Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-23918 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-05-08T16:15:23.012Z Vendors: NodeJS Products: Node Problem Types: Privilege Escalation (CAPEC-233) Description: A privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3 that made it possible to bypass the experimental Permissions (https://nodejs.org/api/permissions.html) feature in Node.js and access non authorized modules by using process.mainModule.require(). This only affects users who had enabled the experimental permissions option with --experimental-policy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
-experimental-policy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/ - https://security.netapp.com/advisory/ntap-20230316-0008/
CVE ID: CVE-2023-23919 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-04-30T05:56:08.249Z Vendors: NodeJS Products: Node Problem Types: CWE-310 Description: A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread. This in turn could be used to cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nodejs.org/en/blog/vulnerability/february-2023-security-relea
Container: - CISA ADP Vulnrichment: References: - https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/ - https://hackerone.com/reports/1808596 - https://security.netapp.com/advisory/ntap-20230316-0008/
CVE ID: CVE-2023-23920 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-04-30T05:57:24.758Z Vendors: NodeJS Products: Node Problem Types: CWE-426 Description: An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/ - https://lists.debian.org/debian-lts-announce/2023/02/msg00038.html - https://security.netapp.com/advisory/ntap-20230316-0008/ - https://www.debi
/debian-lts-announce/2023/02/msg00038.html - https://security.netapp.com/advisory/ntap-20230316-0008/ - https://www.debian.org/security/2023/dsa-5395
CVE ID: CVE-2023-23921 State: PUBLISHED Published: 2023-02-17T00:00:00 Last Updated: 2024-08-02T10:42:27.105Z Problem Types: CWE-79 Description: The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in some returnurl parameters. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website. This flaw allows a remote attacker to perform cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76810 - https://bugzilla.redhat.com/
References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76810 - https://bugzilla.redhat.com/show_bug.cgi?id=2162526 - https://moodle.org/mod/forum/discuss.php?d=443272#p1782021
CVE ID: CVE-2023-23922 State: PUBLISHED Published: 2023-02-17T00:00:00 Last Updated: 2024-08-02T10:42:27.107Z Problem Types: CWE-79 Description: The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in blog search. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website. This flaw allows a remote attacker to perform cross-site scripting (XSS) attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76861 - https://bugzilla.
Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76861 - https://bugzilla.redhat.com/show_bug.cgi?id=2162547 - https://moodle.org/mod/forum/discuss.php?d=443273#p1782022
CVE ID: CVE-2023-23923 State: PUBLISHED Published: 2023-02-17T00:00:00 Last Updated: 2024-08-02T10:42:27.150Z Problem Types: CWE-284 Description: The vulnerability was found Moodle which exists due to insufficient limitations on the "start page" preference. A remote attacker can set that preference for another user. The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76862 - https://bugzilla.redhat.com/show_bug.cgi?id=2162549 - https://moodle.org/mod/forum/discuss.php?d=443274#
t&s=MDL-76862 - https://bugzilla.redhat.com/show_bug.cgi?id=2162549 - https://moodle.org/mod/forum/discuss.php?d=443274#p1782023
CVE ID: CVE-2023-23924 State: PUBLISHED Published: 2023-01-31T23:54:30.162Z Last Updated: 2025-03-10T21:17:31.944Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H) Vendors: dompdf Products: dompdf Problem Types: CWE-551 Description: Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing `<image>` tags with uppercase letters. This may lead to arbitrary object unserialize on PHP < 8, through the `phar` URL wrapper. An attacker can exploit the vulnerability to call arbitrary URL with arbitrary protocols, if they can provide a SVG file to dompdf. In PHP versions before 8.0.0, it leads to arbitrary unserialize, tha
rotocols, if they can provide a SVG file to dompdf. In PHP versions before 8.0.0, it leads to arbitrary unserialize, that will lead to the very least to an arbitrary file deletion and even remote code execution, depending on classes that are available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg - https://github.com/dompdf/dompdf/commit/7558f07f693b2ac3266089f21051e6b78c6a0c85 - https://github.com/dompdf/dompdf/releases/tag/v2.0.2
