Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-32063 State: PUBLISHED Published: 2023-11-28T03:30:22.578Z Last Updated: 2024-08-02T15:03:28.874Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: oroinc Products: crm Problem Types: CWE-284 Description: OroCalendarBundle enables a Calendar feature and related functionality in Oro applications. Back-office users can access information from any call event, bypassing ACL security restrictions due to insufficient security checks. This issue has been patched in version 5.0.4 and 5.1.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/oroinc/crm/security/advisories/GHSA-897w-jv7j-6r7g - https://github.com/oroinc/Or
iner: References: - https://github.com/oroinc/crm/security/advisories/GHSA-897w-jv7j-6r7g - https://github.com/oroinc/OroCRMCallBundle/commit/456b1dda7762abf4ff59eafffaa70ab7f09d1c85 - https://github.com/oroinc/OroCRMCallBundle/commit/9a41dff459bb4aff864175ca883d553ac0954950
CVE ID: CVE-2023-32064 State: PUBLISHED Published: 2023-11-28T03:34:17.414Z Last Updated: 2024-08-02T15:03:28.950Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: oroinc Products: orocommerce Problem Types: CWE-284 Description: OroCommerce package with customer portal and non authenticated visitor website base features. Back-office users can access information about Customer and Customer User menus, bypassing ACL security restrictions due to insufficient security checks. This issue has been patched in version 5.0.11 and 5.1.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/oroinc/orocommerce/security/advisories/GHSA-8gwj-68
yst Notes: - CVE Program Container: References: - https://github.com/oroinc/orocommerce/security/advisories/GHSA-8gwj-68w6-7v6c
CVE ID: CVE-2023-32065 State: PUBLISHED Published: 2023-11-28T03:36:57.823Z Last Updated: 2024-08-02T15:03:28.901Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: oroinc Products: orocommerce Problem Types: CWE-284 Description: OroCommerce is an open-source Business to Business Commerce application built with flexibility in mind. Detailed Order totals information may be received by Order ID. This issue is patched in version 5.0.11 and 5.1.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/oroinc/orocommerce/security/advisories/GHSA-88g2-xgh9-4ph2
CVE ID: CVE-2023-32066 State: PUBLISHED Published: 2023-05-09T15:28:50.596Z Last Updated: 2025-01-28T16:01:00.296Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: anuko Products: timetracker Problem Types: CWE-79 Description: Time Tracker is an open source time tracking system. The week view plugin in Time Tracker versions 1.22.11.5782 and prior was not escaping titles for notes in week view table. Because of that, it was possible for a logged in user to enter notes with elements of JavaScript. Such script could then be executed in user browser on subsequent requests to week view. This issue is fixed in version 1.22.12.5783. As a workaround, use `htmlspecial
wser on subsequent requests to week view. This issue is fixed in version 1.22.12.5783. As a workaround, use `htmlspecialchars` when calling `$field->setTitle` on line #245 in the `week.php` file, as happens in version 1.22.12.5783. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anuko/timetracker/security/advisories/GHSA-jw2g-8wvp-9frw - https://github.com/anuko/timetracker/commit/093cfe158099704ffd4a1624be217f9935e914eb
CVE ID: CVE-2023-32067 State: PUBLISHED Published: 2023-05-25T22:49:55.860Z Last Updated: 2025-02-13T16:50:20.105Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: c-ares Products: c-ares Problem Types: CWE-400 Description: c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful shutdown of the connection. This issue has been patched in version 1.19.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container
his issue has been patched in version 1.19.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/c-ares/c-ares/security/advisories/GHSA-9g78-jv2r-p7vc - https://github.com/c-ares/c-ares/releases/tag/cares-1_19_1 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B5Z5XFNXTNPTCBBVXFDNZQVLLIE6VRBY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UBFWILTA33LOSV23P44FGTQQIDRJHIY7/ - https://www.debian.org/security/2023/dsa-5419 - https://lists.debian.org/debian-lts-announce/2023/06/msg00034.html - https://security.gentoo.org/glsa/202310-09 - http
