Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tches This issue has been patched in XWiki 12.10.5 and 13.2RC1. Two different patches are provided: - a first one to fix the CSRF problem - a more complex one that now relies on sending an email for the Forgot username process. ### Workarounds It's possible to fix the problem without uprading by editing the ForgotUsername page in version below 13.x, to use the following code: https://github.com/xwiki/xwiki-platform/blob/69548c0320cbd772540cf4668743e69f879812cf/xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-ui/src/main/resources/XWiki/ForgotUsername.xml#L39-L123 In version after 13.x it's also possible to edit manually the forgotusername.vm file, but it's real
sername.xml#L39-L123 In version after 13.x it's also possible to edit manually the forgotusername.vm file, but it's really encouraged to upgrade the version here. ### References * https://jira.xwiki.org/browse/XWIKI-18384 * https://jira.xwiki.org/browse/XWIKI-18408 ### For more information If you have any questions or comments about this advisory: * Open an issue in [Jira XWiki](https://jira.xwiki.org) * Email us at [security ML](mailto:security@xwiki.org) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vh5c-jqfg-mhrh - https://github.com/xwiki/xwiki-platform/commit/69548c0320cbd772540c
i-platform/security/advisories/GHSA-vh5c-jqfg-mhrh - https://github.com/xwiki/xwiki-platform/commit/69548c0320cbd772540cf4668743e69f879812cf - https://github.com/xwiki/xwiki-platform/commit/f0440dfcbba705e03f7565cd88893dde57ca3fa8 - https://jira.xwiki.org/browse/XWIKI-18384 - https://jira.xwiki.org/browse/XWIKI-18408
CVE ID: CVE-2021-32733 State: PUBLISHED Published: 2021-07-12T21:05:12 Last Updated: 2024-08-03T23:33:55.559Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-79 Description: Nextcloud Text is a collaborative document editing application that uses Markdown. A cross-site scripting vulnerability is present in versions prior to 19.0.13, 20.0.11, and 21.0.3. The Nextcloud Text application shipped with Nextcloud server used a `text/html` Content-Type when serving files to users. Due the strict Content-Security-Policy shipped with Nextcloud, this issue is not exploitable on modern browsers supporting Conten
trict Content-Security-Policy shipped with Nextcloud, this issue is not exploitable on modern browsers supporting Content-Security-Policy. The issue was fixed in versions 19.0.13, 20.0.11, and 21.0.3. As a workaround, use a browser that has support for Content-Security-Policy. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-x4w3-jhcr-57pq - https://github.com/nextcloud/text/pull/1689 - https://hackerone.com/reports/1241460
CVE ID: CVE-2021-32734 State: PUBLISHED Published: 2021-07-12T21:45:12 Last Updated: 2024-08-03T23:33:55.897Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-209 Description: Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, the Nextcloud Text application shipped with Nextcloud Server returned verbatim exception messages to the user. This could result in a full path disclosure on shared files. The issue was fixed in versions 19.0.13, 20.0.11, and 21.0.3. As a workaround, one may disable the Nextcloud Text application in Nextcloud Server
sions 19.0.13, 20.0.11, and 21.0.3. As a workaround, one may disable the Nextcloud Text application in Nextcloud Server app settings. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-6hf5-c2c4-2526 - https://github.com/nextcloud/text/pull/1695 - https://hackerone.com/reports/1246721 - https://security.gentoo.org/glsa/202208-17
CVE ID: CVE-2021-32735 State: PUBLISHED Published: 2021-07-02T14:45:11 Last Updated: 2024-08-03T23:33:54.879Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: getkirby Products: kirby Problem Types: CWE-80 Description: Kirby is a content management system. In Kirby CMS versions 3.5.5 and 3.5.6, the Panel's `ListItem` component (used in the pages and files section for example) displayed HTML in page titles as it is. This could be used for cross-site scripting (XSS) attacks. Malicious authenticated Panel users can escalate their privileges if they get access to the Panel session of an admin user. Visitors without Panel access can use the attack vector if the site
ey get access to the Panel session of an admin user. Visitors without Panel access can use the attack vector if the site allows changing site data from a frontend form. Kirby 3.5.7 patches the vulnerability. As a partial workaround, site administrators can protect against attacks from visitors without Panel access by validating or sanitizing provided data from the frontend form. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/getkirby/kirby/security/advisories/GHSA-2f2w-349x-vrqm - https://github.com/getkirby/kirby/releases/tag/3.5.7
CVE ID: CVE-2021-32736 State: PUBLISHED Published: 2021-06-30T17:25:09 Last Updated: 2024-08-03T23:33:55.799Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: thinkjs Products: think-helper Problem Types: CWE-1321 Description: think-helper defines a set of helper functions for ThinkJS. In versions of think-helper prior to 1.1.3, the software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype. The vulnerability is patched in version 1.1.3. Additional Analyst Notes: - CVE Program Container: References: - https:/
The vulnerability is patched in version 1.1.3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thinkjs/think-helper/security/advisories/GHSA-vr5m-3h59-7jcp
