Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-31509 State: PUBLISHED Published: 2021-06-29T14:33:51 Last Updated: 2024-08-03T23:03:33.429Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: OpenText Products: Brava! Desktop Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end
s. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13309. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-21-687/
CVE ID: CVE-2021-31510 State: PUBLISHED Published: 2021-06-29T14:33:52 Last Updated: 2024-08-03T23:03:33.307Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: OpenText Products: Brava! Desktop Problem Types: CWE-125 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the
F files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13675. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-21-688/
CVE ID: CVE-2021-31511 State: PUBLISHED Published: 2021-06-29T14:33:53 Last Updated: 2024-08-03T23:03:33.486Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: OpenText Products: Brava! Desktop Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past th
F files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13676. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-21-689/
CVE ID: CVE-2021-31512 State: PUBLISHED Published: 2021-06-29T14:33:54 Last Updated: 2024-11-19T14:52:28.574Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: OpenText Products: Brava! Desktop Problem Types: CWE-125 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the
F files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13677. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-21-690/
CVE ID: CVE-2021-31513 State: PUBLISHED Published: 2021-06-29T14:33:55 Last Updated: 2024-08-03T23:03:33.476Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: OpenText Products: Brava! Desktop Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past th
P files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13678. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-21-691/
CVE ID: CVE-2021-31514 State: PUBLISHED Published: 2021-06-29T14:33:56 Last Updated: 2024-10-21T16:08:55.322Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: OpenText Products: Brava! Desktop Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past th
M files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13679. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-21-692/
CVE ID: CVE-2021-31515 State: PUBLISHED Published: 2021-06-29T14:33:57 Last Updated: 2024-08-03T23:03:33.306Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Vector 35 Products: Binary Ninja Problem Types: CWE-125 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 (Build ID 88f343c3). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BNDB files. The issue results from the lack of proper validation of user-supplied data, which can result in a r
rsing of BNDB files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13668. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-21-678/ - https://binary.ninja/2021/06/03/2.4-release.html#security-advisories
CVE ID: CVE-2021-31516 State: PUBLISHED Published: 2021-06-29T14:33:58 Last Updated: 2024-08-03T23:03:33.470Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Vector 35 Products: Binary Ninja Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 (Build ID 88f343c3). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BNDB files. The issue results from the lack of validating the existence of an object prior to performing operat
rsing of BNDB files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13670. Additional Analyst Notes: - CVE Program Container: References: - https://binary.ninja/2021/06/03/2.4-release.html#security-advisories - https://www.zerodayinitiative.com/advisories/ZDI-21-677/
CVE ID: CVE-2021-31517 State: PUBLISHED Published: 2021-05-05T15:04:56 Last Updated: 2024-08-03T23:03:33.454Z Vendors: Trend Micro Products: Trend Micro Home Network Security Problem Types: File-Parsing DOS Description: Trend Micro Home Network Security 6.5.599 and earlier is vulnerable to a file-parsing vulnerability which could allow an attacker to exploit the vulnerability and cause a denial-of-service to the device. This vulnerability is similar, but not identical to CVE-2021-31518. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10312
CVE ID: CVE-2021-31518 State: PUBLISHED Published: 2021-05-05T15:05:03 Last Updated: 2024-08-03T23:03:33.330Z Vendors: Trend Micro Products: Trend Micro Home Network Security Problem Types: File-Parsing DOS Description: Trend Micro Home Network Security 6.5.599 and earlier is vulnerable to a file-parsing vulnerability which could allow an attacker to exploit the vulnerability and cause a denial-of-service to the device. This vulnerability is similar, but not identical to CVE-2021-31517. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10312
CVE ID: CVE-2021-31519 State: PUBLISHED Published: 2021-05-12T14:57:42 Last Updated: 2024-08-03T23:03:33.185Z Vendors: Trend Micro Products: Trend Micro HouseCall for Home Networks Problem Types: Incorrect Permission Assignment Description: An incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code be executed by an Administrator who is running a scan. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability. Additi
