Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-27399 State: PUBLISHED Published: 2025-02-27T17:15:05.208Z Last Updated: 2025-02-27T17:59:31.801Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: mastodon Products: mastodon Problem Types: CWE-200, CWE-285 Description: Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" (localized English string: "To logged-in users"), users that are not yet approved can view the block reasons. Instance admins that do not want their domain blocks to be public are impacted. Versions 4.1.23, 4.2.16, and 4.3.4 fix the issue. Additional Analys
want their domain blocks to be public are impacted. Versions 4.1.23, 4.2.16, and 4.3.4 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mastodon/mastodon/security/advisories/GHSA-94h4-fj37-c825 - https://github.com/mastodon/mastodon/commit/6b519cfefa93a923b19d0f20c292c7185f8fd5f5 - https://github.com/mastodon/mastodon/blob/93f0427b8a84faf68d5d02cdf9a26f98fae16f2b/app/controllers/api/v1/instances/domain_blocks_controller.rb#L33-L35 - https://github.com/mastodon/mastodon/blob/93f0427b8a84faf68d5d02cdf9a26f98fae16f2b/app/controllers/api/v1/instances/domain_blocks_controller.rb#L49-L51
CVE ID: CVE-2025-27400 State: PUBLISHED Published: 2025-02-28T15:26:14.265Z Last Updated: 2025-08-26T19:32:15.324Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L) Vendors: OpenMage Products: magento-lts Problem Types: CWE-79 Description: Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Versions prior to 20.12.3 and 20.13.0 contain a vulnerability that allows script execution in the admin panel which could lead to cross-site scripting against authenticated admin users. The attack requires an admin user with configuration acce
ead to cross-site scripting against authenticated admin users. The attack requires an admin user with configuration access, so in practicality it is not very likely to be useful given that a user with this level of access is probably already a full admin. Versions 20.12.3 and 20.13.0 contain a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OpenMage/magento-lts/security/advisories/GHSA-5pxh-89cx-4668 - https://github.com/OpenMage/magento-lts/commit/d307e5bf75729a2347dde0952fe9fd9fcd9c6aea - https://github.com/OpenMage/magento-lts/releases/tag/v20.12.3 - https://github.com/OpenMage/magento-lts/releases/tag/v20.13.0
CVE ID: CVE-2025-27401 State: PUBLISHED Published: 2025-03-04T16:58:18.478Z Last Updated: 2025-03-04T17:20:34.993Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: Enalean Products: tuleap Problem Types: CWE-440 Description: Tuleap is an Open Source Suite to improve management of software developments and collaboration. In a standard usages of Tuleap, the issue has a limited impact, it will mostly leave dangling data. However, a malicious user could create and delete reports multiple times to cycle through all the filters of all reports of the instance and delete them. The malicious user only needs to have access to one tracker. This would result in the loss
he instance and delete them. The malicious user only needs to have access to one tracker. This would result in the loss of all criteria filters forcing users and tracker admins to re-create them. This vulnerability is fixed in Tuleap Community Edition 16.4.99.1740498975 and Tuleap Enterprise Edition 16.4-6 and 16.3-11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Enalean/tuleap/security/advisories/GHSA-3rjf-87rf-h8m9 - https://github.com/Enalean/tuleap/commit/0070fef5c3b27fd402d3232041c6e03f79a84ffd - https://tuleap.net/plugins/tracker/?aid=41850
CVE ID: CVE-2025-27402 State: PUBLISHED Published: 2025-03-04T17:00:49.077Z Last Updated: 2025-03-04T17:17:56.708Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: Enalean Products: tuleap Problem Types: CWE-352 Description: Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protections on tracker fields administrative operations. An attacker could use this vulnerability to trick victims into removing or updating tracker fields. This vulnerability is fixed in Tuleap Community Edition 16.4.99.1740414959 and Tuleap Enterprise Edition 16.4-6 and 16.3-11. Additional Analyst Notes: - CISA ADP Vul