CVE ID: CVE-2021-32737 State: PUBLISHED Published: 2021-07-02T17:55:09 Last Updated: 2024-08-03T23:33:55.802Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: sulu Products: sulu Problem Types: CWE-79 Description: Sulu is an open-source PHP content management system based on the Symfony framework. In versions of Sulu prior to 1.6.41, it is possible for a logged in admin user to add a script injection (cross-site-scripting) in the collection title. The problem is patched in version 1.6.41. As a workaround, one may manually patch the affected JavaScript files in lieu of updating. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/
vaScript files in lieu of updating. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sulu/sulu/security/advisories/GHSA-gm2x-6475-g9r8 - https://github.com/sulu/sulu/releases/tag/1.6.41
CVE ID: CVE-2021-32738 State: PUBLISHED Published: 2021-07-02T18:15:11 Last Updated: 2024-08-03T23:33:54.900Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: stellar Products: js-stellar-sdk Problem Types: CWE-287 Description: js-stellar-sdk is a Javascript library for communicating with a Stellar Horizon server. The `Utils.readChallengeTx` function used in SEP-10 Stellar Web Authentication states in its function documentation that it reads and validates the challenge transaction including verifying that the `serverAccountID` has signed the transaction. In js-stellar-sdk before version 8.2.3, the function does not verify that the server has signed the transa
transaction. In js-stellar-sdk before version 8.2.3, the function does not verify that the server has signed the transaction. Applications that also used `Utils.verifyChallengeTxThreshold` or `Utils.verifyChallengeTxSigners` to verify the signatures including the server signature on the challenge transaction are unaffected as those functions verify the server signed the transaction. Applications calling `Utils.readChallengeTx` should update to version 8.2.3, the first version with a patch for this vulnerability, to ensure that the challenge transaction is completely valid and signed by the server creating the challenge transaction. Additional Analyst Notes: - CVE Program Container: Referenc
and signed by the server creating the challenge transaction. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/stellar/js-stellar-sdk/security/advisories/GHSA-6cgh-hjpw-q3gq - https://github.com/stellar/js-stellar-sdk/releases/tag/v8.2.3
CVE ID: CVE-2021-32739 State: PUBLISHED Published: 2021-07-15T14:55:11.000Z Last Updated: 2025-11-03T21:44:44.603Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Icinga Products: icinga2 Problem Types: CWE-267 Description: Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow privilege escalation for authenticated API users. With a read-ony user's credentials, an attacker can view most attributes of all config objects including `ticket_salt` of `ApiListener`. This salt is enough t
attacker can view most attributes of all config objects including `ticket_salt` of `ApiListener`. This salt is enough to compute a ticket for every possible common name (CN). A ticket, the master node's certificate, and a self-signed certificate are enough to successfully request the desired certificate from Icinga. That certificate may in turn be used to steal an endpoint or API user's identity. Versions 2.12.5 and 2.11.10 both contain a fix the vulnerability. As a workaround, one may either specify queryable types explicitly or filter out ApiListener objects. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Icinga/icinga2/security/advisories/GHSA-98wp-jc
Analyst Notes: - CVE Program Container: References: - https://github.com/Icinga/icinga2/security/advisories/GHSA-98wp-jc6q-x5q5 - https://icinga.com/blog/2021/07/02/releasing-icinga-2-12-5-2-11-10/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00010.html
CVE ID: CVE-2021-32740 State: PUBLISHED Published: 2021-07-06T14:15:12 Last Updated: 2024-08-03T23:33:54.833Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: sporkmonger Products: addressable Problem Types: CWE-400 Description: Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource consumption, leading to denial of service when matched against a URI. In typical usage, templates would n
olled resource consumption, leading to denial of service when matched against a URI. In typical usage, templates would not normally be read from untrusted user input, but nonetheless, no previous security advisory for Addressable has cautioned against doing this. Users of the parsing capabilities in Addressable but not the URI template capabilities are unaffected. The vulnerability is patched in version 2.8.0. As a workaround, only create Template objects from trusted sources that have been validated not to produce catastrophic backtracking. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sporkmonger/addressable/security/advisories/GHSA-jxhc-q857-3j6g - ht
Program Container: References: - https://github.com/sporkmonger/addressable/security/advisories/GHSA-jxhc-q857-3j6g - https://github.com/sporkmonger/addressable/commit/0d8a3127e35886ce9284810a7f2438bff6b43cbc - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WYPVOOQU7UB277UUERJMCNQLRCXRCIQ5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SDFQM2NHNAZ3NNUQZEJTYECYZYXV4UDS/
