Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-22165 State: PUBLISHED Published: 2024-01-09T17:01:04.884Z Last Updated: 2025-02-28T11:03:43.686Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Splunk Products: Splunk Enterprise Security (ES) Problem Types: CWE-20 Description: In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service (DoS). The malformed investigation prevents the generation and rendering of the Investigations manager until it is deleted.<br>The vulnerability requires an authenticated session and access to create an Investigation. It only affects the availability of the Investigations mana
authenticated session and access to create an Investigation. It only affects the availability of the Investigations manager, but without the manager, the Investigations functionality becomes unusable for most users. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://advisory.splunk.com/advisories/SVD-2024-0102 - https://research.splunk.com/application/7f6a07bd-82ef-46b8-8eba-802278abd00e/
CVE ID: CVE-2024-22167 State: PUBLISHED Published: 2024-03-13T20:43:06.776Z Last Updated: 2024-08-28T19:11:57.855Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H) Vendors: SanDisk Products: PrivateAccess Windows App Problem Types: CWE-427 Description: A potential DLL hijacking vulnerability in the SanDisk PrivateAccess application for Windows that could lead to arbitrary code execution in the context of the system user. This vulnerability is only exploitable locally if an attacker has access to a copy of the user's vault or has already gained access into a user's system. This attack is limited to the system in context and cannot be propagated. Additional Analyst Notes:
nto a user's system. This attack is limited to the system in context and cannot be propagated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.westerndigital.com/support/product-security/wdc-24002-sandisk-privateaccess-desktop-app-v-6-4-11
CVE ID: CVE-2024-22168 State: PUBLISHED Published: 2024-06-24T22:54:16.903Z Last Updated: 2024-08-01T22:35:34.879Z Vendors: Western Digital, SanDisk Products: My Cloud Home web app, ibi web app, WD Cloud web app, My Cloud web app Problem Types: CWE-79 Description: A Cross-Site Scripting (XSS) vulnerability on the My Cloud, My Cloud Home, SanDisk ibi, and WD Cloud web apps was found which could allow an attacker to redirect the user to a crafted domain and reset their credentials, or to execute arbitrary client-side code in the user’s browser session to carry out malicious activities.The web apps for these devices have been automatically updated to resolve this vulnerability and improve the s
ctivities.The web apps for these devices have been automatically updated to resolve this vulnerability and improve the security of your devices and data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.westerndigital.com/support/product-security/wdc-24003-western-digital-my-cloud-os-5-my-cloud-home-sandisk-ibi-and-wd-cloud-web-app-update
CVE ID: CVE-2024-22169 State: PUBLISHED Published: 2024-08-02T18:31:11.324Z Last Updated: 2024-08-05T18:55:48.270Z Vendors: Western Digital Products: WD Discovery Problem Types: CWE-94 Description: WD Discovery versions prior to 5.0.589 contain a misconfiguration in the Node.js environment settings that could allow code execution by utilizing the 'ELECTRON_RUN_AS_NODE' environment variable. Any malicious application operating with standard user permissions can exploit this vulnerability, enabling code execution within WD Discovery application's context. WD Discovery version 5.0.589 addresses this issue by disabling certain features and fuses in Electron. The attack vector for this issue requ
5.0.589 addresses this issue by disabling certain features and fuses in Electron. The attack vector for this issue requires the victim to have the WD Discovery app installed on their device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.westerndigital.com/support/product-security/wdc-24004-wd-discovery-desktop-app-version-5-0-589
CVE ID: CVE-2024-22170 State: PUBLISHED Published: 2024-09-27T17:06:39.555Z Last Updated: 2024-09-27T18:36:19.698Z Vendors: Western Digital Products: My Cloud Problem Types: CWE-119 Description: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Western Digital My Cloud ddns-start on Linux allows Overflow Buffers.This issue affects My Cloud: before 5.29.102. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.westerndigital.com/support/product-security/wdc-24005-western-digital-my-cloud-os-5-firmware-5-29-102
CVE ID: CVE-2024-22177 State: PUBLISHED Published: 2024-04-02T06:22:37.225Z Last Updated: 2024-08-12T13:13:21.081Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-281 Description: in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through get permission. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-04.md
