Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-7391 State: PUBLISHED Published: 2024-11-22T21:31:18.047Z Last Updated: 2024-11-26T15:59:17.260Z Severity: LOW (CVSS 2.6 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: ChargePoint Products: Home Flex Problem Types: CWE-200 Description: ChargePoint Home Flex Bluetooth Low Energy Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of ChargePoint Home Flex charging devices. User interaction is required to exploit this vulnerability. The specific flaw exists within the Wi-Fi setup logic. By connecting to the device over Bluetooth Low Energy during the setup process, an atta
ts within the Wi-Fi setup logic. By connecting to the device over Bluetooth Low Energy during the setup process, an attacker can obtain Wi-Fi credentials. An attacker can leverage this vulnerability to disclose credentials and gain access to the device owner's Wi-Fi network. Was ZDI-CAN-21454. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1046/
CVE ID: CVE-2024-7392 State: PUBLISHED Published: 2024-11-22T21:31:27.805Z Last Updated: 2024-11-25T16:43:04.607Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: ChargePoint Products: Home Flex Problem Types: CWE-410 Description: ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of ChargePoint Home Flex charging devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the connection handling of the Bluetooth Low Energy interface. The issue results from limiting the numbe
w exists within the connection handling of the Bluetooth Low Energy interface. The issue results from limiting the number of active connections to the product. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-21455. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1047/
CVE ID: CVE-2024-7393 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:38.282Z Description: No description available.
CVE ID: CVE-2024-7394 State: PUBLISHED Published: 2024-08-08T16:31:48.104Z Last Updated: 2025-09-25T18:59:54.952Z Vendors: Concrete CMS Products: Concrete CMS Problem Types: CWE-79 Description: Concrete CMS versions 9 through 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in getAttributeSetName(). A rogue administrator could inject malicious code. The Concrete CMS team gave this a CVSS v4.0 rank of 4.6 with vector https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N. Thanks, m3dium for reporting. (CNA updated this risk rank on 20 Jan 2025 by lowering the AC based on CVSS
:N/SI:N/SA:N. Thanks, m3dium for reporting. (CNA updated this risk rank on 20 Jan 2025 by lowering the AC based on CVSS 4.0 documentation that access privileges should not be considered for AC) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/concretecms/concretecms/pull/12166 - https://github.com/concretecms/concretecms/commit/c08d9671cec4e7afdabb547339c4bc0bed8eab06 - https://documentation.concretecms.org/9-x/developers/introduction/version-history/933-release-notes?pk_vid=e367a434ef4830491723055753d52041 - https://documentation.concretecms.org/developers/introduction/version-history/8518-release-notes?pk_vid=e367a434ef4830491723055758d52041
CVE ID: CVE-2024-7395 State: PUBLISHED Published: 2024-08-05T13:16:05.964Z Last Updated: 2025-11-04T16:15:53.452Z Vendors: Korenix Products: JetPort 5601v3 Problem Types: CWE-287 Description: An authentication bypass vulnerability in Korenix JetPort 5601v3 allows an attacker to access functionality on the device without specifying a password.This issue affects JetPort 5601v3: through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cyberdanube.com/de/en-multiple-vulnerabilities-in-korenix-jetport/
CVE ID: CVE-2024-7396 State: PUBLISHED Published: 2024-08-05T13:20:57.997Z Last Updated: 2025-11-04T16:15:54.405Z Vendors: Korenix Products: JetPort 5601v3 Problem Types: CWE-311 Description: Missing encryption of sensitive data in Korenix JetPort 5601v3 allows Eavesdropping.This issue affects JetPort 5601v3: through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cyberdanube.com/de/en-multiple-vulnerabilities-in-korenix-jetport/
CVE ID: CVE-2024-7397 State: PUBLISHED Published: 2024-08-05T13:25:43.610Z Last Updated: 2025-11-04T16:15:55.337Z Vendors: Korenix Products: JetPort 5601v3 Problem Types: CWE-77 Description: Improper filering of special characters result in a command ('command injection') vulnerability in Korenix JetPort 5601v3.This issue affects JetPort 5601v3: through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cyberdanube.com/de/en-multiple-vulnerabilities-in-korenix-jetport/