- https://lists.debian.org/debian-lts-announce/2023/06/msg00034.html - https://security.gentoo.org/glsa/202310-09 - https://security.netapp.com/advisory/ntap-20240605-0004/
CVE ID: CVE-2023-32068 State: PUBLISHED Published: 2023-05-15T20:53:09.228Z Last Updated: 2025-01-22T21:37:24.611Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-601 Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 14.10.4 it's possible to exploit well known parameters in XWiki URLs to perform redirection to untrusted site. This vulnerability was partially fixed in the past for XWiki 12.10.7 and 13.3RC1 but there is still the possibility to force specific URLs to skip some checks, e.g. using URLs like `http:example.com`
1 but there is still the possibility to force specific URLs to skip some checks, e.g. using URLs like `http:example.com` in the parameter would allow the redirect. The issue has now been patched against all patterns that are known for performing redirects. This issue has been patched in XWiki 14.10.4 and 15.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-6gvj-8vc5-8v3j - https://github.com/xwiki/xwiki-platform/commit/e4f7f68e93cb08c25632c126356d218abf192d1e - https://jira.xwiki.org/browse/XWIKI-20096
hub.com/xwiki/xwiki-platform/commit/e4f7f68e93cb08c25632c126356d218abf192d1e - https://jira.xwiki.org/browse/XWIKI-20096 - https://jira.xwiki.org/browse/XWIKI-20549
CVE ID: CVE-2023-32069 State: PUBLISHED Published: 2023-05-09T15:31:59.892Z Last Updated: 2025-01-28T16:40:09.238Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-863 Description: XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-2 and prior to versions 14.10.4 and 15.0-rc-1, it's possible for a user to execute anything with the right of the author of the XWiki.ClassSheet document. This has been patched in XWiki 15.0-rc-1 and 14.10.4. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xw
s. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-36fm-j33w-c25f - https://github.com/xwiki/xwiki-platform/commit/de72760d4a3e1e9be64a10660a0c19e9534e2ec4 - https://jira.xwiki.org/browse/XWIKI-20566
CVE ID: CVE-2023-32070 State: PUBLISHED Published: 2023-05-10T17:18:06.949Z Last Updated: 2025-01-27T17:14:05.694Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-rendering Problem Types: CWE-83 Description: XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting (XSS) attacks via attributes and link URLs, e.g., supported in XWiki syntax. This has been patched in XWiki 14.6-rc-1. There are no known workarounds apart from upgrading to a fixed version. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
workarounds apart from upgrading to a fixed version. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-rendering/security/advisories/GHSA-6gf5-c898-7rxp - https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1 - https://jira.xwiki.org/browse/XRENDERING-663
CVE ID: CVE-2023-32071 State: PUBLISHED Published: 2023-05-09T15:42:16.143Z Last Updated: 2025-01-28T16:36:40.254Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-116, CWE-79 Description: XWiki Platform is a generic wiki platform. Starting in versions 2.2-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, it's possible to execute javascript with the right of any user by leading him to a special URL on the wiki targeting a page which contains an attachment. This has been patched in XWiki 15.0-rc-1, 14.10.4, and 14.4.8. The easiest possible workaround is to edit file `<xwiki app>/templates/impo
hed in XWiki 15.0-rc-1, 14.10.4, and 14.4.8. The easiest possible workaround is to edit file `<xwiki app>/templates/importinline.vm` and apply the modification described in commit 28905f7f518cc6f21ea61fe37e9e1ed97ef36f01. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-j9h5-vcgv-2jfm - https://github.com/xwiki/xwiki-platform/commit/28905f7f518cc6f21ea61fe37e9e1ed97ef36f01 - https://app.intigriti.com/company/submissions/e95a7ad5-7029-4627-abf0-3e3e3ea0b4ce/XWIKI-E93DFEYK - https://jira.xwiki.org/browse/XWIKI-20340
