Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-16615 State: PUBLISHED Published: 2017-11-08T03:00:00 Last Updated: 2024-08-05T20:27:04.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable vulnerability exists in the YAML parsing functionality in the parse_yaml_query method in parser.py in MLAlchemy before 0.2.2. When processing YAML-Based queries for data, a YAML parser can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thanethomson/MLAlchemy/commit/bc795757fe
tional Analyst Notes: - CVE Program Container: References: - https://github.com/thanethomson/MLAlchemy/commit/bc795757febdcce430d89f9d08f75c32d6989d3c - https://github.com/thanethomson/MLAlchemy/issues/1 - https://joel-malwarebenchmark.github.io/blog/2017/11/08/cve-2017-16615-critical-restful-web-applications-vulnerability/
CVE ID: CVE-2017-16616 State: PUBLISHED Published: 2017-11-08T03:00:00 Last Updated: 2024-08-05T20:27:04.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable vulnerability exists in the YAML parsing functionality in the YAMLParser method in Interfaces.py in PyAnyAPI before 0.6.1. A YAML parser can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://joel-malwarebenchmark.github.io/blog/2017/11/08/cve-2017-16616-yamlparser-in-pyanyapi/ - https://gi
eferences: - https://joel-malwarebenchmark.github.io/blog/2017/11/08/cve-2017-16616-yamlparser-in-pyanyapi/ - https://github.com/Stranger6667/pyanyapi/issues/41 - https://github.com/Stranger6667/pyanyapi/releases/tag/0.6.1 - https://pypi.python.org/pypi/pyanyapi/0.6.1
CVE ID: CVE-2017-16618 State: PUBLISHED Published: 2017-11-08T03:00:00 Last Updated: 2024-08-05T20:27:04.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable vulnerability exists in the YAML loading functionality of util.py in OwlMixin before 2.0.0a12. A "Load YAML" string or file (aka load_yaml or load_yamlf) can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tadashi-aikawa/owlmixin/commit/5d0575303f6df869a515ced4285f24ba721e0d4e
gram Container: References: - https://github.com/tadashi-aikawa/owlmixin/commit/5d0575303f6df869a515ced4285f24ba721e0d4e - https://joel-malwarebenchmark.github.io/blog/2017/11/08/cve-2017-16618-convert-through-owlmixin/ - https://github.com/tadashi-aikawa/owlmixin/issues/12
CVE ID: CVE-2017-16629 State: PUBLISHED Published: 2021-08-11T20:08:19 Last Updated: 2024-08-05T20:27:04.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of user on the Login form. For "Incorrect User" - it gives an error "The application failed to identify the user. Please contact administrator for help." For "Correct User and Incorrect Password" - it gives an error "Authentication failed. Please login again." Additional Analyst Notes: - CVE Program Container: References: - https://vuln.shellcoder.party/2020/07/18/cve-2017-16629-sapphireims
nalyst Notes: - CVE Program Container: References: - https://vuln.shellcoder.party/2020/07/18/cve-2017-16629-sapphireims-login-page-information-disclosure/ - https://vuln.shellcoder.party/tags/sapphireims/
CVE ID: CVE-2017-16630 State: PUBLISHED Published: 2021-08-11T20:09:18 Last Updated: 2024-08-05T20:27:04.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Insecure Direct Object Reference (IDOR) in the local user creation function. Additional Analyst Notes: - CVE Program Container: References: - https://vuln.shellcoder.party/tags/sapphireims/ - https://vuln.shellcoder.party/2020/07/18/cve-2017-16630-sapphireims-idor-based-privilege-elevation/
CVE ID: CVE-2017-16631 State: PUBLISHED Published: 2021-08-11T20:10:30 Last Updated: 2024-08-05T20:27:04.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference (IDOR) in the "Account Password Reset" functionality. Additional Analyst Notes: - CVE Program Container: References: - https://vuln.shellcoder.party/tags/sapphireims/ - https://vuln.shellcoder.party/2020/07/18/cve-2017-16631-sapphireims-idor-on-password-reset/
CVE ID: CVE-2017-16632 State: PUBLISHED Published: 2021-08-11T20:11:26 Last Updated: 2024-08-05T20:27:04.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SapphireIMS 4097_1, the password in the database is stored in Base64 format. Additional Analyst Notes: - CVE Program Container: References: - https://vuln.shellcoder.party/tags/sapphireims/ - https://vuln.shellcoder.party/2020/07/18/cve-2017-16632-sapphireims-insecure-storage-of-password/
CVE ID: CVE-2017-16633 State: PUBLISHED Published: 2017-11-09T19:00:00 Last Updated: 2024-08-05T20:27:04.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Joomla! before 3.8.2, a logic bug in com_fields exposed read-only information about a site's custom fields to unauthorized users. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/715-20171103-core-information-disclosure.html - http://www.securityfocus.com/bid/101702 - http://www.securitytracker.com/id/1039757
