Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-24700 State: PUBLISHED Published: 2022-05-31T19:51:23 Last Updated: 2024-08-03T04:20:49.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WinAPRS 2.9.0. A buffer overflow in DIGI address processing for VHF KISS packets allows a remote attacker to cause a denial of service (daemon crash) via a malicious AX.25 packet over the air. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://winaprs.com/ - https://www.coalfire.com/the-coalfire-blog/hacking-ham-radio-winaprs-part1
CVE ID: CVE-2022-24701 State: PUBLISHED Published: 2022-05-31T19:52:15 Last Updated: 2024-08-03T04:20:49.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WinAPRS 2.9.0. A buffer overflow in national.txt processing allows a local attacker to cause a denial of service or possibly achieve code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://winaprs.com/ - https://www.coalfire.com/the-coalfire-blog/hacking-ham-radio-winaprs-part1
CVE ID: CVE-2022-24702 State: PUBLISHED Published: 2022-05-31T19:51:03 Last Updated: 2024-08-03T04:20:49.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WinAPRS 2.9.0. A buffer overflow in the VHF KISS TNC component allows a remote attacker to achieve remote code execution via malicious AX.25 packets over the air. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://winaprs.com/ - https://www.coalfire.com/the-coalfire-blog/hacking-ham-radio-winaprs-part1 - https://news.ycombinator.com/item?id=31571476 - https://g
alfire.com/the-coalfire-blog/hacking-ham-radio-winaprs-part1 - https://news.ycombinator.com/item?id=31571476 - https://github.com/Coalfire-Research/WinAPRS-Exploits
CVE ID: CVE-2022-24704 State: PUBLISHED Published: 2022-02-14T21:04:29.942661Z Last Updated: 2024-09-16T19:00:04.606Z Vendors: https://accel-ppp.org/ Products: Accel-PPP Problem Types: https://cwe.mitre.org/data/definitions/120.html Description: The rad_packet_recv function in opt/src/accel-pppd/radius/packet.c suffers from a buffer overflow vulnerability, whereby user input len is copied into a fixed buffer &attr->val.integer without any bound checks. If the client connects to the server and sends a large radius packet, a buffer overflow vulnerability will be triggered. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/accel-ppp/accel-ppp/pull/35
CVE ID: CVE-2022-24705 State: PUBLISHED Published: 2022-02-14T21:04:30.848419Z Last Updated: 2024-09-16T18:39:19.344Z Vendors: https://accel-ppp.org/ Products: accel-ppp Problem Types: https://cwe.mitre.org/data/definitions/120.html Description: The rad_packet_recv function in radius/packet.c suffers from a memcpy buffer overflow, resulting in an overly-large recvfrom into a fixed buffer that causes a buffer overflow and overwrites arbitrary memory. If the server connects with a malicious client, crafted client requests can remotely trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/accel-ppp/accel-ppp/pull/35
CVE ID: CVE-2022-24706 State: PUBLISHED Published: 2022-04-26T00:00:00.000Z Last Updated: 2025-10-21T23:15:40.735Z Vendors: Apache Software Foundation Products: Apache CouchDB Problem Types: CWE-1188 Description: In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00 - http
ontainer: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00 - https://docs.couchdb.org/en/3.2.2/setup/cluster.html - http://www.openwall.com/lists/oss-security/2022/04/26/1 - http://www.openwall.com/lists/oss-security/2022/05/09/1 - http://www.openwall.com/lists/oss-security/2022/05/09/3 - http://www.openwall.com/lists/oss-security/2022/05/09/4 - http://www.openwall.com/lists/oss-security/2022/05/09/2 - http://packetstormsecurity.com/files/167032/Apache-CouchDB-3.2.1-Remote-Code-Execution.html - https://medium.com/%40_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd - http://packetstormsecurity.com/files/169702/Apa
dshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd - http://packetstormsecurity.com/files/169702/Apache-CouchDB-Erlang-Remote-Code-Execution.html
CVE ID: CVE-2022-24707 State: PUBLISHED Published: 2022-02-23T23:50:14.000Z Last Updated: 2025-04-22T18:21:26.269Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: anuko Products: timetracker Problem Types: CWE-89 Description: Anuko Time Tracker is an open source, web-based time tracking application written in PHP. UNION SQL injection and time-based blind injection vulnerabilities existed in Time Tracker Puncher plugin in versions of anuko timetracker prior to 1.20.0.5642. This was happening because the Puncher plugin was reusing code from other places and was relying on an unsanitized date parameter in POST requests. Because the parameter was not checked, it w
er places and was relying on an unsanitized date parameter in POST requests. Because the parameter was not checked, it was possible to craft POST requests with malicious SQL for Time Tracker database. This issue has been resolved in in version 1.20.0.5642. Users unable to upgrade are advised to add their own checks to input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anuko/timetracker/security/advisories/GHSA-wqx7-95fx-wjxj - https://github.com/anuko/timetracker/commit/0e2d6563e2d969209c502a1eae4ddd8e87b73299 - http://packetstormsecurity.com/files/167060/Anuko-Time-Tracker-1.20.0.5640-SQL-Injection.html
