Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-34070 State: PUBLISHED Published: 2024-05-10T15:21:37.883Z Last Updated: 2024-08-02T02:42:59.890Z Severity: CRITICAL (CVSS 9.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: froxlor Products: Froxlor Problem Types: CWE-79, CWE-80 Description: Froxlor is open source server administration software. Prior to 2.1.9, a Stored Blind Cross-Site Scripting (XSS) vulnerability was identified in the Failed Login Attempts Logging Feature of the Froxlor Application. An unauthenticated User can inject malicious scripts in the loginname parameter on the Login attempt, which will then be executed when viewed by the Administrator in the System Logs. By exploiting this vulnerability,
mpt, which will then be executed when viewed by the Administrator in the System Logs. By exploiting this vulnerability, the attacker can perform various malicious actions such as forcing the Administrator to execute actions without their knowledge or consent. For instance, the attacker can force the Administrator to add a new administrator controlled by the attacker, thereby giving the attacker full control over the application. This vulnerability is fixed in 2.1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/froxlor/Froxlor/security/advisories/GHSA-x525-54hf-xr53 - https://github.com/froxlor/Froxlor/commit/a862307bce5cdfb1c208
froxlor/Froxlor/security/advisories/GHSA-x525-54hf-xr53 - https://github.com/froxlor/Froxlor/commit/a862307bce5cdfb1c208b835f3e8faddd23046e6
CVE ID: CVE-2024-34071 State: PUBLISHED Published: 2024-05-21T13:31:31.618Z Last Updated: 2024-08-02T02:42:59.968Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: umbraco Products: Umbraco-CMS Problem Types: CWE-601 Description: Umbraco is an ASP.NET CMS used by more than 730.000 websites. Umbraco has an endpoint that is vulnerable to open redirects. The endpoint is protected so it requires the user to be signed into backoffice before the vulnerable is exposed. This vulnerability has been patched in version(s) 8.18.14, 10.8.6, 12.3.10 and 13.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/umbr
3.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-j74q-mv2c-rxmp - https://github.com/umbraco/Umbraco-CMS/commit/5f24de308584b9771240a6db1a34630a5114c450 - https://github.com/umbraco/Umbraco-CMS/commit/c17d4e1a600098ec524e4126f4395255476bc33f - https://github.com/umbraco/Umbraco-CMS/commit/c8f71af646171074c13e5c34f74312def4512031 - https://github.com/umbraco/Umbraco-CMS/commit/d8df405db4ea884bb4b96f088d10d9a2070cf024
CVE ID: CVE-2024-34072 State: PUBLISHED Published: 2024-05-03T10:13:24.557Z Last Updated: 2024-08-02T02:42:59.895Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: aws Products: sagemaker-python-sdk Problem Types: CWE-502 Description: sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. The sagemaker.base_deserializers.NumpyDeserializer module before v2.218.0 allows potentially unsafe deserialization when untrusted data is passed as pickled object arrays. This consequently may allow an unprivileged third party to cause remote code execution, denial of service, affecting both confidentiality and integrity. Use
vileged third party to cause remote code execution, denial of service, affecting both confidentiality and integrity. Users are advised to upgrade to version 2.218.0. Users unable to upgrade should not pass pickled numpy object arrays which originated from an untrusted source, or that could have been tampered with. Only pass pickled numpy object arrays from trusted sources. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-wjvx-jhpj-r54r - https://github.com/aws/sagemaker-python-sdk/pull/4557
CVE ID: CVE-2024-34073 State: PUBLISHED Published: 2024-05-03T10:11:12.203Z Last Updated: 2024-08-02T02:42:59.880Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: aws Products: sagemaker-python-sdk Problem Types: CWE-78 Description: sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. In affected versions the capture_dependencies function in `sagemaker.serve.save_retrive.version_1_0_0.save.utils` module allows for potentially unsafe Operating System (OS) Command Injection if inappropriate command is passed as the “requirements_path” parameter. This consequently may allow an unprivileged third party to cause
ommand is passed as the “requirements_path” parameter. This consequently may allow an unprivileged third party to cause remote code execution, denial of service, affecting both confidentiality and integrity. This issue has been addressed in version 2.214.3. Users are advised to upgrade. Users unable to upgrade should not override the “requirements_path” parameter of capture_dependencies function in `sagemaker.serve.save_retrive.version_1_0_0.save.utils`, and instead use the default value. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-7pc3-pr3q-58vg - https://github.com/aws/sagemak