CVE ID: CVE-2023-32072 State: PUBLISHED Published: 2023-05-29T20:00:42.622Z Last Updated: 2025-01-13T21:01:27.760Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Enalean Products: tuleap Problem Types: CWE-79 Description: Tuleap is an open source tool for end to end traceability of application and system developments. Tuleap Community Edition prior to version 14.8.99.60 and Tuleap Enterprise edition prior to 14.8-3 and 14.7-7, the logs of the triggered Jenkins job URLs are not properly escaped. A malicious Git administrator can setup a malicious Jenkins hook to make a victim, also a Git administrator, execute uncontrolled code. Tuleap Community Edition 14.8
icious Jenkins hook to make a victim, also a Git administrator, execute uncontrolled code. Tuleap Community Edition 14.8.99.60, Tuleap Enterprise Edition 14.8-3, and Tuleap Enterprise Edition 14.7-7 contain a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Enalean/tuleap/security/advisories/GHSA-6prc-j58r-fmjq - https://github.com/Enalean/tuleap/commit/6840529def97f564844e810e5a7c5bf837cf58d5 - https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=6840529def97f564844e810e5a7c5bf837cf58d5 - https://tuleap.net/plugins/tracker/?aid=31929
CVE ID: CVE-2023-32073 State: PUBLISHED Published: 2023-05-12T13:34:34.164Z Last Updated: 2025-01-23T20:59:41.432Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: WWBN Products: AVideo Problem Types: CWE-77 Description: WWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.json.php` which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-30854, which affects WWBN AVideo up to version 12.3. This issue is patched in commit 1df4af01f80d56ff2c4c43b89d0bac151e7fb6e3. Additional Analyst Notes: - CVE Program Container: - CISA ADP
tched in commit 1df4af01f80d56ff2c4c43b89d0bac151e7fb6e3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/security/advisories/GHSA-2mhh-27v7-3vcx - https://github.com/WWBN/AVideo/commit/1df4af01f80d56ff2c4c43b89d0bac151e7fb6e3
CVE ID: CVE-2023-32074 State: PUBLISHED Published: 2023-05-25T22:59:27.860Z Last Updated: 2025-01-16T18:19:01.564Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: nextcloud Products: security-advisories Problem Types: CWE-307 Description: user_oidc app is an OpenID Connect user backend for Nextcloud. Authentication can be broken/bypassed in user_oidc app. It is recommended that the Nextcloud user_oidc app is upgraded to 1.3.2 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-x8mc-84wj-rf34 - https://github.com/nextcloud/user_oidc/pull/615 - https://h
ecurity-advisories/security/advisories/GHSA-x8mc-84wj-rf34 - https://github.com/nextcloud/user_oidc/pull/615 - https://hackerone.com/reports/1954711
CVE ID: CVE-2023-32075 State: PUBLISHED Published: 2023-05-11T16:39:37.634Z Last Updated: 2025-01-24T16:38:09.717Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: pimcore Products: customer-data-framework Problem Types: CWE-20 Description: The Customer Management Framework (CMF) for Pimcore adds functionality for customer data management. In `pimcore/customer-management-framework-bundle` prior to version 3.3.9, business logic errors are possible in the `Conditions` tab since the counter can be a negative number. This vulnerability is capable of the unlogic in the counter value in the Conditions tab. Users should update to version 3.3.9 to receive a patch or,
e of the unlogic in the counter value in the Conditions tab. Users should update to version 3.3.9 to receive a patch or, as a workaround, or apply the patch manually. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pimcore/customer-data-framework/security/advisories/GHSA-x99j-r8vv-gwwj - https://github.com/pimcore/customer-data-framework/commit/e3f333391582d9309115e6b94e875367d0ea7163.patch - https://github.com/pimcore/customer-data-framework/releases/tag/v3.3.9 - https://huntr.dev/bounties/cecd7800-a996-4f3a-8689-e1c2a1e0248a/
CVE ID: CVE-2023-32076 State: PUBLISHED Published: 2023-05-10T17:58:09.921Z Last Updated: 2025-01-27T18:31:51.016Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: in-toto Products: in-toto Problem Types: CWE-15 Description: in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the files read is `.in_totorc` which is a hidden file in the directory in which in-toto is run. If an attacker controls the inputs to a supply chain s
