Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-24875 State: PUBLISHED Published: 2022-04-21T17:20:10.000Z Last Updated: 2025-04-23T18:32:43.507Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: CVEProject Products: cve-services Problem Types: CWE-532 Description: The CVEProject/cve-services is an open source project used to operate the CVE services api. In versions up to and including 1.1.1 the `org.conroller.js` code would erroneously log user secrets. This has been resolved in commit `46d98f2b` and should be available in subsequent versions of the software. Users of the software are advised to manually apply the `46d98f2b` commit or to update when a new version becomes available. As a w
e software are advised to manually apply the `46d98f2b` commit or to update when a new version becomes available. As a workaround users should inspect their logs and remove logged secrets as appropriate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CVEProject/cve-services/security/advisories/GHSA-rhj9-qx37-7m2m - https://github.com/CVEProject/cve-services/commit/46d98f2b1427fc6ba1c2bc443dc6688fd400f1f4
CVE ID: CVE-2022-24876 State: PUBLISHED Published: 2022-06-09T18:50:25.000Z Last Updated: 2025-04-23T18:18:05.307Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-79 Description: GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Kanban is a GLPI view to display Projects, Tickets, Changes or Problems on a task board. In versions prior to 10.0.1 a user can exploit a cross site scripting vulnerability in Kanban by injecting HTML code in its user name. Users are advised to upgrade. There are no known workarounds for this issue.
an by injecting HTML code in its user name. Users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-33g2-m556-gccr - https://github.com/glpi-project/glpi/commit/9a3c7487c8761eaa8f3b07589d6dcdfa5d1e4ed6
CVE ID: CVE-2022-24877 State: PUBLISHED Published: 2022-05-06T01:10:09.000Z Last Updated: 2025-04-23T18:29:38.832Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: fluxcd Products: flux2 Problem Types: CWE-22, CWE-36 Description: Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` allows an attacker to expose sensitive data from the controller’s pod filesystem and possibly privilege escalation in multi-tenancy deployments. Workarounds include automated tooling in the user's CI/CD pipeline to validate `kustomization.yaml` files conform with specific polici
clude automated tooling in the user's CI/CD pipeline to validate `kustomization.yaml` files conform with specific policies. This vulnerability is fixed in kustomize-controller v0.24.0 and included in flux2 v0.29.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fluxcd/flux2/security/advisories/GHSA-j77r-2fxf-5jrw
CVE ID: CVE-2022-24878 State: PUBLISHED Published: 2022-05-06T01:35:08.000Z Last Updated: 2025-04-23T18:29:31.214Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: fluxcd Products: flux2 Problem Types: CWE-22 Description: Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` allows an attacker to cause a Denial of Service at the controller level. Workarounds include automated tooling in the user's CI/CD pipeline to validate `kustomization.yaml` files conform with specific policies. This vulnerability is fixed in kustomize-controller v0.24.0 and included in flux
` files conform with specific policies. This vulnerability is fixed in kustomize-controller v0.24.0 and included in flux2 v0.29.0. Users are recommended to upgrade. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fluxcd/flux2/security/advisories/GHSA-7pwf-jg34-hxwp
CVE ID: CVE-2022-24879 State: PUBLISHED Published: 2022-04-28T14:15:14.000Z Last Updated: 2025-04-23T18:31:44.146Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: shopware Products: shopware Problem Types: CWE-352 Description: Shopware is an open source e-commerce software platform. Versions prior to 5.7.9 are vulnerable to malfunction of cross-site request forgery (CSRF) token validation. Under certain circumstances, the CSRF tokens were not generated anew and not validated correctly. This issue is fixed in version 5.7.9. Users of older versions may attempt to mitigate the vulnerability by using the Shopware security plugin. Additional Analyst Notes: - CVE Pr
ions may attempt to mitigate the vulnerability by using the Shopware security plugin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-04-2022 - https://www.shopware.com/en/changelog-sw5/#5-7-9 - https://github.com/shopware/shopware/security/advisories/GHSA-pf38-v6qj-j23h