ty Edition 16.4.99.1740414959 and Tuleap Enterprise Edition 16.4-6 and 16.3-11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Enalean/tuleap/security/advisories/GHSA-66pg-cpjf-2mfg - https://github.com/Enalean/tuleap/commit/ea6319e2ad40beeda335af4ccd7a204a6912765c - https://tuleap.net/plugins/tracker/?aid=41857
CVE ID: CVE-2025-27403 State: PUBLISHED Published: 2025-03-11T14:16:10.013Z Last Updated: 2025-03-11T14:43:13.245Z Vendors: ratify-project Products: ratify Problem Types: CWE-287 Description: Ratify is a verification engine as a binary executable and on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies the user creates. In a Kubernetes environment, Ratify can be configured to authenticate to a private Azure Container Registry (ACR). The Azure workload identity and Azure managed identity authentication providers are configured in this setup. Users that configure a private ACR to be used with the Azure authenticat
ication providers are configured in this setup. Users that configure a private ACR to be used with the Azure authentication providers may be impacted by a vulnerability that exists in versions prior to 1.2.3 and 1.3.2. Both Azure authentication providers attempt to exchange an Entra ID (EID) token for an ACR refresh token. However, Ratify’s Azure authentication providers did not verify that the target registry is an ACR. This could have led to the EID token being presented to a non-ACR registry during token exchange. EID tokens with ACR access can potentially be extracted and abused if a user workload contains an image reference to a malicious registry. As of versions 1.2.3 and 1.3.2, the Az
nd abused if a user workload contains an image reference to a malicious registry. As of versions 1.2.3 and 1.3.2, the Azure workload identity and Azure managed identity authentication providers are updated to add new validation prior to EID token exchange. Validation relies upon registry domain validation against a pre-configured list of well-known ACR endpoints. EID token exchange will be executed only if at least one of the configured well-known domain suffixes (wildcard support included) matches the registry domain of the image reference. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ratify-project/ratify/security/advisories/GHSA-44f7-5fj5-h4px - http
ADP Vulnrichment: References: - https://github.com/ratify-project/ratify/security/advisories/GHSA-44f7-5fj5-h4px - https://github.com/ratify-project/ratify/commit/0ec0c08490e3d672ae64b1a220c90d5484f1c93f - https://github.com/ratify-project/ratify/commit/84c7c48fa76bb9a1c9583635d1e90bc25b1a546c
CVE ID: CVE-2025-27404 State: PUBLISHED Published: 2025-03-26T14:21:05.363Z Last Updated: 2025-03-26T15:10:01.679Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Icinga Products: icingaweb2 Problem Types: CWE-79 Description: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of that user. This issue has been resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. As a workaround, those who have Icinga Web 2.12.2 may enable
en resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. As a workaround, those who have Icinga Web 2.12.2 may enable a content security policy in the application settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Icinga/icingaweb2/security/advisories/GHSA-c6pg-h955-wf66 - https://github.com/Icinga/icingaweb2/releases/tag/v2.11.5 - https://github.com/Icinga/icingaweb2/releases/tag/v2.12.3
CVE ID: CVE-2025-27405 State: PUBLISHED Published: 2025-03-26T15:10:10.288Z Last Updated: 2025-03-26T15:57:52.238Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Icinga Products: icingaweb2 Problem Types: CWE-79 Description: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of that user. This issue has been resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. As a workaround, those who have Icinga Web 2.12.2 may enable
en resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. As a workaround, those who have Icinga Web 2.12.2 may enable a content security policy in the application settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Icinga/icingaweb2/security/advisories/GHSA-3x37-fjc3-ch8w - https://github.com/Icinga/icingaweb2/releases/tag/v2.11.5 - https://github.com/Icinga/icingaweb2/releases/tag/v2.12.3