CVE ID: CVE-2017-16634 State: PUBLISHED Published: 2017-11-09T19:00:00 Last Updated: 2024-08-05T20:27:04.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Joomla! before 3.8.2, a bug allowed third parties to bypass a user's 2-factor authentication method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101701 - https://developer.joomla.org/security-centre/713-20171102-core-2-factor-authentication-bypass - http://www.securitytracker.com/id/1039757
CVE ID: CVE-2017-16635 State: PUBLISHED Published: 2017-11-06T22:00:00 Last Updated: 2024-08-05T20:27:04.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TinyWebGallery v2.4, an XSS vulnerability is located in the `mkname`, `mkitem`, and `item` parameters of the `Add/Create` module. Remote attackers with low-privilege user accounts for backend access are able to inject malicious script codes into the `TWG Explorer` item listing. The request method to inject is POST and the attack vector is located on the application-side of the service. The injection point is the add/create input field and the execution point occurs in the item listing after the add or create. Additional An
is the add/create input field and the execution point occurs in the item listing after the add or create. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=1997
CVE ID: CVE-2017-16636 State: PUBLISHED Published: 2017-11-06T22:00:00 Last Updated: 2024-08-05T20:27:04.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Bludit v1.5.2 and v2.0.1, an XSS vulnerability is located in the new page, new category, and edit post function body message context. Remote attackers are able to bypass the basic editor validation to trigger cross site scripting. The XSS is persistent and the request method to inject via editor is GET. To save the editor context, the followup POST method request must be processed to perform the attack via the application side. The basic validation of the editor does not allow injecting script codes and blocks the context.
a the application side. The basic validation of the editor does not allow injecting script codes and blocks the context. Attackers can inject the code by using an editor tag that is not recognized by the basic validation. Thus allows a restricted user account to inject malicious script code to perform a persistent attack against higher privilege web-application user accounts. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2000
CVE ID: CVE-2017-16637 State: PUBLISHED Published: 2017-11-06T22:00:00 Last Updated: 2024-08-05T20:27:04.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Vectura Perfect Privacy VPN Manager v1.10.10 and v1.10.11, when resetting the network data via the software client, with a running VPN connection, a critical error occurs which leads to a "FrmAdvancedProtection" crash. Although the mechanism malfunctions and an error occurs during the runtime with the stack trace being issued, the software process is not properly terminated. The software client is still attempting to maintain the connection even though the network connection information is being reset live. In that insecur
ttempting to maintain the connection even though the network connection information is being reset live. In that insecure mode, the "FrmAdvancedProtection" component crashes, but the process continues to run with different errors and process corruptions. This local corruption vulnerability can be exploited by local attackers. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2102 - https://board.perfect-privacy.com/threads/reporting-a-security-bug-in-vpn-software-client-for-windows.2223/
CVE ID: CVE-2017-16638 State: PUBLISHED Published: 2017-11-06T23:00:00 Last Updated: 2024-08-05T20:27:04.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gentoo net-misc/vde package before version 2.3.2-r4 may allow members of the "qemu" group to gain root privileges by creating a hard link in a directory on which "chown" is called recursively by the OpenRC service script. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.gentoo.org/603382 - https://security.gentoo.org/glsa/201711-11
CVE ID: CVE-2017-16639 State: PUBLISHED Published: 2018-09-14T21:00:00 Last Updated: 2024-08-05T20:27:04.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address, a different vulnerability than CVE-2017-16541. User interaction is required to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.wearesegment.com/research/tor-browser-deanonymization-with-smb/ - https://seclists.org/bugtraq/2018/Sep/29 - http://packetstormsecurity.com/files/149351/Tor-Browser-SMB-Deanonymization-Information-Disclosure.html -
