Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-41913 State: PUBLISHED Published: 2024-08-06T13:57:29.551Z Last Updated: 2025-03-19T15:21:17.519Z Vendors: HP Inc. Products: Poly Clariti Manager Description: A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly sanitize User input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_11006488-11006512-16/hpsbpy03957
CVE ID: CVE-2024-41914 State: PUBLISHED Published: 2024-07-24T14:57:55.556Z Last Updated: 2024-08-12T21:07:17.095Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise Products: HPE Aruba Networking EdgeConnect SD-WAN Orchestrator Description: A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. Additional Analyst Notes: -
ecute arbitrary script code in a victim's browser in the context of the affected interface. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04672en_us&docLocale=en_US
CVE ID: CVE-2024-41915 State: PUBLISHED Published: 2024-07-30T17:07:42.565Z Last Updated: 2024-08-02T04:46:52.946Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: ClearPass Policy Manager (CPPM) Description: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster. Additional
the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04675en_us&docLocale=en_US
CVE ID: CVE-2024-41916 State: PUBLISHED Published: 2024-07-30T17:09:40.673Z Last Updated: 2024-10-28T20:22:04.783Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: ClearPass Policy Manager (CPPM) Description: A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contain
services supported by ClearPass Policy Manager. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04675en_us&docLocale=en_US
CVE ID: CVE-2024-41917 State: PUBLISHED Published: 2025-02-12T21:19:00.939Z Last Updated: 2025-02-18T17:33:28.504Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Battery Life Diagnostic Tool software Problem Types: Escalation of Privilege, CWE-367 Description: Time-of-check time-of-use race condition for some Intel(R) Battery Life Diagnostic Tool software before version 2.4.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01230.html
CVE ID: CVE-2024-41918 State: PUBLISHED Published: 2024-08-29T02:47:19.480Z Last Updated: 2024-08-29T23:58:41.985Z Vendors: Rakuten Group, Inc. Products: 'Rakuten Ichiba App' for Android, 'Rakuten Ichiba App' for iOS Problem Types: Improper authorization in handler for custom URL scheme Description: 'Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichiba App' for iOS 11.7.0 and earlier are vulnerable to improper authorization in handler for custom URL scheme. An arbitrary site may be displayed on the WebView of the product via Intent from another application installed on the user's device. As a result, the user may be redirected to an unauthorized site, and the user may becom
installed on the user's device. As a result, the user may be redirected to an unauthorized site, and the user may become a victim of a phishing attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=jp.co.rakuten.android&hl=en - https://apps.apple.com/jp/app/id419267350 - https://jvn.jp/en/jp/JVN56648919/
CVE ID: CVE-2024-41921 State: PUBLISHED Published: 2025-07-17T19:13:34.025Z Last Updated: 2025-07-18T08:05:08.288Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Open Source Robotics Foundation Products: Robot Operating System (ROS) Problem Types: CWE-95, CWE-94 Description: A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'echo' verb, which allows a user to introspect a ROS topic and accepts a user-provided Python expression via the --filter option. This input is passed directly to the eval() function with
pts a user-provided Python expression via the --filter option. This input is passed directly to the eval() function without sanitization, allowing a local user to craft and execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ros.org/blog/noetic-eol/
CVE ID: CVE-2024-41922 State: PUBLISHED Published: 2024-10-03T15:16:09.668Z Last Updated: 2024-12-18T14:30:54.514Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Veertu Products: Anka Build Problem Types: CWE-22 Description: A directory traversal vulnerability exists in the log files download functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2061