CVE ID: CVE-2025-27406 State: PUBLISHED Published: 2025-03-26T15:49:45.273Z Last Updated: 2025-03-26T16:15:22.593Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Icinga Products: icingaweb2-module-reporting Problem Types: CWE-79, CWE-918 Description: Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framework Icinga Web 2. A vulnerability present in versions 0.10.0 through 1.0.2 allows to set up a template that allows to embed arbitrary Javascript. This enables the attacker to act on behalf of the user, if the template is being previewed; and act on behalf of the headless browser, if a report usin
t on behalf of the user, if the template is being previewed; and act on behalf of the headless browser, if a report using the template is printed to PDF. This issue has been resolved in version 1.0.3 of Icinga Reporting. As a workaround, review all templates and remove suspicious settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Icinga/icingaweb2-module-reporting/security/advisories/GHSA-7qvq-54vm-r7hx - https://github.com/Icinga/icingaweb2-module-reporting/releases/tag/v1.0.3
CVE ID: CVE-2025-27407 State: PUBLISHED Published: 2025-03-12T18:15:57.957Z Last Updated: 2025-11-03T19:45:32.739Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: rmosolgo Products: graphql-ruby Problem Types: CWE-94 Description: graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use GraphQL::Client t
y system which loads a schema by JSON from an untrusted source is vulnerable, including those that use GraphQL::Client to load external schemas via GraphQL introspection. Versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21 contain a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/rmosolgo/graphql-ruby/security/advisories/GHSA-q92j-grw3-h492 - https://github.com/rmosolgo/graphql-ruby/commit/28233b16c0eb9d0fb7808f4980e061dc7507c4cd - https://github.com/rmosolgo/graphql-ruby/commit/2d2f4ed1f79472f8eed29c864b039649e1de238f - https://github.com/rmosolgo/graphql-ruby/commit/5c5a7b9a9bdce143be048074a
mit/2d2f4ed1f79472f8eed29c864b039649e1de238f - https://github.com/rmosolgo/graphql-ruby/commit/5c5a7b9a9bdce143be048074aea50edb7bb747be - https://github.com/rmosolgo/graphql-ruby/commit/6eca16b9fa553aa957099a30dbde64ddcdac52ca - https://github.com/rmosolgo/graphql-ruby/commit/d0963289e0dab4ea893bbecf12bb7d89294957bb - https://github.com/rmosolgo/graphql-ruby/commit/d1117ae0361d9ed67e0795b07f5c3e98e62f3c7c - https://github.com/rmosolgo/graphql-ruby/commit/e3b33ace05391da2871c75ab4d3b66e29133b367 - https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released - https://github.com/github-community-projects/graphql-client
CVE ID: CVE-2025-27408 State: PUBLISHED Published: 2025-02-28T17:26:15.196Z Last Updated: 2025-03-04T22:23:15.608Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: mnfst Products: manifest Problem Types: CWE-759 Description: Manifest offers users a one-file micro back end. Prior to version 4.9.2, Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt, identical passwords across multiple users will result in the same hash, making it easier for attackers to identify and exploit patterns, thereby acc
ultiple users will result in the same hash, making it easier for attackers to identify and exploit patterns, thereby accelerating the cracking process. Version 4.9.2 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mnfst/manifest/security/advisories/GHSA-h8h6-7752-g28c - https://github.com/mnfst/manifest/commit/3ed6f1324e96ad469ad929d470dcd0cc386c6c69
CVE ID: CVE-2025-27409 State: PUBLISHED Published: 2025-04-30T14:55:07.846Z Last Updated: 2025-04-30T15:11:59.209Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: laurent22 Products: joplin Problem Types: CWE-22 Description: Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Prior to version 3.3.3, path traversal is possible in Joplin Server if static file path starts with `css/pluginAssets` or `js/pluginAssets`. The `findLocalFile` function in the `default route` calls `localFileFromUrl` to check for special `pluginAssets` paths. If the function returns a path, the result is retu
` calls `localFileFromUrl` to check for special `pluginAssets` paths. If the function returns a path, the result is returned directly, without checking for path traversal. The vulnerability allows attackers to read files outside the intended directories. This issue has been patched in version 3.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/laurent22/joplin/security/advisories/GHSA-5xv6-7jm3-fmg5 - https://github.com/laurent22/joplin/pull/11916
