Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-40859 State: PUBLISHED Published: 2021-12-07T18:59:10 Last Updated: 2024-08-04T02:51:07.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses - https://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors
CVE ID: CVE-2021-40860 State: PUBLISHED Published: 2021-12-08T14:45:59 Last Updated: 2024-08-04T02:51:07.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) before 9.0.013.11 allows an attacker to execute arbitrary SQL queries via the ql_expression parameter, with which all data in the database can be extracted and OS command execution is possible depending on the permissions and/or database engine. Additional Analyst Notes: - CVE Program Container: References: - https://docs.genesys.com/Documentation/IWD - https://www.offensity.com/en/blog/authenticated-sql-injection-in-the-ge
: - https://docs.genesys.com/Documentation/IWD - https://www.offensity.com/en/blog/authenticated-sql-injection-in-the-genesys-iwd-manager-cve-2021-40860-and-cve-2021-40861/
CVE ID: CVE-2021-40861 State: PUBLISHED Published: 2021-12-08T14:58:13 Last Updated: 2024-08-04T02:51:07.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) 9.0.017.07 allows an attacker to execute arbitrary SQL queries via the value attribute, with which all data in the database can be extracted and OS command execution is possible depending on the permissions and/or database engine. Additional Analyst Notes: - CVE Program Container: References: - https://docs.genesys.com/Documentation/IWD - https://www.offensity.com/en/blog/authenticated-sql-injection-in-the-genesys-iwd-manag
s.genesys.com/Documentation/IWD - https://www.offensity.com/en/blog/authenticated-sql-injection-in-the-genesys-iwd-manager-cve-2021-40860-and-cve-2021-40861/
CVE ID: CVE-2021-40862 State: PUBLISHED Published: 2021-09-15T18:03:45 Last Updated: 2024-08-04T02:51:07.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Terraform Enterprise up to v202108-1 contained an API endpoint that erroneously disclosed a sensitive URL to authenticated parties, which could be used for privilege escalation or unauthorized modification of a Terraform configuration. Fixed in v202109-1. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.hashicorp.com/t/hcsec-2021-25-terraform-enterprise-configuration-versions-api-discloses-sensitive-url/29508
CVE ID: CVE-2021-40864 State: PUBLISHED Published: 2021-09-10T18:07:04 Last Updated: 2024-08-04T02:51:07.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Translate plugin 6.1.x through 6.3.x before 6.3.0.72 for ONLYOFFICE Document Server lacks escape calls for the msg.data and text fields. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ONLYOFFICE/plugin-translator/commit/2206c0179cb97e3b8b290a0ab5719b1f0f54542b - https://github.com/ONLYOFFICE/plugin-translator/compare/v6.3.0.71...v6.3.0.72
CVE ID: CVE-2021-40865 State: PUBLISHED Published: 2021-10-25T12:22:37 Last Updated: 2024-08-04T02:51:07.676Z Vendors: Apache Software Foundation Products: Apache Storm Problem Types: CWE-502 Description: An Unsafe Deserialization vulnerability exists in the worker services of the Apache Storm supervisor server allowing pre-auth Remote Code Execution (RCE). Apache Storm 2.2.x users should upgrade to version 2.2.1 or 2.3.0. Apache Storm 2.1.x users should upgrade to version 2.1.1. Apache Storm 1.x users should upgrade to version 1.2.4 Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r8d45e74299897b6734dd0f788c46a631009ce2eeb731523386f7a253%
Container: References: - https://lists.apache.org/thread.html/r8d45e74299897b6734dd0f788c46a631009ce2eeb731523386f7a253%40%3Cuser.storm.apache.org%3E - https://seclists.org/oss-sec/2021/q4/45
CVE ID: CVE-2021-40866 State: PUBLISHED Published: 2021-09-13T07:16:58 Last Updated: 2024-08-04T02:51:07.679Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (disabled by default) /sqfs/bin/sccd daemon, which fails to check authentication when the authentication TLV is missing from a received NSDP packet. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310T
efore 7.0.7.2, GS110TPP before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, GS716TP before 1.0.4.2, GS716TPP before 1.0.4.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS750E before 1.0.1.10, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2. Additional Analyst Notes: - CVE Program Container: References: - https://gynvael.coldwind.pl/?id=740 - https://kb.netgear.com/000063978/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Smart-Switches-PSV-2021-0140-PSV-2021-0144-PSV-2021-0145
