Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-43825 State: PUBLISHED Published: 2022-02-22T22:45:12.000Z Last Updated: 2025-04-23T19:01:15.613Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L) Vendors: envoyproxy Products: envoy Problem Types: CWE-416 Description: Envoy is an open source edge and service proxy, designed for cloud-native applications. Sending a locally generated response must stop further processing of request or response data. Envoy tracks the amount of buffered request and response data and aborts the request if the amount of buffered data is over the limit by sending 413 or 500 responses. However when the buffer overflows while response is processed by the filter chain the oper
sending 413 or 500 responses. However when the buffer overflows while response is processed by the filter chain the operation may not be aborted correctly and result in accessing a freed memory block. If this happens Envoy will crash resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/envoyproxy/envoy/security/advisories/GHSA-h69p-g6xg-mhhh - https://github.com/envoyproxy/envoy/commit/148de954ed3585d8b4298b424aa24916d0de6136
CVE ID: CVE-2021-43826 State: PUBLISHED Published: 2022-02-22T22:45:22.000Z Last Updated: 2025-04-23T19:01:09.708Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: envoyproxy Products: envoy Problem Types: CWE-416 Description: Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions of Envoy a crash occurs when configured for :ref:`upstream tunneling <envoy_v3_api_field_extensions.filters.network.tcp_proxy.v3.TcpProxy.tunneling_config>` and the downstream connection disconnects while the the upstream connection or http/2 stream is still being established. There are no workarounds for this issue. Users are advi
upstream connection or http/2 stream is still being established. There are no workarounds for this issue. Users are advised to upgrade. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/envoyproxy/envoy/security/advisories/GHSA-cmx3-fvgf-83mf - https://github.com/envoyproxy/envoy/commit/ce0ae309057a216aba031aff81c445c90c6ef145
CVE ID: CVE-2021-43827 State: PUBLISHED Published: 2021-12-14T22:20:09 Last Updated: 2024-08-04T04:03:08.963Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: discourse Products: discourse-footnote Problem Types: CWE-755 Description: discourse-footnote is a library providing footnotes for posts in Discourse. ### Impact When posting an inline footnote wrapped in `<a>` tags (e.g. `<a>^[footnote]</a>`, the resulting rendered HTML would include a nested `<a>`, which is stripped by Nokogiri because it is not valid. This then caused a javascript error on topic pages because we were looking for an `<a>` element inside the footnote reference span and getting its ID,
rror on topic pages because we were looking for an `<a>` element inside the footnote reference span and getting its ID, and because it did not exist we got a null reference error in javascript. Users are advised to update to version 0.2. As a workaround editing offending posts from the rails console or the database console for self-hosters, or disabling the plugin in the admin panel can mitigate this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/discourse/discourse-footnote/security/advisories/GHSA-58vr-c56v-qr57 - https://github.com/discourse/discourse-footnote/commit/796617e0131277011207541313522cd1946661ab
CVE ID: CVE-2021-43828 State: PUBLISHED Published: 2021-12-14T19:20:17 Last Updated: 2024-08-04T04:10:15.707Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Patrowl Products: PatrowlManager Problem Types: CWE-269 Description: PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.77 an improper privilege management (IDOR) has been found in PatrowlManager. All imports findings file is placed under /media/imports/<owner_id>/<tmp_file> In that, owner_id is predictable and tmp_file is in format of import_<ownder_id>_<time_created>, for example: import_1_1639213059582.json This filename is predictable and allows an
f import_<ownder_id>_<time_created>, for example: import_1_1639213059582.json This filename is predictable and allows anyone without logging in to download all finding import files This vulnerability is capable of allowing unlogged in users to download all finding imports file. Users are advised to update to 1.7.7 as soon as possible. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Patrowl/PatrowlManager/security/advisories/GHSA-x4wp-xvq7-w5vr - https://huntr.dev/bounties/fe6248f1-603d-43df-816c-c75534a56f72
