Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-7348 State: PUBLISHED Published: 2024-08-08T13:00:02.130Z Last Updated: 2024-08-22T18:03:18.699Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: PostgreSQL Problem Types: CWE-367 Description: Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. Versions before PostgreSQL 16.4, 1
ut winning the race condition is trivial if the attacker retains an open transaction. Versions before PostgreSQL 16.4, 15.8, 14.13, 13.16, and 12.20 are affected. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.postgresql.org/support/security/CVE-2024-7348/
CVE ID: CVE-2024-7349 State: PUBLISHED Published: 2024-09-06T06:50:50.814Z Last Updated: 2024-09-06T13:34:03.168Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: chrisbadgett Products: LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes Problem Types: CWE-89 Description: The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to blind SQL Injection via the 'order' parameter in all versions up to, and including, 7.7.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-lev
icient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3a096506-b18e-419c-808b-6099baa628ce?source=cve - https://plugins.trac.wordpress.org/changeset/3139798/lifterlms/tags/7.7.6/includes/abstracts/abstract.llms.database.query.php
CVE ID: CVE-2024-7350 State: PUBLISHED Published: 2024-08-08T02:32:06.827Z Last Updated: 2024-08-08T13:23:12.522Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: reputeinfosystems Products: Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress Problem Types: CWE-288 Description: The Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to authentication bypass in versions 1.1.6 to 1.1.7. This is due to the plugin not properly verifying a user's identity prior to logging them in when completing a booking. This makes it possible for unauthenticated attackers to log in as register
to logging them in when completing a booking. This makes it possible for unauthenticated attackers to log in as registered users, including administrators, if they have access to that user's email. This is only exploitable when the 'Auto login user after successful booking' setting is enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4c367565-75f7-4dd7-a2f1-111df581bd7a?source=cve - https://plugins.trac.wordpress.org/browser/bookingpress-appointment-booking/trunk/core/classes/class.bookingpress_customers.php#L339 - https://plugins.trac.wordpress.org/changeset/3130266/bookingpress-appointment-booking/trunk/core/
s_customers.php#L339 - https://plugins.trac.wordpress.org/changeset/3130266/bookingpress-appointment-booking/trunk/core/classes/class.bookingpress_customers.php
CVE ID: CVE-2024-7351 State: PUBLISHED Published: 2024-08-24T07:33:44.437Z Last Updated: 2024-08-26T19:31:58.959Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: presstigers Products: Simple Job Board Problem Types: CWE-502 Description: The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.3 via deserialization of untrusted input when editing job applications. This makes it possible for authenticated attackers, with Editor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme instal
nown POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ba6312b9-1b66-4b4f-a78d-515fa4aab63b?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3138348%40simple-job-board%2Ftrunk&old=3113171%40simple-job-board%2Ftrunk&sfp_email=&sfph_mail=#file12
CVE ID: CVE-2024-7352 State: PUBLISHED Published: 2024-11-22T21:31:02.811Z Last Updated: 2024-11-26T16:03:25.591Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: PDF-XChange Products: PDF-XChange Editor Problem Types: CWE-787 Description: PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the l
us page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23550. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1037/
CVE ID: CVE-2024-7353 State: PUBLISHED Published: 2024-08-07T11:30:53.170Z Last Updated: 2024-08-07T14:47:51.772Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: wptipsntricks Products: Accept Stripe Payments Problem Types: CWE-79 Description: The Accept Stripe Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's accept_stripe_payment_ng shortcode in all versions up to, and including, 2.0.86 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will
or authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f321e41a-3945-47db-a215-aeb001b7b80b?source=cve - https://portswigger.net/research/xss-in-hidden-input-fields - https://plugins.trac.wordpress.org/browser/stripe-payments/trunk/includes/shortcodes/class-asp-shortcode-ng.php#L715 - https://wordpress.org/plugins/stripe-payments/#developers
CVE ID: CVE-2024-7354 State: PUBLISHED Published: 2024-09-02T06:00:01.326Z Last Updated: 2024-09-03T14:01:08.897Z Vendors: Unknown Products: Ninja Forms Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Ninja Forms WordPress plugin before 3.8.11 does not escape an URL before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3c871dcd-51d7-4d3b-b036-efa9e066ff41/
