Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
. List-level access control is not affected. Field-level access control for fields other than `multiselect` are not affected. Version 2.3.1 contains a fix for this issue. As a workaround, stop using the `multiselect` field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/keystonejs/keystone/security/advisories/GHSA-6mhr-52mv-6v6f - https://github.com/keystonejs/keystone/commit/65c6ee3deef23605fc72b80230908696a7a65e7c
CVE ID: CVE-2022-39323 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-04-23T16:41:22.419Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-89 Description: GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Time based attack using a SQL injection in api REST user_token. This issue has been patched, please upgrade to version 10.0.4. As a workaround, disable login with user_token on API Rest. Additional Analyst Notes: - CVE Program Container: - CISA A
As a workaround, disable login with user_token on API Rest. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-cp6q-9p4x-8hr9
CVE ID: CVE-2022-39324 State: PUBLISHED Published: 2023-01-27T22:42:01.550Z Last Updated: 2024-08-03T12:00:44.040Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: grafana Products: grafana Problem Types: CWE-79 Description: Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5.16 and 9.2.8, malicious user can create a snapshot and arbitrarily choose the `originalUrl` parameter by editing the query, thanks to a web proxy. When another user opens the URL of the snapshot, they will be presented with the regular web interface delivered by the trusted Grafana server. The `Open original dashboard` button no longer points to the
ular web interface delivered by the trusted Grafana server. The `Open original dashboard` button no longer points to the to the real original dashboard but to the attacker’s injected URL. This issue is fixed in versions 8.5.16 and 9.2.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/grafana/grafana/security/advisories/GHSA-4724-7jwc-3fpw - https://github.com/grafana/grafana/pull/60232 - https://github.com/grafana/grafana/pull/60256 - https://github.com/grafana/grafana/commit/239888f22983010576bb3a9135a7294e88c0c74a - https://github.com/grafana/grafana/commit/d7dcea71ea763780dc286792a0afd560bff2985c
CVE ID: CVE-2022-39325 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-23T16:35:13.737Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: baserproject Products: basercms Problem Types: CWE-79 Description: BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. Users of baserCMS are advised to upgrade as soon as possible. There are no known workarounds for this vulnerability. Additional Analyst No
are advised to upgrade as soon as possible. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/baserproject/basercms/security/advisories/GHSA-395x-wv32-44v5 - https://github.com/baserproject/basercms/commit/b6f8a54e90dee51317eddf517b776fe8b4cd3ef6 - https://basercms.net/security/JVN_53682526
CVE ID: CVE-2022-39326 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-04-23T16:44:28.558Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: kartverket Products: github-workflows Problem Types: CWE-94 Description: kartverket/github-workflows are shared reusable workflows for GitHub Actions. Prior to version 2.7.5, all users of the `run-terraform` reusable workflow from the kartverket/github-workflows repo are affected by a code injection vulnerability. A malicious actor could potentially send a PR with a malicious payload leading to execution of arbitrary JavaScript code in the context of the workflow. Users should upgrade to at least ver
d leading to execution of arbitrary JavaScript code in the context of the workflow. Users should upgrade to at least version 2.7.5 to resolve the issue. As a workaround, review any pull requests from external users for malicious payloads before allowing them to trigger a build. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kartverket/github-workflows/security/advisories/GHSA-f9qj-7gh3-mhj4 - https://github.com/kartverket/github-workflows/pull/19 - https://github.com/kartverket/github-workflows/releases/tag/v2.7.5
CVE ID: CVE-2022-39327 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-04-22T17:17:26.636Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Azure Products: azure-cli Problem Types: CWE-94 Description: Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting machine runs an Azure CLI command where parameter values have been provided by an external source. The vulnerability is only applicable when the Azure CLI command is run on a Windows machine and with any version of PowerShell and when the paramete
plicable when the Azure CLI command is run on a Windows machine and with any version of PowerShell and when the parameter value contains the `&` or `|` symbols. If any of these prerequisites are not met, this vulnerability is not applicable. Users should upgrade to version 2.40.0 or greater to receive a a mitigation for the vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Azure/azure-cli/security/advisories/GHSA-47xc-9rr2-q7p4 - https://github.com/Azure/azure-cli/pull/23514 - https://github.com/Azure/azure-cli/pull/24015
CVE ID: CVE-2022-39328 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-04-23T16:40:06.552Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: grafana Products: grafana Problem Types: CWE-362 Description: Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentication middlewares logic which may allow an unauthenticated user to query an administration endpoint under heavy load. This issue is patched in 9.2.4. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/grafana/grafana/security/advisories/GHSA-vqc4-mpj8-jxch - https://security.netapp.com/advisory/ntap-20221215-0003/
CVE ID: CVE-2022-39329 State: PUBLISHED Published: 2022-10-27T00:00:00.000Z Last Updated: 2025-04-23T16:42:20.963Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-285, CWE-284 Description: Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 23.0.9 and 24.0.5 are vulnerable to exposure of information that cannot be controlled by administrators without direct database access. Versions 23.0.9 and 24.0.5 contains patches for this issue. No known workarounds are available. Additional Analyst Notes:
