Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-56056 State: PUBLISHED Published: 2025-01-07T14:57:40.886Z Last Updated: 2025-08-27T21:43:05.598Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: kmfoysal06 Products: SimpleCharm Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kmfoysal06 SimpleCharm allows Reflected XSS.This issue affects SimpleCharm: from n/a through 1.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/simplecharm/vulnerability/wordpress-simplecharm-theme-1-4-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-56057 State: PUBLISHED Published: 2024-12-18T18:52:17.015Z Last Updated: 2024-12-18T19:16:02.939Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: VibeThemes Products: WPLMS Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a before 1.9.9.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wplms-plugin/vulnerability/wordpress-wplms-plugin-1-9-9-5-2-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2024-56058 State: PUBLISHED Published: 2024-12-18T11:38:21.162Z Last Updated: 2024-12-18T16:29:23.363Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Gueststream Products: VRPConnector Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Gueststream VRPConnector allows Object Injection.This issue affects VRPConnector: from n/a through 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/vrpconnector/vulnerability/wordpress-vrpconnector-plugin-2-0-1-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-56059 State: PUBLISHED Published: 2024-12-18T11:38:20.358Z Last Updated: 2024-12-18T16:29:32.752Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mighty Digital Products: Partners Problem Types: CWE-1321 Description: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Mighty Digital Partners allows Object Injection.This issue affects Partners: from n/a through 0.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/partners/vulnerability/wordpress-partners-plugin-0-2-0-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-56060 State: PUBLISHED Published: 2025-01-02T09:13:23.775Z Last Updated: 2025-01-03T19:13:32.248Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: HTML Forms Products: HTML Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HTML Forms allows Reflected XSS.This issue affects HTML Forms: from n/a through 1.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/html-forms/vulnerability/wordpress-html-forms-plugin-1-4-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-56061 State: PUBLISHED Published: 2024-12-31T13:18:44.063Z Last Updated: 2024-12-31T15:24:27.024Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Webful Creations Products: Computer Repair Shop Problem Types: CWE-862 Description: Missing Authorization vulnerability in Webful Creations Computer Repair Shop allows Privilege Escalation.This issue affects Computer Repair Shop: from n/a through 3.8119. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/computer-repair-shop/vulnerability/wordpress-repairbuddy-plugin-3-8119-account-takeover-vulnerability?_s_id=cve
CVE ID: CVE-2024-56062 State: PUBLISHED Published: 2024-12-31T23:07:40.230Z Last Updated: 2025-01-02T16:07:31.668Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Royal Products: Royal Elementor Addons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through 1.3.987. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/royal-elementor-addons/vulnerability/wordpress-royal-elementor-addons-and-templates-plugin-
om/database/wordpress/plugin/royal-elementor-addons/vulnerability/wordpress-royal-elementor-addons-and-templates-plugin-1-3-987-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-56063 State: PUBLISHED Published: 2024-12-31T23:06:31.011Z Last Updated: 2025-01-02T16:08:07.017Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WPDeveloper Products: Essential Addons for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a through 6.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/essential-addons-for-elementor-lite/vulnerability/wordpress-ess
nces: - https://patchstack.com/database/wordpress/plugin/essential-addons-for-elementor-lite/vulnerability/wordpress-essential-addons-for-elementor-plugin-6-0-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-56064 State: PUBLISHED Published: 2024-12-31T12:54:21.074Z Last Updated: 2024-12-31T16:13:14.247Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Azzaroco Products: WP SuperBackup Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Azzaroco WP SuperBackup allows Upload a Web Shell to a Web Server.This issue affects WP SuperBackup: from n/a through 2.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/indeed-wp-superbackup/vulnerability/wordpress-wp-superbackup-plugin-2-3-3-unauthenticated-arbitrary-file-upload-vulnerability?_s