CVE ID: CVE-2024-22178 State: PUBLISHED Published: 2024-04-03T13:55:02.134Z Last Updated: 2025-11-04T18:23:21.120Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: Open Automation Software Products: OAS Platform Problem Types: CWE-73 Description: A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ta
this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1951
CVE ID: CVE-2024-22179 State: PUBLISHED Published: 2024-04-18T22:06:26.781Z Last Updated: 2024-08-01T22:35:34.937Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Electrolink Products: Compact DAB Transmitter, Medium DAB Transmitter, High Power DAB Transmitter, Compact FM Transmitter, Modular FM Transmitter, Digital FM Transmitter, VHF TV Transmitter, UHF TV Transmitter Problem Types: CWE-302 Description: The application is vulnerable to an unauthenticated parameter manipulation that allows an attacker to set the credentials to blank giving her access to the admin panel. Also vulnerable to account takeover and arbitrary password change. Additional Analyst Note
er access to the admin panel. Also vulnerable to account takeover and arbitrary password change. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
CVE ID: CVE-2024-22180 State: PUBLISHED Published: 2024-04-02T06:22:45.558Z Last Updated: 2024-08-01T22:35:34.947Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-416 Description: in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through use after free. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-04.md
CVE ID: CVE-2024-22181 State: PUBLISHED Published: 2024-05-28T14:02:39.319Z Last Updated: 2025-02-13T17:33:33.122Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: libigl Products: libigl Problem Types: CWE-129 Description: An out-of-bounds write vulnerability exists in the readNODE functionality of libigl v2.5.0. A specially crafted .node file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1930 - https://www.talosintelligence.com/vulnerability_report
s://talosintelligence.com/vulnerability_reports/TALOS-2024-1930 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1930
CVE ID: CVE-2024-22182 State: PUBLISHED Published: 2024-03-01T20:52:59.597Z Last Updated: 2024-08-12T20:25:02.479Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Commend Products: WS203VICM Problem Types: CWE-88 Description: A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-051-01 - https://clibrary-online.commend.com/en/cyber-security/security-advisories.html
CVE ID: CVE-2024-22184 State: PUBLISHED Published: 2024-08-14T13:45:18.341Z Last Updated: 2024-08-14T17:05:18.541Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Quartus(R) Prime Pro Edition Design Software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition Design Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01127.html
CVE ID: CVE-2024-22185 State: PUBLISHED Published: 2024-11-13T21:02:48.297Z Last Updated: 2024-11-14T19:47:34.194Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) processors with Intel(R) ACTM Problem Types: escalation of privilege, CWE-367 Description: Time-of-check Time-of-use Race Condition in some Intel(R) processors with Intel(R) ACTM may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01111.html
CVE ID: CVE-2024-22186 State: PUBLISHED Published: 2024-04-18T22:08:17.798Z Last Updated: 2024-08-08T15:41:44.543Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Electrolink Products: Compact DAB Transmitter, Medium DAB Transmitter, High Power DAB Transmitter, Compact FM Transmitter, Modular FM Transmitter, Digital FM Transmitter, VHF TV Transmitter, UHF TV Transmitter Problem Types: CWE-565 Description: The application suffers from a privilege escalation vulnerability. An attacker logged in as guest can escalate his privileges by poisoning the cookie to become administrator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
the cookie to become administrator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
CVE ID: CVE-2024-22187 State: PUBLISHED Published: 2024-05-28T15:30:15.762Z Last Updated: 2025-02-13T17:33:33.730Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: AutomationDirect Products: P3-550E Problem Types: CWE-284 Description: A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to an arbitrary write. An attacker can send an unauthenticated packet to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerab
al Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1940 - https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003yXV2AY/sa00036 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1940
CVE ID: CVE-2024-22188 State: PUBLISHED Published: 2024-03-05T00:00:00 Last Updated: 2024-10-07T14:25:08.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 13.0.1 allows an authenticated admin user (with system maintainer privileges) to execute arbitrary shell commands (with the privileges of the web server) via a command injection vulnerability in form fields of the Install Tool. The fixed versions are 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, and 13.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://typo3.org/security/advisory/typo3-core-sa-2024-002 - https://github.com/TYPO3/typo3/securit
