Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-45274 State: PUBLISHED Published: 2024-10-15T10:28:16.384Z Last Updated: 2025-11-03T19:30:51.547Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: MB connect line, Helmholz Products: mbNET.mini, REX100 Problem Types: CWE-306 Description: An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2024-056 - https://cert.vde.com/en/advisories/VDE-2024-066
CVE ID: CVE-2024-45275 State: PUBLISHED Published: 2024-10-15T10:28:37.223Z Last Updated: 2024-10-16T17:39:58.106Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: MB connect line, Helmholz Products: mbNET.mini, REX100 Problem Types: CWE-798 Description: The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2024-056 - https://cert.vde.com/en/advisories/VDE-2024-066
CVE ID: CVE-2024-45276 State: PUBLISHED Published: 2024-10-15T10:28:58.559Z Last Updated: 2025-01-24T06:32:08.237Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: MB connect line, Helmholz Products: mbNET.mini, REX100 Problem Types: CWE-306 Description: An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2024-056 - https://cert.vde.com/en/advisories/VDE-2024-066
CVE ID: CVE-2024-45277 State: PUBLISHED Published: 2024-10-08T03:21:16.236Z Last Updated: 2024-10-08T14:01:44.271Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: SAP_SE Products: SAP HANA Client Problem Types: CWE-1321 Description: The SAP HANA Node.js client package versions from 2.0.0 before 2.21.31 is impacted by Prototype Pollution vulnerability allowing an attacker to add arbitrary properties to global object prototypes. This is due to improper user input sanitation when using the nestTables feature causing low impact on the availability of the application. This has no impact on Confidentiality and Integrity. Additional Analyst Notes: - CISA ADP Vulnri
ity of the application. This has no impact on Confidentiality and Integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3520100 - https://url.sap/sapsecuritypatchday - https://www.npmjs.com/package/@sap/hana-client?activeTab=code
CVE ID: CVE-2024-45278 State: PUBLISHED Published: 2024-10-08T03:21:25.904Z Last Updated: 2024-10-08T13:57:27.631Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP Commerce Backoffice Problem Types: CWE-79 Description: SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3507545 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-45279 State: PUBLISHED Published: 2024-09-10T04:29:45.830Z Last Updated: 2024-09-10T13:20:33.379Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP NetWeaver Application Server for ABAP (CRM Blueprint Application Builder Panel) Problem Types: CWE-79 Description: Due to insufficient input validation, CRM Blueprint Application Builder Panel of SAP NetWeaver Application Server for ABAP allows an unauthenticated attacker to craft a URL link which could embed a malicious JavaScript. When a victim clicks on this link, the script will be executed in the victim's browser giving the attacker the ability to access and/or modify info
s link, the script will be executed in the victim's browser giving the attacker the ability to access and/or modify information with no effect on availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3501359 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-45280 State: PUBLISHED Published: 2024-09-10T04:31:10.299Z Last Updated: 2024-09-16T16:16:44.927Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP NetWeaver AS Java (Logon Application) Problem Types: CWE-79 Description: Due to insufficient encoding of user-controlled inputs, SAP NetWeaver AS Java allows malicious scripts to be executed in the login application. This has a limited impact on confidentiality and integrity of the application. There is no impact on availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3505503 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-45281 State: PUBLISHED Published: 2024-09-10T04:32:43.378Z Last Updated: 2024-09-16T16:17:11.239Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: SAP_SE Products: SAP BusinessObjects Business Intelligence Platform Problem Types: CWE-426 Description: SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even if some of the DLLs are not digitally signed or if the signature is broken. The attacker needs to have local access to the vulnerable system to perform DLL related tasks. This could result in a high impact on confidentiality and integrity of the application. Additional Analyst N
