Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-41631 State: PUBLISHED Published: 2024-07-29T00:00:00.000Z Last Updated: 2025-03-14T16:13:37.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in host-host NEUQ_board v.1.0 allows a remote attacker to cause a denial of service via the password.h component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://platform.akyuu.space/exploit.txt - https://github.com/host-host
CVE ID: CVE-2024-41637 State: PUBLISHED Published: 2024-07-29T00:00:00 Last Updated: 2024-08-02T04:46:52.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: RaspAP before 3.1.5 allows an attacker to escalate privileges: the www-data user has write access to the restapi.service file and also possesses Sudo privileges to execute several critical commands without a password. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/RaspAP/raspap-webgui - https://blog.0xzon.dev/2024-07-27-CVE-2024-41637/
CVE ID: CVE-2024-41640 State: PUBLISHED Published: 2024-07-29T00:00:00 Last Updated: 2024-08-02T04:46:52.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/alemusix/CVE-2024-41640
CVE ID: CVE-2024-41643 State: PUBLISHED Published: 2025-03-26T00:00:00.000Z Last Updated: 2025-03-27T14:13:55.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gavpherk.github.io/GavinKelsey/
CVE ID: CVE-2024-41644 State: PUBLISHED Published: 2024-12-06T00:00:00 Last Updated: 2024-12-11T20:07:16.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via the dyn_param_handler_ component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ros-navigation/navigation2/issues/4496 - https://github.com/ros-navigation/navigation2/pull/4521 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-41645 State: PUBLISHED Published: 2024-12-06T00:00:00 Last Updated: 2024-12-11T19:16:34.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2__amcl. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ros-navigation/navigation2/pull/4521 - https://github.com/ros-navigation/navigation2/issues/4497 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-41646 State: PUBLISHED Published: 2024-12-06T00:00:00 Last Updated: 2024-12-11T19:28:37.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_dwb_controller. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ros-navigation/navigation2/issues/4437 - https://github.com/ros-navigation/navigation2/pull/4463 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-41647 State: PUBLISHED Published: 2024-12-06T00:00:00 Last Updated: 2024-12-10T17:17:19.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_mppi_controller. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ros-navigation/navigation2/pull/4463 - https://github.com/ros-navigation/navigation2/issues/4436 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-41648 State: PUBLISHED Published: 2024-12-06T00:00:00 Last Updated: 2024-12-11T19:30:46.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_regulated_pure_pursuit_controller. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ros-navigation/navigation2/pull/4463 - https://github.com/ros-navigation/navigation2/issues/4438 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-41649 State: PUBLISHED Published: 2024-12-06T00:00:00 Last Updated: 2024-12-11T19:33:02.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the executor_thread_. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/open-navigation/navigation2/issues/4323 - https://github.com/ros-navigation/navigation2/pull/4385 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-41650 State: PUBLISHED Published: 2024-12-06T00:00:00 Last Updated: 2024-12-11T19:36:24.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_costmap_2d. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ros-navigation/navigation2/issues/4489 - https://github.com/ros-navigation/navigation2/pull/4495 - https://github.com/GoesM/ROS-CVE-CNVDs
CVE ID: CVE-2024-41651 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-10-09T17:54:52.491089 Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Prestashop v.8.1.7 and before allows a remote attacker to execute arbitrary code via the module upgrade functionality. NOTE: this is disputed by multiple parties, who report that exploitation requires that an attacker be able to hijack network requests made by an admin user (who, by design, is allowed to change the code that is running on the server). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Fckroun/CVE-2024-41651/tree/main
CVE ID: CVE-2024-41655 State: PUBLISHED Published: 2024-07-23T14:49:34.078Z Last Updated: 2024-08-02T04:46:52.666Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: danocmx Products: node-tf2-item-format Problem Types: CWE-624, CWE-1333 Description: TF2 Item Format helps users format TF2 items to the community standards. Versions of `tf2-item-format` since at least `4.2.6` and prior to `5.9.14` are vulnerable to a Regular Expression Denial of Service (ReDoS) attack when parsing crafted user input. This vulnerability can be exploited by an attacker to perform DoS attacks on any service that uses any `tf2-item-format` to parse user input. Version `5.9.14` contains
ker to perform DoS attacks on any service that uses any `tf2-item-format` to parse user input. Version `5.9.14` contains a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/danocmx/node-tf2-item-format/security/advisories/GHSA-8h55-q5qq-p685 - https://github.com/danocmx/node-tf2-item-format/commit/5cffcc16a9261d6a937bda72bfe6830e02e31eec - https://github.com/danocmx/node-tf2-item-format/releases/tag/v5.9.14
CVE ID: CVE-2024-41656 State: PUBLISHED Published: 2024-07-23T21:30:25.526Z Last Updated: 2024-08-13T20:29:11.466Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: getsentry Products: sentry Problem Types: CWE-79 Description: Sentry is an error tracking and performance monitoring platform. Starting in version 10.0.0 and prior to version 24.7.1, an unsanitized payload sent by an Integration platform integration allows storing arbitrary HTML tags on the Sentry side with the subsequent rendering them on the Issues page. Self-hosted Sentry users may be impacted in case of untrustworthy Integration platform integrations sending external issues from their side to Sen