CVE ID: CVE-2021-40867 State: PUBLISHED Published: 2021-09-13T07:17:31 Last Updated: 2024-08-04T02:51:07.765Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who uses the same source IP address as an admin in the process of logging in (e.g., behind the same NAT device, or already in possession of a foothold on an admin's machine). This occurs because the multi-step HTTP authentication process is effectively tied only to the source IP address. This affects GC108P before 1.0.8.2,
step HTTP authentication process is effectively tied only to the source IP address. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, GS716TP before 1.0.4.2, GS716TPP before 1.0.4.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS750E before 1.0.1.10, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000063978/Se
XUP before 1.0.4.2. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000063978/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Smart-Switches-PSV-2021-0140-PSV-2021-0144-PSV-2021-0145 - https://gynvael.coldwind.pl/?id=741
CVE ID: CVE-2021-40868 State: PUBLISHED Published: 2021-09-21T16:49:34 Last Updated: 2024-08-04T02:51:07.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudron.io/ - https://packetstormsecurity.com/files/164183/Cloudron-6.2-Cross-Site-Scripting.html - http://packetstormsecurity.com/files/164255/Cloudron-6.2-Cross-Site-Scripting.html
CVE ID: CVE-2021-40870 State: PUBLISHED Published: 2021-09-13T07:41:55.000Z Last Updated: 2025-10-21T23:25:33.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.aviatrix.com/HowTos/UCC_Release_Notes.html#security-note-9-11-2021 - https://wearetradecraft.com/advisories/tc-2021-0002/ - http://packetstormsecurity.com/files/164461/Aviatrix-Controller-6.x-Path-
wearetradecraft.com/advisories/tc-2021-0002/ - http://packetstormsecurity.com/files/164461/Aviatrix-Controller-6.x-Path-Traversal-Code-Execution.html
CVE ID: CVE-2021-40871 State: PUBLISHED Published: 2021-11-10T22:43:26 Last Updated: 2024-08-04T02:51:07.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a OPC/UA client. The client process may crash unexpectedly because of a wrong type cast, and must be restarted. Additional Analyst Notes: - CVE Program Container: References: - https://industrial.softing.com/ - https://industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin-CVE-2021-40871.pdf
CVE ID: CVE-2021-40872 State: PUBLISHED Published: 2021-11-10T22:46:19 Last Updated: 2024-08-04T02:51:07.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) or login as an anonymous user (bypassing security checks) by sending crafted messages to a OPC/UA server. The server process may crash unexpectedly because of an invalid type cast, and must be restarted. Additional Analyst Notes: - CVE Program Container: References: - https://industrial.softing.com/ - https://industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE
ttps://industrial.softing.com/ - https://industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-40872.pdf
CVE ID: CVE-2021-40873 State: PUBLISHED Published: 2021-11-10T22:48:27 Last Updated: 2024-08-04T02:51:07.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a client or server. The server process may crash unexpectedly because of a double free, and must be restarted. Additional Analyst Notes: - CVE Program Container: References: - https://industrial.softing.com/ - https://industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-40873.pdf
CVE ID: CVE-2021-40874 State: PUBLISHED Published: 2022-07-17T23:16:37 Last Updated: 2024-08-04T02:51:07.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13. When using the RESTServer plug-in to operate a REST password validation service (for another LemonLDAP::NG instance, for example) and using the Kerberos authentication method combined with another method with the Combination authentication plug-in, any password will be recognized as valid for an existing user. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2612
CVE ID: CVE-2021-40875 State: PUBLISHED Published: 2021-09-22T14:32:31 Last Updated: 2024-08-04T02:51:07.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat actor can access the /files.md5 file on the client side of a Gurock TestRail application, disclosing a full list of application files and the corresponding file paths. The corresponding file paths can be tested, and in some cases, result in the disclosure of hardcoded credentials, API keys, or other sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.gurock.com/testrail