CVE ID: CVE-2021-32741 State: PUBLISHED Published: 2021-07-12T22:05:12 Last Updated: 2024-08-03T23:33:55.684Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-799 Description: Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, there was a lack of ratelimiting on the public share link mount endpoint. This may have allowed an attacker to enumerate potentially valid share tokens. The issue was fixed in versions 19.0.13, 20.0.11, and 21.0.3. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: References: - htt
0.0.11, and 21.0.3. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-crvj-vmf7-xrvr - https://github.com/nextcloud/server/pull/26958 - https://hackerone.com/reports/1192144
CVE ID: CVE-2021-32742 State: PUBLISHED Published: 2021-07-09T14:00:11 Last Updated: 2024-08-03T23:33:54.911Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: vapor Products: vapor Problem Types: CWE-502 Description: Vapor is a web framework for Swift. In versions 4.47.1 and prior, bug in the `Data.init(base32Encoded:)` function opens up the potential for exposing server memory and/or crashing the server (Denial of Service) for applications where untrusted data can end up in said function. Vapor does not currently use this function itself so this only impact applications that use the impacted function directly or through other dependencies. The vulnerability is
his only impact applications that use the impacted function directly or through other dependencies. The vulnerability is patched in version 4.47.2. As a workaround, one may use an alternative to Vapor's built-in `Data.init(base32Encoded:)`. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vapor/vapor/security/advisories/GHSA-pqwh-c2f3-vxmq - https://github.com/vapor/vapor/releases/tag/4.47.2
CVE ID: CVE-2021-32743 State: PUBLISHED Published: 2021-07-15T16:05:12.000Z Last Updated: 2025-11-03T21:44:46.082Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Icinga Products: icinga2 Problem Types: CWE-202 Description: Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions prior to 2.11.10 and from version 2.12.0 through version 2.12.4, some of the Icinga 2 features that require credentials for external services expose those credentials through the API to authenticated API users with read permissions for the corresponding object types. IdoMysqlC
edentials through the API to authenticated API users with read permissions for the corresponding object types. IdoMysqlConnection and IdoPgsqlConnection (every released version) exposes the password of the user used to connect to the database. IcingaDB (added in 2.12.0) exposes the password used to connect to the Redis server. ElasticsearchWriter (added in 2.8.0)exposes the password used to connect to the Elasticsearch server. An attacker who obtains these credentials can impersonate Icinga to these services and add, modify and delete information there. If credentials with more permissions are in use, this increases the impact accordingly. Starting with the 2.11.10 and 2.12.5 releases, these
more permissions are in use, this increases the impact accordingly. Starting with the 2.11.10 and 2.12.5 releases, these passwords are no longer exposed via the API. As a workaround, API user permissions can be restricted to not allow querying of any affected objects, either by explicitly listing only the required object types for object query permissions, or by applying a filter rule. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Icinga/icinga2/security/advisories/GHSA-wrpw-pmr8-qgj7 - https://icinga.com/blog/2021/07/15/releasing-icinga-2-12-5-and-2-11-10/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00010.html
CVE ID: CVE-2021-32744 State: PUBLISHED Published: 2021-07-21T16:00:11 Last Updated: 2024-08-03T23:33:55.908Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CollaboraOnline Products: online Problem Types: CWE-639 Description: Collabora Online is a collaborative online office suite. In versions prior to 4.2.17-1 and version 6.4.9-5, unauthenticated attackers are able to gain access to files which are currently opened by other users in the Collabora Online editor. For successful exploitation the attacker is required to guess the file identifier - the predictability of this file identifier is dependent on external file-storage implementations (this is a pote
ifier - the predictability of this file identifier is dependent on external file-storage implementations (this is a potential "IDOR" - Insecure Direct Object Reference - vulnerability). Versions 4.2.17-1 and 6.4.9-5 contain patches for this issue. There is no known workaround except updating the Collabora Online application to one of the patched releases. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CollaboraOnline/online/security/advisories/GHSA-32xj-9x82-q9jw
CVE ID: CVE-2021-32745 State: PUBLISHED Published: 2021-07-21T17:40:10 Last Updated: 2024-08-03T23:33:54.893Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: CollaboraOnline Products: online Problem Types: CWE-79 Description: Collabora Online is a collaborative online office suite. A reflected XSS vulnerability was found in Collabora Online prior to version 6.4.9-5. An attacker could inject unescaped HTML into a variable as they created the Collabora Online iframe, and execute scripts inside the context of the Collabora Online iframe. This would give access to a small set of user settings stored in the browser, as well as the session's authentication token whi