ated tasks. This could result in a high impact on confidentiality and integrity of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3425287 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-45282 State: PUBLISHED Published: 2024-10-08T03:21:33.330Z Last Updated: 2024-10-09T14:54:13.725Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: SAP_SE Products: SAP S/4 HANA (Manage Bank Statements) Problem Types: CWE-650 Description: Fields which are in 'read only' state in Bank Statement Draft in Manage Bank Statements application, could be modified by MERGE method. The property of an OData entity representing assumably immutable method is not protected against external modifications leading to integrity violations. Confidentiality and Availability are not impacted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
fidentiality and Availability are not impacted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3251893 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-45283 State: PUBLISHED Published: 2024-09-10T04:52:30.209Z Last Updated: 2024-09-10T13:46:19.680Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: SAP_SE Products: SAP NetWeaver AS for Java (Destination Service) Problem Types: CWE-256 Description: SAP NetWeaver AS for Java allows an authorized attacker to obtain sensitive information. The attacker could obtain the username and password when creating an RFC destination. After successful exploitation, an attacker can read the sensitive information but cannot modify or delete the data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3477359 - https://url.s
data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3477359 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-45284 State: PUBLISHED Published: 2024-09-10T04:57:24.442Z Last Updated: 2024-09-10T13:45:15.831Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: SAP_SE Products: SAP Student Life Cycle Management (SLcM) Problem Types: CWE-862 Description: An authenticated attacker with high privilege can use functions of SLCM transactions to which access should be restricted. This may result in an escalation of privileges causing low impact on integrity of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/2256627 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-45285 State: PUBLISHED Published: 2024-09-10T04:59:01.937Z Last Updated: 2024-09-10T13:41:26.018Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: SAP_SE Products: SAP NetWeaver Application Server for ABAP and ABAP Platform Problem Types: CWE-862 Description: The RFC enabled function module allows a low privileged user to perform denial of service on any user and also change or delete favourite nodes. By sending a crafted packet in the function module targeting specific parameters, the specific targeted user will no longer have access to any functionality of SAP GUI. There is low impact on integrity and availability of the application. Additi
ave access to any functionality of SAP GUI. There is low impact on integrity and availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3488039 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-45286 State: PUBLISHED Published: 2024-09-10T03:56:36.139Z Last Updated: 2024-09-10T13:26:21.584Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: SAP_SE Products: SAP Production and Revenue Accounting (Tobin interface) Problem Types: CWE-862 Description: Due to lack of proper authorization checks when calling user, a function module in obsolete Tobin interface in SAP Production and Revenue Accounting allows unauthorized access that could lead to disclosure of highly sensitive data. There is no impact on integrity or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3488341 - https://url.s
ility. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3488341 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-45287 State: PUBLISHED Published: 2024-09-05T03:18:16.076Z Last Updated: 2024-09-26T15:03:11.171Z Vendors: FreeBSD Products: FreeBSD Problem Types: CWE-131, CWE-190 Description: A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.freebsd.org/advisories/FreeBSD-SA-24:09.libnv.asc
CVE ID: CVE-2024-45288 State: PUBLISHED Published: 2024-09-05T03:18:26.407Z Last Updated: 2024-09-20T16:03:13.116Z Vendors: FreeBSD Products: FreeBSD Problem Types: CWE-170, CWE-787 Description: A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.freebsd.org/advisories/FreeBSD-SA-24:09.libnv.asc
CVE ID: CVE-2024-45289 State: PUBLISHED Published: 2024-11-12T15:06:08.435Z Last Updated: 2025-01-10T13:06:48.187Z Vendors: FreeBSD Products: FreeBSD Problem Types: CWE-665 Description: The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname. The environment variable name used by fetch(1) to pass the filename to the library was incorrect, in effect ignoring the option. Fetch would still connect to a host presenting a certificate included in the revocation file passed to the --crl option. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.freebsd.org/advisories/FreeBSD-SA-24