CVE ID: CVE-2022-24880 State: PUBLISHED Published: 2022-04-25T22:10:13.000Z Last Updated: 2025-04-23T18:32:31.559Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Tethik Products: flask-session-captcha Problem Types: CWE-253, CWE-394, CWE-754 Description: flask-session-captcha is a package which allows users to extend Flask by adding an image based captcha stored in a server side session. In versions prior to 1.2.1, he `captcha.validate()` function would return `None` if passed no value (e.g. by submitting an having an empty form). If implementing users were checking the return value to be **False**, the captcha verification check could be bypassed. Version
menting users were checking the return value to be **False**, the captcha verification check could be bypassed. Version 1.2.1 fixes the issue. Users can workaround the issue by not explicitly checking that the value is False. Checking the return value less explicitly should still work. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Tethik/flask-session-captcha/security/advisories/GHSA-7r87-cj48-wj45 - https://github.com/Tethik/flask-session-captcha/pull/27 - https://github.com/Tethik/flask-session-captcha/commit/2811ae23a38d33b620fb7a07de8837c6d65c13e4 - https://github.com/Tethik/flask-session-captcha/releases/tag/v1.2.1
CVE ID: CVE-2022-24881 State: PUBLISHED Published: 2022-04-26T16:06:21.000Z Last Updated: 2025-04-22T18:14:01.853Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ballcat-projects Products: ballcat-codegen Problem Types: CWE-94 Description: Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but input verification is not done. The fault is rectified in version 1.0.0.beta.2. Additional Analyst Notes: - CVE Program Container:
ication is not done. The fault is rectified in version 1.0.0.beta.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ballcat-projects/ballcat-codegen/security/advisories/GHSA-fv3m-xhqw-9m79 - https://github.com/ballcat-projects/ballcat-codegen/issues/5 - https://github.com/ballcat-projects/ballcat-codegen/commit/84a7cb38daf0295b93aba21d562ec627e4eb463b
CVE ID: CVE-2022-24882 State: PUBLISHED Published: 2022-04-26T00:00:00.000Z Last Updated: 2025-11-03T20:34:47.348Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-287 Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds. Additional Analyst Notes: - CVE Program Container:
patched in FreeRDP 2.7.0. There are currently no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FreeRDP/FreeRDP/releases/tag/2.7.0 - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6x5p-gp49-3jhh - https://github.com/FreeRDP/FreeRDP/pull/7750 - https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/95 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AELSWWBAM2YONRPGLWVDY6UNTLJERJYL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOYKBQOHSRM7JQYUIYUWFOXI2JZ2J5RD/ - https://lists.fedoraproject.o
ist/package-announce%40lists.fedoraproject.org/message/DOYKBQOHSRM7JQYUIYUWFOXI2JZ2J5RD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWR6KSIKXO4B2TXBB3WH6YTNYHN46OY/ - https://security.gentoo.org/glsa/202210-24
CVE ID: CVE-2022-24883 State: PUBLISHED Published: 2022-04-26T00:00:00.000Z Last Updated: 2025-11-03T20:34:48.778Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-287 Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use c
P to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path configured is valid and the application has file handles left. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qxm3-v2r6-vmwf - https://github.com/FreeRDP/FreeRDP/commit/4661492e5a617199457c8074bad22f766a116cdc - https://github.com/FreeRDP/FreeRDP/commit/6f473b273a4b6f0cb6aca32b95e22fd0de88e144 - https://github.com/FreeRDP/FreeRDP/releases/tag/2.7.0 - https://lists.fedoraproject.org/archives/list/
5e22fd0de88e144 - https://github.com/FreeRDP/FreeRDP/releases/tag/2.7.0 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AELSWWBAM2YONRPGLWVDY6UNTLJERJYL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOYKBQOHSRM7JQYUIYUWFOXI2JZ2J5RD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWR6KSIKXO4B2TXBB3WH6YTNYHN46OY/ - https://security.gentoo.org/glsa/202210-24 - https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html
CVE ID: CVE-2022-24884 State: PUBLISHED Published: 2022-05-05T23:50:10.000Z Last Updated: 2025-04-23T18:29:53.064Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: freifunk-gluon Products: ecdsautils Problem Types: CWE-347 Description: ecdsautils is a tiny collection of programs used for ECDSA (keygen, sign, verify). `ecdsa_verify_[prepare_]legacy()` does not check whether the signature values `r` and `s` are non-zero. A signature consisting only of zeroes is always considered valid, making it trivial to forge signatures. Requiring multiple signatures from different public keys does not mitigate the issue: `ecdsa_verify_list_legacy()` will accept an arbitrar