CVE ID: CVE-2022-24708 State: PUBLISHED Published: 2022-02-23T23:50:09.000Z Last Updated: 2025-04-23T19:00:40.196Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: anuko Products: timetracker Problem Types: CWE-79 Description: Anuko Time Tracker is an open source, web-based time tracking application written in PHP. ttUser.class.php in Time Tracker versions prior to 1.20.0.5646 was not escaping primary group name for display. Because of that, it was possible for a logged in user to modify primary group name with elements of JavaScript. Such script could then be executed in user browser on subsequent requests on pages where primary group name was displayed. Thi
cript could then be executed in user browser on subsequent requests on pages where primary group name was displayed. This is vulnerability has been fixed in version 1.20.0.5646. Users who are unable to upgrade may modify ttUser.class.php to use an additional call to htmlspecialchars when printing group name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anuko/timetracker/security/advisories/GHSA-rgcm-xgvj-5mqh - https://github.com/anuko/timetracker/commit/6aaad31630500d13b6c8459daa9f406fd5eb4330
CVE ID: CVE-2022-24709 State: PUBLISHED Published: 2022-02-24T19:55:11.000Z Last Updated: 2025-04-23T19:00:34.473Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: aws Products: awsui-documentation Problem Types: CWE-79 Description: @awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Users are advised to upgrade to version 3.0.367 or later. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Progr
pgrade to version 3.0.367 or later. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aws/awsui-documentation/security/advisories/GHSA-mf22-92pm-m8p8 - https://www.npmjs.com/package/%40awsui/components-react
CVE ID: CVE-2022-24710 State: PUBLISHED Published: 2022-02-25T20:50:11.000Z Last Updated: 2025-04-23T19:00:28.349Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: WeblateOrg Products: weblate Problem Types: CWE-79 Description: Weblate is a copyleft software web-based continuous localization system. Versions prior to 4.11 do not properly neutralize user input used in user name and language fields. Due to this improper neutralization it is possible to perform cross-site scripting via these fields. The issues were fixed in the 4.11 release. Users unable to upgrade are advised to add their own neutralize logic. Additional Analyst Notes: - CVE Program Container:
ers unable to upgrade are advised to add their own neutralize logic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WeblateOrg/weblate/security/advisories/GHSA-6jp6-9rf9-gc66 - https://github.com/WeblateOrg/weblate/commit/22d577b1f1e88665a88b4569380148030e0f8389 - https://github.com/WeblateOrg/weblate/commit/9e19a8414337692cc90da2a91c9af5420f2952f1 - https://github.com/WeblateOrg/weblate/commit/f6753a1a1c63fade6ad418fbda827c6750ab0bda
CVE ID: CVE-2022-24711 State: PUBLISHED Published: 2022-02-28T15:45:11.000Z Last Updated: 2025-04-23T19:00:16.255Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: codeigniter4 Products: CodeIgniter4 Problem Types: CWE-20 Description: CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. Prior to version 4.1.9, an improper input validation vulnerability allows attackers to execute CLI routes via HTTP request. Version 4.1.9 contains a patch. There are currently no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/codeigniter4/CodeIgni
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-xjp4-6w75-qrj7 - https://github.com/codeigniter4/CodeIgniter4/commit/202f41ad522ba1d414b9d9c35aba1cb0c156b781
CVE ID: CVE-2022-24712 State: PUBLISHED Published: 2022-02-28T16:00:12.000Z Last Updated: 2025-04-23T19:00:10.052Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L) Vendors: codeigniter4 Products: CodeIgniter4 Problem Types: CWE-352 Description: CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. A vulnerability in versions prior to 4.1.9 might allow remote attackers to bypass the CodeIgniter4 Cross-Site Request Forgery (CSRF) protection mechanism. Users should upgrade to version 4.1.9. There are workarounds for this vulnerability, but users will still need to code as these after upgrading to v4.1.9. Otherwise, the CSRF protection may be bypa
bility, but users will still need to code as these after upgrading to v4.1.9. Otherwise, the CSRF protection may be bypassed. If auto-routing is enabled, check the request method in the controller method before processing. If auto-routing is disabled, either avoid using `$routes->add()` and instead use HTTP verbs in routes; or check the request method in the controller method before processing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-4v37-24gm-h554 - https://github.com/codeigniter4/CodeIgniter4/blob/7dc2ece32401ebde67122f7d2460efcaee7c352e/user_guide_src/source/changelogs/v
://github.com/codeigniter4/CodeIgniter4/blob/7dc2ece32401ebde67122f7d2460efcaee7c352e/user_guide_src/source/changelogs/v4.1.9.rst