ay be impacted in case of untrustworthy Integration platform integrations sending external issues from their side to Sentry. A patch has been released in Sentry 24.7.1. For Sentry SaaS customers, no action is needed. This has been patched on July 23, and even prior to the fix, the exploitation was not possible due to the strict Content Security Policy deployed on sentry.io site. For self-hosted users, the maintainers of Sentry strongly recommend upgrading Sentry to the latest version. If it is not possible, one could enable CSP on one's self-hosted installation with `CSP_REPORT_ONLY = False` (enforcing mode). This will mitigate the risk of cross-site scripting. Additional Analyst Notes: - CI
PORT_ONLY = False` (enforcing mode). This will mitigate the risk of cross-site scripting. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/getsentry/sentry/security/advisories/GHSA-fm88-hc3v-3www - https://github.com/getsentry/sentry/pull/74648 - https://github.com/getsentry/sentry/commit/5c679521f1539eabfb81287bfc30f34dbecd373e - https://github.com/getsentry/self-hosted/releases/tag/24.7.1
CVE ID: CVE-2024-41657 State: PUBLISHED Published: 2024-08-20T20:11:29.788Z Last Updated: 2024-08-20T20:54:45.045Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: casdoor Products: casdoor Problem Types: CWE-942 Description: Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform. In Casdoor 1.577.0 and earlier, a logic vulnerability exists in the beego filter CorsFilter that allows any website to make cross domain requests to Casdoor as the logged in user. Due to the a logic error in checking only for a prefix when authenticating the Origin header, any domain can create a valid subdomain with a valid subdomain prefix (Ex: lo
fix when authenticating the Origin header, any domain can create a valid subdomain with a valid subdomain prefix (Ex: localhost.example.com), allowing the website to make requests to Casdoor as the current signed-in user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2024-035_GHSL-2024-036_casdoor/ - https://github.com/casdoor/casdoor/blob/v1.577.0/routers/cors_filter.go#L45
CVE ID: CVE-2024-41658 State: PUBLISHED Published: 2024-08-20T20:11:33.751Z Last Updated: 2024-08-21T13:42:37.116Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: casdoor Products: casdoor Problem Types: CWE-79 Description: Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform. In Casdoor 1.577.0 and earlier, he purchase URL that is created to generate a WechatPay QR code is vulnerable to reflected XSS. When purchasing an item through casdoor, the product page allows you to pay via wechat pay. When using wechat pay, a QR code with the wechat pay link is displayed on the payment page, hosted on the domain of casdoor. This
wechat pay, a QR code with the wechat pay link is displayed on the payment page, hosted on the domain of casdoor. This page takes a query parameter from the url successUrl, and redirects the user to that url after a successful purchase. Because the user has no reason to think that the payment page contains sensitive information, they may share it with other or can be social engineered into sending it to others. An attacker can then craft the casdoor link with a special url and send it back to the user, and once payment has gone though an XSS attack occurs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2024-035_GHSL-2024-036_c
st Notes: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2024-035_GHSL-2024-036_casdoor/ - https://github.com/casdoor/casdoor/blob/v1.577.0/web/src/QrCodePage.js
CVE ID: CVE-2024-41659 State: PUBLISHED Published: 2024-08-20T19:54:08.182Z Last Updated: 2025-01-09T19:15:30.589Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: usememos Products: memos Problem Types: CWE-942 Description: memos is a privacy-first, lightweight note-taking service. A CORS misconfiguration exists in memos 0.20.1 and earlier where an arbitrary origin is reflected with Access-Control-Allow-Credentials set to true. This may allow an attacking website to make a cross-origin request, allowing the attacker to read private information or make privileged changes to the system as the vulnerable user account. This vulnerability is fixed in 0.21.0. Additi
n or make privileged changes to the system as the vulnerable user account. This vulnerability is fixed in 0.21.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2024-034_memos/ - https://github.com/usememos/memos/commit/8101a5e0b162044c16385bee4f12a4a653d050b9 - https://github.com/usememos/memos/blob/v0.20.1/server/server.go#L163
CVE ID: CVE-2024-41660 State: PUBLISHED Published: 2024-07-31T19:37:46.455Z Last Updated: 2024-07-31T20:16:53.157Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: openbmc Products: slpd-lite Problem Types: CWE-120 Description: slpd-lite is a unicast SLP UDP server. Any OpenBMC system that includes the slpd-lite package is impacted. Installing this package is the default when building OpenBMC. Nefarious users can send slp packets to the BMC using UDP port 427 to cause memory overflow issues within the slpd-lite daemon on the BMC. Patches will be available in the latest openbmc/slpd-lite repository. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
ill be available in the latest openbmc/slpd-lite repository. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openbmc/slpd-lite/security/advisories/GHSA-wmgv-jffg-v3xr
CVE ID: CVE-2024-41661 State: REJECTED Published: 2024-07-23T17:22:01.009Z Last Updated: 2024-08-29T22:20:26.289Z Description: No description available.
