxwc-r5m4-hj62 - http://github.com/LabRedesCefetRJ/WeGIA/commit/baec5c70620b05a09b130a94db8216e3bfe7e4ce
CVE ID: CVE-2025-57762 State: PUBLISHED Published: 2025-08-21T16:46:54.546Z Last Updated: 2025-08-21T17:30:59.655Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-79 Description: WeGIA is a Web manager for charitable institutions. Prior to 3.4.7, there is a Stored Cross-Site Scripting (XSS) vulnerability in the dependente_docdependente.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the nome parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability is fixed in 3.4.7. Additional Analyst Notes:
accessed by users, posing a significant security risk. This vulnerability is fixed in 3.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-494r-43f3-p828 - https://github.com/LabRedesCefetRJ/WeGIA/commit/fb1ab404c564e4dce32796b4b68cd192731207f3
CVE ID: CVE-2025-57763 State: PUBLISHED Published: 2025-08-21T16:59:37.843Z Last Updated: 2025-08-21T17:30:52.928Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-79 Description: WeGIA is a Web manager for charitable institutions. Prior to 3.4.7, there is a Reflected Cross-Site Scripting (XSS) vulnerability in the insere_despacho.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the cpf sccs. This vulnerability is fixed in 3.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-67w3-jf96-f754
CVE ID: CVE-2025-57764 State: PUBLISHED Published: 2025-08-21T17:04:07.482Z Last Updated: 2025-08-21T17:30:24.485Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-79 Description: WeGIA is a Web manager for charitable institutions. Prior to 3.4.7, a Reflected Cross-Site Scripting (XSS) vulnerability was identified in the cargos.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msg_e parameter. This vulnerability is fixed in 3.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/adviso
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-qx7f-q867-cgx2 - https://github.com/LabRedesCefetRJ/WeGIA/commit/4e9a1c170a495eb8a8433052de19990d355cb098
CVE ID: CVE-2025-57765 State: PUBLISHED Published: 2025-08-21T17:05:45.975Z Last Updated: 2025-08-21T17:30:16.998Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-79 Description: WeGIA is a Web manager for charitable institutions. Prior to 3.4.7, a Reflected Cross-Site Scripting (XSS) vulnerability was identified in the pre_cadastro_adotante.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msg_e parameter. This vulnerability is fixed in 3.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/
xed in 3.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-39r5-c63f-99mx - https://github.com/LabRedesCefetRJ/WeGIA/commit/4e9a1c170a495eb8a8433052de19990d355cb098
CVE ID: CVE-2025-57766 State: PUBLISHED Published: 2025-09-08T21:12:07.626Z Last Updated: 2025-09-09T13:45:07.885Z Vendors: ethyca Products: fides Problem Types: CWE-613 Description: Fides is an open-source privacy engineering platform. Prior to version 2.69.1, admin UI user password changes in Fides do not invalidate active user sessions, creating a vulnerability chaining opportunity where attackers who have obtained session tokens through other attack vectors (such as XSS) can maintain access even after password reset. This issue is not directly exploitable on its own and requires a prerequisite vulnerability to obtain valid session tokens in the first place. Version 2.69.1 fixes the issue
requires a prerequisite vulnerability to obtain valid session tokens in the first place. Version 2.69.1 fixes the issue. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ethyca/fides/security/advisories/GHSA-rpw8-82v9-3q87 - https://github.com/ethyca/fides/commit/8daec4f5ad3daf0f0bdab4814f6757eb0965104b - https://github.com/ethyca/fides/releases/tag/2.69.1
CVE ID: CVE-2025-57767 State: PUBLISHED Published: 2025-08-28T15:33:00.087Z Last Updated: 2025-08-28T17:12:35.539Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: asterisk Products: asterisk Problem Types: CWE-253 Description: Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, and 22.5.2, if a SIP request is received with an Authorization header that contains a realm that wasn't in a previous 401 response's WWW-Authenticate header, or an Authorization header with an incorrect realm was received without a previous 401 response being sent, the get_authorization_header() function in res_pjsip_authenticato
s received without a previous 401 response being sent, the get_authorization_header() function in res_pjsip_authenticator_digest will return a NULL. This wasn't being checked before attempting to get the digest algorithm from the header which causes a SEGV. This issue has been patched in versions 20.15.2, 21.10.2, and 22.5.2. There are no workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/asterisk/asterisk/security/advisories/GHSA-64qc-9x89-rx5j - https://github.com/asterisk/asterisk/pull/1407 - https://github.com/asterisk/asterisk/commit/02993717b08f899d4aca9888062f35dfb198584f
CVE ID: CVE-2025-57768 State: PUBLISHED Published: 2025-08-21T17:20:35.531Z Last Updated: 2025-08-21T20:02:12.244Z Vendors: Alanaktion Products: phproject Problem Types: CWE-79 Description: Phproject is a high performance full-featured project management system. From 1.8.0 to before 1.8.3, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Planned Hours field when creating a new project. When sending a POST request to /issues/new/, the value provided in the Planned Hours field is included in the server response without any HTML encoding or sanitization. Because of this, an attacker can craft a malicious payload such as <script>alert(1)</script> and include it in the planned_hour
of this, an attacker can craft a malicious payload such as <script>alert(1)</script> and include it in the planned_hours parameter. The server reflects the input directly in the HTML of the project creation page, causing the browser to interpret and execute it. This vulnerability is fixed in 1.8.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Alanaktion/phproject/security/advisories/GHSA-mhhg-qx37-g369
CVE ID: CVE-2025-57769 State: PUBLISHED Published: 2025-09-29T21:37:29.491Z Last Updated: 2025-09-30T14:51:28.745Z Vendors: FreshRSS Products: FreshRSS Problem Types: CWE-79, CWE-1021 Description: FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below contain a vulnerability where a specially crafted page can trick a user into executing arbitrary JS code or promoting a user in FreshRSS by obscuring UI elements in iframes. If embedding an authenticated iframe is possible, this may lead to privilege escalation via obscuring the promote user button in the admin UI or XSS by tricking the user to drag content into the UserJS text area. This is fixed in version 1.27.0 Addition
admin UI or XSS by tricking the user to drag content into the UserJS text area. This is fixed in version 1.27.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-wm5p-7pr7-c8rw - https://github.com/FreshRSS/FreshRSS/pull/7677 - https://github.com/FreshRSS/FreshRSS/releases/tag/1.27.0
CVE ID: CVE-2025-57770 State: PUBLISHED Published: 2025-08-22T16:50:35.002Z Last Updated: 2025-08-22T20:05:08.582Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: zitadel Products: zitadel Problem Types: CWE-203 Description: The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Versions 4.0.0 to 4.0.2, 3.0.0 to 3.3.6, and all versions prior to 2.71.15 are vulnerable to a username enumeration issue in the login interface. The login UI includes a security feature, Ignoring unknown usernames, that is intended to prevent username enumeration by returning a generic response for both valid and invalid