Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-1691 State: PUBLISHED Published: 2022-06-06T08:51:27 Last Updated: 2024-08-03T00:10:03.803Z Vendors: Unknown Products: Realty Workstation Problem Types: CWE-89 Description: The Realty Workstation WordPress plugin before 1.0.15 does not sanitise and escape the trans_edit parameter before using it in a SQL statement when an agent edit a transaction, leading to an SQL injection Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/f9363b4c-c434-4f15-93f8-46162d2d7049 - https://bulletin.iese.de/post/realty-workstation_1-0-6
CVE ID: CVE-2022-1692 State: PUBLISHED Published: 2022-06-06T08:51:29 Last Updated: 2024-08-03T00:10:03.848Z Vendors: Unknown Products: CP Image Store with Slideshow Problem Types: CWE-89 Description: The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the ordering_by query parameter before using it in a SQL statement in pages where the [codepeople-image-store] is embed, allowing unauthenticated users to perform an SQL injection attack Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/83bae80c-f583-4d89-8282-e6384bbc7571 - https://bulletin.iese.de/post/cp-image-store_1-0-67
CVE ID: CVE-2022-1694 State: PUBLISHED Published: 2022-06-13T12:42:25 Last Updated: 2024-08-03T00:10:03.759Z Vendors: Unknown Products: Useful Banner Manager Problem Types: CWE-352 Description: The Useful Banner Manager WordPress plugin through 1.6.1 does not perform CSRF checks on POST requests to its admin page, allowing an attacker to trick a logged in admin to add, modify or delete banners from the plugin by submitting a form. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/169a6c81-6c76-4f29-8f60-b2551042b962
CVE ID: CVE-2022-1695 State: PUBLISHED Published: 2022-06-06T08:51:30 Last Updated: 2024-08-03T00:10:03.866Z Vendors: Unknown Products: WP Simple Adsense Insertion Problem Types: CWE-352 Description: The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2ac5b87b-1390-41ce-af6e-c50e5709baaa
CVE ID: CVE-2022-1697 State: PUBLISHED Published: 2022-09-06T17:18:50 Last Updated: 2024-08-03T00:10:03.895Z Vendors: Okta Products: Okta Active Directory Agent Problem Types: Unquoted Search Path or Element Description: Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation. Additional Analyst Notes: - CVE Program Container: References: - https://trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697 - https://help.okta.com/en-us/Conte
https://trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697 - https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htm - https://support.okta.com/help/s/article/Security-Notice-CVE-2022-1697-FAQ
CVE ID: CVE-2022-1698 State: PUBLISHED Published: 2022-05-12T15:20:15 Last Updated: 2024-08-03T00:10:03.934Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H) Vendors: causefx Products: causefx/organizr Problem Types: CWE-191 Description: Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/causefx/organizr/commit/e4b4cff66c526f7b5bbaef0073c92c315c29bd56 - https://huntr.dev/bounties/f4ab747b-e89a-4514-9432
om/causefx/organizr/commit/e4b4cff66c526f7b5bbaef0073c92c315c29bd56 - https://huntr.dev/bounties/f4ab747b-e89a-4514-9432-ac1ea56639f3
CVE ID: CVE-2022-1699 State: PUBLISHED Published: 2022-05-12T15:20:10 Last Updated: 2024-08-03T00:10:03.941Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H) Vendors: causefx Products: causefx/organizr Problem Types: CWE-190 Description: Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/3024b2bb-50ca-46a2-85db-1cc916791cda - https://github.com/causefx/organizr/commit/e4b4cff66c526f7b5bbaef0073c92c315c29bd56
CVE ID: CVE-2022-1700 State: PUBLISHED Published: 2022-09-12T18:07:05 Last Updated: 2024-08-03T00:10:03.840Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Forcepoint Products: Data Loss Prevention (DLP), One Endpoint (F1E) with Policy Engine, Web Security Content Gateway, Email Security with DLP enabled, Cloud Security Gateway Problem Types: CWE-611 Description: Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June