CVE ID: CVE-2021-43829 State: PUBLISHED Published: 2021-12-14T19:25:18 Last Updated: 2024-08-04T04:10:15.735Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: Patrowl Products: PatrowlManager Problem Types: CWE-434 Description: PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.7.7 PatrowlManager unrestrictly handle upload files in the findings import feature. This vulnerability is capable of uploading dangerous type of file to server leading to XSS attacks and potentially other forms of code injection. Users are advised to update to 1.7.7 as soon as possible. There are no known workarounds for this issue. A
de injection. Users are advised to update to 1.7.7 as soon as possible. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Patrowl/PatrowlManager/security/advisories/GHSA-5hc9-6hq4-2xfx - https://github.com/Patrowl/PatrowlManager/commit/2287c9715d2e7ef11b44bb0ad4a57727654f2203 - https://huntr.dev/bounties/17324785-f83a-4058-ac40-03f2bfa16399/
CVE ID: CVE-2021-43830 State: PUBLISHED Published: 2021-12-14T19:25:12 Last Updated: 2024-08-04T04:10:15.747Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: opf Products: openproject Problem Types: CWE-89 Description: OpenProject is a web-based project management software. OpenProject versions >= 12.0.0 are vulnerable to a SQL injection in the budgets module. For authenticated users with the "Edit budgets" permission, the request to reassign work packages to another budget unsufficiently sanitizes user input in the `reassign_to_id` parameter. The vulnerability has been fixed in version 12.0.4. Versions prior to 12.0.0 are not affected. If you're upgrading fro
. The vulnerability has been fixed in version 12.0.4. Versions prior to 12.0.0 are not affected. If you're upgrading from an older version, ensure you are upgrading to at least version 12.0.4. If you are unable to upgrade in a timely fashion, the following patch can be applied: https://github.com/opf/openproject/pull/9983.patch Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opf/openproject/security/advisories/GHSA-f565-3whr-6m96 - https://github.com/opf/openproject/pull/9983 - https://github.com/opf/openproject/pull/9983.patch - https://github.com/opf/openproject/releases/tag/v12.0.4
CVE ID: CVE-2021-43831 State: PUBLISHED Published: 2021-12-15T19:50:10 Last Updated: 2024-08-04T04:10:15.716Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: gradio-app Products: gradio Problem Types: CWE-22 Description: Gradio is an open source framework for building interactive machine learning models and demos. In versions prior to 2.5.0 there is a vulnerability that affects anyone who creates and publicly shares Gradio interfaces. File paths are not restricted and users who receive a Gradio link can access any files on the host computer if they know the file names or file paths. This is limited only by the host operating system. Paths are opened in read on
f they know the file names or file paths. This is limited only by the host operating system. Paths are opened in read only mode. The problem has been patched in gradio 2.5.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gradio-app/gradio/security/advisories/GHSA-rhq2-3vr9-6mcr - https://github.com/gradio-app/gradio/commit/41bd3645bdb616e1248b2167ca83636a2653f781
CVE ID: CVE-2021-43832 State: PUBLISHED Published: 2022-01-04T19:20:10.000Z Last Updated: 2025-04-23T19:15:26.257Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: spinnaker Products: spinnaker Problem Types: CWE-306 Description: Spinnaker is an open source, multi-cloud continuous delivery platform. Spinnaker has improper permissions allowing pipeline creation & execution. This lets an arbitrary user with access to the gate endpoint to create a pipeline and execute it without authentication. If users haven't setup Role-based access control (RBAC) with-in spinnaker, this enables remote execution and access to deploy almost any resources on any account. Patche
(RBAC) with-in spinnaker, this enables remote execution and access to deploy almost any resources on any account. Patches are available on the latest releases of the supported branches and users are advised to upgrade as soon as possible. Users unable to upgrade should enable RBAC on ALL accounts and applications. This mitigates the ability of a pipeline to affect any accounts. Block application access unless permission are enabled. Users should make sure ALL application creation is restricted via appropriate wildcards. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/spinnaker/spinnaker/security/advisories/GHSA-9h7c-rfrp-gvgp