CVE ID: CVE-2023-23925 State: PUBLISHED Published: 2023-02-03T19:05:30.909Z Last Updated: 2025-03-10T21:17:13.979Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: switcherapi Products: switcher-client-master Problem Types: CWE-1333, CWE-400 Description: Switcher Client is a JavaScript SDK to work with Switcher API which is cloud-based Feature Flag. Unsanitized input flows into Strategy match operation (EXIST), where it is used to build a regular expression. This may result in a Regular expression Denial of Service attack (reDOS). This issue has been patched in version 3.1.4. As a workaround, avoid using Strategy settings that use REGEX in conjunction with EXIS
as been patched in version 3.1.4. As a workaround, avoid using Strategy settings that use REGEX in conjunction with EXIST and NOT_EXIST operations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/switcherapi/switcher-client-master/security/advisories/GHSA-wqxw-8h5g-hq56 - https://github.com/switcherapi/switcher-client-master/releases/tag/v3.1.4
CVE ID: CVE-2023-23926 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-10T21:10:51.401Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H) Vendors: neo4j Products: apoc Problem Types: CWE-611 Description: APOC (Awesome Procedures on Cypher) is an add-on library for Neo4j. An XML External Entity (XXE) vulnerability found in the apoc.import.graphml procedure of APOC core plugin prior to version 5.5.0 and 4.4.0.14 (4.4 branch) in Neo4j graph database. XML External Entity (XXE) injection occurs when the XML parser allows external entities to be resolved. The XML parser used by the apoc.import.graphml procedure was not configured in a secure way an
entities to be resolved. The XML parser used by the apoc.import.graphml procedure was not configured in a secure way and therefore allowed this. External entities can be used to read local files, send HTTP requests, and perform denial-of-service attacks on the application. Abusing the XXE vulnerability enabled assessors to read local files remotely. Although with the level of privileges assessors had this was limited to one-line files. With the ability to write to the database, any file could have been read. Additionally, assessors noted, with local testing, the server could be crashed by passing in improperly formatted XML. The minimum version containing a patch for this vulnerability is 5
ld be crashed by passing in improperly formatted XML. The minimum version containing a patch for this vulnerability is 5.5.0. Those who cannot upgrade the library can control the allowlist of the procedures that can be used in your system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/neo4j/apoc/security/advisories/GHSA-6wxg-wh7f-rqpr - https://github.com/neo4j/apoc/pull/310 - https://github.com/neo4j/apoc/releases/tag/5.5.0 - https://neo4j.com/docs/operations-manual/current/reference/configuration-settings/#config_dbms.security.procedures.allowlist
CVE ID: CVE-2023-23927 State: PUBLISHED Published: 2023-03-03T21:58:26.183Z Last Updated: 2025-02-25T15:02:32.273Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: craftcms Products: cms Problem Types: CWE-79 Description: Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting (XSS) happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/craftcms/cms/security/advisories/GHSA-qcrj-6ffc-v7hq - https://github.co
Vulnrichment: References: - https://github.com/craftcms/cms/security/advisories/GHSA-qcrj-6ffc-v7hq - https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#437---2023-02-03 - https://user-images.githubusercontent.com/53917092/215604129-d5b75608-5a24-4eb3-906f-55b192310298.mp4
CVE ID: CVE-2023-23928 State: PUBLISHED Published: 2023-02-01T00:59:38.475Z Last Updated: 2025-03-10T21:17:19.894Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N) Vendors: ulrikstrid Products: reason-jose Problem Types: CWE-347 Description: reason-jose is a JOSE implementation in ReasonML and OCaml.`Jose.Jws.validate` does not check HS256 signatures. This allows tampering of JWS header and payload data if the service does not perform additional checks. Such tampering could expose applications using reason-jose to authorization bypass. Applications relying on JWS claims assertion to enforce security boundaries may be vulnerable to privilege escalation. This issue has
elying on JWS claims assertion to enforce security boundaries may be vulnerable to privilege escalation. This issue has been patched in version 0.8.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ulrikstrid/reason-jose/security/advisories/GHSA-7jj9-6qwv-wpm7 - https://github.com/ulrikstrid/reason-jose/commit/36cd724db3cbec121757624da49072386bd869e5 - https://github.com/ulrikstrid/reason-jose/releases/tag/v0.8.2