CVE ID: CVE-2022-24713 State: PUBLISHED Published: 2022-03-08T19:00:12.000Z Last Updated: 2025-04-23T18:58:21.068Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: rust-lang Products: regex Problem Types: CWE-400 Description: regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those (tunable) mitigations already provide sane defaults to prevent attacks. This guarantee is documented and it's considered part of the crate's API. Unfortunately a bug was discovered in the mitigations desig
e is documented and it's considered part of the crate's API. Unfortunately a bug was discovered in the mitigations designed to prevent untrusted regexes to take an arbitrary amount of time during parsing, and it's possible to craft regexes that bypass such mitigations. This makes it possible to perform denial of service attacks by sending specially crafted regexes to services accepting user-controlled, untrusted regexes. All versions of the regex crate before or equal to 1.5.4 are affected by this issue. The fix is include starting from regex 1.5.5. All users accepting user-controlled regexes are recommended to upgrade immediately to the latest version of the regex crate. Unfortunately there
-controlled regexes are recommended to upgrade immediately to the latest version of the regex crate. Unfortunately there is no fixed set of problematic regexes, as there are practically infinite regexes that could be crafted to exploit this vulnerability. Because of this, it us not recommend to deny known problematic regexes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rust-lang/regex/security/advisories/GHSA-m5pq-gvj9-9vr8 - https://github.com/rust-lang/regex/commit/ae70b41d4f46641dbc45c7a4f87954aea356283e - https://groups.google.com/g/rustlang-security-announcements/c/NcNNL1Jq7Yw - https://lists.fedoraproject.org/archives/lis
https://groups.google.com/g/rustlang-security-announcements/c/NcNNL1Jq7Yw - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDOWTHNVGBOP2HN27PUFIGRYNSNDTYRJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JANLZ3JXWJR7FSHE57K66UIZUIJZI67T/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3YB7CURSG64CIPCDPNMGPE4UU24AB6H/ - https://lists.debian.org/debian-lts-announce/2022/04/msg00003.html - https://www.debian.org/security/2022/dsa-5113 - https://lists.debian.org/debian-lts-announce/2022/04/msg00009.html - https://www.debian.org/security/2022/ds
/dsa-5113 - https://lists.debian.org/debian-lts-announce/2022/04/msg00009.html - https://www.debian.org/security/2022/dsa-5118 - https://security.gentoo.org/glsa/202208-08 - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2022-24714 State: PUBLISHED Published: 2022-03-08T19:55:09.000Z Last Updated: 2025-04-23T18:56:46.880Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Icinga Products: icingaweb2 Problem Types: CWE-863 Description: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Installations of Icinga 2 with the IDO writer enabled are affected. If you use service custom variables in role restrictions, and you regularly decommission service objects, users with said roles may still have access to a collection of content. Note that this only applies if a role has implicitly permitted access to hosts, due to permitted a
ollection of content. Note that this only applies if a role has implicitly permitted access to hosts, due to permitted access to at least one of their services. If access to a host is permitted by other means, no sensible information has been disclosed to unauthorized users. This issue has been resolved in versions 2.8.6, 2.9.6 and 2.10 of Icinga Web 2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Icinga/icingaweb2/security/advisories/GHSA-qcmg-vr56-x9wf - https://github.com/Icinga/icingaweb2/commit/6e989d05a1568a6733a3d912001251acc51d9293 - https://security.gentoo.org/glsa/202208-05
CVE ID: CVE-2022-24715 State: PUBLISHED Published: 2022-03-08T00:00:00.000Z Last Updated: 2025-04-23T18:58:50.966Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Icinga Products: icingaweb2 Problem Types: CWE-22 Description: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Authenticated users, with access to the configuration, can create SSH resource files in unintended directories, leading to the execution of arbitrary code. This issue has been resolved in versions 2.8.6, 2.9.6 and 2.10 of Icinga Web 2. Users unable to upgrade should limit access to the Icinga Web 2 configuration. Additional Analyst Notes: - CVE
a Web 2. Users unable to upgrade should limit access to the Icinga Web 2 configuration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Icinga/icingaweb2/security/advisories/GHSA-v9mv-h52f-7g63 - https://github.com/Icinga/icingaweb2/commit/a06d915467ca943a4b406eb9587764b8ec34cafb - https://security.gentoo.org/glsa/202208-05 - http://packetstormsecurity.com/files/173516/Icinga-Web-2.10-Remote-Code-Execution.html
CVE ID: CVE-2022-24716 State: PUBLISHED Published: 2022-03-08T00:00:00.000Z Last Updated: 2025-04-23T18:58:45.413Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Icinga Products: icingaweb2 Problem Types: CWE-22 Description: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database credentials. This issue has been resolved in versions 2.9.6 and 2.10 of Icinga Web 2. Database credentials should be rotated. Additional Analyst Notes: - CVE Program Container: - CIS