CVE ID: CVE-2021-43833 State: PUBLISHED Published: 2021-12-15T23:20:10 Last Updated: 2024-08-04T04:10:15.695Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: elabftw Products: elabftw Problem Types: CWE-287 Description: eLabFTW is an electronic lab notebook manager for research teams. In versions prior to 4.2.0 there is a vulnerability which allows any authenticated user to gain access to arbitrary accounts by setting a specially crafted email address. This vulnerability impacts all instances that have not set an explicit email domain name allowlist. Note that whereas neither administrators nor targeted users are notified of a change, an attacker will need to
lowlist. Note that whereas neither administrators nor targeted users are notified of a change, an attacker will need to control an account. The default settings require administrators to validate newly created accounts. The problem has been patched. Users should upgrade to at least version 4.2.0. For users unable to upgrade enabling an email domain allow list (from Sysconfig panel, Security tab) will completely resolve the issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/elabftw/elabftw/security/advisories/GHSA-v659-q2fh-v99w - https://github.com/elabftw/elabftw/releases/tag/4.2.0
CVE ID: CVE-2021-43834 State: PUBLISHED Published: 2021-12-15T23:20:15 Last Updated: 2024-08-04T04:10:15.748Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: elabftw Products: elabftw Problem Types: CWE-287 Description: eLabFTW is an electronic lab notebook manager for research teams. In versions prior to 4.2.0 there is a vulnerability which allows an attacker to authenticate as an existing user, if that user was created using a single sign-on authentication option such as LDAP or SAML. It impacts instances where LDAP or SAML is used for authentication instead of the (default) local password mechanism. Users should upgrade to at least version 4.2.0. Additi
authentication instead of the (default) local password mechanism. Users should upgrade to at least version 4.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/elabftw/elabftw/releases/tag/4.2.0 - https://github.com/elabftw/elabftw/security/advisories/GHSA-98rp-gx76-33ph
CVE ID: CVE-2021-43835 State: PUBLISHED Published: 2021-12-15T20:00:16 Last Updated: 2024-08-04T04:10:15.699Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: sulu Products: sulu Problem Types: CWE-269 Description: Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions Sulu users who have access to any subset of the admin UI are able to elevate their privilege. Over the API it was possible for them to give themselves permissions to areas which they did not already had. This issue was introduced in 2.0.0-RC1 with the new ProfileController putAction. The versions have been patched in 2.2.18, 2.3.8 and 2.4.0. For
d in 2.0.0-RC1 with the new ProfileController putAction. The versions have been patched in 2.2.18, 2.3.8 and 2.4.0. For users unable to upgrade the only known workaround is to apply a patch to the ProfileController manually. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sulu/sulu/security/advisories/GHSA-84px-q68r-2fc9 - https://github.com/sulu/sulu/commit/30bf8b5a4f83b6f2171a696011757d095edaa28a
CVE ID: CVE-2021-43836 State: PUBLISHED Published: 2021-12-15T20:10:10 Last Updated: 2024-08-04T04:10:16.325Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: sulu Products: sulu Problem Types: CWE-22 Description: Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions an attacker can read arbitrary local files via a PHP file include. In a default configuration this also leads to remote code execution. The problem is patched with the Versions 1.6.44, 2.2.18, 2.3.8, 2.4.0. For users unable to upgrade overwrite the service `sulu_route.generator.expression_token_provider` and wrap the translator before passing it t
grade overwrite the service `sulu_route.generator.expression_token_provider` and wrap the translator before passing it to the expression language. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sulu/sulu/security/advisories/GHSA-vx6j-pjrh-vgjh - https://github.com/sulu/sulu/commit/9c948f9ce350c68b53af8c3910e2cefc7f722b54