must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10310 - https://www.zerodayinitiative.com/advisories/ZDI-21-475/
CVE ID: CVE-2021-31520 State: PUBLISHED Published: 2021-05-10T11:00:31 Last Updated: 2024-08-03T23:03:33.527Z Vendors: Trend Micro Products: Trend Micro IM Security Problem Types: Weak Session Token Authentication Bypass Description: A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000286439 - https://www.zerodayinitiative.com/advisories/ZDI-21-525/
CVE ID: CVE-2021-31521 State: PUBLISHED Published: 2021-06-17T11:42:50 Last Updated: 2024-08-03T23:03:33.221Z Vendors: Trend Micro Products: Trend Micro InterScan Web Security Virtual Appliance Problem Types: Reflected XSS Description: Trend Micro InterScan Web Security Virtual Appliance version 6.5 was found to have a reflected cross-site scripting (XSS) vulnerability in the product's Captive Portal. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000286452
CVE ID: CVE-2021-31522 State: PUBLISHED Published: 2022-01-06T12:35:18 Last Updated: 2024-08-03T23:03:33.379Z Vendors: Apache Software Foundation Products: Apache Kylin Problem Types: load any class Description: Kylin can receive user input and load any class through Class.forName(...). This issue affects Apache Kylin 2 version 2.6.6 and prior versions; Apache Kylin 3 version 3.1.2 and prior versions; Apache Kylin 4 version 4.0.0 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/hh5crx3yr701zd8wtpqo1mww2rlkvznw - http://www.openwall.com/lists/oss-security/2022/01/06/4
CVE ID: CVE-2021-31523 State: PUBLISHED Published: 2021-04-21T18:41:23 Last Updated: 2024-08-03T23:03:33.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has cap_net_raw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2021/04/17/1 - http://www.openwall.com/lists/oss-security/2021/04/21/3
CVE ID: CVE-2021-31525 State: PUBLISHED Published: 2021-05-27T12:17:11 Last Updated: 2024-08-03T23:03:33.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/g/golang-announce/c/cu9SP4eSXMc - https://github.com/golang/go/issues/45710 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ISRZZ6NY5R2TBYE72KZFOCO
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ISRZZ6NY5R2TBYE72KZFOCO25TEUQTBF/ - https://security.gentoo.org/glsa/202208-02
CVE ID: CVE-2021-31530 State: PUBLISHED Published: 2021-06-29T13:11:56.000Z Last Updated: 2025-05-30T16:01:46.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/service-desk-msp/readme.html#10522 - https://excellium-services.com/cve-2021-31530/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-31530
CVE ID: CVE-2021-31531 State: PUBLISHED Published: 2021-06-29T13:13:12.000Z Last Updated: 2025-05-30T16:01:36.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF). Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/service-desk-msp/readme.html#10521 - https://excellium-services.com/cert-xlm-advisory/cve-2021-31531/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-31531
CVE ID: CVE-2021-31532 State: PUBLISHED Published: 2021-05-06T10:49:11 Last Updated: 2024-08-03T23:03:33.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i.MX RT600 (silicon rev A0, B0), LPC55S6x, LPC55S2x, LPC552x (silicon rev 0A, 1B), LPC55S1x, LPC551x (silicon rev 0A) and LPC55S0x, LPC550x (silicon rev 0A) include an undocumented ROM patch peripheral that allows unsigned, non-persistent modification of the internal ROM. Additional Analyst Notes: - CVE Program Container: References: - https://www.nxp.com - https://oxide.computer/blog/lpc55/
CVE ID: CVE-2021-31535 State: PUBLISHED Published: 2021-05-27T12:26:26 Last Updated: 2024-08-03T23:03:33.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request (intended for server-side color lookup) contains a flaw allowing a client to send color-name requests with a name longer than the maximum size allowed by the protocol (and also longer than the maximum packet size for normal-sized packets). The user-controlled data exceeding the maximum size is then interpreted by the server as additional X protocol requests and executed, e.g.,
data exceeding the maximum size is then interpreted by the server as additional X protocol requests and executed, e.g., to disable X server authorization completely. For example, if the victim encounters malicious terminal control sequences for color codes, then the attacker may be able to take full control of the running graphical session. Additional Analyst Notes: - CVE Program Container: References: - https://unparalleled.eu/publications/2021/advisory-unpar-2021-1.txt - https://lists.freedesktop.org/archives/xorg/ - http://www.openwall.com/lists/oss-security/2021/05/18/2 - http://seclists.org/fulldisclosure/2021/May/52 - http://packetstormsecurity.com/files/162737/libX11-Insufficient-Leng