Endpoint (F1E), Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20, 2022. The XML parser in the Policy Engine was found to be improperly configured to support external entities and external DTD (Document Type Definitions), which can lead to an XXE attack. This issue affects: Forcepoint Data Loss Prevention (DLP) versions prior to 8.8.2. Forcepoint One Endpoint (F1E) with Policy Engine versions prior to 8.8.2. Forcepoint Web Security Content Gateway versions prior to 8.5.5. Forcepoint Email Security with DLP enabled versions prior to 8.5.5. Forcepoint Cloud Security Gateway prior to June 20, 2022. Additional Analyst Notes: - CVE Program
sions prior to 8.5.5. Forcepoint Cloud Security Gateway prior to June 20, 2022. Additional Analyst Notes: - CVE Program Container: References: - https://help.forcepoint.com/security/CVE/CVE-2022-1700.html
CVE ID: CVE-2022-1701 State: PUBLISHED Published: 2022-05-13T19:40:14 Last Updated: 2024-08-03T00:10:03.912Z Vendors: SonicWall Products: SonicWall SMA1000 Problem Types: CWE-321 Description: SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009
CVE ID: CVE-2022-1702 State: PUBLISHED Published: 2022-05-13T19:40:15 Last Updated: 2024-08-03T00:10:03.816Z Vendors: SonicWall Products: SonicWall SMA1000 Problem Types: CWE-601 Description: SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input that specifies a link to an external site and uses that link in a redirect which leads to Open redirection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009
CVE ID: CVE-2022-1703 State: PUBLISHED Published: 2022-06-03T21:10:10 Last Updated: 2024-08-03T00:10:03.809Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-78 Description: Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Commands which potentially leads to remote command execution vulnerability or denial of service (DoS) attack. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0010
CVE ID: CVE-2022-1704 State: PUBLISHED Published: 2022-08-05T15:25:19.220Z Last Updated: 2025-04-16T16:13:45.512Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: Inductive Automation Products: Ignition Problem Types: CWE-611 Description: Due to an XML external entity reference, the software parses XML in the backup/restore functionality without XML security flags, which may lead to a XXE attack while restoring the backup. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-207-01
CVE ID: CVE-2022-1705 State: PUBLISHED Published: 2022-08-09T20:16:57 Last Updated: 2024-08-03T00:10:03.918Z Vendors: Go standard library Products: net/http Problem Types: CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Description: Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid. Additional Analyst Notes: - CVE Program Container: References: - https://go.dev/cl/409874 - https://go.googlesource.com/go/+/e5017a93fcde94f09836200bca55324af037ee5f - https://go.dev/iss
ttps://go.dev/cl/409874 - https://go.googlesource.com/go/+/e5017a93fcde94f09836200bca55324af037ee5f - https://go.dev/issue/53188 - https://go.dev/cl/410714 - https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE - https://pkg.go.dev/vuln/GO-2022-0525
CVE ID: CVE-2022-1706 State: PUBLISHED Published: 2022-05-17T00:00:00 Last Updated: 2024-08-03T00:10:03.921Z Vendors: n/a Products: coreos/ignition Problem Types: CWE-863 Description: A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from this vulnerability is to data confidentiality. Possible workaround is to not put secrets in the Ignition config. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2082274 - https://github.com/coreos/i
- CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2082274 - https://github.com/coreos/ignition/issues/1300 - https://github.com/coreos/ignition/issues/1315 - https://github.com/coreos/ignition/pull/1350 - https://github.com/coreos/ignition/commit/4b70b44b430ecf8377a276e89b5acd3a6957d4ea - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NP765L7TJI7CD4XVOHUWZVRYRH3FYBOR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LY7LKGMQMXV6DGD263YQHNSLOJJ5VLV5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5QQXRGQKTN4YX
5VLV5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5QQXRGQKTN4YX2ZF3GQNEBDEOKJGCN3/
