Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-14734 State: PUBLISHED Published: 2019-08-07T00:06:20 Last Updated: 2024-08-05T00:26:38.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/adplug/adplug/issues/90 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/
CVE ID: CVE-2019-14737 State: PUBLISHED Published: 2019-10-14T18:15:58 Last Updated: 2024-08-05T00:26:38.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ubisoft Uplay 92.0.0.6280 has Insecure Permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47493
CVE ID: CVE-2019-14743 State: PUBLISHED Published: 2019-08-07T14:05:50 Last Updated: 2024-08-05T00:26:38.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access. Additional Analyst Notes: - CVE Program Container: References: - https://amonitoring.ru/article/steamclient-0day/ - https://habr.com/ru/company/pm/blog/462479/ - https://github.com/alexanderbittner/steam-privesc/
CVE ID: CVE-2019-14744 State: PUBLISHED Published: 2019-08-07T14:30:35 Last Updated: 2024-08-05T00:26:38.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file. Additional Analyst Notes: - CVE Program Container: References: - https://gist.githubusercontent.com/zeropwn/630832df151029cb8f22d5b6b9efaefb/raw/64aa3d30279acb207f787ce9c135eefd5e52643b/kde-kdesktopfile-command-injection.txt -
n/630832df151029cb8f22d5b6b9efaefb/raw/64aa3d30279acb207f787ce9c135eefd5e52643b/kde-kdesktopfile-command-injection.txt - https://www.zdnet.com/article/unpatched-kde-vulnerability-disclosed-on-twitter/ - https://seclists.org/bugtraq/2019/Aug/9 - http://packetstormsecurity.com/files/153981/Slackware-Security-Advisory-kdelibs-Updates.html - https://www.debian.org/security/2019/dsa-4494 - https://seclists.org/bugtraq/2019/Aug/12 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTFBQRJAU7ITD3TOMPZAUQMYYCAZ6DTX/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2019-0
nsuse.org/opensuse-security-announce/2019-08/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00016.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IRIKH7ZWXELIQT6WSLV7EG3VTFWKZPD/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00034.html - https://security.gentoo.org/glsa/201908-07 - https://lists.debian.org/debian-lts-announce/2019/08/msg00023.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNHO6FZRYBQ2R3UCFDGS66F6DNNTKCMM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UYKLUSSE
6F6DNNTKCMM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UYKLUSSEK3YJOVQDL6K2LKGS3354UH6L/ - https://usn.ubuntu.com/4100-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YIDXQ6CUB5E7Y3MJWCUY4VR42QAE6SCJ/ - https://access.redhat.com/errata/RHSA-2019:2606
CVE ID: CVE-2019-14745 State: PUBLISHED Published: 2019-08-07T14:58:18 Last Updated: 2024-08-05T00:26:39.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to improper handling of symbol names embedded in executables. Additional Analyst Notes: - CVE Program Container: References: - https://bananamafia.dev/post/r2-pwndebian/ - https://github.com/radare/radare2/pull/14690 - https://github.com/radare/radare2/releases/tag/3.7.0 - https
pwndebian/ - https://github.com/radare/radare2/pull/14690 - https://github.com/radare/radare2/releases/tag/3.7.0 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQO7V37RGQEKZDLY2JYKDZTLNN2YUBC5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MGA2PVBFA6VPWWLMBGWVBESHAJBQ7OXJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETWG4VKHWL5F74L3QBBKSCOXHSRNSRRT/
CVE ID: CVE-2019-14746 State: PUBLISHED Published: 2019-08-07T15:04:04 Last Updated: 2024-08-05T00:26:39.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: A issue was discovered in KuaiFanCMS 5.0. It allows eval injection by placing PHP code in the install.php db_name parameter and then making a config.php request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/poropro/kuaifan/issues/2
CVE ID: CVE-2019-14747 State: PUBLISHED Published: 2019-08-07T15:12:32 Last Updated: 2024-08-05T00:26:38.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: DWSurvey through 2019-07-22 has stored XSS via the design/my-survey-design!copySurvey.action surveyName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wkeyuan/DWSurvey/issues/47
CVE ID: CVE-2019-14748 State: PUBLISHED Published: 2019-08-07T16:38:58 Last Updated: 2024-08-05T00:26:38.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to upload files along with queries. It was found that the file-upload functionality has fewer (or no) mitigations implemented for file content checks; also, the output is not handled properly, causing persistent XSS that leads to cookie stealing or malicious actions. For example, a non-agent user can upload a .html file, and Content-Disposition will be set to inline instead of attachment. Additional Analyst Notes:
can upload a .html file, and Content-Disposition will be set to inline instead of attachment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osTicket/osTicket/commit/33ed106b1602f559a660a69f931a9d873685d1ba - https://github.com/osTicket/osTicket/releases/tag/v1.12.1 - https://github.com/osTicket/osTicket/releases/tag/v1.10.7 - http://packetstormsecurity.com/files/154003/osTicket-1.12-File-Upload-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/47224