: - https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-7pc3-pr3q-58vg - https://github.com/aws/sagemaker-python-sdk/pull/4556 - https://github.com/aws/sagemaker-python-sdk/commit/2d873d53f708ea570fc2e2a6974f8c3097fe9df5
CVE ID: CVE-2024-34074 State: PUBLISHED Published: 2024-05-09T14:25:25.979Z Last Updated: 2024-08-02T02:43:00.126Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: frappe Products: frappe Problem Types: CWE-601 Description: Frappe is a full-stack web application framework. Prior to 15.26.0 and 14.74.0, the login page accepts redirect argument and it allowed redirect to untrusted external URls. This behaviour can be used by malicious actors for phishing. This vulnerability is fixed in 15.26.0 and 14.74.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/frappe/frappe/security/advisories/GHSA-7g27-q225
Vulnrichment: - CVE Program Container: References: - https://github.com/frappe/frappe/security/advisories/GHSA-7g27-q225-j894 - https://github.com/frappe/frappe/pull/26304 - https://github.com/frappe/frappe/commit/65b3c42635038cdff17d3109be6c373bac004829
CVE ID: CVE-2024-34075 State: PUBLISHED Published: 2024-05-03T17:51:30.966Z Last Updated: 2024-08-02T02:42:59.964Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: xiboon Products: kurwov Problem Types: CWE-502 Description: kurwov is a fast, dependency-free library for creating Markov Chains. An unsafe sanitization of dataset contents on the `MarkovData#getNext` method used in `Markov#generate` and `Markov#choose` allows a maliciously crafted string on the dataset to throw and stop the function from running properly. If a string contains a forbidden substring (i.e. `__proto__`) followed by a space character, the code will access a special property in `MarkovD
orbidden substring (i.e. `__proto__`) followed by a space character, the code will access a special property in `MarkovData#finalData` by removing the last character of the string, bypassing the dataset sanitization (as it is supposed to be already sanitized before this function is called). Any dataset can be contaminated with the substring making it unable to properly generate anything in some cases. This issue has been addressed in version 3.2.5 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/xiboon/kurwov/security/advisories/GHSA-hfrv-h3
P Vulnrichment: - CVE Program Container: References: - https://github.com/xiboon/kurwov/security/advisories/GHSA-hfrv-h3q8-9jpr - https://github.com/xiboon/kurwov/commit/85d63e652594f121d6656177d7a3c0d823c976c9 - https://github.com/xiboon/kurwov/blob/0d58dfa42135ab40e830e92622857282f980ca89/src/MarkovData.ts#L38-L44
CVE ID: CVE-2024-34077 State: PUBLISHED Published: 2024-05-13T15:30:32.334Z Last Updated: 2024-08-02T02:42:59.849Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: mantisbt Products: mantisbt Problem Types: CWE-305, CWE-620 Description: MantisBT (Mantis Bug Tracker) is an open source issue tracker. Insufficient access control in the registration and password reset process allows an attacker to reset another user's password and takeover their account, if the victim has an incomplete request pending. The exploit is only possible while the verification token is valid, i.e for 5 minutes after the confirmation URL sent by e-mail has been opened, and the user did not
cation token is valid, i.e for 5 minutes after the confirmation URL sent by e-mail has been opened, and the user did not complete the process by updating their password. A brute-force attack calling account_update.php with increasing user IDs is possible. A successful takeover would grant the attacker full access to the compromised account, including sensitive information and functionalities associated with the account, the extent of which depends on its privileges and the data it has access to. Version 2.26.2 contains a patch for the issue. As a workaround, one may mitigate the risk by reducing the verification token's validity (change the value of the `TOKEN_EXPIRY_AUTHENTICATED` constant
e the risk by reducing the verification token's validity (change the value of the `TOKEN_EXPIRY_AUTHENTICATED` constant in `constants_inc.php`). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/mantisbt/mantisbt/security/advisories/GHSA-93x3-m7pw-ppqm - https://github.com/mantisbt/mantisbt/commit/92d11a01b195a1b6717a2f205218089158ea6d00 - https://mantisbt.org/bugs/view.php?id=34433
CVE ID: CVE-2024-34078 State: PUBLISHED Published: 2024-05-06T14:48:47.506Z Last Updated: 2024-08-26T18:03:11.753Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: matthiask Products: html-sanitizer Problem Types: CWE-79 Description: html-sanitizer is an allowlist-based HTML cleaner. If using `keep_typographic_whitespace=False` (which is the default), the sanitizer normalizes unicode to the NFKC form at the end. Some unicode characters normalize to chevrons; this allows specially crafted HTML to escape sanitization. The problem has been fixed in 2.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com