CVE ID: CVE-2024-7355 State: PUBLISHED Published: 2024-08-07T12:30:17.310Z Last Updated: 2024-08-07T13:12:15.350Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpdevart Products: Organization chart Problem Types: CWE-79 Description: The Organization chart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_input’ and 'node_description' parameter in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an inje
iber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. By default, this can only be exploited by administrators, but the ability to use and configure charts can be extended to subscribers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/04641506-5b0e-48bc-ad50-c81dda996ecf?source=cve - https://plugins.trac.wordpress.org/browser/organization-chart/trunk/admin/assets/js/tree_page.js#L207 - https://wordpress.org/plugins/organization-chart/#developers - https://plugins.trac.wordpress.org/browser/organization-chart/trunk/admin/assets/js/tree_page.j
tion-chart/#developers - https://plugins.trac.wordpress.org/browser/organization-chart/trunk/admin/assets/js/tree_page.js#L217 - https://plugins.trac.wordpress.org/changeset/3131569/#file0
CVE ID: CVE-2024-7356 State: PUBLISHED Published: 2024-08-03T09:37:19.855Z Last Updated: 2024-08-05T18:50:16.923Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: dylanjkotze Products: Zephyr Project Manager Problem Types: CWE-79 Description: The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘filename’ parameter in all versions up to, and including, 3.3.100 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Ad
cess and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d7fa63b7-2e7f-4ed5-96b9-ae06d429af47?source=cve - https://plugins.trac.wordpress.org/browser/zephyr-project-manager/trunk/assets/js/core-admin.js#L2975 - https://wordpress.org/plugins/zephyr-project-manager/#developers - https://plugins.trac.wordpress.org/changeset/3129917/
CVE ID: CVE-2024-7357 State: PUBLISHED Published: 2024-08-01T13:00:09.320Z Last Updated: 2024-08-07T13:55:58.954Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DIR-600 Problem Types: CWE-78 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-600 up to 2.18. It has been rated as critical. This issue affects the function soapcgi_main of the file /soap.cgi. The manipulation of the argument service leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273329 was assigned to this vulnerability. NOTE: This vulnerability only affects produc
may be used. The identifier VDB-273329 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273329 - https://vuldb.com/?ctiid.273329 - https://vuldb.com/?submit.383695 - https://github.com/BeaCox/IoT_vuln/tree/main/D-Link/DIR-600/soapcgi_main_injection - https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10408
CVE ID: CVE-2024-7358 State: PUBLISHED Published: 2024-08-01T13:31:05.739Z Last Updated: 2024-08-01T14:45:12.374Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Point B Ltd Products: Getscreen Agent Problem Types: CWE-378 Description: A vulnerability was found in Point B Ltd Getscreen Agent 2.19.6 on Windows. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file getscreen.msi of the component Installation. The manipulation leads to creation of temporary file with insecure permissions. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier
access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-273337 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but was not able to provide a technical response in time. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273337 - https://vuldb.com/?ctiid.273337 - https://vuldb.com/?submit.374979 - https://github.com/SaumyajeetDas/Vulnerability/tree/main/GetScreen
CVE ID: CVE-2024-7359 State: PUBLISHED Published: 2024-08-01T16:31:04.815Z Last Updated: 2024-08-06T20:39:19.850Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Tracking Monitoring Management System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_establishment. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-273338 is the identifier assigned
launched remotely. The exploit has been disclosed to the public and may be used. VDB-273338 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273338 - https://vuldb.com/?ctiid.273338 - https://vuldb.com/?submit.383494 - https://gist.github.com/topsky979/6fbd27f1942d76f0392d883dfd8fef10
CVE ID: CVE-2024-7360 State: PUBLISHED Published: 2024-08-01T17:31:04.038Z Last Updated: 2024-08-07T14:30:42.876Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SourceCodester Products: Tracking Monitoring Management System Problem Types: CWE-352 Description: A vulnerability classified as problematic has been found in SourceCodester Tracking Monitoring Management System 1.0. This affects an unknown part of the file /ajax.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273339. Additional Analyst Notes: - CIS
e public and may be used. The associated identifier of this vulnerability is VDB-273339. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273339 - https://vuldb.com/?ctiid.273339 - https://vuldb.com/?submit.383495 - https://gist.github.com/topsky979/ac97a335ed9fcf4eefe3c952928a6d0e
CVE ID: CVE-2024-7361 State: PUBLISHED Published: 2024-08-01T18:00:06.799Z Last Updated: 2024-08-07T14:40:20.678Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Tracking Monitoring Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Tracking Monitoring Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=save_establishment. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273340. Additional Analy