s: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.freebsd.org/advisories/FreeBSD-SA-24:18.ctl.asc
CVE ID: CVE-2024-45290 State: PUBLISHED Published: 2024-10-07T20:12:38.190Z Last Updated: 2024-10-08T18:31:06.318Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: PHPOffice Products: PhpSpreadsheet Problem Types: CWE-36, CWE-918 Description: PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file which links media from external URLs. When opening the XLSX file, PhpSpreadsheet retrieves the image size and type by reading the file contents, if the provided path is a URL. By using specially crafted `php://filter` URLs an attacker can leak the contents of any file or URL. Note that thi
URL. By using specially crafted `php://filter` URLs an attacker can leak the contents of any file or URL. Note that this vulnerability is different from GHSA-w9xv-qf98-ccq4, and resides in a different component. An attacker can access any file on the server, or leak information form arbitrary URLs, potentially exposing sensitive information such as AWS IAM credentials. This issue has been addressed in release versions 1.29.2, 2.1.1, and 2.3.0. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-5gpr-w2p5-6m37 - https://git
ichment: References: - https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-5gpr-w2p5-6m37 - https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-w9xv-qf98-ccq4
CVE ID: CVE-2024-45291 State: PUBLISHED Published: 2024-10-07T20:09:58.029Z Last Updated: 2024-10-08T18:32:25.328Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: PHPOffice Products: PhpSpreadsheet Problem Types: CWE-36, CWE-918 Description: PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file that links images from arbitrary paths. When embedding images has been enabled in HTML writer with `$writer->setEmbedImages(true);` those files will be included in the output as `data:` URLs, regardless of the file's type. Also URLs can be used for embedding, resulting in a Server-Side R
output as `data:` URLs, regardless of the file's type. Also URLs can be used for embedding, resulting in a Server-Side Request Forgery vulnerability. When embedding images has been enabled, an attacker can read arbitrary files on the server and perform arbitrary HTTP GET requests. Note that any PHP protocol wrappers can be used, meaning that if for example the `expect://` wrapper is enabled, also remote code execution is possible. This issue has been addressed in release versions 1.29.2, 2.1.1, and 2.3.0. All users are advised to upgrade. there are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PHPOffice/PhpSpr
this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-w9xv-qf98-ccq4
CVE ID: CVE-2024-45292 State: PUBLISHED Published: 2024-10-07T20:06:13.595Z Last Updated: 2024-10-07T20:26:37.224Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: PHPOffice Products: PhpSpreadsheet Problem Types: CWE-79 Description: PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. `\PhpOffice\PhpSpreadsheet\Writer\Html` does not sanitize "javascript:" URLs from hyperlink `href` attributes, resulting in a Cross-Site Scripting vulnerability. This issue has been addressed in release versions 1.29.2, 2.1.1, and 2.3.0. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes:
3.0. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-r8w8-74ww-j4wh
CVE ID: CVE-2024-45293 State: PUBLISHED Published: 2024-10-07T20:03:27.080Z Last Updated: 2024-10-07T20:25:10.635Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: PHPOffice Products: PhpSpreadsheet Problem Types: CWE-611 Description: PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The security scanner responsible for preventing XXE attacks in the XLSX reader can be bypassed by slightly modifying the XML structure, utilizing white-spaces. On servers that allow users to upload their own Excel (XLSX) sheets, Server files and sensitive information can be disclosed by providing a crafted sheet. The security scan function in src/PhpSp
r files and sensitive information can be disclosed by providing a crafted sheet. The security scan function in src/PhpSpreadsheet/Reader/Security/XmlScanner.php contains a flawed XML encoding check to retrieve the input file's XML encoding in the toUtf8 function. The function searches for the XML encoding through a defined regex which looks for `encoding="*"` and/or `encoding='*'`, if not found, it defaults to the UTF-8 encoding which bypasses the conversion logic. This logic can be used to pass a UTF-7 encoded XXE payload, by utilizing a whitespace before or after the = in the attribute definition. Sensitive information disclosure through the XXE on sites that allow users to upload their ow