d in 2.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/matthiask/html-sanitizer/security/advisories/GHSA-wvhx-q427-fgh3 - https://github.com/matthiask/html-sanitizer/commit/48db42fc5143d0140c32d929c46b802f96913550
CVE ID: CVE-2024-34079 State: PUBLISHED Published: 2024-05-10T19:05:49.063Z Last Updated: 2024-08-02T02:42:59.947Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: octo-sts Products: app Problem Types: CWE-400 Description: octo-sts is a GitHub App that acts like a Security Token Service (STS) for the Github API. This vulnerability can spike the resource utilization of the STS service, and combined with a significant traffic volume could potentially lead to a denial of service. This vulnerability is fixed in 0.1.0 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/octo-sts/app/security/advisories/GHSA-75r6
A ADP Vulnrichment: - CVE Program Container: References: - https://github.com/octo-sts/app/security/advisories/GHSA-75r6-6jg8-pfcq - https://github.com/octo-sts/app/commit/74ba874c017cf973edd6711144cf4399a9fcff57
CVE ID: CVE-2024-34080 State: PUBLISHED Published: 2024-05-13T15:35:00.399Z Last Updated: 2024-08-02T02:42:59.815Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: mantisbt Products: mantisbt Problem Types: CWE-200 Description: MantisBT (Mantis Bug Tracker) is an open source issue tracker. If an issue references a note that belongs to another issue that the user doesn't have access to, then it gets hyperlinked. Clicking on the link gives an access denied error as expected, yet some information remains available via the link, link label, and tooltip. This can result in disclosure of the existence of the note, the note author name, the note creation timestamp,
tooltip. This can result in disclosure of the existence of the note, the note author name, the note creation timestamp, and the issue id the note belongs to. Version 2.26.2 contains a patch for the issue. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/mantisbt/mantisbt/security/advisories/GHSA-99jc-wqmr-ff2q - https://github.com/mantisbt/mantisbt/pull/2000 - https://github.com/mantisbt/mantisbt/commit/0a50562369d823689c9b946066d1e49d3c2df226 - https://mantisbt.org/bugs/view.php?id=34434
CVE ID: CVE-2024-34081 State: PUBLISHED Published: 2024-05-13T15:40:54.014Z Last Updated: 2024-08-02T02:42:59.876Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: mantisbt Products: mantisbt Problem Types: CWE-79 Description: MantisBT (Mantis Bug Tracker) is an open source issue tracker. Improper escaping of a custom field's name allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript when resolving or closing issues (`bug_change_status_page.php`) belonging to a project linking said custom field, viewing issues (`view_all_bug_page.php`) when the custom field is displayed as a column, or printing issues (`print
eld, viewing issues (`view_all_bug_page.php`) when the custom field is displayed as a column, or printing issues (`print_all_bug_page.php`) when the custom field is displayed as a column. Version 2.26.2 contains a patch for the issue. As a workaround, ensure Custom Field Names do not contain HTML tags. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/mantisbt/mantisbt/security/advisories/GHSA-wgx7-jp56-65mq - https://github.com/mantisbt/mantisbt/commit/447a521aae0f82f791b8116a14a20e276df739be - https://mantisbt.org/bugs/view.php?id=34432
CVE ID: CVE-2024-34082 State: PUBLISHED Published: 2024-05-15T16:42:19.075Z Last Updated: 2024-08-02T02:42:59.940Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: getgrav Products: grav Problem Types: CWE-269 Description: Grav is a file-based Web platform. Prior to version 1.7.46, a low privilege user account with page edit privilege can read any server files using Twig Syntax. This includes Grav user account files - `/grav/user/accounts/*.yaml`. This file stores hashed user password, 2FA secret, and the password reset token. This can allow an adversary to compromise any registered account and read any file in the web server by resetting a password for a user
n adversary to compromise any registered account and read any file in the web server by resetting a password for a user to get access to the password reset token from the file or by cracking the hashed password. A low privileged user may also perform a full account takeover of other registered users including Administrators. Version 1.7.46 contains a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/getgrav/grav/security/advisories/GHSA-f8v5-jmfh-pr69 - https://github.com/getgrav/grav/commit/b6bba9eb99bf8cb55b8fa8d23f18873ca594e348
CVE ID: CVE-2024-34083 State: PUBLISHED Published: 2024-05-18T18:12:19.442Z Last Updated: 2024-08-02T02:42:59.884Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: aio-libs Products: aiosmtpd Problem Types: CWE-349 Description: aiosmptd is a reimplementation of the Python stdlib smtpd.py based on asyncio. Prior to version 1.4.6, servers based on aiosmtpd accept extra unencrypted commands after STARTTLS, treating them as if they came from inside the encrypted connection. This could be exploited by a man-in-the-middle attack. Version 1.4.6 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - h