CVE ID: CVE-2019-14749 State: PUBLISHED Published: 2019-08-07T16:38:45 Last Updated: 2024-08-05T00:26:38.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the export spreadsheets functionality. These spreadsheets are generated dynamically from unvalidated or unfiltered user input in the Name and Internal Notes fields in the Users tab, and the Issue Summary field in the tickets tab. This allows other agents to download data in a .csv file format or .xls file format. This is used as input for spreadsheet applications such as Excel and OpenOffice Calc, resulting in a s
.xls file format. This is used as input for spreadsheet applications such as Excel and OpenOffice Calc, resulting in a situation where cells in the spreadsheets can contain input from an untrusted source. As a result, the end user who is accessing the exported spreadsheet can be affected. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osTicket/osTicket/releases/tag/v1.12.1 - https://github.com/osTicket/osTicket/releases/tag/v1.10.7 - https://github.com/osTicket/osTicket/commit/99818486c5b1d8aa445cee232825418d6834f249 - http://packetstormsecurity.com/files/154004/osTicket-1.12-Formula-Injection.html - https://www.exploit-db.com/exploits/47225
CVE ID: CVE-2019-14750 State: PUBLISHED Published: 2019-08-07T16:38:35 Last Updated: 2024-08-05T00:26:38.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization was provided in the firstname and lastname fields of the application. The insertion of malicious queries in those fields leads to the execution of those queries. This can further lead to cookie stealing or other malicious actions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osTicket/osTicket/releases/tag/v1.12.1 - https://github.c
tes: - CVE Program Container: References: - https://github.com/osTicket/osTicket/releases/tag/v1.12.1 - https://github.com/osTicket/osTicket/releases/tag/v1.10.7 - https://github.com/osTicket/osTicket/commit/c3ba5b78261e07a883ad8fac28c214486c854e12 - http://packetstormsecurity.com/files/154005/osTicket-1.12-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/47226
CVE ID: CVE-2019-14751 State: PUBLISHED Published: 2019-08-22T15:59:59 Last Updated: 2024-08-05T00:26:38.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nltk/nltk/blob/3.4.5/ChangeLog - https://github.com/nltk/nltk/commit/f59d7ed8df2e0e957f7f247fe218032abdbe9a10 - https://salvatoresecurity.com/zip-slip-in-nltk-cve-2019-14751/ - https://github.com/mssalvatore/CVE-2019-14751_PoC - https://
://salvatoresecurity.com/zip-slip-in-nltk-cve-2019-14751/ - https://github.com/mssalvatore/CVE-2019-14751_PoC - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGZSSEJH7RHH3RBUEVWWYT75QU67J7SE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI4IJGLZQ5S7C5LNRNROHAO2P526XE3D/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00054.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00001.html
CVE ID: CVE-2019-14752 State: PUBLISHED Published: 2019-09-30T12:11:42 Last Updated: 2024-08-05T00:26:38.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuiteCRM 7.10.x and 7.11.x before 7.10.20 and 7.11.8 has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_8 - https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_20
CVE ID: CVE-2019-14753 State: PUBLISHED Published: 2019-09-24T16:44:43 Last Updated: 2024-08-05T00:26:38.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 have a Buffer Overflow Additional Analyst Notes: - CVE Program Container: References: - https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories - https://www.sick.com/medias/SCA-2019-002.pdf?context=bWFzdGVyfGNvbnRlbnR8MjE5MDk1fGFwcGxpY2F0aW9uL3BkZnxjb250ZW50L2g3Yy9oNDEvMTAzMDY0NjAzNTI1NDIucGRmfDJlZTVmZjJmYzYwYmQ1ODQyZDBmMjA0OTc3ZDBjMmY1YzZkYzUzNzI0MWI0OGIyOTE0OTllY2VlYjJhNzUzYTE
CVE ID: CVE-2019-14754 State: PUBLISHED Published: 2019-08-08T12:32:46 Last Updated: 2024-08-05T00:26:38.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://open-school.org - https://pastebin.com/xuZN5rJR
CVE ID: CVE-2019-14755 State: PUBLISHED Published: 2019-08-15T14:27:42 Last Updated: 2024-08-05T00:26:38.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: The profile photo upload feature in Leaf Admin 61.9.0212.10 f allows Unrestricted Upload of a File with a Dangerous Type. Additional Analyst Notes: - CVE Program Container: References: - http://leaftecnologia.com.br/ - http://intruderlabs.com.br/ - https://gist.github.com/alacerda/8fd4557e585a8707e9d3b798968e24c1
CVE ID: CVE-2019-14756 State: PUBLISHED Published: 2020-09-14T18:32:49 Last Updated: 2024-08-05T00:26:38.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in KaiOS 1.0, 2.5, and 2.5.12.5. The pre-installed Email application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a specially crafted email to the victim that will inject HTML into the email application's UI as soon as the email is opened. At a bare minimum, this allows an attacker to take control over the Email application's UI (e.g., display a malicious prompt to the user asking them to re-enter their email credentials) and also allows an attacker to abuse any of the p
us prompt to the user asking them to re-enter their email credentials) and also allows an attacker to abuse any of the privileges available to the mobile application. Additional Analyst Notes: - CVE Program Container: References: - https://research.nccgroup.com/2020/08/21/technical-advisory-multiple-html-injection-vulnerabilities-in-kaios-pre-installed-mobile-applications/