CVE ID: CVE-2023-23929 State: PUBLISHED Published: 2023-03-03T23:37:50.748Z Last Updated: 2025-02-25T15:02:00.830Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: vantage6 Products: vantage6 Problem Types: CWE-613 Description: vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Currently, the refresh token is valid indefinitely. The refresh token should get a validity of 24-48 hours. A fix was released in version 3.8.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vantage6/vantage6/security/advisories/GHSA-4w59-c3gc-rrhp - https://github.com/vantage6/van
rences: - https://github.com/vantage6/vantage6/security/advisories/GHSA-4w59-c3gc-rrhp - https://github.com/vantage6/vantage6/commit/48ebfca42359e9a6743e9598684585e2522cdce8
CVE ID: CVE-2023-23930 State: PUBLISHED Published: 2023-10-11T17:39:23.504Z Last Updated: 2024-09-18T15:22:09.610Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N) Vendors: vantage6 Products: vantage6 Problem Types: CWE-502 Description: vantage6 is privacy preserving federated learning infrastructure. Versions prior to 4.0.0 use pickle, which has known security issue, as a default serialization module but that has known security issues. All users of vantage6 that post tasks with the default serialization are affected. Version 4.0.0 contains a patch. Users may specify JSON serialization as a workaround. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
Users may specify JSON serialization as a workaround. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vantage6/vantage6/security/advisories/GHSA-5m22-cfq9-86x6 - https://github.com/vantage6/vantage6/commit/e62f03bacf2247bd59eed217e2e7338c3a01a5f0 - https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400 - https://medium.com/ochrona/python-pickle-is-notoriously-insecure-d6651f1974c9
CVE ID: CVE-2023-23931 State: PUBLISHED Published: 2023-02-07T20:54:03.628Z Last Updated: 2025-11-03T21:47:19.856Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: pyca Products: cryptography Problem Types: CWE-754 Description: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This i
violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pyca/cryptography/security/advisories/GHSA-w7pp-m8wf-vj6r - https://github.com/pyca/cryptography/pull/8230/commits/94a50a9731f35405f0357fa5f3b177d46a726ab3
CVE ID: CVE-2023-23932 State: PUBLISHED Published: 2023-02-03T20:08:31.160Z Last Updated: 2025-03-10T21:16:50.373Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenDDS Products: OpenDDS Problem Types: CWE-248 Description: OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). OpenDDS applications that are exposed to untrusted RTPS network traffic may crash when parsing badly-formed input. This issue has been patched in version 3.23.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpenDDS/OpenDDS/security/advisories/GHSA-8wvq-25f5-f8h4
ainer: - CISA ADP Vulnrichment: References: - https://github.com/OpenDDS/OpenDDS/security/advisories/GHSA-8wvq-25f5-f8h4 - https://github.com/OpenDDS/OpenDDS/releases/tag/DDS-3.23.1
CVE ID: CVE-2023-23933 State: PUBLISHED Published: 2023-02-03T19:14:35.793Z Last Updated: 2025-03-10T21:17:08.139Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: opensearch-project Products: anomaly-detection Problem Types: CWE-125 Description: OpenSearch Anomaly Detection identifies atypical data and receives automatic notifications. There is an issue with the application of document and field level restrictions in the Anomaly Detection plugin, where users with the Anomaly Detector role can read aggregated numerical data (e.g. averages, sums) of fields that are otherwise restricted to them. This issue only affects authenticated users who were previously gr
ums) of fields that are otherwise restricted to them. This issue only affects authenticated users who were previously granted read access to the indexes containing the restricted fields. This issue has been patched in versions 1.3.8 and 2.6.0. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/opensearch-project/anomaly-detection/security/advisories/GHSA-47qw-jwpx-pp4c
CVE ID: CVE-2023-23934 State: PUBLISHED Published: 2023-02-14T19:56:22.659Z Last Updated: 2025-03-10T21:11:36.910Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: pallets Products: werkzeug Problem Types: CWE-20 Description: Werkzeug is a comprehensive WSGI web application library. Browsers may allow "nameless" cookies that look like `=value` instead of `key=value`. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a cookie like `=__Host-test=bad` for another subdomain. Werkzeug prior to 2.2.3 will parse the cookie `=__Host-test=bad` as __Host-test=bad`. If a Werkzeug application is running next to a vulner
.2.3 will parse the cookie `=__Host-test=bad` as __Host-test=bad`. If a Werkzeug application is running next to a vulnerable or malicious subdomain which sets such a cookie using a vulnerable browser, the Werkzeug application will see the bad cookie value but the valid cookie key. The issue is fixed in Werkzeug 2.2.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pallets/werkzeug/security/advisories/GHSA-px8h-6qxv-m22q - https://github.com/pallets/werkzeug/commit/cf275f42acad1b5950c50ffe8ef58fe62cdce028 - https://github.com/pallets/werkzeug/releases/tag/2.2.3 - https://www.debian.org/security/2023/dsa-5470 - https://security.neta