d 2.10 of Icinga Web 2. Database credentials should be rotated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Icinga/icingaweb2/security/advisories/GHSA-5p3f-rh28-8frw - https://github.com/Icinga/icingaweb2/commit/9931ed799650f5b8d5e1dc58ea3415a4cdc5773d - https://security.gentoo.org/glsa/202208-05 - http://packetstormsecurity.com/files/171774/Icinga-Web-2.10-Arbitrary-File-Disclosure.html
CVE ID: CVE-2022-24717 State: PUBLISHED Published: 2022-03-01T18:40:11.000Z Last Updated: 2025-04-23T18:59:43.610Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Finastra Products: ssr-pages Problem Types: CWE-79 Description: ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.5, a cross site scripting (XSS) issue can occur when providing untrusted input to the `redirect.link` property as an argument to the `build(MessagePageOptions)` function. While there is no known workaround at this time, there is a patch in version 0.1.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
s time, there is a patch in version 0.1.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Finastra/ssr-pages/security/advisories/GHSA-7f63-h6g3-7cwm - https://github.com/Finastra/ssr-pages/pull/2 - https://github.com/Finastra/ssr-pages/pull/2/commits/133606ffaec2edd9918d9fba5771ed21da7876a5 - https://github.com/Finastra/ssr-pages/commit/98abc59e28fec48246be0d59ac144675d6361073
CVE ID: CVE-2022-24718 State: PUBLISHED Published: 2022-03-01T18:45:13.000Z Last Updated: 2025-04-23T18:59:37.239Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Finastra Products: ssr-pages Problem Types: CWE-22 Description: ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.4, a path traversal issue can occur when providing untrusted input to the `svg` property as an argument to the `build(MessagePageOptions)` function. While there is no known workaround at this time, there is a patch in version 0.1.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git
in version 0.1.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Finastra/ssr-pages/security/advisories/GHSA-w6cx-qg2q-rvq8 - https://github.com/Finastra/ssr-pages/pull/1 - https://github.com/Finastra/ssr-pages/pull/1/commits/c3e4c563384ae3ba3892f37dd190218577620780
CVE ID: CVE-2022-24719 State: PUBLISHED Published: 2022-03-01T20:20:13.000Z Last Updated: 2025-04-23T18:59:31.760Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: fluture-js Products: fluture-node Problem Types: CWE-359 Description: Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `followRedirects` or `followRedirectsWith` with any of the redirection strategies built into fluture-node 4.0.0 or 4.0.1, paired with a request that includes confidential headers such as Authorization or Cookie, exposes you to a vulnerability where, if the destination server were to redirect the request to a server on a third-party domain, or the sa
lnerability where, if the destination server were to redirect the request to a server on a third-party domain, or the same domain over unencrypted HTTP, the headers would be included in the follow-up request and be exposed to the third party, or potential http traffic sniffing. The redirection strategies made available in version 4.0.2 automatically redact confidential headers when a redirect is followed across to another origin. A workaround has been identified by using a custom redirection strategy via the `followRedirectsWith` function. The custom strategy can be based on the new strategies available in fluture-node@4.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
n the new strategies available in fluture-node@4.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fluture-js/fluture-node/security/advisories/GHSA-32x6-qvw6-mxj4 - https://github.com/psf/requests/pull/4718 - https://github.com/fluture-js/fluture-node/commit/0c99bc511533d48be17dc6bfe641f7d0aeb34d77 - https://github.com/fluture-js/fluture-node/commit/125e4474f910c1507f8ec3232848626fbc0f55c4
CVE ID: CVE-2022-24720 State: PUBLISHED Published: 2022-03-01T00:00:00.000Z Last Updated: 2025-04-22T18:21:17.800Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: janko Products: image_processing Problem Types: CWE-20 Description: image_processing is an image processing wrapper for libvips and ImageMagick/GraphicsMagick. Prior to version 1.12.2, using the `#apply` method from image_processing to apply a series of operations that are coming from unsanitized user input allows the attacker to execute shell commands. This method is called internally by Active Storage variants, so Active Storage is vulnerable as well. The vulnerability has been fixed in version
ernally by Active Storage variants, so Active Storage is vulnerable as well. The vulnerability has been fixed in version 1.12.2 of image_processing. As a workaround, users who process based on user input should always sanitize the user input by allowing only a constrained set of operations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/janko/image_processing/security/advisories/GHSA-cxf7-qrc5-9446 - https://github.com/janko/image_processing/commit/038e4574e8f4f4b636a62394e09983c71980dada - https://www.debian.org/security/2022/dsa-5310