signatures from different public keys does not mitigate the issue: `ecdsa_verify_list_legacy()` will accept an arbitrary number of such forged signatures. Both the `ecdsautil verify` CLI command and the libecdsautil library are affected. The issue has been fixed in ecdsautils 0.4.1. All older versions of ecdsautils (including versions before the split into a library and a CLI utility) are vulnerable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/freifunk-gluon/ecdsautils/security/advisories/GHSA-qhcg-9ffp-78pw - https://github.com/freifunk-gluon/ecdsautils/commit/1d4b091abdf15ad7b2312535b5b95ad70f6dbd08 - https://github.com/frei
- https://github.com/freifunk-gluon/ecdsautils/commit/1d4b091abdf15ad7b2312535b5b95ad70f6dbd08 - https://github.com/freifunk-gluon/ecdsautils/commit/39b6d0a77414fd41614953a0e185c4eefa2f88ad - https://lists.debian.org/debian-lts-announce/2022/05/msg00007.html - https://www.debian.org/security/2022/dsa-5132 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G2JT57AAFIEL7JDO2ZBV25JKYME5NU54/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7UBR3M4U3LA46BHXYSH7EN5GDG44GK7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4AKQH5WCBMJA3ODCSNERY6HVX4BX
://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4AKQH5WCBMJA3ODCSNERY6HVX4BX3ITG/
CVE ID: CVE-2022-24885 State: PUBLISHED Published: 2022-04-27T13:20:11.000Z Last Updated: 2025-04-22T18:03:12.870Z Severity: LOW (CVSS 2 CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-287 Description: Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.1, users can bypass a lock on the Nextcloud app on an Android device by repeatedly reopening the app. Version 3.19.1 contains a fix for the problem. There are currently no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/secu
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-32j4-9xf3-h2mg - https://github.com/nextcloud/android/pull/9816 - https://hackerone.com/reports/1450368
CVE ID: CVE-2022-24886 State: PUBLISHED Published: 2022-04-27T13:30:14.000Z Last Updated: 2025-04-23T18:32:08.584Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-200 Description: Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. In versions prior to 3.19.0, any application with notification permission can access contacts if Nextcloud has access to Contacts without applying for the Contacts permission itself. Version 3.19.0 contains a fix for this issue. There are currently no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
or this issue. There are currently no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5cj3-v98r-2wmq - https://github.com/nextcloud/android/pull/9726 - https://hackerone.com/reports/1161401
CVE ID: CVE-2022-24887 State: PUBLISHED Published: 2022-04-27T13:55:11.000Z Last Updated: 2025-04-22T18:03:04.108Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-601 Description: Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Prior to versions 11.3.4, 12.2.2, and 13.0.0, when sharing a Deck card in conversation, the metaData can be manipulated so users can be tricked into opening arbitrary URLs. This issue is fixed in versions 11.3.4, 12.2.2, and 13.0.0. There are currently no known workarounds. Additional Analyst Notes: - CVE Program Contain
ns 11.3.4, 12.2.2, and 13.0.0. There are currently no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-j45w-7mpq-264c - https://github.com/nextcloud/spreed/pull/6410 - https://hackerone.com/reports/1358977
CVE ID: CVE-2022-24888 State: PUBLISHED Published: 2022-04-27T14:25:11.000Z Last Updated: 2025-04-23T18:32:02.485Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-74 Description: Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 20.0.14.4, 21.0.8, 22.2.4, and 23.0.1, it is possible to create files and folders that have leading and trailing \n, \r, \t, and \v characters. The server rejects files and folders that have these characters in the middle of their names, so this might be an opportunity for injection. This issue is fixed in versi
ese characters in the middle of their names, so this might be an opportunity for injection. This issue is fixed in versions 20.0.14.4, 21.0.8, 22.2.4, and 23.0.1. There are currently no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-w3h6-p64h-q9jp - https://github.com/nextcloud/server/pull/29895 - https://hackerone.com/reports/1402249 - https://security.gentoo.org/glsa/202208-17
CVE ID: CVE-2022-24889 State: PUBLISHED Published: 2022-04-27T14:35:13.000Z Last Updated: 2025-04-22T18:02:55.232Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-345 Description: Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 21.0.8, 22.2.4, and 23.0.1, it is possible to trick administrators into enabling "recommended" apps for the Nextcloud server that they do not need, thus expanding their attack surface unnecessarily. This issue is fixed in versions 21.0.8 , 22.2.4, and 23.0.1. Additional Analyst Notes: - CVE Program Container: - CI