the attribute definition. Sensitive information disclosure through the XXE on sites that allow users to upload their own excel spreadsheets, and parse them using PHPSpreadsheet's Excel parser. This issue has been addressed in release versions 1.29.1, 2.1.1, and 2.3.0. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-6hwr-6v2f-3m88
CVE ID: CVE-2024-45294 State: PUBLISHED Published: 2024-09-06T15:46:13.656Z Last Updated: 2024-09-06T16:56:17.691Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: hapifhir Products: org.hl7.fhir.core Problem Types: CWE-611 Description: The HL7 FHIR Core Artifacts repository provides the java core object handling code, with utilities (including validator), for the Fast Healthcare Interoperability Resources (FHIR) specification. Prior to version 6.3.23, XSLT transforms performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts
ions. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.core is being used to within a host where external clients can submit XML. This issue has been patched in release 6.3.23. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-6cr6-ph3p-f5rf - https://github.com/HL7/fhir-ig-publisher/security/advisories/GHSA-59rq-22fm-x8q5 - https://github.com/HL7/fhir-ig-publisher/releases/tag/1.6.22 - https://github.com/hapifhir/org.hl7.fhir.core/releases/tag/6.3.23
CVE ID: CVE-2024-45295 State: REJECTED Published: N/A Last Updated: 2024-09-06T16:57:07.362Z Description: No description available.
CVE ID: CVE-2024-45296 State: PUBLISHED Published: 2024-09-09T19:07:40.313Z Last Updated: 2025-01-24T20:03:07.723Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: pillarjs Products: path-to-regexp Problem Types: CWE-1333 Description: path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by so
a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598j - https://github.com/pillarjs/path-to-regexp/commit/29b96b4a1de52824e1ca0f49a701183cc4ed476f - https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6
CVE ID: CVE-2024-45297 State: PUBLISHED Published: 2024-10-07T20:24:05.044Z Last Updated: 2024-10-08T18:13:28.994Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: discourse Products: discourse Problem Types: CWE-269 Description: Discourse is an open source platform for community discussion. Users can see topics with a hidden tag if they know the label/name of that tag. This issue has been patched in the latest stable, beta and tests-passed version of Discourse. All users area are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/se
ulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-58xw-3qr3-53gp
CVE ID: CVE-2024-45298 State: PUBLISHED Published: 2024-09-18T17:05:58.894Z Last Updated: 2024-09-18T18:19:03.285Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: requarks Products: wiki Problem Types: CWE-670 Description: Wiki.js is an open source wiki app built on Node.js. A disabled user can still gain access to a wiki by abusing the password reset function. While setting up SMTP e-mail's on my server, I tested said e-mails by performing a password reset with my test user. To my shock, not only did it let me reset my password, but after resetting my password I can get into the wiki I was locked out of. The ramifications of this bug is a user can **bypass
resetting my password I can get into the wiki I was locked out of. The ramifications of this bug is a user can **bypass an account disabling by requesting their password be reset**. All users of wiki.js version `2.5.303` who use any account restrictions and have disabled user are affected. This issue has been addressed in version 2.5.304 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/requarks/wiki/security/advisories/GHSA-vwww-c5vg-xgfc - https://github.com/requarks/wiki/commit/b9fb17d4d4a0956ec35e8c73cc85192552fb8d16
CVE ID: CVE-2024-45299 State: PUBLISHED Published: 2024-09-06T13:00:47.419Z Last Updated: 2024-09-06T14:03:45.294Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: alfio-event Products: alf.io Problem Types: CWE-116 Description: alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, the preloaded data as json is not escaped correctly, the administrator / event admin could break their own install by inserting non correctly escaped text. The Content-Security-Policy directive blocks any potential script execution. The administrator or event administrator can override the texts for customi
ctive blocks any potential script execution. The administrator or event administrator can override the texts for customization purpose. The texts are not properly escaped. Version 2.0-M5 fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/alfio-event/alf.io/security/advisories/GHSA-mcx6-25f8-8rqw - https://github.com/alfio-event/alf.io/commit/e7131c588f4ac31067a41d0e31e6a6a721b2ff4b