which is a hidden file in the directory in which in-toto is run. If an attacker controls the inputs to a supply chain step, they can mask their activities by also passing in an `.in_totorc` file that includes the necessary exclude patterns and settings. RC files are widely used in other systems and security issues have been discovered in their implementations as well. Maintainers found in their conversations with in-toto adopters that `in_totorc` is not their preferred way to configure in-toto. As none of the options supported in `in_totorc` is unique, and can be set elsewhere using API parameters or CLI arguments, the maintainers decided to drop support for `in_totorc`. in-toto's `user_set
here using API parameters or CLI arguments, the maintainers decided to drop support for `in_totorc`. in-toto's `user_settings` module has been dropped altogether in commit 3a21d84f40811b7d191fa7bd17265c1f99599afd. Users may also sandbox functionary code as a security measure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/in-toto/in-toto/security/advisories/GHSA-wc64-c5rv-32pf - https://github.com/in-toto/docs/security/advisories/GHSA-p86f-xmg6-9q4x - https://github.com/in-toto/in-toto/commit/3a21d84f40811b7d191fa7bd17265c1f99599afd - https://specifications.freedesktop.org/basedir-spec/basedir-spec-latest.html
CVE ID: CVE-2023-32077 State: PUBLISHED Published: 2023-08-24T21:23:14.294Z Last Updated: 2024-10-02T19:14:22.352Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: gravitl Products: netmaker Problem Types: CWE-321 Description: Netmaker makes networks with WireGuard. Prior to versions 0.17.1 and 0.18.6, hardcoded DNS key usage has been found in Netmaker allowing unauth users to interact with DNS API endpoints. The issue is patched in 0.17.1 and fixed in 0.18.6. If users are using 0.17.1, they should run `docker pull gravitl/netmaker:v0.17.1` and `docker-compose up -d`. This will switch them to the patched users. If users are using v0.18.0-0.18.5, they should upg
d `docker-compose up -d`. This will switch them to the patched users. If users are using v0.18.0-0.18.5, they should upgrade to v0.18.6 or later. As a workaround, someone who is using version 0.17.1 can pull the latest docker image of the backend and restart the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gravitl/netmaker/security/advisories/GHSA-8x8h-hcq8-jwwx - https://github.com/gravitl/netmaker/pull/2170 - https://github.com/gravitl/netmaker/commit/1621c27c1d176b639e9768b2acad7693e387fd51 - https://github.com/gravitl/netmaker/commit/9362c39a9a822f0e07361aa7c77af2610597e657
CVE ID: CVE-2023-32078 State: PUBLISHED Published: 2023-08-24T21:35:05.611Z Last Updated: 2024-10-02T19:12:47.050Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: gravitl Products: netmaker Problem Types: CWE-639 Description: Netmaker makes networks with WireGuard. An Insecure Direct Object Reference (IDOR) vulnerability was found in versions prior to 0.17.1 and 0.18.6 in the user update function. By specifying another user's username, it was possible to update the other user's password. The issue is patched in 0.17.1 and fixed in 0.18.6. If Users are using 0.17.1, they should run `docker pull gravitl/netmaker:v0.17.1` and `docker-compose up -d`. This will swi
Users are using 0.17.1, they should run `docker pull gravitl/netmaker:v0.17.1` and `docker-compose up -d`. This will switch them to the patched users. If users are using v0.18.0-0.18.5, they should upgrade to v0.18.6 or later. As a workaround, someone using version 0.17.1 can pull the latest docker image of the backend and restart the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gravitl/netmaker/security/advisories/GHSA-256m-j5qw-38f4 - https://github.com/gravitl/netmaker/pull/2158 - https://github.com/gravitl/netmaker/commit/b3be57c65bf0bbfab43b66853c8e3637a43e2839
