Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-34032 State: PUBLISHED Published: 2024-05-03T00:16:40.017Z Last Updated: 2024-08-12T20:08:42.943Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoint. An authenticated attacker can exploit this issue to potentially compromise the system on which DIAEnergie is deployed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-02
CVE ID: CVE-2024-34033 State: PUBLISHED Published: 2024-05-03T00:20:03.319Z Last Updated: 2024-08-12T20:08:16.443Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-22 Description: Delta Electronics DIAEnergie has insufficient input validation which makes it possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-02
CVE ID: CVE-2024-34034 State: PUBLISHED Published: 2025-02-25T00:00:00.000Z Last Updated: 2025-02-25T19:56:08.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FlexRIC 2.0.0. It crashes during a Subscription Request denial-of-service (DoS) attack, triggered by an assertion error. An attacker must send a high number of E42 Subscription Requests to the Near-RT RIC component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.eurecom.fr/mosaic5g/flexric/-/tags/v2.0.0 - https://gist.github.com/fklement/3a43dbb9fb361dddd8db7703080ade0f
CVE ID: CVE-2024-34035 State: PUBLISHED Published: 2025-02-25T00:00:00.000Z Last Updated: 2025-02-25T19:55:18.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the e2mgr, an adversary must flood the system with a significant quantity of E2 Subscription Requests originating from an xApp. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jira.o-ran-sc.org/browse/RIC-1056 - https://gist.github.com/fklement/3a43dbb9fb361dddd8db7703080ade0f
CVE ID: CVE-2024-34036 State: PUBLISHED Published: 2025-02-25T00:00:00.000Z Last Updated: 2025-02-25T19:53:31.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system with a high volume of subscription requests via an xApp. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jira.o-ran-sc.org/browse/RIC-1057 - https://gist.github.com/fklement/3a43dbb9fb361dddd8db7703080ade0f
CVE ID: CVE-2024-34043 State: PUBLISHED Published: 2024-04-29T00:00:00.000Z Last Updated: 2025-03-13T19:39:06.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jira.o-ran-sc.org/browse/RICAPP-235
CVE ID: CVE-2024-34044 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-11-12T16:55:14.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The O-RAN E2T I-Release buildPrometheusList function can have a NULL pointer dereference because peerInfo can be NULL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jira.o-ran-sc.org/browse/RIC-1043
CVE ID: CVE-2024-34045 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:42:59.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->counters[IN_INITI][MSG_COUNTER][ProcedureCode_id_E2setup]->Increment(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jira.o-ran-sc.org/browse/RIC-1047
CVE ID: CVE-2024-34046 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-11-01T15:55:50.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->sctpParams->e2tCounters[IN_SUCC][MSG_COUNTER][ProcedureCode_id_RICsubscription]->Increment(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jira.o-ran-sc.org/browse/RIC-1047
CVE ID: CVE-2024-34047 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-11-06T15:38:29.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jira.o-ran-sc.org/browse/RIC-1044 - https://gerrit.o-ran-sc.org/r/c/ric-plt/e2mgr/+/12629
CVE ID: CVE-2024-34048 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-27T14:40:54.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.o-ran-sc.org/browse/RIC-1044 - https://gerrit.o-ran-sc.org/r/c/ric-plt/e2mgr/+/12629
CVE ID: CVE-2024-34049 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-20T17:30:25.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString[0:3], plmnIdString[3:]" in reader.go. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/onosproject/rimedo-ts/issues/16
CVE ID: CVE-2024-34050 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:42:59.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64(b[2])<<16 | uint64(b[1])<<8 | uint64(b[0])" in reader.go. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/onosproject/rimedo-ts/issues/16