p-superbackup/vulnerability/wordpress-wp-superbackup-plugin-2-3-3-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2024-56065 State: PUBLISHED Published: 2025-01-13T13:11:37.564Z Last Updated: 2025-01-13T13:44:00.990Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Saleswonder.biz Team Products: WP2LEADS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saleswonder.biz Team WP2LEADS allows Reflected XSS.This issue affects WP2LEADS: from n/a through 3.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp2leads/vulnerability/wordpress-wp2leads-plugin-3-4-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=
ss/plugin/wp2leads/vulnerability/wordpress-wp2leads-plugin-3-4-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-56066 State: PUBLISHED Published: 2024-12-31T13:20:11.368Z Last Updated: 2024-12-31T15:19:59.072Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Inspry Products: Agency Toolkit Problem Types: CWE-862 Description: Missing Authorization vulnerability in Inspry Agency Toolkit allows Privilege Escalation.This issue affects Agency Toolkit: from n/a through 1.0.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/agency-toolkit/vulnerability/wordpress-agency-toolkit-plugin-1-0-23-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2024-56067 State: PUBLISHED Published: 2024-12-31T12:48:21.629Z Last Updated: 2024-12-31T17:59:49.723Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Azzaroco Products: WP SuperBackup Problem Types: CWE-862 Description: Missing Authorization vulnerability in Azzaroco WP SuperBackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through 2.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/indeed-wp-superbackup/vulnerability/wordpress-wp-superbackup-plugin-2-3-3-unauthenticated-backup-file-download-vulnerability?_s
wp-superbackup/vulnerability/wordpress-wp-superbackup-plugin-2-3-3-unauthenticated-backup-file-download-vulnerability?_s_id=cve
CVE ID: CVE-2024-56068 State: PUBLISHED Published: 2024-12-31T12:51:45.293Z Last Updated: 2024-12-31T17:58:07.195Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Azzaroco Products: WP SuperBackup Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Azzaroco WP SuperBackup.This issue affects WP SuperBackup: from n/a through 2.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/indeed-wp-superbackup/vulnerability/wordpress-wp-superbackup-plugin-2-3-3-subscriber-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-56069 State: PUBLISHED Published: 2025-01-02T09:12:19.543Z Last Updated: 2025-01-03T19:14:28.303Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Azzaroco Products: WP SuperBackup Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Azzaroco WP SuperBackup allows Reflected XSS.This issue affects WP SuperBackup: from n/a through 2.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/indeed-wp-superbackup/vulnerability/wordpress-wp-superbackup-plugin-2-3-3-reflected-cross-site-scripting-xss-vulnera
gin/indeed-wp-superbackup/vulnerability/wordpress-wp-superbackup-plugin-2-3-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-56070 State: PUBLISHED Published: 2024-12-31T13:35:46.941Z Last Updated: 2024-12-31T16:09:06.328Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: Azzaroco Products: WP SuperBackup Problem Types: CWE-862 Description: Missing Authorization vulnerability in Azzaroco WP SuperBackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through 2.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/indeed-wp-superbackup/vulnerability/wordpress-wp-superbackup-plugin-2-3-3-multiple-subscriber-broken-access-control-vulnerabili
wp-superbackup/vulnerability/wordpress-wp-superbackup-plugin-2-3-3-multiple-subscriber-broken-access-control-vulnerabilities?_s_id=cve
CVE ID: CVE-2024-56071 State: PUBLISHED Published: 2024-12-31T12:44:32.807Z Last Updated: 2024-12-31T15:10:20.831Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mike Leembruggen Products: Simple Dashboard Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in Mike Leembruggen Simple Dashboard allows Privilege Escalation.This issue affects Simple Dashboard: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-dashboard/vulnerability/wordpress-simple-dashboard-plugin-2-0-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2024-56072 State: PUBLISHED Published: 2024-12-15T00:00:00 Last Updated: 2024-12-16T16:59:10.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FastNetMon Community Edition through 1.2.7. The sFlow v5 plugin allows remote attackers to cause a denial of service (application crash) via a crafted packet that specifies many sFlow samples. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pavel-odintsov/fastnetmon/commit/5164a29603fff9dd445b7660a35090989f005000 - https://github.com/pavel-odintsov/fastnetmon/commit/65c40ee92dd5bcad1ab52cbafa1afd62cf669e48
CVE ID: CVE-2024-56073 State: PUBLISHED Published: 2024-12-15T00:00:00 Last Updated: 2024-12-16T16:45:28.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FastNetMon Community Edition through 1.2.7. Zero-length templates for Netflow v9 allow remote attackers to cause a denial of service (divide-by-zero error and application crash). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pavel-odintsov/fastnetmon/commit/a36718525e08ad0f2a809363001bf105efc5fe1c - https://cwe.mitre.org/data/definitions/369.html