hment: References: - https://typo3.org/security/advisory/typo3-core-sa-2024-002 - https://github.com/TYPO3/typo3/security/advisories/GHSA-5w2h-59j3-8x5w
CVE ID: CVE-2024-22189 State: PUBLISHED Published: 2024-04-04T14:25:43.663Z Last Updated: 2024-08-23T19:29:41.592Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: quic-go Products: quic-go Problem Types: CWE-770 Description: quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.42.0, an attacker can cause its peer to run out of memory sending a large number of `NEW_CONNECTION_ID` frames that retire old connection IDs. The receiver is supposed to respond to each retirement frame with a `RETIRE_CONNECTION_ID` frame. The attacker can prevent the receiver from sending out (the vast majority of) these `RETIRE_CONNECTION_ID` frames by collapsin
tacker can prevent the receiver from sending out (the vast majority of) these `RETIRE_CONNECTION_ID` frames by collapsing the peers congestion window (by selectively acknowledging received packets) and by manipulating the peer's RTT estimate. Version 0.42.0 contains a patch for the issue. No known workarounds are available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/quic-go/quic-go/security/advisories/GHSA-c33x-xqrf-c478 - https://github.com/quic-go/quic-go/commit/4a99b816ae3ab03ae5449d15aac45147c85ed47a - https://seemann.io/posts/2024-03-19-exploiting-quics-connection-id-management - https://www.youtube.com/watch?v=JqXtYcZAtI
tps://seemann.io/posts/2024-03-19-exploiting-quics-connection-id-management - https://www.youtube.com/watch?v=JqXtYcZAtIA&t=3683s
CVE ID: CVE-2024-22190 State: PUBLISHED Published: 2024-01-11T01:23:17.944Z Last Updated: 2024-09-03T18:23:46.612Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: gitpython-developers Products: GitPython Problem Types: CWE-426 Description: GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted search path if it uses a shell to run `git`, as well as when it runs `bash.exe` to interpret hooks. If either of those features are used on Windows, a malicious `git.exe` or `bash.exe` may be run from an untrusted repository. This issue has been patched in version 3.1.41
malicious `git.exe` or `bash.exe` may be run from an untrusted repository. This issue has been patched in version 3.1.41. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2mqj-m65w-jghx - https://github.com/gitpython-developers/GitPython/pull/1792 - https://github.com/gitpython-developers/GitPython/commit/ef3192cc414f2fd9978908454f6fd95243784c7f
CVE ID: CVE-2024-22191 State: PUBLISHED Published: 2024-01-16T21:57:37.268Z Last Updated: 2024-10-21T12:03:51.403Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: avo-hq Products: avo Problem Types: CWE-79 Description: Avo is a framework to create admin panels for Ruby on Rails apps. A stored cross-site scripting (XSS) vulnerability was found in the key_value field of Avo v3.2.3 and v2.46.0. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the victim's browser. The value of the key_value is inserted directly into the HTML code. In the current version of Avo (possibly also older versions), the value is not properly sanitized be
into the HTML code. In the current version of Avo (possibly also older versions), the value is not properly sanitized before it is inserted into the HTML code. This vulnerability could be used to steal sensitive information from victims that could be used to hijack victims' accounts or redirect them to malicious websites. Avo 3.2.4 and 2.47.0 include a fix for this issue. Users are advised to upgrade. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/avo-hq/avo/security/advisories/GHSA-ghjv-mh6x-7q6h - https://github.com/avo-hq/avo/commit/51bb80b181cd8e31744bdc4e7f9b501c81172347 - https://github.com/avo-hq/avo/commit/fc92a05a8556b178
b.com/avo-hq/avo/commit/51bb80b181cd8e31744bdc4e7f9b501c81172347 - https://github.com/avo-hq/avo/commit/fc92a05a8556b1787c8694643286a1afa6a71258
CVE ID: CVE-2024-22192 State: PUBLISHED Published: 2024-01-16T21:44:53.121Z Last Updated: 2025-06-16T19:46:20.983Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: hyperledger-archives Products: ursa Problem Types: CWE-327 Description: Ursa is a cryptographic library for use with blockchains. The revocation scheme that is part of the Ursa CL-Signatures implementations has a flaw that could impact the privacy guarantees defined by the AnonCreds verifiable credential model. Notably, a malicious verifier may be able to generate a unique identifier for a holder providing a verifiable presentation that includes a Non-Revocation proof. The impact of the flaw is tha