- http://seclists.org/fulldisclosure/2021/May/52 - http://packetstormsecurity.com/files/162737/libX11-Insufficient-Length-Check-Injection.html - https://lists.debian.org/debian-lts-announce/2021/05/msg00021.html - https://www.debian.org/security/2021/dsa-4920 - https://security.gentoo.org/glsa/202105-16 - https://www.openwall.com/lists/oss-security/2021/05/18/3 - https://www.openwall.com/lists/oss-security/2021/05/18/2 - https://unparalleled.eu/blog/2021/20210518-using-xterm-to-navigate-the-huge-color-space/ - https://lists.x.org/archives/xorg-announce/2021-May/003088.html - https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/8d2e02ae650f00c4a53deb625211a0527126c605 - https://security.n
- https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/8d2e02ae650f00c4a53deb625211a0527126c605 - https://security.netapp.com/advisory/ntap-20210813-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEOT4RLB76RVPJQKGGTIKTBIOLHX2NR6/ - https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E - https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E - https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E - https://lists.apache.org
html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E - https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
CVE ID: CVE-2021-31537 State: PUBLISHED Published: 2021-05-11T14:11:33 Last Updated: 2024-08-03T23:03:32.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php (affected parameters are config, version, win, db, pwd, and user) and /rewe/prod/web/rewe_go_check.php (version and all other parameters). Additional Analyst Notes: - CVE Program Container: References: - https://sisinformatik.com/rewe-go/ - https://sec-consult.com/vulnerability-lab/advisory/reflected-xss-sis-infromatik-rewe-go-cve-2021-31537/ - http://seclists.org/fulldisclosure/2021/May/20
CVE ID: CVE-2021-31538 State: PUBLISHED Published: 2021-06-10T14:59:32 Last Updated: 2024-08-03T23:03:33.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: LANCOM R&S Unified Firewall (UF) devices running LCOS FX 10.5 allow Relative Path Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-010.txt
CVE ID: CVE-2021-31539 State: PUBLISHED Published: 2021-04-23T16:11:12 Last Updated: 2024-08-03T23:03:33.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wowza Streaming Engine before 4.8.8.01 (in a default installation) has cleartext passwords stored in the conf/admin.password file. A regular local user is able to read usernames and passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.wowza.com/products/streaming-engine - https://www.gruppotim.it/redteam - https://www.wowza.com/docs/wowza-streaming-engine-4-8-8-01-release-notes#breaking
CVE ID: CVE-2021-31540 State: PUBLISHED Published: 2021-04-23T16:10:17 Last Updated: 2024-08-03T23:03:33.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wowza Streaming Engine through 4.8.5 (in a default installation) has incorrect file permissions of configuration files in the conf/ directory. A regular local user is able to read and write to all the configuration files, e.g., modify the application server configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.wowza.com/products/streaming-engine - https://www.gruppotim.it/redteam - https://www.wowza.com/docs/wowza-streaming-engine-4-8-12-release-notes
CVE ID: CVE-2021-31542 State: PUBLISHED Published: 2021-05-05T00:00:00 Last Updated: 2024-08-03T23:03:33.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile allowed directory traversal via uploaded files with suitably crafted file names. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21forum/django-announce - https://docs.djangoproject.com/en/3.2/releases/security/ - http://www.openwall.com/lists/oss-security/2021/05/04/3 - https://www.djangoproject.com/weblog/2021/may/04/security-releases/ - https://lists.debian.org
s-security/2021/05/04/3 - https://www.djangoproject.com/weblog/2021/may/04/security-releases/ - https://lists.debian.org/debian-lts-announce/2021/05/msg00005.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE/ - https://security.netapp.com/advisory/ntap-20210618-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/ - https://github.com/django/django/commit/04ac1624bdc2fa737188401757cf95ced122d26d - https://github.com/django/django/commit/25d84d64122c15050a0ee739e859f22ddab5ac48 - https://github.com/django/django/commit/c98f
/github.com/django/django/commit/25d84d64122c15050a0ee739e859f22ddab5ac48 - https://github.com/django/django/commit/c98f446c188596d4ba6de71d1b77b4a6c5c2a007
CVE ID: CVE-2021-31545 State: PUBLISHED Published: 2021-04-22T02:30:59 Last Updated: 2024-08-03T23:03:33.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The page_recent_contributors leaked the existence of certain deleted MediaWiki usernames, related to rev_deleted. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T71367 - https://gerrit.wikimedia.org/r/q/I8d5ed9ca84282ee50832035af86123633fc88293
CVE ID: CVE-2021-31546 State: PUBLISHED Published: 2021-04-22T02:30:48 Last Updated: 2024-08-03T23:03:33.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly logged sensitive suppression deletions, which should not have been visible to users with access to view AbuseFilter log data. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T71617 - https://gerrit.wikimedia.org/r/q/I38a0a24fa32ca7a052b6940864a32b3856e84553