CVE ID: CVE-2024-34051 State: PUBLISHED Published: 2024-06-03T19:09:21.540Z Last Updated: 2025-02-13T15:53:01.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross-site scripting (XSS) vulnerability located in htdocs/compta/paiement/card.php of Dolibarr before 19.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the facid parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.smarttecs.com/posts/2024-004-cve-2024-34051/
CVE ID: CVE-2024-34055 State: PUBLISHED Published: 2024-06-05T00:00:00 Last Updated: 2024-12-06T14:30:51.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cyrusimap/cyrus-imapd/commit/ef9e4e8314d6a06f2269af0ccf606894cc3fe489 - https://www.cyrusimap.org/imap/download/release-notes/3.8/x/3.8.3.html - https://www.cyrusimap.org/dev/imap/download/release-notes/3.10/x/3.10.0-rc1.html - https://lists.fedoraproject
.3.html - https://www.cyrusimap.org/dev/imap/download/release-notes/3.10/x/3.10.0-rc1.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CJZQAE3XC2GBCE5KSTWJ5A6QYANFWGFB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WVZHUZDU4MGTTZJRNACTMSKXLNMMRLJ6/
CVE ID: CVE-2024-34057 State: PUBLISHED Published: 2024-09-18T00:00:00 Last Updated: 2024-09-19T14:21:28.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer overflow can cause a crash, resulting in a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://trianglemicroworks.com/products/source-code-libraries/iec-61850-scl-pages/what%27s-new - https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-16
CVE ID: CVE-2024-34058 State: PUBLISHED Published: 2024-05-17T00:00:00 Last Updated: 2024-08-02T02:42:59.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebTop package for NethServer 7 and 8 allows stored XSS (for example, via the Subject field if an e-mail message). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2024/05/16/3 - http://www.openwall.com/lists/oss-security/2024/05/16/3 - http://seclists.org/fulldisclosure/2024/May/27
CVE ID: CVE-2024-34060 State: PUBLISHED Published: 2024-05-23T12:01:39.630Z Last Updated: 2024-08-02T02:42:59.989Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: dfir-iris Products: iris-evtx-module Problem Types: CWE-22 Description: IrisEVTXModule is an interface module for Evtx2Splunk and Iris in order to ingest Microsoft EVTX log files. The `iris-evtx-module` is a pipeline plugin of `iris-web` that processes EVTX files through IRIS web application. During the upload of an EVTX through this pipeline, the filename is not safely handled and may cause an Arbitrary File Write. This can lead to a remote code execution (RCE) when combined with a Server Side Templ
may cause an Arbitrary File Write. This can lead to a remote code execution (RCE) when combined with a Server Side Template Injection (SSTI). This vulnerability has been patched in version 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/dfir-iris/iris-evtx-module/security/advisories/GHSA-9rw6-5q9j-82fm - https://github.com/dfir-iris/iris-evtx-module/commit/4e45fc94a31e1ee4641d608a387dfd9f9e68dbca
CVE ID: CVE-2024-34061 State: PUBLISHED Published: 2024-05-02T13:58:21.939Z Last Updated: 2024-08-02T02:42:59.927Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: dgtlmoon Products: changedetection.io Problem Types: CWE-79 Description: changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. In affected versions Input in parameter notification_urls is not processed resulting in javascript execution in the application. A reflected XSS vulnerability happens when the user input from a URL or POST data is reflected on the page without being stored, thus allowing the attacker to inject maliciou
put from a URL or POST data is reflected on the page without being stored, thus allowing the attacker to inject malicious content. This issue has been addressed in version 0.45.22. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-pwgc-w4x9-gw67 - https://github.com/dgtlmoon/changedetection.io/commit/c0f000b1d1ce03733460805dbbedde445fe2c762
CVE ID: CVE-2024-34062 State: PUBLISHED Published: 2024-05-03T09:55:26.119Z Last Updated: 2025-02-13T17:52:21.881Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: tqdm Products: tqdm Problem Types: CWE-74 Description: tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing arbitrary code execution. This issue is only locally exploitable and had been addressed in release version 4.66.3. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pro
ade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/tqdm/tqdm/security/advisories/GHSA-g7vv-2v7x-gj9p - https://github.com/tqdm/tqdm/commit/4e613f84ed2ae029559f539464df83fa91feb316 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VA337CYUS4SLRFV2P6MX6MZ2LKFURKJC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRECVQCCESHBS3UJOWNXQUIX725TKNY6/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6/