r other sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.gurock.com/testrail/tour/enterprise-edition - https://johnjhacking.com/blog/cve-2021-40875/ - https://github.com/SakuraSamuraii/derailed - http://packetstormsecurity.com/files/164270/Gurock-Testrail-7.2.0.3014-Improper-Access-Control.html
CVE ID: CVE-2021-40881 State: PUBLISHED Published: 2021-09-15T21:17:12 Last Updated: 2024-08-04T02:51:07.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sanluan/PublicCMS/issues/57
CVE ID: CVE-2021-40882 State: PUBLISHED Published: 2021-12-14T17:54:56 Last Updated: 2024-08-04T02:51:07.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting (XSS) vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/1477
CVE ID: CVE-2021-40883 State: PUBLISHED Published: 2021-12-14T18:05:07 Last Updated: 2024-08-04T02:51:07.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Code Execution (RCE) vulnerability exists in emlog 5.3.1 via content/plugins. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/emlog/emlog/issues/108
CVE ID: CVE-2021-40884 State: PUBLISHED Published: 2021-10-11T10:46:59 Last Updated: 2024-08-04T02:51:07.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Projectsend version r1295 is affected by sensitive information disclosure. Because of not checking authorization in ids parameter in files-edit.php and id parameter in process.php function, a user with uploader role can download and edit all files of users in application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/projectsend/projectsend/issues/992
CVE ID: CVE-2021-40886 State: PUBLISHED Published: 2021-10-11T10:24:05 Last Updated: 2024-08-04T02:51:07.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Projectsend version r1295 is affected by a directory traversal vulnerability. A user with Uploader role can add value `2` for `chunks` parameter to bypass `fileName` sanitization. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/projectsend/projectsend/issues/993
CVE ID: CVE-2021-40887 State: PUBLISHED Published: 2021-10-11T10:12:06 Last Updated: 2024-08-04T02:51:07.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Projectsend version r1295 is affected by a directory traversal vulnerability. Because of lacking sanitization input for files[] parameter, an attacker can add ../ to move all PHP files or any file on the system that has permissions to /upload/files/ folder. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/projectsend/projectsend/issues/994
CVE ID: CVE-2021-40888 State: PUBLISHED Published: 2021-10-11T10:04:39 Last Updated: 2024-08-04T02:51:07.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Projectsend version r1295 is affected by Cross Site Scripting (XSS) due to lack of sanitization when echo output data in returnFilesIds() function. A low privilege user can call this function through process.php file and execute scripting code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/projectsend/projectsend/issues/995 - https://github.com/projectsend/projectsend/releases/tag/r1295
CVE ID: CVE-2021-40889 State: PUBLISHED Published: 2021-10-11T09:56:11 Last Updated: 2024-08-04T02:51:07.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMSUno version 1.7.2 is affected by a PHP code execution vulnerability. sauvePass action in {webroot}/uno/central.php file calls to file_put_contents() function to write username in password.php file when a user successfully changed their password. The attacker can inject malicious PHP code into password.php and then use the login function to execute code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/boiteasite/cmsuno/issues/19
CVE ID: CVE-2021-40892 State: PUBLISHED Published: 2022-06-24T13:29:24 Last Updated: 2024-08-04T02:51:07.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in validate-color v2.1.0 when handling crafted invalid rgb(a) strings. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yetingli/SaveResults/blob/main/js/validate-color.js
CVE ID: CVE-2021-40893 State: PUBLISHED Published: 2022-06-24T16:12:43 Last Updated: 2024-08-04T02:51:07.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in validate-data v0.1.1 when validating crafted invalid emails. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yetingli/SaveResults/blob/main/js/validate-data.js