CVE ID: CVE-2024-41924 State: PUBLISHED Published: 2024-07-30T08:45:48.496Z Last Updated: 2025-03-18T18:30:25.776Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE 4 series Problem Types: Acceptance of extraneous untrusted data with trusted data Description: Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series. If this vulnerability is exploited, an attacker who obtained the administrative privilege may install an arbitrary PHP package. If the obsolete versions of PHP packages are installed, the product may be affected by some known vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.e
vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ec-cube.net/info/weakness/20240701/index.php - https://jvn.jp/en/jp/JVN48324254/
CVE ID: CVE-2024-41925 State: PUBLISHED Published: 2024-10-03T22:17:31.725Z Last Updated: 2024-10-04T14:25:26.785Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Optigo Networks Products: ONS-S8 Spectra Aggregation Switch Problem Types: CWE-98 Description: The web service for ONS-S8 - Spectra Aggregation Switch includes functions which do not properly validate user input, allowing an attacker to traverse directories, bypass authentication, and execute remote code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-275-01
CVE ID: CVE-2024-41926 State: PUBLISHED Published: 2024-08-01T14:05:10.650Z Last Updated: 2024-08-01T14:32:10.107Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Mattermost versions 9.9.x <= 9.9.0 and 9.5.x <= 9.5.6 fail to validate the source of sync messages and only allow the correct remote IDs, which allows a malicious remote to set arbitrary RemoteId values for synced users and therefore claim that a user was synced from another remote. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-41927 State: PUBLISHED Published: 2024-09-04T00:43:55.555Z Last Updated: 2025-07-02T01:23:14.549Z Vendors: IDEC Corporation Products: FC6A Series MICROSmart All-in-One CPU module, FC6B Series MICROSmart All-in-One CPU module, FC6A Series MICROSmart Plus CPU module, FC6B Series MICROSmart Plus CPU module, FT1A Series SmartAXIS Pro/Lite Problem Types: CWE-319 Description: Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated. Additional Analyst Note
e obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://us.idec.com/media/24-RD-0256-EN-b.pdf - https://jvn.jp/en/vu/JVNVU96959731/
CVE ID: CVE-2024-41928 State: PUBLISHED Published: 2024-09-05T03:32:56.561Z Last Updated: 2024-09-20T16:03:10.182Z Vendors: FreeBSD Products: FreeBSD Problem Types: CWE-125, CWE-787, CWE-1285 Description: Malicious software running in a guest VM can exploit the buffer overflow to achieve code execution on the host in the bhyve userspace process, which typically runs as root. Note that bhyve runs in a Capsicum sandbox, so malicious code is constrained by the capabilities available to the bhyve process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.freebsd.org/advisories/FreeBSD-SA-24:10.bhyve.asc
CVE ID: CVE-2024-41929 State: PUBLISHED Published: 2024-09-18T06:07:55.880Z Last Updated: 2024-09-18T15:23:55.272Z Vendors: TAKENAKA ENGINEERING CO., LTD. Products: HDVR-400, HDVR-800, HDVR-1600, AHD04T-A, AHD08T-A, AHD16T-A, NVR04T-A, NVR08T-A, NVR16T-A Problem Types: Improper authentication Description: Improper authentication vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.takex-eng.co.jp/ja/news/news.php?s=68 - https://jvn.jp/en/vu/JVNVU90142679/
CVE ID: CVE-2024-41930 State: PUBLISHED Published: 2024-09-27T08:55:36.791Z Last Updated: 2024-11-04T21:12:00.224Z Vendors: Media Fusion Co.,Ltd. Products: MF Teacher Performance Management System Problem Types: CWE-79 Description: Cross-site scripting vulnerability exists in MF Teacher Performance Management System version 6. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/jp/JVN21176842/
CVE ID: CVE-2024-41931 State: PUBLISHED Published: 2024-09-26T17:42:16.640Z Last Updated: 2024-10-17T17:01:08.613Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: goTenna Products: Pro ATAK Plugin Problem Types: CWE-201 Description: The goTenna Pro ATAK Plugin encryption key name is always sent unencrypted when the key is sent over RF through a broadcast message. It is advised to share the encryption key via local QR for higher security operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05