CVE ID: CVE-2019-14757 State: PUBLISHED Published: 2020-09-14T19:07:13 Last Updated: 2024-08-05T00:26:38.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed Contacts application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a vCard file to the victim that will inject HTML into the Contacts application (assuming the victim chooses to import the file). At a bare minimum, this allows an attacker to take control over the Contacts application's UI (e.g., display a malicious prompt to the user asking them to re-enter credentials such as their KaiOS credentials to continue using the applicat
us prompt to the user asking them to re-enter credentials such as their KaiOS credentials to continue using the application) and also allows an attacker to abuse any of the privileges available to the mobile application. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/ - https://research.nccgroup.com/2020/08/21/technical-advisory-multiple-html-injection-vulnerabilities-in-kaios-pre-installed-mobile-applications/
CVE ID: CVE-2019-14758 State: PUBLISHED Published: 2020-09-14T19:13:41 Last Updated: 2024-08-05T00:26:38.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed File Manager application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a file via email to the victim that will inject HTML into the File Manager application (assuming the victim chooses to download the email attachment). At a bare minimum, this allows an attacker to take control over the File Manager application's UI (e.g., display a malicious prompt to the user asking them to re-enter credentials such as their KaiOS credentials
's UI (e.g., display a malicious prompt to the user asking them to re-enter credentials such as their KaiOS credentials to continue using the application) and also allows an attacker to abuse any of the privileges available to the mobile application. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/ - https://research.nccgroup.com/2020/08/21/technical-advisory-multiple-html-injection-vulnerabilities-in-kaios-pre-installed-mobile-applications/
CVE ID: CVE-2019-14759 State: PUBLISHED Published: 2020-09-14T19:17:29 Last Updated: 2024-08-05T00:26:38.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in KaiOS 1.0, 2.5, and 2.5.1. The pre-installed Radio application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Radio application. At a bare minimum, this allows an attacker to take control over the Radio application's UI (e.g., display a malicious prompt to the user asking them to re-enter credentials such as their KaiOS credentials to continue using the application) and also allows an attacker to abuse any of the privileges available to th
redentials to continue using the application) and also allows an attacker to abuse any of the privileges available to the mobile application. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/
CVE ID: CVE-2019-14760 State: PUBLISHED Published: 2020-09-14T19:21:57 Last Updated: 2024-08-05T00:26:38.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in KaiOS 2.5. The pre-installed Recorder application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Recorder application. At a bare minimum, this allows an attacker to take control over the Recorder application's UI (e.g., display a malicious prompt to the user asking them to re-enter credentials such as their KaiOS credentials to continue using the application) and also allows an attacker to abuse any of the privileges available to the mobil
als to continue using the application) and also allows an attacker to abuse any of the privileges available to the mobile application. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/ - https://research.nccgroup.com/2020/08/21/technical-advisory-multiple-html-injection-vulnerabilities-in-kaios-pre-installed-mobile-applications/
CVE ID: CVE-2019-14761 State: PUBLISHED Published: 2020-09-14T19:24:07 Last Updated: 2024-08-05T00:26:38.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in KaiOS 2.5. The pre-installed Note application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Note application. At a bare minimum, this allows an attacker to take control over the Note application's UI (e.g., display a malicious prompt to the user asking them to re-enter credentials such as their KaiOS credentials to continue using the application) and also allows an attacker to abuse any of the privileges available to the mobile applicatio
nue using the application) and also allows an attacker to abuse any of the privileges available to the mobile application. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/ - https://research.nccgroup.com/2020/08/21/technical-advisory-multiple-html-injection-vulnerabilities-in-kaios-pre-installed-mobile-applications/
CVE ID: CVE-2019-14763 State: PUBLISHED Published: 2019-08-07T21:50:39 Last Updated: 2024-08-05T00:26:38.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may potentially cause a deadlock with f_hid. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.4 - https://www.spinics.net/lists/linux-usb/msg167355.html - https://www.spinics.net/lists/linux-usb/msg167393.html - https://github.com/torvalds/linux/commit/c91815b596245fd7da349ecc43c8def670d2269e - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?