CVE ID: CVE-2021-43837 State: PUBLISHED Published: 2021-12-16T18:55:14 Last Updated: 2024-08-04T04:10:16.268Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: peopledoc Products: vault-cli Problem Types: CWE-74 Description: vault-cli is a configurable command-line interface tool (and python library) to interact with Hashicorp Vault. In versions before 3.0.0 vault-cli features the ability for rendering templated values. When a secret starts with the prefix `!template!`, vault-cli interprets the rest of the contents of the secret as a Jinja2 template. Jinja2 is a powerful templating engine and is not designed to safely render arbitrary templates. An attacker cont
plate. Jinja2 is a powerful templating engine and is not designed to safely render arbitrary templates. An attacker controlling a jinja2 template rendered on a machine can trigger arbitrary code, making this a Remote Code Execution (RCE) risk. If the content of the vault can be completely trusted, then this is not a problem. Otherwise, if your threat model includes cases where an attacker can manipulate a secret value read from the vault using vault-cli, then this vulnerability may impact you. In 3.0.0, the code related to interpreting vault templated secrets has been removed entirely. Users are advised to upgrade as soon as possible. For users unable to upgrade a workaround does exist. Usin
ed entirely. Users are advised to upgrade as soon as possible. For users unable to upgrade a workaround does exist. Using the environment variable `VAULT_CLI_RENDER=false` or the flag `--no-render` (placed between `vault-cli` and the subcommand, e.g. `vault-cli --no-render get-all`) or adding `render: false` to the vault-cli configuration yaml file disables rendering and removes the vulnerability. Using the python library, you can use: `vault_cli.get_client(render=False)` when creating your client to get a client that will not render templated secrets and thus operates securely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/peopledoc/vault-cli/security/a
rely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/peopledoc/vault-cli/security/advisories/GHSA-q34h-97wf-8r8j - https://github.com/peopledoc/vault-cli/commit/3ba3955887fd6b7d4d646c8b260f21cebf5db852 - https://podalirius.net/en/publications/grehack-2021-optimizing-ssti-payloads-for-jinja2/
CVE ID: CVE-2021-43838 State: PUBLISHED Published: 2021-12-17T18:20:11 Last Updated: 2024-08-04T04:10:16.268Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: yhatt Products: jsx-slack Problem Types: CWE-400 Description: jsx-slack is a library for building JSON objects for Slack Block Kit surfaces from JSX. In versions prior to 4.5.1 users are vulnerable to a regular expression denial-of-service (ReDoS) attack. If attacker can put a lot of JSX elements into `<blockquote>` tag, an internal regular expression for escaping characters may consume an excessive amount of computing resources. jsx-slack v4.5.1 has patched to a regex for escaping blockquote characters
e an excessive amount of computing resources. jsx-slack v4.5.1 has patched to a regex for escaping blockquote characters. Users are advised to upgrade as soon as possible. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yhatt/jsx-slack/security/advisories/GHSA-55xv-f85c-248q - https://github.com/yhatt/jsx-slack/commit/36e4a10405e4c7745333e245fcc5029c02c7065d
CVE ID: CVE-2021-43839 State: PUBLISHED Published: 2021-12-21T16:50:12 Last Updated: 2024-08-04T04:10:17.113Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: crypto-org-chain Products: cronos Problem Types: CWE-670 Description: Cronos is a commercial implementation of a blockchain. In Cronos nodes running versions before v0.6.5, it is possible to take transaction fees from Cosmos SDK's FeeCollector for the current block by sending a custom crafted MsgEthereumTx. This problem has been patched in Cronos v0.6.5. There are no tested workarounds. All validator node operators are recommended to upgrade to Cronos v0.6.5 at their earliest possible convenience. Additio
All validator node operators are recommended to upgrade to Cronos v0.6.5 at their earliest possible convenience. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/crypto-org-chain/cronos/security/advisories/GHSA-f854-hpxv-cw9r - https://github.com/crypto-org-chain/cronos/pull/270 - https://github.com/crypto-org-chain/cronos/commit/150ef237b37ac28c8136e1c0f494932860b9ebe8