CVE ID: CVE-2022-1707 State: PUBLISHED Published: 2022-06-13T12:45:36.000Z Last Updated: 2025-05-05T16:41:32.912Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: duracelltomi Products: GTM4WP Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Google Tag Manager for WordPress plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the s parameter due to the site search populating into the data layer of sites with insufficient sanitization in versions up to an including 1.15. The affected file is ~/public/frontend.php and this could be exploited by unauthenticated attacke
to an including 1.15. The affected file is ~/public/frontend.php and this could be exploited by unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0435ae14-c1fd-4611-acbe-5f3bafd4bb6a?source=cve - https://github.com/duracelltomi/gtm4wp/issues/224 - https://github.com/duracelltomi/gtm4wp/blob/1.15/public/frontend.php#L298 - https://github.com/duracelltomi/gtm4wp/blob/1.15/public/frontend.php#L782 - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1707
CVE ID: CVE-2022-1708 State: PUBLISHED Published: 2022-06-07T17:43:56 Last Updated: 2024-08-03T00:10:03.930Z Vendors: n/a Products: CRI-O Problem Types: CWE-400 Description: A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a manner where the entire file corresponding to the output of the command is read in. Thus, if the output of the command is large it is possible to exhaust the memory or the disk space of the node when CRI-O reads the output of the
command is large it is possible to exhaust the memory or the disk space of the node when CRI-O reads the output of the command. The highest threat from this vulnerability is system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2085361 - https://github.com/cri-o/cri-o/security/advisories/GHSA-fcm2-6c3h-pg6j - https://github.com/cri-o/cri-o/commit/f032cf649ecc7e0c46718bd9e7814bfb317cb544
CVE ID: CVE-2022-1709 State: PUBLISHED Published: 2022-06-06T08:51:32 Last Updated: 2024-08-03T00:10:03.915Z Vendors: Unknown Products: Throws SPAM Away Problem Types: CWE-352 Description: The Throws SPAM Away WordPress plugin before 3.3.1 does not have CSRF checks in place when deleting comments (either all, spam, or pending), allowing attackers to make a logged in admin delete comments via a CSRF attack Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/ac290535-d9ec-459a-abc3-27cd78eb54fc
CVE ID: CVE-2022-1710 State: PUBLISHED Published: 2022-06-13T12:42:28 Last Updated: 2024-08-03T00:10:03.840Z Vendors: Unknown Products: Appointment Hour Booking – WordPress Booking Plugin Problem Types: CWE-79 Description: The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/ed162ccc-88e6-41e8-b24d-1b9f77a038b6
CVE ID: CVE-2022-1711 State: PUBLISHED Published: 2022-05-17T12:40:09 Last Updated: 2024-08-03T00:10:03.912Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: jgraph Products: jgraph/drawio Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jgraph/drawio/commit/cf5c78aa0f3127fb10053db55b39f3017a0654ae - https://huntr.dev/bounties/c32afff5-6ad5-4d4d-beea-f55ab4925797
CVE ID: CVE-2022-1712 State: PUBLISHED Published: 2022-06-06T08:51:33 Last Updated: 2024-08-03T00:10:03.917Z Vendors: Unknown Products: LiveSync for WordPress Problem Types: CWE-352 Description: The LiveSync for WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9ab9626f-66d5-47e4-bdb8-d8fb519f9515
CVE ID: CVE-2022-1713 State: PUBLISHED Published: 2022-05-16T14:31:52 Last Updated: 2024-08-03T00:10:03.954Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: jgraph Products: jgraph/drawio Problem Types: CWE-918 Description: SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/cad3902f-3afb-4ed2-abd0-9f96a248de11 - https://github.com/jgraph/drawio/commit/283d41ec80ad410d68634245cf56114bc19331ee
CVE ID: CVE-2022-1714 State: PUBLISHED Published: 2022-05-13T00:00:00 Last Updated: 2024-08-03T00:10:03.915Z Severity: HIGH (CVSS 7.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-125 Description: Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/1c22055b-b015-47a8-a57b-4982978751d0 - https://github.com/radareorg/radare2/commit/3
ences: - https://huntr.dev/bounties/1c22055b-b015-47a8-a57b-4982978751d0 - https://github.com/radareorg/radare2/commit/3ecdbf8e21186a9c5a4d3cfa3b1e9fd27045340e