CVE ID: CVE-2024-41662 State: PUBLISHED Published: 2024-07-24T16:55:37.447Z Last Updated: 2024-08-02T04:46:52.680Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: vnotex Products: vnote Problem Types: CWE-79 Description: VNote is a note-taking platform. A Cross-Site Scripting (XSS) vulnerability has been identified in the Markdown rendering functionality of versions 3.18.1 and prior of the VNote note-taking application. This vulnerability allows the injection and execution of arbitrary JavaScript code through which remote code execution can be achieved. A patch for this issue is available at commit f1af78573a0ef51d6ef6a0bc4080cddc8f30a545. Other mitigation str
e achieved. A patch for this issue is available at commit f1af78573a0ef51d6ef6a0bc4080cddc8f30a545. Other mitigation strategies include implementing rigorous input sanitization for all Markdown content and utilizing a secure Markdown parser that appropriately escapes or strips potentially dangerous content. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/vnotex/vnote/security/advisories/GHSA-w655-h68w-vxxc - https://github.com/vnotex/vnote/commit/f1af78573a0ef51d6ef6a0bc4080cddc8f30a545
CVE ID: CVE-2024-41663 State: PUBLISHED Published: 2024-07-23T16:06:15.405Z Last Updated: 2024-08-02T04:46:52.682Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: thinkst Products: canarytokens Problem Types: CWE-79 Description: Canarytokens help track activity and actions on a network. A Cross-Site Scripting vulnerability was identified in the "Cloned Website" Canarytoken, whereby the Canarytoken's creator can attack themselves. The creator of a slow-redirect Canarytoken can insert Javascript into the destination URL of their slow redirect token. When the creator later browses the management page for their own Canarytoken, the Javascript executes. This is a se
ken. When the creator later browses the management page for their own Canarytoken, the Javascript executes. This is a self-XSS. An attacker could create a Canarytoken with this self-XSS, and send the management link to a victim. When they click on it, the Javascript would execute. However, no sensitive information (ex. session information) will be disclosed to the malicious actor. This issue is now patched on Canarytokens.org. Users of self-hosted Canarytokens installations can update by pulling the latest Docker image, or any Docker image after `sha-097d91a`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/thinkst/canarytokens/sec
alyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/thinkst/canarytokens/security/advisories/GHSA-xj9h-3j9c-c95h
CVE ID: CVE-2024-41664 State: PUBLISHED Published: 2024-07-23T16:59:59.755Z Last Updated: 2024-08-02T04:46:52.665Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: thinkst Products: canarytokens Problem Types: CWE-918 Description: Canarytokens help track activity and actions on a network. Prior to `sha-8ea5315`, Canarytokens.org was vulnerable to a blind SSRF in the Webhook alert feature. When a Canarytoken is created, users choose to receive alerts either via email or via a webhook. If a webhook is supplied when a Canarytoken is first created, the site will make a test request to the supplied URL to ensure it accepts alert notification HTTP requests. No safe
ed, the site will make a test request to the supplied URL to ensure it accepts alert notification HTTP requests. No safety checks were performed on the URL, leading to a Server-Side Request Forgery vulnerability. The SSRF is Blind because the content of the response is not displayed to the creating user; they are simply told whether an error occurred in making the test request. Using the Blind SSRF, it was possible to map out open ports for IPs inside the Canarytokens.org infrastructure. This issue is now patched on Canarytokens.org. Users of self-hosted Canarytokens installations can update by pulling the latest Docker image, or any Docker image after `sha-097d91a`. Additional Analyst Notes
lations can update by pulling the latest Docker image, or any Docker image after `sha-097d91a`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/thinkst/canarytokens/security/advisories/GHSA-g6h5-pf7p-qmvj