CVE ID: CVE-2021-40894 State: PUBLISHED Published: 2022-06-24T21:09:29 Last Updated: 2024-08-04T02:51:07.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in underscore-99xp v1.7.2 when the deepValueSearch function is called. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yetingli/SaveResults/blob/main/js/underscore-99xp.mjs
CVE ID: CVE-2021-40895 State: PUBLISHED Published: 2022-06-27T09:36:21 Last Updated: 2024-08-04T02:51:07.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yetingli/SaveResults/blob/main/js/todo-regex.js
CVE ID: CVE-2021-40896 State: PUBLISHED Published: 2022-06-27T09:48:14 Last Updated: 2024-08-04T02:51:07.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in that-value v0.1.3 when validating crafted invalid emails. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yetingli/SaveResults/blob/main/js/that-value.js
CVE ID: CVE-2021-40897 State: PUBLISHED Published: 2022-06-27T10:00:52 Last Updated: 2024-08-04T02:51:07.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in split-html-to-chars v1.0.5 when splitting crafted invalid htmls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yetingli/SaveResults/blob/main/js/split-html-to-chars.js
CVE ID: CVE-2021-40898 State: PUBLISHED Published: 2022-06-27T10:34:17 Last Updated: 2024-08-04T02:51:07.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yetingli/SaveResults/blob/main/js/scaffold-helper.js
CVE ID: CVE-2021-40899 State: PUBLISHED Published: 2022-06-27T10:58:21 Last Updated: 2024-08-04T02:51:07.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in repo-git-downloader v0.1.1 when downloading crafted invalid git repositories. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yetingli/SaveResults/blob/main/js/repo-git-downloader.js
CVE ID: CVE-2021-40900 State: PUBLISHED Published: 2022-06-27T11:33:09 Last Updated: 2024-08-04T02:51:07.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in regexfn v1.0.5 when validating crafted invalid emails. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yetingli/SaveResults/blob/main/js/regexfn.js
CVE ID: CVE-2021-40901 State: PUBLISHED Published: 2022-06-27T11:38:22 Last Updated: 2024-08-04T02:51:07.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scniro-validator v1.0.1 when validating crafted invalid emails. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yetingli/SaveResults/blob/main/js/scniro-validator.js
CVE ID: CVE-2021-40902 State: PUBLISHED Published: 2022-06-13T12:20:08 Last Updated: 2024-08-04T02:51:07.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the "Create New Page" option through the index page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCore-CMS/issues/57
CVE ID: CVE-2021-40903 State: PUBLISHED Published: 2022-06-17T13:46:57 Last Updated: 2024-08-04T02:51:07.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50267 - https://github.com/anselal/antminer-monitor - https://packetstormsecurity.com/files/164048/Antminer-Monitor-0.5.0-Authentication-Bypass.html
CVE ID: CVE-2021-40904 State: PUBLISHED Published: 2022-03-25T22:19:59 Last Updated: 2024-08-04T02:51:07.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dokuwiki (installed by default), which allows embedded php code. As a result, remote code execution is achieved. Successful exploitation requires access to the web management interface, either with valid credentials or with a hijacked session by a user with the role of administrator. Additional Analyst Notes: - CVE Program Container: References: - http://checkmk.com - https://github.com/Edgarloyola/CVE-2021-409
l Analyst Notes: - CVE Program Container: References: - http://checkmk.com - https://github.com/Edgarloyola/CVE-2021-40904
CVE ID: CVE-2021-40905 State: PUBLISHED Published: 2022-03-25T22:20:01 Last Updated: 2024-08-04T02:51:07.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uploading of ".mkp" files, which are Extension Packages, making remote code execution possible. Successful exploitation requires access to the web management interface, either with valid credentials or with a hijacked session of a user with administrator role. NOTE: the vendor states that this is the intended behavior: admins are supposed to be able to execute code in this manner Additional Analyst Notes: - CISA
is the intended behavior: admins are supposed to be able to execute code in this manner Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://checkmk.com - https://github.com/Edgarloyola/CVE-2021-40905