CVE ID: CVE-2024-7398 State: PUBLISHED Published: 2024-09-24T21:30:37.336Z Last Updated: 2025-01-20T23:50:45.544Z Vendors: Concrete CMS Products: Concrete CMS Problem Types: CWE-79 Description: Concrete CMS versions 9 through 9.3.3 and versions below 8.5.19 are vulnerable to stored XSS in the calendar event addition feature because the calendar event name was not sanitized on output. Users or groups with permission to create event calendars can embed scripts, and users or groups with permission to modify event calendars can execute scripts. The Concrete CMS Security Team gave this vulnerability a CVSS v4 score of 4.6 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N
ve this vulnerability a CVSS v4 score of 4.6 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N Thank you, Yusuke Uchida for reporting. CNA updated this risk rank on 20 Jan 2025 by lowering the AC based on CVSS 4.0 documentation that access privileges should not be considered for AC) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/concretecms/concretecms/commit/7c8ed0d1d9db0d7f6df7fa066e0858ea618451a5 - https://github.com/concretecms/concretecms/pull/12183 - https://github.com/concretecms/concretecms/pull/12184 - https://documentation.concretecms.org/9-x/developers/introduction/version-history/934-release-notes - https://documentat
https://documentation.concretecms.org/9-x/developers/introduction/version-history/934-release-notes - https://documentation.concretecms.org/developers/introduction/version-history/8519-release-notes
CVE ID: CVE-2024-7399 State: PUBLISHED Published: 2024-08-09T04:43:29.828Z Last Updated: 2025-05-08T03:56:06.233Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Electronics Products: MagicINFO 9 Server Problem Types: CWE-22, CWE-434 Description: Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungtv.com/securityUpdates
CVE ID: CVE-2024-7400 State: PUBLISHED Published: 2024-09-27T07:02:28.931Z Last Updated: 2024-09-27T18:54:39.099Z Vendors: ESET, spol. s r.o. Products: ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate, ESET Small Business Security, ESET Safe Server, ESET Endpoint Antivirus, ESET Endpoint Security for Windows, ESET Server Security for Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, ESET Security for Microsoft SharePoint Server, ESET File Security for Microsoft Azure Problem Types: CWE-1386 Description: The vulnerability potentially allowed an attacker to misuse ESET’s file operations during t
Types: CWE-1386 Description: The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operating system to delete files without having proper permissions to do so. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.eset.com/en/ca8726-local-privilege-escalation-fixed-for-vulnerability-during-detected-file-removal-in-eset-products-for-windows
CVE ID: CVE-2024-7401 State: PUBLISHED Published: 2024-08-26T16:36:40.915Z Last Updated: 2025-07-23T11:02:11.214Z Vendors: Netskope Products: Netskope Client Problem Types: CWE-287 Description: Netskope was notified about a security gap in Netskope Client enrollment process where NSClient is using a static token “Orgkey” as authentication parameter. Since this is a static token, if leaked, cannot be rotated or revoked. A malicious actor can use this token to enroll NSClient from a customer’s tenant and impersonate a user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/nets
eferences: - https://www.netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2024-001 - https://docs.netskope.com/en/secure-enrollment/ - https://quickskope.com/
CVE ID: CVE-2024-7402 State: PUBLISHED Published: 2025-08-14T04:32:41.870Z Last Updated: 2025-08-15T12:58:40.808Z Vendors: Netskope Products: Netskope Client Problem Types: CWE-354 Description: Netskope has identified a potential gap in its agent (Netskope Client) in which a malicious insider can potentially tamper the Netskope Client configuration by performing MITM (Man-in-the-Middle) activity on the Netskope Client communication channel. A successful exploitation would require administrative privileges on the machine, and could result in temporarily altering the configuration of Netskope Client or permanently disabling or removing the agent from the machine. Additional Analyst Notes: - CI
ation of Netskope Client or permanently disabling or removing the agent from the machine. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2024-002
CVE ID: CVE-2024-7403 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:34.615Z Description: No description available.