CVE ID: CVE-2024-56074 State: PUBLISHED Published: 2024-12-15T00:00:00 Last Updated: 2024-12-16T16:07:28.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: gitingest before 9996a06 mishandles symbolic links that point outside of the base directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitingest.com/ - https://github.com/cyclotruc/gitingest/pull/23 - https://github.com/cyclotruc/gitingest/commit/9996a06a94450497c1abb35997f5e6cbc9b571ff - https://github.com/cyclotruc/gitingest/blob/9996a06a94450497c1abb35997f5e6cbc9b571ff/src/ingest.py#L22-L30 - https://github.com/cyclotruc/gitingest/blob/9996a06a94450497c1abb35997f5e6cbc9b571ff/src/ingest.py#L9
ngest.py#L22-L30 - https://github.com/cyclotruc/gitingest/blob/9996a06a94450497c1abb35997f5e6cbc9b571ff/src/ingest.py#L99-L100
CVE ID: CVE-2024-56082 State: PUBLISHED Published: 2024-12-15T00:00:00 Last Updated: 2024-12-16T15:44:56.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChatBar.tsx in Lumos before 1.0.17 parses raw HTML in Markdown because the markdown-to-jsx package is used without disableParsingRawHTML set to true. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/andrewnguonly/Lumos/issues/193 - https://github.com/quantizor/markdown-to-jsx/blob/4fa87d89ad87f97b2d9e56cb969d12f9a838f3ac/README.md?plain=1#L535-L537 - https://github.com/andrewnguonly/Lumos/releases/tag/1.0.17
CVE ID: CVE-2024-56083 State: PUBLISHED Published: 2024-12-16T00:00:00 Last Updated: 2024-12-16T16:37:50.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cognition Devin before 2024-12-12 provides write access to code by an attacker who discovers the https://vscode-randomly_generated_string.devinapps.com URL (aka the VSCode live share URL) for a specific "Use Devin's Machine" session. For example, this URL may be discovered if a customer posts a screenshot of a Devin session to social media, or publicly streams their Devin session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://x.com/cognition_labs/status/1867351521035530698 - https://www.youtube.com/
CISA ADP Vulnrichment: References: - https://x.com/cognition_labs/status/1867351521035530698 - https://www.youtube.com/watch?v=927W6zzvV-c - https://trust.cognition.ai - https://news.ycombinator.com/item?id=42420423
CVE ID: CVE-2024-56084 State: PUBLISHED Published: 2024-12-16T00:00:00 Last Updated: 2024-12-23T17:26:45.539Z Vendors: n/a Products: n/a Problem Types: CWE-77 Description: An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are executed, leading to Remote Code Execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://servicedesk.logpoint.com/hc/en-us/articles/22137632418845-Remote-Code-Execution-while-creating-Universal-Normalizer
CVE ID: CVE-2024-56085 State: PUBLISHED Published: 2024-12-16T00:00:00 Last Updated: 2024-12-16T15:58:37.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading to Server-Side Template Injection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://servicedesk.logpoint.com/hc/en-us/articles/22137660393757-Server-Side-Template-Injection-SSTI-in-Search-Template-Dashboard
CVE ID: CVE-2024-56086 State: PUBLISHED Published: 2024-12-16T00:00:00 Last Updated: 2024-12-16T15:57:09.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://servicedesk.logpoint.com/hc/en-us/articles/22136886421277-Remote-Code-Execution-while-creating-Report-Templates
CVE ID: CVE-2024-56087 State: PUBLISHED Published: 2024-12-16T00:00:00 Last Updated: 2024-12-16T15:58:55.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These are executed, leading to Server-Side Template Injection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://servicedesk.logpoint.com/hc/en-us/articles/22137697881885-Server-Side-Template-Injection-SSTI-in-Search-Template-Dashboard-Queries
CVE ID: CVE-2024-56112 State: PUBLISHED Published: 2024-12-16T00:00:00 Last Updated: 2024-12-16T15:52:34.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: CyberPanel (aka Cyber Panel) before f0cf648 allows XSS via token or username to plogical/phpmyadminsignin.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cyberpanel.net/ - https://github.com/usmannasir/cyberpanel/commit/f0cf648c7851c96c36bb0c390d13e60931f45900
CVE ID: CVE-2024-56113 State: PUBLISHED Published: 2025-01-09T00:00:00.000Z Last Updated: 2025-01-23T17:20:19.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smart Toilet Lab - Motius 1.3.11 is running with debug mode turned on (DEBUG = True) and exposing sensitive information defined in Django settings file through verbose error page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2024-56113 - https://www.motius.com/