CVE ID: CVE-2024-41665 State: PUBLISHED Published: 2024-07-23T17:14:56.459Z Last Updated: 2024-08-02T04:46:52.459Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: ampache Products: ampache Problem Types: CWE-79 Description: Ampache, a web based audio/video streaming application and file manager, has a stored cross-site scripting (XSS) vulnerability in versions prior to 6.6.0. This vulnerability exists in the "Playlists - Democratic - Configure Democratic Playlist" feature. An attacker with Content Manager permissions can set the Name field to `<svg onload=alert(8)>`. When any administrator or user accesses the Democratic functionality, they will be affected
to `<svg onload=alert(8)>`. When any administrator or user accesses the Democratic functionality, they will be affected by this stored XSS vulnerability. The attacker can exploit this vulnerability to obtain the cookies of any user or administrator who accesses the `democratic.php` file. Version 6.6.0 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ampache/ampache/security/advisories/GHSA-cp44-89r2-fxph
CVE ID: CVE-2024-41666 State: PUBLISHED Published: 2024-07-24T17:16:37.730Z Last Updated: 2024-08-12T21:02:57.505Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: argoproj Products: argo-cd Problem Types: CWE-269 Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD has a Web-based terminal that allows users to get a shell inside a running pod, just as they would with kubectl exec. Starting in version 2.6.0, when the administrator enables this function and grants permission to the user `p, role:myrole, exec, create, */*, allow`, even if the user revokes this permission, the user can still perform operations in the con
e, exec, create, */*, allow`, even if the user revokes this permission, the user can still perform operations in the container, as long as the user keeps the terminal view open for a long time. Although the token expiration and revocation of the user are fixed, however, the fix does not address the situation of revocation of only user `p, role:myrole, exec, create, */*, allow` permissions, which may still lead to the leakage of sensitive information. A patch for this vulnerability has been released in Argo CD versions 2.11.7, 2.10.16, and 2.9.21. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/argoproj/argo-cd/security/advisories/G
CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/argoproj/argo-cd/security/advisories/GHSA-v8wx-v5jq-qhhw - https://github.com/argoproj/argo-cd/commit/05edb2a9ca48f0f10608c1b49fbb0cf7164f6476 - https://github.com/argoproj/argo-cd/commit/e96f32d233504101ddac028a5bf8117433d333d6 - https://github.com/argoproj/argo-cd/commit/ef535230d8bd8ad7b18aab1ea1063e9751d348c4 - https://drive.google.com/file/d/1Fynj5Sho8Lf8CETqsNXZyPKlTDdmgJuN/view?usp=sharing
CVE ID: CVE-2024-41667 State: PUBLISHED Published: 2024-07-24T17:29:58.564Z Last Updated: 2024-08-06T19:35:10.420Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenIdentityPlatform Products: OpenAM Problem Types: CWE-94 Description: OpenAM is an open access management solution. In versions 15.0.3 and prior, the `getCustomLoginUrlTemplate` method in RealmOAuth2ProviderSettings.java is vulnerable to template injection due to its usage of user input. Although the developer intended to implement a custom URL for handling login to override the default OpenAM login, they did not restrict the `CustomLoginUrlTemplate`, allowing it to be set freely. Commit fcb8432aa
default OpenAM login, they did not restrict the `CustomLoginUrlTemplate`, allowing it to be set freely. Commit fcb8432aa77d5b2e147624fe954cb150c568e0b8 introduces `TemplateClassResolver.SAFER_RESOLVER` to disable the resolution of commonly exploited classes in FreeMarker template injection. As of time of publication, this fix is expected to be part of version 15.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/OpenIdentityPlatform/OpenAM/security/advisories/GHSA-7726-43hg-m23v - https://github.com/OpenIdentityPlatform/OpenAM/commit/fcb8432aa77d5b2e147624fe954cb150c568e0b8
CVE ID: CVE-2024-41668 State: PUBLISHED Published: 2024-07-23T18:14:41.169Z Last Updated: 2024-08-02T04:46:52.924Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: cBioPortal Products: cbioportal Problem Types: CWE-918 Description: The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication, cBioPortal could allow someone to perform a Server Side Request Forgery (SSRF) attack. Logged in users could do the same on private instances. A fix has been released in version 6.0.12. As a workaround, one might be able to disable `/proxy` e