CVE ID: CVE-2024-41932 State: PUBLISHED Published: 2025-01-11T12:25:08.892Z Last Updated: 2025-05-04T09:22:06.898Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: sched: fix warning in sched_setaffinity Commit 8f9ea86fdf99b added some logic to sched_setaffinity that included a WARN when a per-task affinity assignment races with a cpuset update. Specifically, we can have a race where a cpuset update results in the task affinity no longer being a subset of the cpuset. That's fine; we have a fallback to instead use the cpuset mask. However, we have a WARN set up that will trigger if the cpuset mask has no overlap at all with the re
e the cpuset mask. However, we have a WARN set up that will trigger if the cpuset mask has no overlap at all with the requested task affinity. This shouldn't be a warning condition; its trivial to create this condition. Reproduced the warning by the following setup: - $PID inside a cpuset cgroup - another thread repeatedly switching the cpuset cpus from 1-2 to just 1 - another thread repeatedly setting the $PID affinity (via taskset) to 2 References: - https://git.kernel.org/stable/c/5c3fb75f538cfcb886f6dfeb497d99fc2f263ee6 - https://git.kernel.org/stable/c/70ee7947a29029736a1a06c73a48ff37674a851b
CVE ID: CVE-2024-41934 State: PUBLISHED Published: 2025-02-12T21:18:53.883Z Last Updated: 2025-02-13T15:18:53.909Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) GPA software Problem Types: Denial of Service, CWE-284 Description: Improper access control in some Intel(R) GPA software before version 2024.3 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01233.html
CVE ID: CVE-2024-41935 State: PUBLISHED Published: 2025-01-11T12:25:09.701Z Last Updated: 2025-07-11T17:19:54.101Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to shrink read extent node in batches We use rwlock to protect core structure data of extent tree during its shrink, however, if there is a huge number of extent nodes in extent tree, during shrink of extent tree, it may hold rwlock for a very long time, which may trigger kernel hang issue. This patch fixes to shrink read extent node in batches, so that, critical region of the rwlock can be shrunk to avoid its extreme long time hold. References: - https://git
hes, so that, critical region of the rwlock can be shrunk to avoid its extreme long time hold. References: - https://git.kernel.org/stable/c/295b50e95e900da31ff237e46e04525fa799b2cf - https://git.kernel.org/stable/c/924f7dd1e832e4e4530d14711db223d2803f7b61 - https://git.kernel.org/stable/c/3fc5d5a182f6a1f8bd4dc775feb54c369dd2c343
CVE ID: CVE-2024-41936 State: PUBLISHED Published: 2024-08-08T19:27:19.585Z Last Updated: 2024-08-21T20:05:27.996Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Vonets Products: VAR1200-H, VAR1200-L, VAR600-H, VAP11AC, VAP11G-500S, VBG1200, VAP11S-5G, VAP11S, VAR11N-300, VAP11G-300, VAP11N-300, VAP11G, VAP11G-500, VGA-1000 Problem Types: CWE-22 Description: A directory traversal vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to read arbitrary files and bypass authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
tacker to read arbitrary files and bypass authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-08
CVE ID: CVE-2024-41937 State: PUBLISHED Published: 2024-08-21T15:31:13.962Z Last Updated: 2025-03-20T20:22:38.511Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-79 Description: Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the provider link. Users should upgrade to 2.10.0 or later, which fixes this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/
erability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/40933 - https://lists.apache.org/thread/lwlmgg6hqfmkpvw5py4w53hxyl37jl6d
CVE ID: CVE-2024-41938 State: PUBLISHED Published: 2024-08-13T07:54:30.281Z Last Updated: 2024-08-13T13:18:07.307Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEC NMS Problem Types: CWE-22 Description: A vulnerability has been identified in SINEC NMS (All versions < V3.0). The importCertificate function of the SINEC NMS Control web application contains a path traversal vulnerability. This could allow an authenticated attacker it to delete arbitrary certificate files on the drive SINEC NMS is installed on. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa
n. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-784301.html