CVE ID: CVE-2024-7404 State: PUBLISHED Published: 2024-11-14T13:02:23.587Z Last Updated: 2024-11-14T15:08:01.260Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-1021 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 prior to 17.4.4 and starting from 17.5 prior to 17.5.2, which could have allowed an attacker gaining full API access as the victim via the Device OAuth flow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/476670 - https://hackerone.com/reports/2627925 - https:/
nt: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/476670 - https://hackerone.com/reports/2627925 - https://about.gitlab.com/releases/2024/11/13/patch-release-gitlab-17-5-2-released/#device-oauth-flow-allows-for-cross-window-forgery
CVE ID: CVE-2024-7407 State: PUBLISHED Published: 2025-03-28T12:54:13.122Z Last Updated: 2025-03-28T13:40:49.121Z Vendors: Streamsoft Products: Streamsoft Prestiż Problem Types: CWE-261 Description: Use of a custom password encoding algorithm in Streamsoft Prestiż software allows straightforward decoding of passwords using their encoded forms, which are stored in the application's database. One has to know the encoding algorithm, but it can be deduced by observing how password are transformed. This issue was fixed in 18.2.377 version of the software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/03/CVE-2024-7407/ - https://www.streamsoft.pl/st
s: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/03/CVE-2024-7407/ - https://www.streamsoft.pl/streamsoft-prestiz/
CVE ID: CVE-2024-7408 State: PUBLISHED Published: 2024-08-09T10:40:54.953Z Last Updated: 2024-08-09T15:14:15.681Z Vendors: Airveda Products: Air Quality Monitor PM2.5 PM10 Problem Types: CWE-319 Description: This vulnerability exists in Airveda Air Quality Monitor PM2.5 PM10 due to transmission of sensitive information in plain text during AP pairing mode. An attacker in close proximity could exploit this vulnerability by capturing Wi-Fi traffic of Airveda-AP. Successful exploitation of this vulnerability could allow the attacker to cause Evil Twin attack on the targeted system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=
stem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0233
CVE ID: CVE-2024-7409 State: PUBLISHED Published: 2024-08-05T13:19:27.498Z Last Updated: 2025-11-06T23:16:17.460Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux
form 4.17, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Advanced Virtualization Problem Types: CWE-662 Description: A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:10518 - https://access.redhat.com/errata/RHSA-2024:10528 - https://access.redhat.com/errata/RHSA-2024:10813 - https://access.redhat.com/errata/RHSA-2024:6811 - https:/
024:10528 - https://access.redhat.com/errata/RHSA-2024:10813 - https://access.redhat.com/errata/RHSA-2024:6811 - https://access.redhat.com/errata/RHSA-2024:6818 - https://access.redhat.com/errata/RHSA-2024:6964 - https://access.redhat.com/errata/RHSA-2024:7408 - https://access.redhat.com/errata/RHSA-2024:8991 - https://access.redhat.com/errata/RHSA-2024:9136 - https://access.redhat.com/errata/RHSA-2024:9620 - https://access.redhat.com/errata/RHSA-2024:9912 - https://access.redhat.com/security/cve/CVE-2024-7409 - https://bugzilla.redhat.com/show_bug.cgi?id=2302487
CVE ID: CVE-2024-7410 State: PUBLISHED Published: 2024-08-09T09:30:13.563Z Last Updated: 2024-08-13T14:48:40.225Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: esthertyler Products: My Custom CSS PHP & ADS Problem Types: CWE-200 Description: The My Custom CSS PHP & ADS plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.3. This is due the plugin not preventing direct access to the /my-custom-css/vendor/mobiledetect/mobiledetectlib/export/exportToJSON.php file and and the file displaying/generating the full path. This makes it possible for unauthenticated attackers to retrieve the full path of the web applicati
ating the full path. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d145d0af-e364-4cc3-af4f-03117eb34637?source=cve - https://plugins.trac.wordpress.org/browser/my-custom-css/trunk/vendor/mobiledetect/mobiledetectlib/export/exportToJSON.php