CVE ID: CVE-2024-34063 State: PUBLISHED Published: 2024-05-03T09:52:28.758Z Last Updated: 2024-08-02T02:42:59.879Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: matrix-org Products: vodozemac Problem Types: CWE-1188 Description: vodozemac is an implementation of Olm and Megolm in pure Rust. Versions 0.5.0 and 0.5.1 of vodozemac have degraded secret zeroization capabilities, due to changes in third-party cryptographic dependencies (the Dalek crates), which moved secret zeroization capabilities behind a feature flag and defaulted this feature to off. The degraded zeroization capabilities could result in the production of more memory copies of encryption secrets
to off. The degraded zeroization capabilities could result in the production of more memory copies of encryption secrets and secrets could linger in memory longer than necessary. This marginally increases the risk of sensitive data exposure. This issue has been addressed in version 0.6.0 and users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/matrix-org/vodozemac/security/advisories/GHSA-c3hm-hxwf-g5c6 - https://github.com/matrix-org/vodozemac/commit/297548cad4016ce448c4b5007c54db7ee39489d9
CVE ID: CVE-2024-34064 State: PUBLISHED Published: 2024-05-06T14:41:39.912Z Last Updated: 2025-11-03T21:54:48.796Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: pallets Products: jinja Problem Types: CWE-79 Description: Jinja is an extensible templating engine. The `xmlattr` filter in affected versions of Jinja accepts keys containing non-attribute characters. XML/HTML attributes cannot contain spaces, `/`, `>`, or `=`, as each would then be interpreted as starting a separate attribute. If an application accepts keys (as opposed to only values) as user input, and renders these in pages that other users see as well, an attacker could use this to inject othe
alues) as user input, and renders these in pages that other users see as well, an attacker could use this to inject other attributes and perform XSS. The fix for CVE-2024-22195 only addressed spaces but not other characters. Accepting keys as user input is now explicitly considered an unintended use case of the `xmlattr` filter, and code that does so without otherwise validating the input should be flagged as insecure, regardless of Jinja version. Accepting _values_ as user input continues to be safe. This vulnerability is fixed in 3.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pallets/jinja/security/advisories/GHSA-h75v-3v
P Vulnrichment: - CVE Program Container: References: - https://github.com/pallets/jinja/security/advisories/GHSA-h75v-3vvj-5mfj - https://github.com/pallets/jinja/commit/0668239dc6b44ef38e7a6c9f91f312fd4ca581cb - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCLF44KY43BSVMTE6S53B4V5WP3FRRSE/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message
PHVPSI3AZ5CTMSTAVN5UMS/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/567XIGSZMABG6TSMYWD7MIYNJSUQQRUC/
CVE ID: CVE-2024-34065 State: PUBLISHED Published: 2024-06-12T14:54:46.045Z Last Updated: 2024-08-02T02:42:59.898Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: strapi Products: strapi Problem Types: CWE-294, CWE-601 Description: Strapi is an open-source content management system. By combining two vulnerabilities (an `Open Redirect` and `session token sent as URL query parameter`) in @strapi/plugin-users-permissions before version 4.24.2, is its possible of an unauthenticated attacker to bypass authentication mechanisms and retrieve the 3rd party tokens. The attack requires user interaction (one click). Unauthenticated attackers can leverage two vulnerabilit
party tokens. The attack requires user interaction (one click). Unauthenticated attackers can leverage two vulnerabilities to obtain an 3rd party token and the bypass authentication of Strapi apps. Users should upgrade @strapi/plugin-users-permissions to version 4.24.2 to receive a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/strapi/strapi/security/advisories/GHSA-wrvh-rcmr-9qfc