ersions 23.0.9 and 24.0.5 contains patches for this issue. No known workarounds are available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8f3p-rcm5-mrg3 - https://github.com/nextcloud/server/pull/33643 - https://hackerone.com/reports/1675014
CVE ID: CVE-2022-39330 State: PUBLISHED Published: 2022-10-27T00:00:00.000Z Last Updated: 2025-04-23T16:42:15.849Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: nextcloud Products: security-advisories Problem Types: CWE-400 Description: Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server prior to versions 22.2.10, 23.0.10, and 24.0.6 are vulnerable to a logged-in attacker slowing down the system by generating a lot of database/cpu load. Nextcloud Server versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server versions 22.2.1
a lot of database/cpu load. Nextcloud Server versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server versions 22.2.10, 23.0.10, and 24.0.6 contain patches for this issue. As a workaround, disable the Circles app. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wxx7-w5p4-7x4c - https://github.com/nextcloud/circles/pull/1147 - https://hackerone.com/reports/1688199
CVE ID: CVE-2022-39331 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-11-03T18:08:02.683Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-79 Description: Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application in the notifications. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-adv
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c3xh-q694-6rc5 - https://github.com/nextcloud/desktop/pull/4944 - https://hackerone.com/reports/1668028
CVE ID: CVE-2022-39332 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-11-03T18:08:03.698Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-79 Description: Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application via user status and information. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/s
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-q9f6-4r6r-h74p - https://github.com/nextcloud/desktop/pull/4972 - https://hackerone.com/reports/1707977
CVE ID: CVE-2022-39333 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-11-03T18:08:04.654Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-79 Description: Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/desktop/pull/4972 - https://githu
Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/desktop/pull/4972 - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-92p9-x79h-2mj8 - https://hackerone.com/reports/1711847
CVE ID: CVE-2022-39334 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-11-03T18:08:05.597Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-295 Description: Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers. Versions of nextcloudcmd prior to 3.6.1 would incorrectly trust invalid TLS certificates, which may enable a Man-in-the-middle attack that exposes sensitive data or credentials to a network attacker. This affects the CLI only. It does not affect the standard GUI desktop Nextcloud clients, and it does not
work attacker. This affects the CLI only. It does not affect the standard GUI desktop Nextcloud clients, and it does not affect the Nextcloud server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-82xx-98xv-4jxv - https://github.com/nextcloud/desktop/issues/4927 - https://github.com/nextcloud/desktop/pull/5022 - https://hackerone.com/reports/1699740
CVE ID: CVE-2022-39335 State: PUBLISHED Published: 2023-05-26T13:36:56.436Z Last Updated: 2025-02-13T16:32:59.633Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: matrix-org Products: synapse Problem Types: CWE-200 Description: Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. The Matrix Federation API allows remote homeservers to request the authorization events in a room. This is necessary so that a homeserver receiving some events can validate that those events are legitimate and permitted in their room. However, in versions of Synapse up to and including 1.68.0, a Synapse homeserver answering a query for autho
their room. However, in versions of Synapse up to and including 1.68.0, a Synapse homeserver answering a query for authorization events does not sufficiently check that the requesting server should be able to access them. The issue was patched in Synapse 1.69.0. Homeserver administrators are advised to upgrade. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matrix-org/synapse/security/advisories/GHSA-45cj-f97f-ggwv - https://github.com/matrix-org/synapse/issues/13288 - https://github.com/matrix-org/synapse/pull/13823 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T2MBNMZAFY4RCZL2VG
3823 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T2MBNMZAFY4RCZL2VGBGAPKGB4JUPZVS/
CVE ID: CVE-2022-39337 State: PUBLISHED Published: 2023-12-22T15:06:04.941Z Last Updated: 2024-08-03T12:00:44.134Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: dromara Products: hertzbeat Problem Types: CWE-284, CWE-863 Description: Hertzbeat is an open source, real-time monitoring system with custom-monitoring, high performance cluster, prometheus-like and agentless. Hertzbeat versions 1.20 and prior have a permission bypass vulnerability. System authentication can be bypassed and invoke interfaces without authorization. Version 1.2.1 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dromar
tains a patch for this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dromara/hertzbeat/security/advisories/GHSA-434f-f5cw-3rj6 - https://github.com/dromara/hertzbeat/issues/377 - https://github.com/dromara/hertzbeat/pull/382 - https://github.com/dromara/hertzbeat/commit/ac5970c6ceb64fafe237fc895243df5f21e40876
CVE ID: CVE-2022-39338 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-23T16:35:07.992Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-20, CWE-79 Description: user_oidc is an OpenID Connect user backend for Nextcloud. Versions prior to 1.2.1 did not properly validate discovery urls which may lead to a stored cross site scripting attack vector. The impact is limited due to the restrictive CSP that is applied on this endpoint. Additionally this vulnerability has only been shown to be exploitable in the Safari web browser. This issue has been addressed in version 1.2.1. Users ar