uld give access to a small set of user settings stored in the browser, as well as the session's authentication token which was also passed in at iframe creation time. The issue is patched in Collabora Online 6.4.9-5. Collabora Online 4.2 is not affected. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CollaboraOnline/online/security/advisories/GHSA-w536-654v-cjj9
CVE ID: CVE-2021-32746 State: PUBLISHED Published: 2021-07-12T22:25:11 Last Updated: 2024-08-03T23:33:54.900Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Icinga Products: icingaweb2 Problem Types: CWE-22 Description: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Between versions 2.3.0 and 2.8.2, the `doc` module of Icinga Web 2 allows to view documentation directly in the UI. It must be enabled manually by an administrator and users need explicit access permission to use it. Then, by visiting a certain route, it is possible to gain access to arbitrary files readable by the web-server user. The issue has be
ting a certain route, it is possible to gain access to arbitrary files readable by the web-server user. The issue has been fixed in the 2.9.0, 2.8.3, and 2.7.5 releases. As a workaround, an administrator may disable the `doc` module or revoke permission to use it from all users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Icinga/icingaweb2/security/advisories/GHSA-cmgc-h4cx-3v43 - https://github.com/Icinga/icingaweb2/releases/tag/v2.7.5 - https://github.com/Icinga/icingaweb2/releases/tag/v2.8.3 - https://github.com/Icinga/icingaweb2/releases/tag/v2.9.0
CVE ID: CVE-2021-32747 State: PUBLISHED Published: 2021-07-12T22:50:11 Last Updated: 2024-08-03T23:33:55.787Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Icinga Products: icingaweb2 Problem Types: CWE-200 Description: Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface. A vulnerability in which custom variables are exposed to unauthorized users exists between versions 2.0.0 and 2.8.2. Custom variables are user-defined keys and values on configuration objects in Icinga 2. These are commonly used to reference secrets in other configurations such as check commands to be able to authenticate with a service being che
to reference secrets in other configurations such as check commands to be able to authenticate with a service being checked. Icinga Web 2 displays these custom variables to logged in users with access to said hosts or services. In order to protect the secrets from being visible to anyone, it's possible to setup protection rules and blacklists in a user's role. Protection rules result in `***` being shown instead of the original value, the key will remain. Backlists will hide a custom variable entirely from the user. Besides using the UI, custom variables can also be accessed differently by using an undocumented URL parameter. By adding a parameter to the affected routes, Icinga Web 2 will s
ed differently by using an undocumented URL parameter. By adding a parameter to the affected routes, Icinga Web 2 will show these columns additionally in the respective list. This parameter is also respected when exporting to JSON or CSV. Protection rules and blacklists however have no effect in this case. Custom variables are shown as-is in the result. The issue has been fixed in the 2.9.0, 2.8.3, and 2.7.5 releases. As a workaround, one may set up a restriction to hide hosts and services with the custom variable in question. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Icinga/icingaweb2/releases/tag/v2.7.5 - https://github.com/Icinga/icingaweb2/releas
er: References: - https://github.com/Icinga/icingaweb2/releases/tag/v2.7.5 - https://github.com/Icinga/icingaweb2/releases/tag/v2.8.3 - https://github.com/Icinga/icingaweb2/releases/tag/v2.9.0 - https://github.com/Icinga/icingaweb2/security/advisories/GHSA-2xv9-886q-p7xx
CVE ID: CVE-2021-32748 State: PUBLISHED Published: 2021-07-27T21:10:12 Last Updated: 2024-08-03T23:33:55.958Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-862 Description: Nextcloud Richdocuments in an open source self hosted online office. Nextcloud uses the WOPI ("Web Application Open Platform Interface") protocol to communicate with the Collabora Editor, the communication between these two services was not protected by a credentials or IP check. Whilst this does not result in gaining access to data that the user has not yet access to, it can result in a bypass of any enforced watermark on docum
gaining access to data that the user has not yet access to, it can result in a bypass of any enforced watermark on documents as described on the [Nextcloud Virtual Data Room](https://nextcloud.com/virtual-data-room/) website and [our documentation](https://portal.nextcloud.com/article/nextcloud-and-virtual-data-room-configuration-59.html). The Nextcloud Richdocuments releases 3.8.3 and 4.2.0 add an additional admin settings for an allowlist of IP addresses that can access the WOPI API. We recommend upgrading and configuring the allowlist to a list of Collabora servers. There is no known workaround. Note that this primarily results a bypass of any configured watermark or download protection u
e is no known workaround. Note that this primarily results a bypass of any configured watermark or download protection using File Access Control. If you do not require or rely on these as a security feature no immediate action is required on your end. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-24x8-h6m2-9jf2 - https://github.com/nextcloud/richdocuments/pull/1640 - https://hackerone.com/reports/1194606