ly. This issue is fixed in versions 21.0.8 , 22.2.4, and 23.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5vw6-6prg-gvw6 - https://github.com/nextcloud/server/pull/30615 - https://hackerone.com/reports/1403614 - https://security.gentoo.org/glsa/202208-17
CVE ID: CVE-2022-24890 State: PUBLISHED Published: 2022-05-17T19:00:15.000Z Last Updated: 2025-04-22T18:01:26.535Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-359, CWE-200 Description: Nextcloud Talk is a video and audio conferencing app for Nextcloud. In versions prior to 13.0.5 and 14.0.0, a call moderator can indirectly enable user webcams by granting permissions, if they were enabled before removing the permissions. A patch is available in versions 13.0.5 and 14.0.0. There are currently no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
currently no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vxpr-hcqq-7fw7 - https://github.com/nextcloud/spreed/issues/7048 - https://github.com/nextcloud/spreed/pull/7034 - https://github.com/nextcloud/spreed/pull/7092
CVE ID: CVE-2022-24891 State: PUBLISHED Published: 2022-04-27T00:00:00.000Z Last Updated: 2025-11-03T19:26:55.130Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: ESAPI Products: esapi-java-legacy Problem Types: CWE-79 Description: ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, there is a potential for a cross-site scripting vulnerability in ESAPI caused by a incorrect regular expression for "onsiteURL" in the **antisamy-esapi.xml** configuration file that can cause "javascript:" URLs to fail to be correctly sanitized. This issue is patched in ESAPI 2.3.0.0. As a workaroun
t can cause "javascript:" URLs to fail to be correctly sanitized. This issue is patched in ESAPI 2.3.0.0. As a workaround, manually edit the **antisamy-esapi.xml** configuration files to change the "onsiteURL" regular expression. More information about remediation of the vulnerability, including the workaround, is available in the maintainers' release notes and security bulletin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ESAPI/esapi-java-legacy/blob/develop/documentation/esapi4java-core-2.3.0.0-release-notes.txt - https://github.com/ESAPI/esapi-java-legacy/security/advisories/GHSA-q77q-vx4q-xx6q - https://github.com/ESAPI/esa
.txt - https://github.com/ESAPI/esapi-java-legacy/security/advisories/GHSA-q77q-vx4q-xx6q - https://github.com/ESAPI/esapi-java-legacy/blob/develop/documentation/ESAPI-security-bulletin8.pdf - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20230127-0014/
CVE ID: CVE-2022-24892 State: PUBLISHED Published: 2022-04-28T14:20:12.000Z Last Updated: 2025-04-23T18:31:35.369Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: shopware Products: shopware Problem Types: CWE-640 Description: Shopware is an open source e-commerce software platform. Starting with version 5.0.4 and before version 5.7.9, multiple tokens for password reset can be requested. All tokens can be used to change the password. This makes it possible for an attacker to take over the victim's account if they somehow gain access to the victims email account and find an unused password reset token in the emails. This issue is fixed in version 5.7.9. Addit
victims email account and find an unused password reset token in the emails. This issue is fixed in version 5.7.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-04-2022 - https://www.shopware.com/en/changelog-sw5/#5-7-9 - https://github.com/shopware/shopware/security/advisories/GHSA-3qrq-r688-vvh4
CVE ID: CVE-2022-24893 State: PUBLISHED Published: 2022-06-25T06:55:09.000Z Last Updated: 2025-04-23T18:09:01.131Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: espressif Products: esp-idf Problem Types: CWE-787, CWE-788 Description: ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK (`ESP-BLE-MESH`), a memory corruption vulnerability can be triggered during provisioning, because there is no check for the `SegN` field of the Transaction Start PDU. This can result in memory corruption related attacks and potentially attacker gaining control of the entire system. Patch commits are available on the 4.1, 4.2, 4.3
attacks and potentially attacker gaining control of the entire system. Patch commits are available on the 4.1, 4.2, 4.3 and 4.4 branches and users are recommended to upgrade. The upgrade is applicable for all applications and users of `ESP-BLE-MESH` component from `ESP-IDF`. As it is implemented in the Bluetooth Mesh stack, there is no workaround for the user to fix the application layer without upgrading the underlying firmware. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/espressif/esp-idf/security/advisories/GHSA-7f7f-jj2q-28wm