CVE ID: CVE-2025-27410 State: PUBLISHED Published: 2025-02-28T21:00:11.328Z Last Updated: 2025-03-04T20:31:01.435Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: pwndoc Products: pwndoc Problem Types: CWE-23, CWE-22 Description: PwnDoc is a penetration test reporting application. Prior to version 1.2.0, the backup restore functionality is vulnerable to path traversal in the TAR entry's name, allowing an attacker to overwrite any file on the system with their content. By overwriting an included `.js` file and restarting the container, this allows for Remote Code Execution as an administrator. The remote code execution occurs because any user with the `backup
allows for Remote Code Execution as an administrator. The remote code execution occurs because any user with the `backups:create` and `backups:update` (only administrators by default) is able to overwrite any file on the system. Version 1.2.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pwndoc/pwndoc/security/advisories/GHSA-mxw8-vgvx-89hx - https://github.com/pwndoc/pwndoc/commit/98f284291d73d3a0b11d3181d845845c192d1080 - https://github.com/pwndoc/pwndoc/blob/14acb704891245bf1703ce6296d62112e85aa995/backend/src/routes/backup.js#L527 - https://github.com/pwndoc/pwndoc/releases/tag/v1.2.0
CVE ID: CVE-2025-27411 State: PUBLISHED Published: 2025-03-05T15:42:29.888Z Last Updated: 2025-03-06T22:00:09.152Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: redaxo Products: redaxo Problem Types: CWE-434 Description: REDAXO is a PHP-based CMS. In Redaxo before 5.18.3, the mediapool/media page is vulnerable to arbitrary file upload. This vulnerability is fixed in 5.18.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/redaxo/redaxo/security/advisories/GHSA-wppf-gqj5-fc4f - https://github.com/redaxo/redaxo/commit/3b2159bb45da0ab6cfaef5c8cf8b602ee5e2fb37
CVE ID: CVE-2025-27412 State: PUBLISHED Published: 2025-03-05T15:53:08.813Z Last Updated: 2025-03-05T16:18:31.199Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: redaxo Products: redaxo Problem Types: CWE-79 Description: REDAXO is a PHP-based CMS. In Redaxo from 5.0.0 through 5.18.2, the rex-api-result parameter is vulnerable to Reflected cross-site scripting (XSS) on the page of AddOns. This vulnerability is fixed in 5.18.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/redaxo/redaxo/security/advisories/GHSA-8366-xmgf-334f
CVE ID: CVE-2025-27413 State: PUBLISHED Published: 2025-02-28T21:02:35.656Z Last Updated: 2025-03-04T20:09:20.769Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: pwndoc Products: pwndoc Problem Types: CWE-22 Description: PwnDoc is a penetration test reporting application. Prior to version 1.2.0, the backup restore functionality allows an administrator to import raw data into the database, including Path Traversal (`../`) sequences. This is problematic for the template update functionality as it uses the path from the database to write arbitrary content to, potentially overwriting source code to achieve Remote Code Execution. Any user with the `backups:creat
trary content to, potentially overwriting source code to achieve Remote Code Execution. Any user with the `backups:create`, `backups:update` and `templates:update` permissions (only administrators by default) can write arbitrary content to anywhere on the filesystem. By overwriting source code, it is possible to achieve Remote Code Execution. Version 1.2.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pwndoc/pwndoc/security/advisories/GHSA-r3vj-47cf-4672 - https://github.com/pwndoc/pwndoc/commit/68aa1ea676a91e17bfb333a27571151bd07fb21d - https://github.com/pwndoc/pwndoc/blob/14acb704891245bf1703ce6296d62112e85aa995/backend/src/models/tem
7571151bd07fb21d - https://github.com/pwndoc/pwndoc/blob/14acb704891245bf1703ce6296d62112e85aa995/backend/src/models/template.js#L170-L175 - https://github.com/pwndoc/pwndoc/blob/14acb704891245bf1703ce6296d62112e85aa995/backend/src/routes/backup.js#L826-L827 - https://github.com/pwndoc/pwndoc/blob/14acb704891245bf1703ce6296d62112e85aa995/backend/src/routes/template.js#L63-L66 - https://github.com/pwndoc/pwndoc/releases/tag/v1.2.0