CVE ID: CVE-2024-34066 State: PUBLISHED Published: 2024-05-03T17:42:12.412Z Last Updated: 2024-08-02T02:42:59.879Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: pterodactyl Products: wings Problem Types: CWE-552 Description: Pterodactyl wings is the server control plane for Pterodactyl Panel. If the Wings token is leaked either by viewing the node configuration or posting it accidentally somewhere, an attacker can use it to gain arbitrary file write and read access on the node the token is associated to. This issue has been addressed in version 1.11.12 and users are advised to upgrade. Users unable to upgrade may enable the `ignore_panel_config_updates` opti
sion 1.11.12 and users are advised to upgrade. Users unable to upgrade may enable the `ignore_panel_config_updates` option as a workaround. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pterodactyl/wings/security/advisories/GHSA-gqmf-jqgv-v8fw - https://github.com/pterodactyl/wings/commit/5415f8ae07f533623bd8169836dd7e0b933964de
CVE ID: CVE-2024-34067 State: PUBLISHED Published: 2024-05-03T17:38:18.268Z Last Updated: 2024-08-02T02:42:59.886Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: pterodactyl Products: panel Problem Types: CWE-79 Description: Pterodactyl is a free, open-source game server management panel built with PHP, React, and Go. Importing a malicious egg or gaining access to wings instance could lead to cross site scripting (XSS) on the panel, which could be used to gain an administrator account on the panel. Specifically, the following things are impacted: Egg Docker images and Egg variables: Name, Environment variable, Default value, Description, Validation rules. A
pacted: Egg Docker images and Egg variables: Name, Environment variable, Default value, Description, Validation rules. Additionally, certain fields would reflect malicious input, but it would require the user knowingly entering such input to have an impact. To iterate, this would require an administrator to perform actions and can't be triggered by a normal panel user. This issue has has been addressed in version 1.11.6 and users are advised to upgrade. No workaround is available other than updating to the latest version of the panel. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pterodactyl/panel/security/advisories/GHSA-384w-wf
lnrichment: - CVE Program Container: References: - https://github.com/pterodactyl/panel/security/advisories/GHSA-384w-wffr-x63q - https://github.com/pterodactyl/panel/commit/0dad4c5a488661f9adc27dd311542516d9bfa0f2 - https://github.com/pterodactyl/panel/commit/1172d71d31561c4e465dabdf6b838e64de48ad16 - https://github.com/pterodactyl/panel/commit/f671046947e4695b5e1c647df79305c1cefdf817
CVE ID: CVE-2024-34068 State: PUBLISHED Published: 2024-05-03T17:34:16.318Z Last Updated: 2024-08-02T02:42:59.896Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: pterodactyl Products: wings Problem Types: CWE-284, CWE-441 Description: Pterodactyl wings is the server control plane for Pterodactyl Panel. An authenticated user who has access to a game server is able to bypass the previously implemented access control (GHSA-6rg3-8h8x-5xfv) that prevents accessing internal endpoints of the node hosting Wings in the pull endpoint. This would allow malicious users to potentially access resources on local networks that would otherwise be inaccessible. This issue ha
ow malicious users to potentially access resources on local networks that would otherwise be inaccessible. This issue has been addressed in version 1.11.2 and users are advised to upgrade. Users unable to upgrade may enable the `api.disable_remote_download` option as a workaround. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pterodactyl/wings/security/advisories/GHSA-qq22-jj8x-4wwv - https://github.com/pterodactyl/wings/security/advisories/GHSA-6rg3-8h8x-5xfv - https://github.com/pterodactyl/wings/commit/c152e36101aba45d8868a9a0eeb890995e8934b8
CVE ID: CVE-2024-34069 State: PUBLISHED Published: 2024-05-06T14:44:38.780Z Last Updated: 2025-02-21T18:03:28.226Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: pallets Products: werkzeug Problem Types: CWE-352 Description: Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires
but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pallets/werkzeug/security/advisories/GHSA-2g68-c3qc-8985 - https://github.com/pallets/werkzeug/commit/3386395b24c7371db11a5b8eaac0c91da5362692 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ/ - https://lists.fedoraproject.org/archives/list/package-announce@li
roject.org/message/HFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H4SH32AM3CTPMAAEOIDAN7VU565LO4IR/ - https://security.netapp.com/advisory/ntap-20240614-0004/