t has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273340. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273340 - https://vuldb.com/?ctiid.273340 - https://vuldb.com/?submit.383496 - https://gist.github.com/topsky979/f01eca07fce854bf5de96588126cdd7e
CVE ID: CVE-2024-7362 State: PUBLISHED Published: 2024-08-01T18:31:04.198Z Last Updated: 2024-08-01T19:05:38.208Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Tracking Monitoring Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Tracking Monitoring Management System 1.0. This issue affects some unknown processing of the file /manage_user.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273341 was assigned to this vulnerability. Addit
it has been disclosed to the public and may be used. The identifier VDB-273341 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273341 - https://vuldb.com/?ctiid.273341 - https://vuldb.com/?submit.383497 - https://gist.github.com/topsky979/96f43bd9f1477a56d1c8f8e08f0e5449
CVE ID: CVE-2024-7363 State: PUBLISHED Published: 2024-08-01T19:00:06.948Z Last Updated: 2024-08-01T20:41:51.250Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Tracking Monitoring Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Tracking Monitoring Management System 1.0. Affected is an unknown function of the file /manage_person.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-273342 is the identifier assigned to this vulnerability. Additional A
been disclosed to the public and may be used. VDB-273342 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273342 - https://vuldb.com/?ctiid.273342 - https://vuldb.com/?submit.383498 - https://gist.github.com/topsky979/69455a114e8718af6c611c86fbdc78b5
CVE ID: CVE-2024-7364 State: PUBLISHED Published: 2024-08-01T19:31:04.474Z Last Updated: 2024-08-01T20:41:24.633Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Tracking Monitoring Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Tracking Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manage_records.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-27
The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273343. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273343 - https://vuldb.com/?ctiid.273343 - https://vuldb.com/?submit.383499 - https://gist.github.com/topsky979/b507afabd4e3da39e7eca6103435ba3a
CVE ID: CVE-2024-7365 State: PUBLISHED Published: 2024-08-01T20:00:10.044Z Last Updated: 2024-08-08T19:13:11.360Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Tracking Monitoring Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manage_establishment.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273344. Additional
exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273344. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273344 - https://vuldb.com/?ctiid.273344 - https://vuldb.com/?submit.383500 - https://gist.github.com/topsky979/18a15150a99566009476d918d79a0bf9
CVE ID: CVE-2024-7366 State: PUBLISHED Published: 2024-08-01T20:31:04.482Z Last Updated: 2024-08-01T20:40:30.374Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Tracking Monitoring Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?action=login of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273345 was assigned t
attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273345 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273345 - https://vuldb.com/?ctiid.273345 - https://vuldb.com/?submit.383501 - https://gist.github.com/topsky979/c0efd2f3e6e146eb9e110e5e63cb5fbb
CVE ID: CVE-2024-7367 State: PUBLISHED Published: 2024-08-01T21:00:08.722Z Last Updated: 2024-08-02T15:07:18.140Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SourceCodester Products: Simple Realtime Quiz System Problem Types: CWE-352 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Simple Realtime Quiz System 1.0. This affects an unknown part of the file /ajax.php?action=save_user. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273351. Additional Analyst Notes: -
o the public and may be used. The associated identifier of this vulnerability is VDB-273351. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273351 - https://vuldb.com/?ctiid.273351 - https://vuldb.com/?submit.383515 - https://gist.github.com/topsky979/03ae83fd32a94c85f910c8e3a85fa056
CVE ID: CVE-2024-7368 State: PUBLISHED Published: 2024-08-01T21:31:03.657Z Last Updated: 2024-08-02T14:34:52.233Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Simple Realtime Quiz System Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester Simple Realtime Quiz System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /ajax.php?action=save_quiz. The manipulation of the argument title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273352. Additional Analyst Notes:
n disclosed to the public and may be used. The identifier of this vulnerability is VDB-273352. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273352 - https://vuldb.com/?ctiid.273352 - https://vuldb.com/?submit.383516 - https://gist.github.com/topsky979/ad93f7046d905cef9277304dd3ac8061