CVE ID: CVE-2023-32079 State: PUBLISHED Published: 2023-08-24T22:03:43.825Z Last Updated: 2024-10-02T19:11:26.186Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: gravitl Products: netmaker Problem Types: CWE-915 Description: Netmaker makes networks with WireGuard. A Mass assignment vulnerability was found in versions prior to 0.17.1 and 0.18.6 that allows a non-admin user to escalate privileges to those of an admin user. The issue is patched in 0.17.1 and fixed in 0.18.6. If Users are using 0.17.1, they should run `docker pull gravitl/netmaker:v0.17.1` and `docker-compose up -d`. This will switch them to the patched users If users are using v0.18.0-0.18.5, th
er:v0.17.1` and `docker-compose up -d`. This will switch them to the patched users If users are using v0.18.0-0.18.5, they should upgrade to v0.18.6 or later. As a workaround, someone using version 0.17.1 can pull the latest docker image of the backend and restart the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gravitl/netmaker/security/advisories/GHSA-826j-8wp2-4x6q
CVE ID: CVE-2023-32080 State: PUBLISHED Published: 2023-05-10T20:07:16.646Z Last Updated: 2025-01-24T20:59:19.820Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: pterodactyl Products: wings Problem Types: CWE-250 Description: Wings is the server control plane for Pterodactyl Panel. A vulnerability affecting versions prior to 1.7.5 and versions 1.11.0 prior to 1.11.6 impacts anyone running the affected versions of Wings. This vulnerability can be used to gain access to the host system running Wings if a user is able to modify an server's install script or the install script executes code supplied by the user (either through environment variables, or comman
install script or the install script executes code supplied by the user (either through environment variables, or commands that execute commands based off of user data). This vulnerability has been resolved in version `v1.11.6` of Wings, and has been back-ported to the 1.7 release series in `v1.7.5`. Anyone running `v1.11.x` should upgrade to `v1.11.6` and anyone running `v1.7.x` should upgrade to `v1.7.5`. There are no workarounds aside from upgrading. Running Wings with a rootless container runtime may mitigate the severity of any attacks, however the majority of users are using container runtimes that run as root as per the Wings documentation. SELinux may prevent attackers from performin
e using container runtimes that run as root as per the Wings documentation. SELinux may prevent attackers from performing certain operations against the host system, however privileged containers have a lot of freedom even on systems with SELinux enabled. It should be noted that this was a known attack vector, for attackers to easily exploit this attack it would require compromising an administrator account on a Panel. However, certain eggs (the data structure that holds the install scripts that get passed to Wings) have an issue where they are unknowingly executing shell commands with escalated privileges provided by untrusted user data. Additional Analyst Notes: - CVE Program Container: -
ommands with escalated privileges provided by untrusted user data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pterodactyl/wings/security/advisories/GHSA-p744-4q6p-hvc2 - https://github.com/pterodactyl/wings/releases/tag/v1.11.6 - https://github.com/pterodactyl/wings/releases/tag/v1.17.5
CVE ID: CVE-2023-32081 State: PUBLISHED Published: 2023-05-12T13:49:56.969Z Last Updated: 2025-01-23T20:55:31.692Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: vert-x3 Products: vertx-stomp Problem Types: CWE-287 Description: Vert.x STOMP is a vert.x implementation of the STOMP specification that provides a STOMP server and client. From versions 3.1.0 until 3.9.16 and 4.0.0 until 4.4.2, a Vert.x STOMP server processes client STOMP frames without checking that the client send an initial CONNECT frame replied with a successful CONNECTED frame. The client can subscribe to a destination or publish message without prior authentication. Any Vert.x STOMP server
ame. The client can subscribe to a destination or publish message without prior authentication. Any Vert.x STOMP server configured with an authentication handler is impacted. The issue is patched in Vert.x 3.9.16 and 4.4.2. There are no trivial workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vert-x3/vertx-stomp/security/advisories/GHSA-gvrq-cg5r-7chp - https://github.com/vert-x3/vertx-stomp/commit/0de4bc5a44ddb57e74d92c445f16456fa03f265b