CVE ID: CVE-2025-27414 State: PUBLISHED Published: 2025-02-28T21:06:58.155Z Last Updated: 2025-03-04T20:03:45.107Z Vendors: minio Products: minio Problem Types: CWE-287 Description: MinIO is a high performance object storage. Starting in RELEASE.2024-06-06T09-36-42Z and prior to RELEASE.2025-02-28T09-55-16Z, a bug in evaluating the trust of the SSH key used in an SFTP connection to MinIO allows authentication bypass and unauthorized data access. On a MinIO server with SFTP access configured and using LDAP as an external identity provider, MinIO supports SSH key based authentication for SFTP connections when the user has the `sshPublicKey` attribute set in their LDAP server. The server trusts
tication for SFTP connections when the user has the `sshPublicKey` attribute set in their LDAP server. The server trusts the client's key only when the public key is the same as the `sshPublicKey` attribute. Due to the bug, when the user has no `sshPublicKey` property in LDAP, the server ends up trusting the key allowing the client to perform any FTP operations allowed by the MinIO access policies associated with the LDAP user (or any of their groups). Three requirements must be met in order to exploit the vulnerability. First, the MinIO server must be configured to allow SFTP access and use LDAP as an external identity provider. Second, the attacker must have knowledge of an LDAP username t
FTP access and use LDAP as an external identity provider. Second, the attacker must have knowledge of an LDAP username that does not have the `sshPublicKey` property set. Third, such an LDAP username or one of their groups must also have some MinIO access policy configured. When this bug is successfully exploited, the attacker can perform any FTP operations (i.e. reading, writing, deleting and listing objects) allowed by the access policy associated with the LDAP user account (and their groups). Version 1.2.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/minio/minio/security/advisories/GHSA-wc79-7x8x-2p58 - https://github.com/minio/minio
t: References: - https://github.com/minio/minio/security/advisories/GHSA-wc79-7x8x-2p58 - https://github.com/minio/minio/commit/4c71f1b4ec0fb2a473ddaac18c20ec9e63f267ec - https://github.com/minio/minio/commit/91e1487de45720753c9e9e4c02b1bd16b7e452fa
CVE ID: CVE-2025-27415 State: PUBLISHED Published: 2025-03-19T19:02:04.824Z Last Updated: 2025-03-19T19:22:25.732Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: nuxt Products: nuxt Problem Types: CWE-349 Description: Nuxt is an open-source web development framework for Vue.js. Prior to 3.16.0, by sending a crafted HTTP request to a server behind an CDN, it is possible in some circumstances to poison the CDN cache and highly impacts the availability of a site. It is possible to craft a request, such as https://mysite.com/?/_payload.json which will be rendered as JSON. If the CDN in front of a Nuxt site ignores the query string when determining whether to cach
h will be rendered as JSON. If the CDN in front of a Nuxt site ignores the query string when determining whether to cache a route, then this JSON response could be served to future visitors to the site. An attacker can perform this attack to a vulnerable site in order to make a site unavailable indefinitely. It is also possible in the case where the cache will be reset to make a small script to send a request each X seconds (=caching duration) so that the cache is permanently poisoned making the site completely unavailable. This vulnerability is fixed in 3.16.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nuxt/nuxt/security/advisories/GHSA-jvhm-gjrh-3h
Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nuxt/nuxt/security/advisories/GHSA-jvhm-gjrh-3h93
CVE ID: CVE-2025-27416 State: PUBLISHED Published: 2025-03-01T00:10:29.184Z Last Updated: 2025-03-04T19:18:29.831Z Vendors: Scratch-Coding-Hut Products: Scratch-Coding-Hut.github.io Problem Types: CWE-287 Description: Scratch-Coding-Hut.github.io is the website for Coding Hut. The website as of 28 February 2025 contained a sign in with scratch username and password form. Any user who used the sign in page would be susceptible to any other user signing into their account. As of time of publication, a fix is not available but work on a fix is underway. As a workaround, users should avoid signing in. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Scratch-Cod