mmit/c91815b596245fd7da349ecc43c8def670d2269e - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c91815b596245fd7da349ecc43c8def670d2269e - https://github.com/torvalds/linux/commit/072684e8c58d17e853f8e8b9f6d9ce2e58d2b036 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=072684e8c58d17e853f8e8b9f6d9ce2e58d2b036 - https://usn.ubuntu.com/4115-1/ - https://usn.ubuntu.com/4118-1/
CVE ID: CVE-2019-14765 State: PUBLISHED Published: 2020-01-21T15:32:15 Last Updated: 2024-08-05T00:26:38.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use administrative controllers. Additional Analyst Notes: - CVE Program Container: References: - https://www.dimo-crm.fr/blog-crm/ - https://gist.github.com/sm0k/5de26614282669b0bcfa719b87c17305
CVE ID: CVE-2019-14766 State: PUBLISHED Published: 2020-01-21T15:33:40 Last Updated: 2024-08-05T00:26:38.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Path Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to browse the server filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://www.dimo-crm.fr/blog-crm/ - https://gist.github.com/sm0k/5de26614282669b0bcfa719b87c17305
CVE ID: CVE-2019-14767 State: PUBLISHED Published: 2020-01-21T15:34:55 Last Updated: 2024-08-05T00:26:38.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichier (document=../) allows an unauthenticated user to download arbitrary files from the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.dimo-crm.fr/blog-crm/ - https://www.elysium-security.com/sitemap.php - https://gist.github.com/sm0k/5de26614282669b0bcfa719b87c17305
CVE ID: CVE-2019-14768 State: PUBLISHED Published: 2020-01-21T15:36:02 Last Updated: 2024-08-05T00:26:38.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to deploy a new WebApp WAR file to the Tomcat server via Path Traversal, allowing remote code execution with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.dimo-crm.fr/blog-crm/ - https://gist.github.com/sm0k/5de26614282669b0bcfa719b87c17305
CVE ID: CVE-2019-14769 State: PUBLISHED Published: 2019-08-08T01:36:18 Last Updated: 2024-08-05T00:26:38.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn't sufficiently filter output when displaying certain block labels created by administrators. An attacker could potentially craft a specialized label, then have an administrator execute scripting when administering a layout. (This issue is mitigated by the attacker needing permission to create custom blocks on the site, which is typically an administrative permission.) Additional Analyst Notes: - CVE Program Container: References: - https://backdropcms.org/securi
inistrative permission.) Additional Analyst Notes: - CVE Program Container: References: - https://backdropcms.org/security/backdrop-sa-core-2019-011
CVE ID: CVE-2019-14770 State: PUBLISHED Published: 2019-08-08T01:36:04 Last Updated: 2024-08-05T00:26:38.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3, some menu links within the administration bar may be crafted to execute JavaScript when the administrator is logged in and uses the search functionality. (This issue is mitigated by the attacker needing permissions to create administrative menu links, such as by creating a content type or layout. Such permissions are usually restricted to trusted or administrative users.) Additional Analyst Notes: - CVE Program Container: References: - https://backdropcms.org/secu