CVE ID: CVE-2024-7411 State: PUBLISHED Published: 2024-08-15T07:32:36.084Z Last Updated: 2024-08-15T13:39:32.341Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: contrid Products: Newsletters Problem Types: CWE-200 Description: The Newsletters plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.9.9. This is due the plugin not preventing direct access to the /vendor/mobiledetect/mobiledetectlib/export/exportToJSON.php. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, an
h of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3cbf52b0-4c7f-40fb-aedb-4c70f6510b1b?source=cve - https://plugins.trac.wordpress.org/browser/newsletters-lite/trunk/vendor/mobiledetect/mobiledetectlib/export/exportToJSON.php - https://plugins.trac.wordpress.org/changeset/3135786/
CVE ID: CVE-2024-7412 State: PUBLISHED Published: 2024-08-09T09:30:12.907Z Last Updated: 2024-08-09T15:16:07.456Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: coffee2code Products: No Update Nag Problem Types: CWE-200 Description: The No Update Nag plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.12. This is due to the plugin allowing direct access to the bootstrap.php file which has display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requir
web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/77faa23e-4475-43d9-b475-fe999cda7b62?source=cve - https://plugins.trac.wordpress.org/browser/no-update-nag/trunk/tests/phpunit/bootstrap.php
CVE ID: CVE-2024-7413 State: PUBLISHED Published: 2024-08-09T09:30:11.238Z Last Updated: 2024-08-09T14:46:13.148Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: coffee2code Products: Obfuscate Email Problem Types: CWE-200 Description: The Obfuscate Email plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.8.1. This is due to the plugin allowing direct access to the bootstrap.php file which has display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and req
the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/228079da-3c69-423c-b69b-f1a670258772?source=cve - https://plugins.trac.wordpress.org/browser/obfuscate-email/trunk/phpunit/bootstrap.php
CVE ID: CVE-2024-7414 State: PUBLISHED Published: 2024-08-09T09:30:11.729Z Last Updated: 2024-08-09T15:34:52.729Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: edgarrojas Products: PDF Builder for WPForms Problem Types: CWE-200 Description: The PDF Builder for WPForms plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2.116. This is due to the plugin allowing direct access to the composer-setup.php file which has display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not usef
ieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/31a82837-f8da-44bf-81f6-af0d9c9a6e4c?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3132289%40pdf-builder-for-wpforms&new=3132289%40pdf-builder-for-wpforms&sfp_email=&sfph_mail= - https://plugins.trac.wordpress.org/browser/pdf-builder-for-wpforms/trunk/vendor/jurosh/pdf-merge/bin/composer-setup.php?rev=3009060
CVE ID: CVE-2024-7415 State: PUBLISHED Published: 2024-09-06T03:30:39.561Z Last Updated: 2024-09-06T13:44:43.378Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: coffee2code Products: Remember Me Controls Problem Types: CWE-200 Description: The Remember Me Controls plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1. This is due to the plugin allowing direct access to the bootstrap.php file which has display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its ow
l path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/01707346-86c2-45c8-a2c9-81a147506fa4?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3146603%40remember-me-controls&new=3146603%40remember-me-controls&sfp_email=&sfph_mail= - https://plugins.trac.wordpress.org/browser/remember-me-controls/tags/2.0.1/tests/phpunit/bootstrap.php
CVE ID: CVE-2024-7416 State: PUBLISHED Published: 2024-08-09T09:30:12.307Z Last Updated: 2024-08-10T14:38:38.092Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: coffee2code Products: Reveal Template Problem Types: CWE-200 Description: The Reveal Template plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.7. This is due to the plugin allowing direct access to the bootstrap.php file which has display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requi
e web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/34a36da0-a101-4c5a-bacb-9f131bded819?source=cve - https://plugins.trac.wordpress.org/browser/reveal-template/trunk/tests/phpunit/bootstrap.php