as only been shown to be exploitable in the Safari web browser. This issue has been addressed in version 1.2.1. Users are advised to upgrade. Users unable to upgrade should urge their users to avoid using the Safari web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5fpw-795h-rg57 - https://github.com/nextcloud/user_oidc/pull/496 - https://hackerone.com/reports/1687410
CVE ID: CVE-2022-39339 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-23T16:35:02.213Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-319 Description: user_oidc is an OpenID Connect user backend for Nextcloud. In versions prior to 1.2.1 sensitive information such as the OIDC client credentials and tokens are sent in plain text of HTTP without TLS. Any malicious actor with access to monitor user traffic may have been able to compromise account security. This issue has been addressed in in user_oidc v1.2.1. Users are advised to upgrade. Users unable to upgrade may use https
his issue has been addressed in in user_oidc v1.2.1. Users are advised to upgrade. Users unable to upgrade may use https to access Nextcloud. Set an HTTPS discovery URL in the provider settings (in Nextcloud OIDC admin settings). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2vff-cq8h-chhg - https://github.com/nextcloud/user_oidc/pull/495 - https://hackerone.com/reports/1687005
CVE ID: CVE-2022-39340 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-04-23T16:44:22.229Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: openfga Products: openfga Problem Types: CWE-285 Description: OpenFGA is an authorization/permission engine. Prior to version 0.2.4, the `streamed-list-objects` endpoint was not validating the authorization header, resulting in disclosure of objects in the store. Users `openfga/openfga` versions 0.2.3 and prior who are exposing the OpenFGA service to the internet are vulnerable. Version 0.2.4 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
ersion 0.2.4 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openfga/openfga/releases/tag/v0.2.4 - https://github.com/openfga/openfga/security/advisories/GHSA-95x7-mh78-7w2r - https://github.com/openfga/openfga/commit/779d73d4b6d067ee042ec9b59fec707eed71e42f
CVE ID: CVE-2022-39341 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-04-23T16:44:13.556Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: openfga Products: openfga Problem Types: CWE-285 Description: OpenFGA is an authorization/permission engine. Versions prior to version 0.2.4 are vulnerable to authorization bypass under certain conditions. Users who have wildcard (`*`) defined on tupleset relations in their authorization model are vulnerable. Version 0.2.4 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openfga/openfga/releases/tag/v0.2.4
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openfga/openfga/releases/tag/v0.2.4 - https://github.com/openfga/openfga/security/advisories/GHSA-vj4m-83m8-xpw5 - https://github.com/openfga/openfga/commit/b466769cc100b2065047786578718d313f52695b
CVE ID: CVE-2022-39342 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-04-23T16:44:07.329Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: openfga Products: openfga Problem Types: CWE-285 Description: OpenFGA is an authorization/permission engine. Versions prior to version 0.2.4 are vulnerable to authorization bypass under certain conditions. Users whose model has a relation defined as a tupleset (the right hand side of a ‘from’ statement) that involves anything other than a direct relationship (e.g. ‘as self’) are vulnerable. Version 0.2.4 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP
ulnerable. Version 0.2.4 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openfga/openfga/security/advisories/GHSA-f4mm-2r69-mg5f - https://github.com/openfga/openfga/commit/c8db1ee3d2a366f18e585dd33236340e76e784c4 - https://github.com/openfga/openfga/releases/tag/v0.2.4
CVE ID: CVE-2022-39343 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-04-22T16:08:01.076Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: azure-rtos Products: filex Problem Types: CWE-120 Description: Azure RTOS FileX is a FAT-compatible file system that’s fully integrated with Azure RTOS ThreadX. In versions before 6.2.0, the Fault Tolerant feature of Azure RTOS FileX includes integer under and overflows which may be exploited to achieve buffer overflow and modify memory contents. When a valid log file with correct ID and checksum is detected by the `_fx_fault_tolerant_enable` function an attempt to recover the previous failed write
ID and checksum is detected by the `_fx_fault_tolerant_enable` function an attempt to recover the previous failed write operation is taken by call of `_fx_fault_tolerant_apply_logs`. This function iterates through the log entries and performs required recovery operations. When properly crafted a log including entries of type `FX_FAULT_TOLERANT_DIR_LOG_TYPE` may be utilized to introduce unexpected behavior. This issue has been patched in version 6.2.0. A workaround to fix line 218 in fx_fault_tolerant_apply_logs.c is documented in the GHSA. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/azure-rtos/filex/security/advisories/GHSA-8j
rogram Container: - CISA ADP Vulnrichment: References: - https://github.com/azure-rtos/filex/security/advisories/GHSA-8jqf-wjhq-4w9f - https://github.com/azure-rtos/filex/blob/master/common/src/fx_fault_tolerant_apply_logs.c#L218
CVE ID: CVE-2022-39344 State: PUBLISHED Published: 2022-11-04T00:00:00.000Z Last Updated: 2025-04-22T16:08:10.166Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: azure-rtos Products: usbx Problem Types: CWE-120 Description: Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. Prior to version 6.1.12, the USB DFU UPLOAD functionality may be utilized to introduce a buffer overflow resulting in overwrite of memory contents. In particular cases this may allow an attacker to bypass security features or execute arbitrary code. The implementation of `ux_device_class_dfu_control_request` func