/2018/Sep/29 - http://packetstormsecurity.com/files/149351/Tor-Browser-SMB-Deanonymization-Information-Disclosure.html - http://www.securityfocus.com/bid/105346
CVE ID: CVE-2017-16641 State: PUBLISHED Published: 2017-11-07T20:00:00Z Last Updated: 2024-09-17T00:01:51.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an action=save request to settings.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/issues/1057
CVE ID: CVE-2017-16642 State: PUBLISHED Published: 2017-11-07T21:00:00 Last Updated: 2024-08-05T20:27:04.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20181123-0001/
dditional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20181123-0001/ - https://www.exploit-db.com/exploits/43133/ - https://bugs.php.net/bug.php?id=75055 - https://access.redhat.com/errata/RHSA-2018:1296 - http://php.net/ChangeLog-5.php - http://www.securityfocus.com/bid/101745 - https://www.debian.org/security/2018/dsa-4081 - https://www.debian.org/security/2018/dsa-4080 - https://usn.ubuntu.com/3566-1/ - http://php.net/ChangeLog-7.php - https://github.com/derickr/timelib/commit/aa9156006e88565e1f1a5f7cc088b18322d57536 - https://github.com/php/php-src/commit/5c0455bf2c8cd3c25401407f158e820aa3b239e1 - https://access.redhat.com/errata/RHSA-2
https://github.com/php/php-src/commit/5c0455bf2c8cd3c25401407f158e820aa3b239e1 - https://access.redhat.com/errata/RHSA-2019:2519
CVE ID: CVE-2017-16643 State: PUBLISHED Published: 2017-11-07T23:00:00 Last Updated: 2024-08-05T20:27:04.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_hid_report_descriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11 - http://www.securityfocus.com/bid/101769 - https://usn.ubuntu.com/3754-1/
l.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11 - http://www.securityfocus.com/bid/101769 - https://usn.ubuntu.com/3754-1/ - https://groups.google.com/d/msg/syzkaller/McWFcOsA47Y/3bjtBBgaBAAJ - https://github.com/torvalds/linux/commit/a50829479f58416a013a4ccca791336af3c584c7
CVE ID: CVE-2017-16644 State: PUBLISHED Published: 2017-11-07T23:00:00 Last Updated: 2024-08-05T20:27:04.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (improper error handling and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/d/msg/syzkaller/ngC5SLvxPm4/gduhCARhAwAJ - https://usn.ubuntu.com/3754-1/ - https://patchwork.kernel.org/patch/9966135/ - https://www.debian.org/security/2017/dsa-4073 - http://www
u.com/3754-1/ - https://patchwork.kernel.org/patch/9966135/ - https://www.debian.org/security/2017/dsa-4073 - http://www.securityfocus.com/bid/101842
CVE ID: CVE-2017-16645 State: PUBLISHED Published: 2017-11-07T23:00:00 Last Updated: 2024-08-05T20:27:04.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (ims_pcu_parse_cdc_data out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3617-1/ - https://usn.ubuntu.com/3619-2/ - https://usn.ubuntu.com/3617-3/ - https://usn.ubuntu.com/3754-1/ - https://github.com/torvalds/linux/commit/ea04efee
2/ - https://usn.ubuntu.com/3617-3/ - https://usn.ubuntu.com/3754-1/ - https://github.com/torvalds/linux/commit/ea04efee7635c9120d015dcdeeeb6988130cb67a - http://www.securityfocus.com/bid/101768 - https://groups.google.com/d/msg/syzkaller/q6jjr1OhqO8/WcA99AVFBAAJ - https://usn.ubuntu.com/3617-2/ - https://usn.ubuntu.com/3619-1/
CVE ID: CVE-2017-16646 State: PUBLISHED Published: 2017-11-07T23:00:00 Last Updated: 2024-08-05T20:27:04.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3617-1/ - https://usn.ubuntu.com/3619-2/ - https://usn.ubuntu.com/3617-3/ - http://www.securityfocus.com/bid/101846 - https://patchwork.linuxtv.org/patch/45291/ - https://usn.ubuntu.com/3617-2/ - https://groups.google.com/d/
/bid/101846 - https://patchwork.linuxtv.org/patch/45291/ - https://usn.ubuntu.com/3617-2/ - https://groups.google.com/d/msg/syzkaller/-d6ilzbVu_g/OBy8_62mAwAJ - https://usn.ubuntu.com/3619-1/
CVE ID: CVE-2017-16647 State: PUBLISHED Published: 2017-11-07T23:00:00 Last Updated: 2024-08-05T20:27:04.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3617-1/ - https://usn.ubuntu.com/3617-3/ - https://groups.google.com/d/msg/syzkaller/_9a6pd-p_0E/OnmnplQuAgAJ - https://patchwork.ozlabs.org/patch/834686/ - http://www.securityfocus.com/bid/101767 - https://usn.ubunt
/OnmnplQuAgAJ - https://patchwork.ozlabs.org/patch/834686/ - http://www.securityfocus.com/bid/101767 - https://usn.ubuntu.com/3617-2/
CVE ID: CVE-2017-16648 State: PUBLISHED Published: 2017-11-07T23:00:00 Last Updated: 2024-08-05T20:27:04.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed __dvb_frontend_free. Additional Analyst Notes: - CVE Program Container: References: - https://patchwork.kernel.org/patch/10046189/ - http://www.securityfocus.com/bid/101758 - https://groups.google.com/d/msg/syzkaller/0HJQqTm0G_g/T931Its