//github.com/pallets/werkzeug/releases/tag/2.2.3 - https://www.debian.org/security/2023/dsa-5470 - https://security.netapp.com/advisory/ntap-20230818-0003/
CVE ID: CVE-2023-23935 State: PUBLISHED Published: 2023-03-16T20:21:13.539Z Last Updated: 2025-02-25T14:54:52.894Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: discourse Products: discourse Problem Types: CWE-200 Description: Discourse is an open-source messaging platform. In versions 3.0.1 and prior on the `stable` branch and versions 3.1.0.beta2 and prior on the `beta` and `tests-passed` branches, the count of personal messages displayed for a tag is a count of all personal messages regardless of whether the personal message is visible to a given user. As a result, any users can technically poll a sensitive tag to determine if a new personal message is cre
a given user. As a result, any users can technically poll a sensitive tag to determine if a new personal message is created even if the user does not have access to the personal message. In the patched versions, the count of personal messages tagged with a given tag is hidden by default. To revert to the old behaviour of displaying the count of personal messages for a given tag, an admin may enable the `display_personal_messages_tag_counts` site setting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-rf8j-mf8c-82v7 - https://github.com/discourse/discourse/commit/f31f0b70f82c43d93220ce6
iscourse/security/advisories/GHSA-rf8j-mf8c-82v7 - https://github.com/discourse/discourse/commit/f31f0b70f82c43d93220ce6fc0d4f57440452f37
CVE ID: CVE-2023-23936 State: PUBLISHED Published: 2023-02-16T17:30:23.968Z Last Updated: 2025-03-10T21:10:26.495Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: nodejs Products: undici Problem Types: CWE-93 Description: Undici is an HTTP/1.1 client for Node.js. Starting with version 2.0.0 and prior to version 5.19.1, the undici library does not protect `host` HTTP header from CRLF injection vulnerabilities. This issue is patched in Undici v5.19.1. As a workaround, sanitize the `headers.host` string before passing to undici. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nodejs/undici/security/ad
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nodejs/undici/security/advisories/GHSA-5r9g-qh6m-jxff - https://github.com/nodejs/undici/commit/a2eff05401358f6595138df963837c24348f2034 - https://hackerone.com/reports/1820955 - https://github.com/nodejs/undici/releases/tag/v5.19.1
CVE ID: CVE-2023-23937 State: PUBLISHED Published: 2023-02-03T19:31:34.110Z Last Updated: 2025-03-10T21:17:02.111Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: pimcore Products: pimcore Problem Types: CWE-434 Description: Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce. The upload functionality for updating user profile does not properly validate the file content-type, allowing any authenticated user to bypass this security check by adding a valid signature (p.e. GIF89) and sending any invalid content-type. This could allow an authenticated attacker to upload HTML files with JS content that wil
nding any invalid content-type. This could allow an authenticated attacker to upload HTML files with JS content that will be executed in the context of the domain. This issue has been patched in version 10.5.16. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pimcore/pimcore/security/advisories/GHSA-8xv4-jj4h-qww6 - https://github.com/pimcore/pimcore/commit/75a448ef8ac74424cf4e723afeb6d05f9eed872f
CVE ID: CVE-2023-23938 State: PUBLISHED Published: 2023-04-20T16:58:11.747Z Last Updated: 2025-02-05T16:08:25.937Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Enalean Products: tuleap Problem Types: CWE-79 Description: Tuleap is a Free & Source tool for end to end traceability of application and system developments. Affected versions are subject to a cross site scripting attack which can be injected in the name of a color of select box values of a tracker and then reflected in the tracker administration. Administrative privilege is required, but an attacker with tracker administration rights could use this vulnerability to force a victim to execute uncon
ired, but an attacker with tracker administration rights could use this vulnerability to force a victim to execute uncontrolled code in the context of their browser. This issue has been addressed in Tuleap Community Edition version 14.5.99.4. Users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Enalean/tuleap/security/advisories/GHSA-mqjm-c6rm-9h87 - https://github.com/Enalean/tuleap/commit/aacd5e798301f24f218298ec8236ec7bef0f5d52 - https://tuleap.net/plugins/tracker/?aid=30734