Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
to version 7.0.71 is able to address this issue. The patch is identified as dad49c9ef26a598619fc48d2697151a02987d478. It is recommended to upgrade the affected component. VDB-220470 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220470 - https://vuldb.com/?ctiid.220470 - https://github.com/codenameone/CodenameOne/issues/3583 - https://github.com/codenameone/CodenameOne/commit/dad49c9ef26a598619fc48d2697151a02987d478 - https://github.com/codenameone/CodenameOne/releases/tag/7.0.71
CVE ID: CVE-2022-4904 State: PUBLISHED Published: 2023-03-06T00:00:00 Last Updated: 2024-08-03T01:55:45.918Z Vendors: n/a Products: c-ares Problem Types: CWE-20 Description: A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2168631 - https://github.com/c-ares/c-ares/issues/496 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/
com/c-ares/c-ares/issues/496 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2/ - https://security.gentoo.org/glsa/202401-02
CVE ID: CVE-2022-4905 State: PUBLISHED Published: 2023-02-13T21:00:05.905Z Last Updated: 2025-03-20T20:44:58.948Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: UDX Products: Stateless Media Plugin Problem Types: CWE-79 Description: A vulnerability was found in UDX Stateless Media Plugin 3.1.1 on WordPress. It has been declared as problematic. This vulnerability affects the function setup_wizard_interface of the file lib/classes/class-settings.php. The manipulation of the argument settings leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 3.2.0 is able to address this issue. The patch is identified as 6aee7ae0b0beeb2232ce6e1c82aa7e2041ae151
ading to version 3.2.0 is able to address this issue. The patch is identified as 6aee7ae0b0beeb2232ce6e1c82aa7e2041ae151a. It is recommended to upgrade the affected component. VDB-220750 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220750 - https://vuldb.com/?ctiid.220750 - https://github.com/udx/wp-stateless/pull/630 - https://github.com/udx/wp-stateless/commit/6aee7ae0b0beeb2232ce6e1c82aa7e2041ae151a - https://github.com/udx/wp-stateless/releases/tag/3.2.0
CVE ID: CVE-2022-4906 State: PUBLISHED Published: 2023-07-28T23:26:49.441Z Last Updated: 2025-02-13T16:38:24.740Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Blink in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html - https://crbug.com/1382434 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B6SAST6CB5KKCQKH75ER2U
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B6SAST6CB5KKCQKH75ER2UQ3ICYPHCIZ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2LE64KGGOISKPKMYROSDT4K6QFVDIRF6/
CVE ID: CVE-2022-4907 State: PUBLISHED Published: 2023-07-28T23:26:49.813Z Last Updated: 2025-02-13T16:38:25.762Z Vendors: Google Products: Chrome Problem Types: Uninitialized Use Description: Uninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html - https://crbug.com/1358168 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B6SAST6CB5KKCQKH75ER2UQ3ICYPHC
://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B6SAST6CB5KKCQKH75ER2UQ3ICYPHCIZ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2LE64KGGOISKPKMYROSDT4K6QFVDIRF6/ - https://www.debian.org/security/2023/dsa-5552
CVE ID: CVE-2022-4908 State: PUBLISHED Published: 2023-07-28T23:26:49.962Z Last Updated: 2025-02-13T16:38:26.360Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html - https://crbug.com/1359122 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B6SAST6CB5KKCQKH7
59122 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B6SAST6CB5KKCQKH75ER2UQ3ICYPHCIZ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2LE64KGGOISKPKMYROSDT4K6QFVDIRF6/
CVE ID: CVE-2022-4909 State: PUBLISHED Published: 2023-07-28T23:26:50.164Z Last Updated: 2025-02-13T16:38:27.092Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in XML in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially perform an ASLR bypass via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html - https://crbug.com/1356211 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B6SAST6CB5KKCQKH75E
211 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B6SAST6CB5KKCQKH75ER2UQ3ICYPHCIZ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2LE64KGGOISKPKMYROSDT4K6QFVDIRF6/
CVE ID: CVE-2022-4910 State: PUBLISHED Published: 2023-07-28T23:26:50.313Z Last Updated: 2025-02-13T16:38:27.678Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Autofill in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html - https://crbug.com/1279268 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B6SAST6CB5KKCQK
1279268 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B6SAST6CB5KKCQKH75ER2UQ3ICYPHCIZ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2LE64KGGOISKPKMYROSDT4K6QFVDIRF6/
CVE ID: CVE-2022-4911 State: PUBLISHED Published: 2023-07-28T23:26:50.545Z Last Updated: 2025-02-13T16:38:28.219Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in DevTools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html - https://crbug.com/1349493 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NX
9493 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-4912 State: PUBLISHED Published: 2023-07-28T23:26:50.704Z Last Updated: 2025-02-13T16:38:28.871Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type Confusion in MathML in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_30.html - https://crbug.com/1350909 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https:
oraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-4913 State: PUBLISHED Published: 2023-07-28T23:26:50.890Z Last Updated: 2025-02-13T16:38:29.397Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Extensions in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who had compromised the renderer process to spoof extension storage via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_30.html - https://crbug.com/1183604 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedorap
sktop_30.html - https://crbug.com/1183604 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-4914 State: PUBLISHED Published: 2023-07-28T23:26:51.149Z Last Updated: 2025-02-13T16:38:30.035Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in PrintPreview in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1232402 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fed