tains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/aio-libs/aiosmtpd/security/advisories/GHSA-wgjv-9j3q-jhg8 - https://github.com/aio-libs/aiosmtpd/commit/b3a4a2c6ecfd228856a20d637dc383541fcdbfda - https://nostarttls.secvuln.info
CVE ID: CVE-2024-34084 State: PUBLISHED Published: 2024-05-07T14:12:19.954Z Last Updated: 2024-08-02T02:42:59.894Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: stacklok Products: minder Problem Types: CWE-400 Description: Minder's `HandleGithubWebhook` is susceptible to a denial of service attack from an untrusted HTTP request. The vulnerability exists before the request has been validated, and as such the request is still untrusted at the point of failure. This allows an attacker with the ability to send requests to `HandleGithubWebhook` to crash the Minder controlplane and deny other users from using it. This vulnerability is fixed in 0.0.48. Additional A
to crash the Minder controlplane and deny other users from using it. This vulnerability is fixed in 0.0.48. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/stacklok/minder/security/advisories/GHSA-9c5w-9q3f-3hv7 - https://github.com/stacklok/minder/commit/3e5a527d2f1b535159206161d1d519602c75bd0d
CVE ID: CVE-2024-34085 State: PUBLISHED Published: 2024-05-14T10:03:09.574Z Last Updated: 2024-08-02T02:42:59.891Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: JT2Go, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312 Problem Types: CWE-121 Description: A vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions < V14.1.0.13), Teamcenter Visualization V14.2 (All versions < V14.2.0.10), Teamcenter Visualization V14.3 (All versions < V14.3.0.7), Teamcenter Visualization V2312 (All versions < V2312.0001). The
mcenter Visualization V14.3 (All versions < V14.3.0.7), Teamcenter Visualization V2312 (All versions < V2312.0001). The affected applications contain a stack overflow vulnerability while parsing specially crafted XML files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-661579.html
CVE ID: CVE-2024-34086 State: PUBLISHED Published: 2024-05-14T10:03:10.774Z Last Updated: 2024-08-02T02:42:59.863Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: JT2Go, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312 Problem Types: CWE-787 Description: A vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions < V14.1.0.13), Teamcenter Visualization V14.2 (All versions < V14.2.0.10), Teamcenter Visualization V14.3 (All versions < V14.3.0.7), Teamcenter Visualization V2312 (All versions < V2312.0001). The
mcenter Visualization V14.3 (All versions < V14.3.0.7), Teamcenter Visualization V2312 (All versions < V2312.0001). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted CGM file. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-661579.html
CVE ID: CVE-2024-34087 State: PUBLISHED Published: 2024-08-26T00:00:00 Last Updated: 2024-08-28T15:57:49.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SEH-based buffer overflow in the BPQ32 HTTP Server in BPQ32 6.0.24.1 allows remote attackers with access to the Web Terminal to achieve remote code execution via an HTTP POST /TermInput request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://themodernham.com/bbs-hacking-discovering-rce-within-bpq32-seh-based-buffer-overflow/ - https://groups.io/g/bpq32 - https://www.cantab.net/users/john.wiseman/Documents/ - https://www.youtube.com/%40ModernHam
CVE ID: CVE-2024-34088 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-11-20T16:34:07.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value, the OSPF daemon crashes, leading to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FRRouting/frr/pull/15674/commits/34d704fb0ea60dc5063af477a2c11d4884984d4f
CVE ID: CVE-2024-34089 State: PUBLISHED Published: 2024-05-06T00:00:00.000Z Last Updated: 2025-03-28T18:38:18.516Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. 6.
ugh their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. 6.14 P3 (6.14.0.3) is also a fixed release. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://archerirm.com - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963
CVE ID: CVE-2024-34090 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-11-01T19:42:36.007Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. The login banner in the Archer Control Panel (ACP) did not previously escape content appropriately. 6.14 P3 (6.14.0.3) is also a fixed release. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://archerirm.com - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multi
References: - https://archerirm.com - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963
CVE ID: CVE-2024-34091 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:43:00.166Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed in the background of the application and renders content inaccessible. 6