Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-10148 State: PUBLISHED Published: 2020-12-29T21:55:16.195Z Last Updated: 2025-10-21T23:35:30.955Z Vendors: SolarWinds Products: Orion Platform Problem Types: CWE-288 Description: The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sola
are affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/securityadvisory - https://kb.cert.org/vuls/id/843464
CVE ID: CVE-2020-10173 State: PUBLISHED Published: 2020-03-05T14:36:38 Last Updated: 2024-08-04T10:50:57.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48142
CVE ID: CVE-2020-10174 State: PUBLISHED Published: 2020-03-05T15:28:55 Last Updated: 2024-08-04T10:50:57.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: init_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting temporary directory in the predictable location /tmp/timeshift. It follows symlinks in this location or uses directories owned by unprivileged users. Because Timeshift also executes scripts under this location, an attacker can attempt to win a race condition to replace scripts created by Timeshift with attacker-controlled scripts. Upon success, an attacker-controlled script is executed with full root privileges. This logic is practicall
led scripts. Upon success, an attacker-controlled script is executed with full root privileges. This logic is practically always triggered when Timeshift runs regardless of the command-line arguments used. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1165802 - https://github.com/teejee2008/timeshift/commit/335b3d5398079278b8f7094c77bfd148b315b462 - https://github.com/teejee2008/timeshift/releases/tag/v20.03 - http://www.openwall.com/lists/oss-security/2020/03/06/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXXYQFSZ5P6ZMNFIDBAQKBFZIR2T7ZLL/ - https://lists.fedoraproject.org/ar
ackage-announce%40lists.fedoraproject.org/message/TXXYQFSZ5P6ZMNFIDBAQKBFZIR2T7ZLL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SXDEPC52G46U6I7GLQNFLZXVSM7V2HYY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AAOFXT64CEUMJE3723JDJWTEQWQUCYMD/ - https://usn.ubuntu.com/4312-1/
CVE ID: CVE-2020-10175 State: REJECTED Published: 2020-03-09T14:23:17 Last Updated: 2020-03-09T14:23:17 Description: No description available.
CVE ID: CVE-2020-10176 State: PUBLISHED Published: 2020-05-07T20:38:12 Last Updated: 2024-08-04T10:50:57.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASSA ABLOY Yale WIPC-301W 2.x.2.29 through 2.x.2.43_p1 devices allow Eval Injection of commands. Additional Analyst Notes: - CVE Program Container: References: - https://firedome.io/blog/firedome-discloses-0-day-vulnerabilities-in-yale-ip-cameras/ - https://lp.firedome.io/hubfs/Yale%20WIPC-301W%20RCE%20Vulnerability%20Report%205-6.pdf
CVE ID: CVE-2020-10177 State: PUBLISHED Published: 2020-06-25T18:33:15 Last Updated: 2024-08-04T10:50:57.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/python-pillow/Pillow/commits/master/src/libImaging - https://github.com/python-pillow/Pillow/pull/4538 - https://pillow.readthedocs.io/en/stable/releasenotes/7.1.0.html - https://github.com/python-pillow/Pillow/pull/4503 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HOKHNWV2VS5GESY7IBD237E7C6T3I427/ - https://lis
ect.org/archives/list/package-announce%40lists.fedoraproject.org/message/HOKHNWV2VS5GESY7IBD237E7C6T3I427/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEBCPE4F2VHTIT6EZA2YZQZLPVDEBJGD/ - https://usn.ubuntu.com/4430-1/ - https://usn.ubuntu.com/4430-2/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00012.html
CVE ID: CVE-2020-10178 State: REJECTED Published: 2020-04-17T17:41:47 Last Updated: 2020-04-17T17:41:47 Description: No description available.