CVE ID: CVE-2022-1715 State: PUBLISHED Published: 2022-05-13T17:10:10 Last Updated: 2024-08-03T00:10:03.955Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: neorazorx Products: neorazorx/facturascripts Problem Types: CWE-1125 Description: Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/58918962-ccb5-47f9-bb43-ffd8cae1ef24 - https://github.com/neorazorx/facturascripts/commit/714bebf4c35e3eedda138f5ee912a8031bc8b1ab
CVE ID: CVE-2022-1716 State: PUBLISHED Published: 2022-06-02T17:05:42 Last Updated: 2024-08-03T00:10:03.886Z Vendors: n/a Products: Keep My Notes Problem Types: Improper Access Control Description: Keep My Notes v1.80.147 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation. Additional Analyst Notes: - CVE Program Container: References: - https://fluidattacks.com/advisories/tyler/ - http://www.kitetech.co/keepmynotes
CVE ID: CVE-2022-1717 State: PUBLISHED Published: 2022-06-20T10:25:57 Last Updated: 2024-08-03T00:10:03.938Z Vendors: Unknown Products: Custom Share Buttons with Floating Sidebar Problem Types: CWE-79 Description: The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/79a532e9-bc6e-4722-8d67-9c15720d06a6
CVE ID: CVE-2022-1718 State: PUBLISHED Published: 2022-05-16T14:32:17 Last Updated: 2024-08-03T00:10:03.910Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: polonel Products: polonel/trudesk Problem Types: CWE-190 Description: The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/1ff8afe4-6ff7-45aa-a652-d8aac7e5be7e - https://github.com/polon
gram Container: References: - https://huntr.dev/bounties/1ff8afe4-6ff7-45aa-a652-d8aac7e5be7e - https://github.com/polonel/trudesk/commit/87e231e04495fb705fe1e03cb56fc4136bafe895
CVE ID: CVE-2022-1719 State: PUBLISHED Published: 2022-05-16T14:32:10 Last Updated: 2024-08-03T00:10:03.818Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: polonel Products: polonel/trudesk Problem Types: CWE-79 Description: Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/790ba3fd-41e9-4393-8e2f-71161b56279b - https://github.com/polonel/trudesk/commit/36a542abbbb74828338ce402d65653ac58db42e0
CVE ID: CVE-2022-1720 State: PUBLISHED Published: 2022-05-16T00:00:00 Last Updated: 2024-08-03T00:10:03.797Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-126 Description: Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/5ccfb386-7eb9-46e5-98e5-243ea4b358a8 - https://github.com/vim/vim/commit/395bd1f6d3edc9f7edb5d1f2d7deaf5a9e3ab93c - https://lists.debian.org/debian-lts-announc
https://github.com/vim/vim/commit/395bd1f6d3edc9f7edb5d1f2d7deaf5a9e3ab93c - https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/ - https://security.gentoo.org/glsa/202208-32 - https://support.apple.com/kb/HT213443 - https://support.apple.com/kb/HT213444 - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - http://seclists.org/fulld
p://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - http://seclists.org/fulldisclosure/2022/Oct/43 - http://seclists.org/fulldisclosure/2022/Oct/45 - https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-1721 State: PUBLISHED Published: 2022-05-16T14:31:26 Last Updated: 2024-08-03T00:10:03.857Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: jgraph Products: jgraph/drawio Problem Types: CWE-22 Description: Path Traversal in WellKnownServlet in GitHub repository jgraph/drawio prior to 18.0.5. Read local files of the web application. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/000931cc-6d0e-4a4f-b4d8-4ba46ba0e699 - https://github.com/jgraph/drawio/commit/01ccb271d34258872b859c0fc1d253cc81341917
CVE ID: CVE-2022-1722 State: PUBLISHED Published: 2022-05-16T14:31:21 Last Updated: 2024-08-03T00:10:03.906Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: jgraph Products: jgraph/drawio Problem Types: CWE-918 Description: SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal link-local IPv6 addresses Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/c903d563-ba97-44e9-b421-22bfab1e0cbd - https://github.com/jgraph/drawio/commit/cf5c78aa0f3127fb10053db55b39f3017a0654ae
CVE ID: CVE-2022-1723 State: PUBLISHED Published: 2022-05-17T08:35:10 Last Updated: 2024-08-03T00:16:58.890Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: jgraph Products: jgraph/drawio Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/619851a4-2a08-4196-80e9-ab41953491d8 - https://github.com/jgraph/drawio/commit/7a68ebe22a64fe722704e9c4527791209fee2034