CVE ID: CVE-2024-56114 State: PUBLISHED Published: 2025-01-09T00:00:00 Last Updated: 2025-01-16T18:55:13.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canlineapp Online 1.1 is vulnerable to Broken Access Control and allows users with the Auditor role to create an audit template as a result of improper authorization checks. This feature is designated for supervisor role, but auditors have been able to successfully create audit templates from their account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.e-connectsolutions.com - https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2024-56114
CVE ID: CVE-2024-56115 State: PUBLISHED Published: 2024-12-18T00:00:00 Last Updated: 2024-12-31T19:20:26.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Amiro.CMS before 7.8.4 exists due to the failure to take measures to neutralize special elements. It allows remote attackers to conduct a Cross-Site Scripting (XSS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ComplianceControl/CVE-2024-56115
CVE ID: CVE-2024-56116 State: PUBLISHED Published: 2024-12-18T00:00:00 Last Updated: 2024-12-31T19:23:09.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery vulnerability in Amiro.CMS before 7.8.4 allows remote attackers to create an administrator account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ComplianceControl/CVE-2024-56116
CVE ID: CVE-2024-56128 State: PUBLISHED Published: 2024-12-18T13:38:03.068Z Last Updated: 2024-12-18T17:02:47.926Z Vendors: Apache Software Foundation Products: Apache Kafka Problem Types: CWE-303 Description: Incorrect Implementation of Authentication Algorithm in Apache Kafka's SCRAM implementation. Issue Summary: Apache Kafka's implementation of the Salted Challenge Response Authentication Mechanism (SCRAM) did not fully adhere to the requirements of RFC 5802 [1]. Specifically, as per RFC 5802, the server must verify that the nonce sent by the client in the second message matches the nonce sent by the server in its first message. However, Kafka's SCRAM implementation did not perform this
e matches the nonce sent by the server in its first message. However, Kafka's SCRAM implementation did not perform this validation. Impact: This vulnerability is exploitable only when an attacker has plaintext access to the SCRAM authentication exchange. However, the usage of SCRAM over plaintext is strongly discouraged as it is considered an insecure practice [2]. Apache Kafka recommends deploying SCRAM exclusively with TLS encryption to protect SCRAM exchanges from interception [3]. Deployments using SCRAM with TLS are not affected by this issue. How to Detect If You Are Impacted: If your deployment uses SCRAM authentication over plaintext communication channels (without TLS encryption), y
Impacted: If your deployment uses SCRAM authentication over plaintext communication channels (without TLS encryption), you are likely impacted. To check if TLS is enabled, review your server.properties configuration file for listeners property. If you have SASL_PLAINTEXT in the listeners, then you are likely impacted. Fix Details: The issue has been addressed by introducing nonce verification in the final message of the SCRAM authentication exchange to ensure compliance with RFC 5802. Affected Versions: Apache Kafka versions 0.10.2.0 through 3.9.0, excluding the fixed versions below. Fixed Versions: 3.9.0 3.8.1 3.7.2 Users are advised to upgrade to 3.7.2 or later to mitigate this issue. Reco
ons below. Fixed Versions: 3.9.0 3.8.1 3.7.2 Users are advised to upgrade to 3.7.2 or later to mitigate this issue. Recommendations for Mitigation: Users unable to upgrade to the fixed versions can mitigate the issue by: - Using TLS with SCRAM Authentication: Always deploy SCRAM over TLS to encrypt authentication exchanges and protect against interception. - Considering Alternative Authentication Mechanisms: Evaluate alternative authentication mechanisms, such as PLAIN, Kerberos or OAuth with TLS, which provide additional layers of security. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://datatracker.ietf.org/doc/html/rfc5802 - https://datatr
ADP Vulnrichment: - CVE Program Container: References: - https://datatracker.ietf.org/doc/html/rfc5802 - https://datatracker.ietf.org/doc/html/rfc5802#section-9 - https://kafka.apache.org/documentation/#security_sasl_scram_security - https://lists.apache.org/thread/84dh4so32lwn7wr6c5s9mwh381vx9wkw
CVE ID: CVE-2024-56131 State: PUBLISHED Published: 2025-02-05T18:00:34.542Z Last Updated: 2025-02-05T18:39:38.338Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Progress Products: LoadMaster Problem Types: CWE-20 Description: Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects: Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive) From 7.2.49.0 to 7.2.54.12 (inclusive) 7.2.48.12 and all prior versions Multi-Tenant Hypervisor 7.1.35.12 and all prior versions ECS All prior versions to 7.2.60.1 (inclusive) Additional Analyst Notes: - CISA ADP Vulnrichment: Re
all prior versions ECS All prior versions to 7.2.60.1 (inclusive) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.progress.com/s/article/LoadMaster-Security-Vulnerability-CVE-2024-56131-CVE-2024-56132-CVE-2024-56133-CVE-2024-56134-CVE-2024-56135