atch/10046189/ - http://www.securityfocus.com/bid/101758 - https://groups.google.com/d/msg/syzkaller/0HJQqTm0G_g/T931ItskBAAJ - https://access.redhat.com/errata/RHSA-2018:2948
CVE ID: CVE-2017-16649 State: PUBLISHED Published: 2017-11-07T23:00:00 Last Updated: 2024-08-05T20:27:04.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: The usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3617-1/ - https://usn.ubuntu.com/3619-2/ - https://usn.ubuntu.com/3617-3/ - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - https://groups.google.com/d/msg/syzkal
om/3617-3/ - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - https://groups.google.com/d/msg/syzkaller/0e0gmaX9R0g/9Me9JcY2BQAJ - https://patchwork.ozlabs.org/patch/834771/ - https://usn.ubuntu.com/3822-2/ - https://usn.ubuntu.com/3617-2/ - http://www.securityfocus.com/bid/101761 - https://usn.ubuntu.com/3619-1/ - https://usn.ubuntu.com/3822-1/
CVE ID: CVE-2017-16650 State: PUBLISHED Published: 2017-11-07T23:00:00 Last Updated: 2024-08-05T20:27:04.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qmi_wwan_bind function in drivers/net/usb/qmi_wwan.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3617-1/ - https://usn.ubuntu.com/3619-2/ - https://usn.ubuntu.com/3617-3/ - https://patchwork.ozlabs.org/patch/834770/ - https://usn.ubuntu.com/3754-1/ - https://groups.google.com/d/msg/syzkalle
- https://patchwork.ozlabs.org/patch/834770/ - https://usn.ubuntu.com/3754-1/ - https://groups.google.com/d/msg/syzkaller/0e0gmaX9R0g/9Me9JcY2BQAJ - http://www.securityfocus.com/bid/101791 - https://usn.ubuntu.com/3617-2/ - https://usn.ubuntu.com/3619-1/
CVE ID: CVE-2017-16651 State: PUBLISHED Published: 2017-11-09T14:00:00.000Z Last Updated: 2025-10-21T23:55:30.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid username/password as the attack requires an active session. The issue is related to file-based attachment plugins and _task=settings&_action=upload-display&_from=timezone requests. Additional Analyst Notes: - CVE Program Contain
ugins and _task=settings&_action=upload-display&_from=timezone requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/roundcube/roundcubemail/releases/tag/1.3.3 - https://roundcube.net/news/2017/11/08/security-updates-1.3.3-1.2.7-and-1.1.10 - https://lists.debian.org/debian-lts-announce/2017/11/msg00039.html - https://github.com/roundcube/roundcubemail/releases/tag/1.1.10 - http://www.securityfocus.com/bid/101793 - https://github.com/roundcube/roundcubemail/releases/tag/1.2.7 - https://www.debian.org/security/2017/dsa-4030 - https://github.com/roundcube/roundcubemail/issues/6026 - http://packetstormsecurity.com/files/161226/Roun
017/dsa-4030 - https://github.com/roundcube/roundcubemail/issues/6026 - http://packetstormsecurity.com/files/161226/Roundcube-Webmail-1.2-File-Disclosure.html
CVE ID: CVE-2017-16652 State: PUBLISHED Published: 2018-06-13T16:00:00 Last Updated: 2024-08-05T20:27:04.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Symfony 2.7.x before 2.7.38, 2.8.x before 2.8.31, 3.2.x before 3.2.14, and 3.3.x before 3.3.13. DefaultAuthenticationSuccessHandler or DefaultAuthenticationFailureHandler takes the content of the _target_path parameter and generates a redirect response, but no check is performed on the path, which could be an absolute URL to an external domain. This Open redirect vulnerability can be exploited for example to mount effective phishing attacks. Additional Analyst Notes: - CVE Program Container: Referen
be exploited for example to mount effective phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - https://symfony.com/blog/cve-2017-16652-open-redirect-vulnerability-on-security-handlers - https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html
CVE ID: CVE-2017-16653 State: PUBLISHED Published: 2018-08-06T21:00:00 Last Updated: 2024-08-05T20:27:04.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. The current implementation of CSRF protection in Symfony (Version >=2) does not use different tokens for HTTP and HTTPS; therefore the token is subject to MITM attacks on HTTP and can then be used in an HTTPS context to do CSRF attacks. Additional Analyst Notes: - CVE Program Container: References: - https://symfony.com/blog/cve-2017-16653-csrf-protection-does-not-use-different-tokens-for-http-and-https - https://github.com/sym
ymfony.com/blog/cve-2017-16653-csrf-protection-does-not-use-different-tokens-for-http-and-https - https://github.com/symfony/symfony/pull/24992 - https://www.debian.org/security/2018/dsa-4262