CVE ID: CVE-2020-10180 State: PUBLISHED Published: 2020-03-05T18:44:58 Last Updated: 2024-08-04T10:50:57.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zoller.lu/p/tzo-11-2020-eset-generic-malformed.html
CVE ID: CVE-2020-10181 State: PUBLISHED Published: 2020-03-11T15:26:04.000Z Last Updated: 2025-10-21T23:35:48.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demonstrated by a setString=new_user<*1*>administrator<*1*>123456 request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=Ufcj4D9eA5o - https://github.com/s1kr10s/Sumavision_EMR3.0 - http://packetstormsecurity.com/files/156746/Enhanced-Multimedia-Router-3.0.4.27-Cross-Site-Request-Forg
avision_EMR3.0 - http://packetstormsecurity.com/files/156746/Enhanced-Multimedia-Router-3.0.4.27-Cross-Site-Request-Forgery.html
CVE ID: CVE-2020-10184 State: PUBLISHED Published: 2020-03-05T22:48:35 Last Updated: 2024-08-04T10:58:39.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to cause a denial of service, aka SQL injection. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP validation service; the issue does NOT affect YubiCloud. Additional Analyst Notes: - CVE Program Container: References: - https://www.yubico.com/support/security-advisories/ysa-2020-01/ - https://github.com/Yubico/yubikey-val/releases/tag/yubikey-val-2
w.yubico.com/support/security-advisories/ysa-2020-01/ - https://github.com/Yubico/yubikey-val/releases/tag/yubikey-val-2.40 - https://lists.debian.org/debian-lts-announce/2020/03/msg00014.html
CVE ID: CVE-2020-10185 State: PUBLISHED Published: 2020-03-05T22:48:14 Last Updated: 2024-08-04T10:58:39.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP validation service with a non-default configuration such as an open sync pool; the issue does NOT affect YubiCloud. Additional Analyst Notes: - CVE Program Container: References: - https://www.yubico.com/support/security-advisories/ysa-2020-01/ - https://github.com/Yubico/yubikey-val/releases/tag/yubikey-val-2.40 - https://lists.de
ecurity-advisories/ysa-2020-01/ - https://github.com/Yubico/yubikey-val/releases/tag/yubikey-val-2.40 - https://lists.debian.org/debian-lts-announce/2020/03/msg00014.html
CVE ID: CVE-2020-10187 State: PUBLISHED Published: 2020-05-04T13:19:04 Last Updated: 2024-08-04T10:58:39.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Doorkeeper version 5.0.0 and later contains an information disclosure vulnerability that allows an attacker to retrieve the client secret only intended for the OAuth application owner. After authorizing the application and allowing access, the attacker simply needs to request the list of their authorized applications in a JSON format (usually GET /oauth/authorized_applications.json). An application is vulnerable if the authorized applications controller is enabled. Additional Analyst Notes: - CVE Program Container: References
able if the authorized applications controller is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/doorkeeper-gem/doorkeeper/releases - https://github.com/doorkeeper-gem/doorkeeper/commit/25d038022c2fcad45af5b73f9d003cf38ff491f6 - https://github.com/doorkeeper-gem/doorkeeper/security/advisories/GHSA-j7vx-8mqj-cqp9 - https://github.com/rubysec/ruby-advisory-db/pull/446
CVE ID: CVE-2020-10188 State: PUBLISHED Published: 2020-03-06T14:07:21 Last Updated: 2024-08-04T10:58:39.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HLU6FL24BSQQEB2SJC26NLJ2MANQDA7M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7FMTRRQTYKWZD2GMXX3GLZV46O
ps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7FMTRRQTYKWZD2GMXX3GLZV46OLPCLVK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3VJ6V2Z3JRNJOBVHSOPMAC76PSSKG6A/ - https://lists.debian.org/debian-lts-announce/2020/05/msg00012.html - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-telnetd-EFJrEzPx - https://lists.debian.org/debian-lts-announce/2020/08/msg00038.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://appgateresearch.blogspot.com/2020/02/bravestarr-fedora-31-netkit-telnetd_28.html - https://github.com/krb5/krb5-appl/blob/d00cd671dfe945
blogspot.com/2020/02/bravestarr-fedora-31-netkit-telnetd_28.html - https://github.com/krb5/krb5-appl/blob/d00cd671dfe945791b33d4f1f6a5c57ae1667ef8/telnet/telnetd/utility.c#L205-L216 - https://www.arista.com/en/support/advisories-notices/security-advisories/10702-security-advisory-48
CVE ID: CVE-2020-10189 State: PUBLISHED Published: 2020-03-06T16:05:22.000Z Last Updated: 2025-10-21T23:35:49.767Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage in the FileStorage class. This is related to the CewolfServlet and MDMLogUploaderServlet servlets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://srcincite.io/advisories/src-2020-0011/ - https://www.zdnet.com/article/zoho-zero-day-published-on-twitter/ - http