ier for a holder providing a verifiable presentation that includes a Non-Revocation proof. The impact of the flaw is that a malicious verifier may be able to determine a unique identifier for a holder presenting a Non-Revocation proof. Ursa has moved to end-of-life status and no fix is expected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hyperledger-archives/ursa/security/advisories/GHSA-6698-mhxx-r84g
CVE ID: CVE-2024-22193 State: PUBLISHED Published: 2024-01-30T15:50:09.928Z Last Updated: 2025-06-17T13:44:50.458Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: vantage6 Products: vantage6 Problem Types: CWE-922 Description: The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). There are no checks on whether the input is encrypted if a task is created in an encrypted collaboration. Therefore, a user may accidentally create a task with sensitive input data that will then be stored unencrypted in a database. Users should ensure they set the encryption setting correctly
t data that will then be stored unencrypted in a database. Users should ensure they set the encryption setting correctly. This vulnerability is patched in 4.2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vantage6/vantage6/security/advisories/GHSA-rjmv-52mp-gjrr - https://github.com/vantage6/vantage6/commit/6383283733b81abfcacfec7538dc4dc882e98074
CVE ID: CVE-2024-22194 State: PUBLISHED Published: 2024-01-11T02:21:53.758Z Last Updated: 2025-06-03T14:25:30.740Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Cyber-Domain-Ontology Products: CDO-Utility-Local-UUID Problem Types: CWE-215, CWE-337 Description: cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in `cdo-local-uuid` at version `0.4.0`, and in `case-utils` in unpatched versions (matching the pattern `0.x.0`) at and since `0.5.0`, before `0.15.0`. The vulnerability stems from a Python function, `cdo_local_
the pattern `0.x.0`) at and since `0.5.0`, before `0.15.0`. The vulnerability stems from a Python function, `cdo_local_uuid.local_uuid()`, and its original implementation `case_utils.local_uuid()`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID/security/advisories/GHSA-rgrf-6mf5-m882 - https://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID/pull/3 - https://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID/pull/4 - https://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID/commit/9e78f7cb1075728d0aafc918514f32a1392cd235 - https://github.com/casework/CASE-Utilities-Py
y/CDO-Utility-Local-UUID/commit/9e78f7cb1075728d0aafc918514f32a1392cd235 - https://github.com/casework/CASE-Utilities-Python/commit/00864cd12de7c50d882dd1a74915d32e939c25f9 - https://github.com/casework/CASE-Utilities-Python/commit/1cccae8eb3cf94b3a28f6490efa0fbf5c82ebd6b - https://github.com/casework/CASE-Utilities-Python/commit/5acb929dfb599709d1c8c90d1824dd79e0fd9e10 - https://github.com/casework/CASE-Utilities-Python/commit/7e02d18383eabbeb9fb4ec97d81438c9980a4790 - https://github.com/casework/CASE-Utilities-Python/commit/80551f49241c874c7c50e14abe05c5017630dad2 - https://github.com/casework/CASE-Utilities-Python/commit/939775f956796d0432ecabbf62782ed7ad1007b5 - https://github.com/casewo
://github.com/casework/CASE-Utilities-Python/commit/939775f956796d0432ecabbf62782ed7ad1007b5 - https://github.com/casework/CASE-Utilities-Python/commit/db428a0745dac4fdd888ced9c52f617695519f9d - https://github.com/casework/CASE-Utilities-Python/commit/e4ffadc3d56fd303b8f465d727c4a58213d311a1 - https://github.com/casework/CASE-Utilities-Python/commit/fca7388f09feccd3b9ea88e6df9c7a43a5349452 - https://github.com/casework/CASE-Utilities-Python/commit/fdc32414eccfcbde6be0fd91b7f491cc0779b02d#diff-e60b9cb8fb480ed27283a030a0898be3475992d78228f4045b12ce5cbb2f0509
CVE ID: CVE-2024-22195 State: PUBLISHED Published: 2024-01-11T02:25:44.239Z Last Updated: 2025-11-03T21:53:45.551Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: pallets Products: jinja Problem Types: CWE-79 Description: Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting (XSS). The Jinja `xmlattr` filter can be abused to inject arbitrary HTML attribute keys and values, bypassing the auto escaping mechanism and potentially leading to XSS. It may also be possibl
attribute keys and values, bypassing the auto escaping mechanism and potentially leading to XSS. It may also be possible to bypass attribute validation checks if they are blacklist-based. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95 - https://github.com/pallets/jinja/releases/tag/3.1.3 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5XCWZD464AJJJUBOO7CMPXQ4ROBC6JX2/ - https://lists.debian.org/debian-lts-announce/2024/01/msg00010.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/messa
nce/2024/01/msg00010.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O7YWRBX6JQCWC2XXCTZ55C7DPMGICCN3/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DELCVUUYX75I5K4Q5WMJG4MUZJA6VAIP/