CVE ID: CVE-2024-41939 State: PUBLISHED Published: 2024-08-13T07:54:31.595Z Last Updated: 2024-08-13T14:21:41.360Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEC NMS Problem Types: CWE-863 Description: A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and elevate their privileges on the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-784301.html
CVE ID: CVE-2024-41940 State: PUBLISHED Published: 2024-08-13T07:54:32.926Z Last Updated: 2024-08-13T14:23:29.960Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEC NMS Problem Types: CWE-20 Description: A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly validate user input to a privileged command queue. This could allow an authenticated attacker to execute OS commands with elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-784301.html
CVE ID: CVE-2024-41941 State: PUBLISHED Published: 2024-08-13T07:54:34.225Z Last Updated: 2024-08-13T13:18:22.820Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEC NMS Problem Types: CWE-863 Description: A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and modify settings in the application without authorization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-784301.html
CVE ID: CVE-2024-41942 State: PUBLISHED Published: 2024-08-08T14:36:44.498Z Last Updated: 2024-08-08T15:17:06.179Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: jupyterhub Products: jupyterhub Problem Types: CWE-274 Description: JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to versions 4.1.6 and 5.1.0, if a user is granted the `admin:users` scope, they may escalate their own privileges by making themselves a full admin user. The impact is relatively small in that `admin:users` is already an extremely privileged scope only granted to trusted users. In effect, `admin:users` is equivalent to `admin=True`, whic
n extremely privileged scope only granted to trusted users. In effect, `admin:users` is equivalent to `admin=True`, which is not intended. Note that the change here only prevents escalation to the built-in JupyterHub admin role that has unrestricted permissions. It does not prevent users with e.g. `groups` permissions from granting themselves or other users permissions via group membership, which is intentional. Versions 4.1.6 and 5.1.0 fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-9x4q-3gxw-849f - https://github.com/jupyterhub/jupyterhub/commit/99e2720b0fc626cbeeca3c6337f917fdacfaa428 - http
es/GHSA-9x4q-3gxw-849f - https://github.com/jupyterhub/jupyterhub/commit/99e2720b0fc626cbeeca3c6337f917fdacfaa428 - https://github.com/jupyterhub/jupyterhub/commit/ff2db557a85b6980f90c3158634bf924063ab8ba
CVE ID: CVE-2024-41943 State: PUBLISHED Published: 2024-07-30T17:27:21.009Z Last Updated: 2024-08-02T04:54:31.319Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: mkucej Products: i-librarian-free Problem Types: CWE-79 Description: I, Librarian is an open-source version of a PDF managing SaaS. PDF notes are displayed on the Item Summary page without any form of validation or sanitation. An attacker can exploit this vulnerability by inserting a payload in the PDF notes that contains malicious code or script. This code will then be executed when the page is loaded in the browser. The vulnerability was fixed in version 5.11.1. Additional Analyst Notes: - CISA A
hen the page is loaded in the browser. The vulnerability was fixed in version 5.11.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/mkucej/i-librarian-free/security/advisories/GHSA-h5hx-fm7f-2xmx - https://github.com/mkucej/i-librarian-free/commit/b4570103d21fc4fdd2483689aafc6028d9f6a76d
CVE ID: CVE-2024-41944 State: PUBLISHED Published: 2024-07-30T16:24:40.398Z Last Updated: 2024-08-02T04:54:31.359Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: xibosignage Products: xibo-cms Problem Types: CWE-89 Description: Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `report/data/proofofplayReport` API route inside the CMS. This allows an authenticated user to to obtain and modify arbitrary data from the Xibo database by injecting specially crafted values in to the `sortBy` parameter. Users should upgrade to version 3.3.12 or 4.0.14 which fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichmen
Users should upgrade to version 3.3.12 or 4.0.14 which fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-v6q4-h869-gm3r - https://github.com/xibosignage/xibo-cms/commit/c60cfd8727da77b9db10297148eadd697ebec353.patch - https://xibosignage.com/blog/security-advisory-2024-07