-for-desktop.html - https://crbug.com/1232402 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-4915 State: PUBLISHED Published: 2023-07-28T23:26:51.305Z Last Updated: 2025-02-13T16:38:30.699Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in URL Formatting in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop_19.html - https://crbug.com/1329541 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S
1329541 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-4916 State: PUBLISHED Published: 2023-07-28T23:26:51.568Z Last Updated: 2025-02-13T16:38:31.297Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Media in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html - https://crbug.com/1317714 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-4917 State: PUBLISHED Published: 2023-07-28T23:26:51.757Z Last Updated: 2025-02-13T16:38:31.919Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in Notifications in Google Chrome on Android prior to 103.0.5060.53 allowed a remote attacker to obscure the full screen notification via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html - https://crbug.com/1311683 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproje
p_21.html - https://crbug.com/1311683 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-4918 State: PUBLISHED Published: 2023-07-28T23:26:51.909Z Last Updated: 2025-02-13T16:38:32.455Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in UI in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1315102 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4
ttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-4919 State: PUBLISHED Published: 2023-07-28T23:26:52.053Z Last Updated: 2025-02-13T16:38:33.104Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Base Internals in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1312450 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3
312450 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-4920 State: PUBLISHED Published: 2023-07-28T23:26:52.197Z Last Updated: 2025-02-13T16:38:33.732Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Blink in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1306861 - https://lists.fedoraproject.org/archives/list
04/stable-channel-update-for-desktop_26.html - https://crbug.com/1306861 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE ID: CVE-2022-4921 State: PUBLISHED Published: 2023-07-28T23:26:52.339Z Last Updated: 2025-02-13T16:38:34.329Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Accessibility in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1262902 - https://lists.fedoraproject.org/archives/list/package-announce
nel-update-for-desktop.html - https://crbug.com/1262902 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE ID: CVE-2022-4922 State: PUBLISHED Published: 2023-07-28T23:26:52.507Z Last Updated: 2025-02-13T16:38:34.994Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Blink in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1261191 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE ID: CVE-2022-4923 State: PUBLISHED Published: 2023-07-28T23:26:52.655Z Last Updated: 2025-02-13T16:38:35.586Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Omnibox in Google Chrome prior to 99.0.4844.51 allowed an attacker in a privileged network position to perform a man-in-the-middle attack via malicious network traffic. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1251065 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraprojec
top.html - https://crbug.com/1251065 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE ID: CVE-2022-4924 State: PUBLISHED Published: 2023-07-28T23:26:52.795Z Last Updated: 2025-02-13T16:38:36.167Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebRTC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html - https://crbug.com/1272967 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT
/crbug.com/1272967 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE ID: CVE-2022-4925 State: PUBLISHED Published: 2023-07-28T23:26:52.939Z Last Updated: 2025-02-13T16:38:36.756Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in QUIC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform header splitting via malicious network traffic. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html - https://crbug.com/1238309 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/messag
ttps://crbug.com/1238309 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE ID: CVE-2022-4926 State: PUBLISHED Published: 2023-07-28T23:26:54.589Z Last Updated: 2025-02-13T16:38:37.405Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Intents in Google Chrome on Android prior to 109.0.5414.119 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html - https://crbug.com/1368230 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedo
-desktop_24.html - https://crbug.com/1368230 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE ID: CVE-2022-4927 State: PUBLISHED Published: 2023-03-05T20:00:05.181Z Last Updated: 2024-08-03T01:55:46.075Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: ualbertalib Products: NEOSDiscovery Problem Types: CWE-1022 Description: A vulnerability was found in ualbertalib NEOSDiscovery 1.0.70 and classified as problematic. This issue affects some unknown processing of the file app/views/bookmarks/_refworks.html.erb. The manipulation leads to use of web link to untrusted target with window.opener access. The attack may be initiated remotely. Upgrading to version 1.0.71 is able to address this issue. The patch is named abe9f57123e0c278ae190cd7402a623d66c51375. It is recommended
ion 1.0.71 is able to address this issue. The patch is named abe9f57123e0c278ae190cd7402a623d66c51375. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-222287. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222287 - https://vuldb.com/?ctiid.222287 - https://github.com/ualbertalib/NEOSDiscovery/pull/547 - https://github.com/ualbertalib/NEOSDiscovery/commit/abe9f57123e0c278ae190cd7402a623d66c51375 - https://github.com/ualbertalib/NEOSDiscovery/releases/tag/1.0.71