CVE ID: CVE-2021-43840 State: PUBLISHED Published: 2021-12-17T18:15:11 Last Updated: 2024-08-04T04:10:16.823Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: discourse Products: message_bus Problem Types: CWE-22 Description: message_bus is a messaging bus for Ruby processes and web clients. In versions prior to 3.3.7 users who deployed message bus with diagnostics features enabled (default off) are vulnerable to a path traversal bug, which could lead to disclosure of secret information on a machine if an unintended user were to gain access to the diagnostic route. The impact is also greater if there is no proxy for your web application as the number of steps
to the diagnostic route. The impact is also greater if there is no proxy for your web application as the number of steps up the directories is not bounded. For deployments which uses a proxy, the impact varies. For example, If a request goes through a proxy like Nginx with `merge_slashes` enabled, the number of steps up the directories that can be read is limited to 3 levels. This issue has been patched in version 3.3.7. Users unable to upgrade should ensure that MessageBus::Diagnostics is disabled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/discourse/message_bus/security/advisories/GHSA-xmgj-5fh3-xjmm - https://github.com/discourse/message_bus/commit
thub.com/discourse/message_bus/security/advisories/GHSA-xmgj-5fh3-xjmm - https://github.com/discourse/message_bus/commit/9b6deee01ed474c7e9b5ff65a06bb0447b4db2ba
CVE ID: CVE-2021-43841 State: PUBLISHED Published: 2022-02-04T22:30:14.000Z Last Updated: 2025-04-22T18:27:22.922Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-79 Description: XWiki is a generic wiki platform offering runtime services for applications built on top of it. When using default XWiki configuration, it's possible for an attacker to upload an SVG containing a script executed when executing the download action on the file. This problem has been patched so that the default configuration doesn't allow to display the SVG files in the browser. Users are advised to update or to disallow uploads of SVG
ration doesn't allow to display the SVG files in the browser. Users are advised to update or to disallow uploads of SVG files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9jq9-c2cv-pcrj - https://github.com/xwiki/xwiki-platform/commit/5853d492b3a274db0d94d560e2a5ea988a271c62 - https://jira.xwiki.org/browse/XWIKI-18368 - https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Attachments#HAttachmentdisplayordownload
CVE ID: CVE-2021-43842 State: PUBLISHED Published: 2021-12-20T22:30:11 Last Updated: 2024-08-04T04:10:16.396Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Requarks Products: wiki Problem Types: CWE-79 Description: Wiki.js is a wiki app built on Node.js. Wiki.js versions 2.5.257 and earlier are vulnerable to stored cross-site scripting through a SVG file upload. By creating a crafted SVG file, a malicious Wiki.js user may stage a stored cross-site scripting attack. This allows the attacker to execute malicious JavaScript when the SVG is viewed directly by other users. Scripts do not execute when loaded inside a page via normal `<img>` tags. Commit 5d3e8149
iewed directly by other users. Scripts do not execute when loaded inside a page via normal `<img>` tags. Commit 5d3e81496fba1f0fbd64eeb855f30f69a9040718 fixes this vulnerability by adding an optional (enabled by default) SVG sanitization step to all file uploads that match the SVG mime type. As a workaround, disable file upload for all non-trusted users. Wiki.js version 2.5.260 is the first production version to contain a patch. Version 2.5.258 is the first development build to contain a patch and is available only as a Docker image as requarks/wiki:canary-2.5.258. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Requarks/wiki/security/advisories/GHSA-3qv4-
al Analyst Notes: - CVE Program Container: References: - https://github.com/Requarks/wiki/security/advisories/GHSA-3qv4-gp35-rgh7 - https://github.com/Requarks/wiki/commit/5d3e81496fba1f0fbd64eeb855f30f69a9040718 - https://github.com/Requarks/wiki/releases/tag/2.5.260
CVE ID: CVE-2021-43843 State: PUBLISHED Published: 2021-12-20T21:15:12 Last Updated: 2024-08-04T04:10:16.503Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: yhatt Products: jsx-slack Problem Types: CWE-400, CWE-1333 Description: jsx-slack is a package for building JSON objects for Slack block kit surfaces from JSX. The maintainers found the patch for CVE-2021-43838 in jsx-slack v4.5.1 is insufficient tfor protection from a Regular Expression Denial of Service (ReDoS) attack. If an attacker can put a lot of JSX elements into `<blockquote>` tag _with including multibyte characters_, an internal regular expression for escaping characters may consume an excessi