ttps://srcincite.io/advisories/src-2020-0011/ - https://www.zdnet.com/article/zoho-zero-day-published-on-twitter/ - https://srcincite.io/pocs/src-2020-0011.py.txt - https://www.manageengine.com/products/desktop-central/remote-code-execution-vulnerability.html - http://packetstormsecurity.com/files/156730/ManageEngine-Desktop-Central-Java-Deserialization.html - https://cwe.mitre.org/data/definitions/502.html
CVE ID: CVE-2020-10190 State: PUBLISHED Published: 2020-03-09T18:24:48 Last Updated: 2024-08-04T10:58:39.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tablequery.php by crafting a special payload on the /datatables/data endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/munkireport/munkireport-php/releases - https://github.com/munkireport/munkireport-php/wiki/20200309-Authenticated-SQL-injection
CVE ID: CVE-2020-10191 State: PUBLISHED Published: 2020-03-09T18:18:50 Last Updated: 2024-08-04T10:58:39.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MunkiReport before 5.3.0. An authenticated actor can send a custom XSS payload through the /module/comment/save endpoint. The payload will be executed by any authenticated users browsing the application. This concerns app/controllers/client.php:detail. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/munkireport/munkireport-php/releases - https://github.com/munkireport/munkireport-php/wiki/20200309-Authenticated-Comment-XSS
CVE ID: CVE-2020-10192 State: PUBLISHED Published: 2020-03-09T18:14:41 Last Updated: 2024-08-04T10:58:39.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Munkireport before 5.3.0.3923. An unauthenticated actor can send a custom XSS payload through the /report/broken_client endpoint. The payload will be executed by any authenticated users browsing the application. This concerns app/views/listings/default.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/munkireport/munkireport-php/releases - https://github.com/munkireport/munkireport-php/wiki/20200309-XSS-vulnerability
CVE ID: CVE-2020-10193 State: PUBLISHED Published: 2020-03-06T19:26:05 Last Updated: 2024-08-04T10:58:39.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zoller.lu/p/from-low-hanging-fruit-department_13.html
CVE ID: CVE-2020-10194 State: PUBLISHED Published: 2020-03-20T20:30:52 Last Updated: 2024-08-04T10:58:40.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account. This differs from the intended behavior in which the domain of the authenticated user must match the domain of the galsync account in the request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Zimbra/zm-mailbox/compare/8.8.15.p7...8.8.15.p8 - https://github.com/Zimbra/zm-mailbox/commit/1df440e0efa624d1772a05fb6d397d9beb4bda1e - https://github.com/Zimbra/zm-m
- https://github.com/Zimbra/zm-mailbox/commit/1df440e0efa624d1772a05fb6d397d9beb4bda1e - https://github.com/Zimbra/zm-mailbox/pull/1020
CVE ID: CVE-2020-10195 State: PUBLISHED Published: 2020-03-13T15:48:58 Last Updated: 2024-08-04T10:58:39.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: The popup-builder plugin before 3.64.1 for WordPress allows information disclosure and settings modification, leading to in-scope privilege escalation via admin-post actions to com/classes/Actions.php. By sending a POST request to wp-admin/admin-post.php, an authenticated attacker with minimal (subscriber-level) permissions can modify the plugin's settings to allow arbitrary roles (including subscribers) access to plugin functionality by setting the action parameter to sgpbSaveSettings, export a list of current newsletter sub
ess to plugin functionality by setting the action parameter to sgpbSaveSettings, export a list of current newsletter subscribers by setting the action parameter to csv_file, or obtain system configuration information including webserver configuration and a list of installed plugins by setting the action parameter to sgpb_system_info. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/10127 - https://www.wordfence.com/blog/2020/03/vulnerabilities-patched-in-popup-builder-plugin-affecting-over-100000-sites/
CVE ID: CVE-2020-10196 State: PUBLISHED Published: 2020-03-13T15:48:55 Last Updated: 2024-08-04T10:58:38.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS vulnerability in the popup-builder plugin before 3.64.1 for WordPress allows remote attackers to inject arbitrary JavaScript into existing popups via an unsecured ajax action in com/classes/Ajax.php. It is possible for an unauthenticated attacker to insert malicious JavaScript in several of the popup's fields by sending a request to wp-admin/admin-ajax.php with the POST action parameter of sgpb_autosave and including additional data in an allPopupData parameter, including the popup's ID (which is visible in the source
ve and including additional data in an allPopupData parameter, including the popup's ID (which is visible in the source of the page in which the popup is inserted) and arbitrary JavaScript which will then be executed in the browsers of visitors to that page. Because the plugin functionality automatically adds script tags to data entered into these fields, this injection will typically bypass most WAF applications. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/10127 - https://www.wordfence.com/blog/2020/03/vulnerabilities-patched-in-popup-builder-plugin-affecting-over-100000-sites/
CVE ID: CVE-2020-10199 State: PUBLISHED Published: 2020-04-01T18:27:23.000Z Last Updated: 2025-10-21T23:35:47.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.sonatype.com/hc/en-us/articles/360044882533 - http://packetstormsecurity.com/files/157261/Nexus-Repository-Manager-3.21.1-01-Remote-Code-Execution.html - http://packetstormsecurity.com/files/160835/Sonatype-Nexus-3.21.1-Remote-Code-Execution.html - https://cwe.mitre.org/data/definitions/917.html
CVE ID: CVE-2020-10203 State: PUBLISHED Published: 2020-04-01T18:04:39 Last Updated: 2024-08-04T10:58:39.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sonatype Nexus Repository before 3.21.2 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://support.sonatype.com/hc/en-us/articles/360044361594
CVE ID: CVE-2020-10204 State: PUBLISHED Published: 2020-04-01T18:21:12 Last Updated: 2024-08-04T10:58:39.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.sonatype.com/hc/en-us/articles/360044356194
CVE ID: CVE-2020-10206 State: PUBLISHED Published: 2020-12-29T23:47:17 Last Updated: 2024-08-04T10:58:39.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows local attackers to view and interact with the video output of the device. Additional Analyst Notes: - CVE Program Container: References: - https://andre-oudhof.medium.com/pwning-my-isps-stbs-c5e78544274d#dda4
CVE ID: CVE-2020-10207 State: PUBLISHED Published: 2020-12-29T22:15:06 Last Updated: 2024-08-04T10:58:39.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use of Hard-coded Credentials in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows remote attackers to retrieve and modify the device settings. Additional Analyst Notes: - CVE Program Container: References: - https://andre-oudhof.medium.com/pwning-my-isps-stbs-c5e78544274d#87fe
CVE ID: CVE-2020-10208 State: PUBLISHED Published: 2020-12-29T23:41:12 Last Updated: 2024-08-04T10:58:39.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows authenticated remote attackers to execute arbitrary commands with root user privileges. Additional Analyst Notes: - CVE Program Container: References: - https://andre-oudhof.medium.com/pwning-my-isps-stbs-c5e78544274d#9cf3
CVE ID: CVE-2020-10209 State: PUBLISHED Published: 2020-12-29T23:43:53 Last Updated: 2024-08-04T10:58:39.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command Injection in the CPE WAN Management Protocol (CWMP) registration in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows man-in-the-middle attackers to execute arbitrary commands with root level privileges. Additional Analyst Notes: - CVE Program Container: References: - https://andre-oudhof.medium.com/pwning-my-isps-stbs-c5e78544274d#4dbc
CVE ID: CVE-2020-10210 State: PUBLISHED Published: 2020-12-29T22:10:05 Last Updated: 2024-08-04T10:58:39.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Because of hard-coded SSH keys for the root user in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series, Kami7B, an attacker may remotely log in through SSH. Additional Analyst Notes: - CVE Program Container: References: - https://andre-oudhof.medium.com/pwning-my-isps-stbs-c5e78544274d#1ab7
CVE ID: CVE-2020-10211 State: PUBLISHED Published: 2020-04-17T12:31:02 Last Updated: 2024-08-04T10:58:39.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0004
CVE ID: CVE-2020-10212 State: PUBLISHED Published: 2020-03-06T23:30:11 Last Updated: 2024-08-04T10:58:39.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and because it is possible for a DNS hostname to resolve to an internal IP address. For example, an SSRF attempt may succeed if a .ico filename is added to the PATH_INFO. Also, an attacker could create a DNS hostname that resolves to the 0.0.0.0 IP address for DNS pinning. NOTE: this issue exists because of an incomplete fix for CVE-2018-14728. Additional Analyst Notes: - CVE Program Container
TE: this issue exists because of an incomplete fix for CVE-2018-14728. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/trippo/ResponsiveFilemanager/issues/598