Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-37743 State: PUBLISHED Published: 2021-07-30T02:09:05 Last Updated: 2024-08-04T01:30:07.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON format. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/f318f7c0ddac7dfd2b1f246fd8f488d9dfc3a4bf
CVE ID: CVE-2021-37746 State: PUBLISHED Published: 2021-07-30T13:17:32 Last Updated: 2024-08-04T01:30:07.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click. Additional Analyst Notes: - CVE Program Container: References: - https://git.claws-mail.org/?p=claws.git%3Ba=commit%3Bh=ac286a71ed78429e16c612161251b9ea90ccd431 - https://sylpheed.sraoss.jp/sylpheed/v3.7/sylpheed-3.7.0.tar.xz - https://claws-mail.org/download.php?file=releases/claws-mail-3.18.0.tar.xz - https://lists.fedoraproject.org/archives/list/package-announce%4
g/download.php?file=releases/claws-mail-3.18.0.tar.xz - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L2QNUIWASJLPUZZKWICGCEGYJZCQE7NH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RCJXHUSYHGVBSH2ULD7HNXLM7QNRECZ6/
CVE ID: CVE-2021-37748 State: PUBLISHED Published: 2021-10-28T11:11:20 Last Updated: 2024-08-04T01:30:07.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream HT801 devices before 1.0.29 allow remote authenticated users to execute arbitrary code as root via a crafted manage_if setting, thus bypassing the intended restrictions of this shell and taking full control of the device. There are default weak credentials that can be used to authenticate. Additional Analyst Notes: - CVE Program Container: References: - http://www.grandstream.com/products/gateways-and-atas/analog-telephone-adaptors/p
- CVE Program Container: References: - http://www.grandstream.com/products/gateways-and-atas/analog-telephone-adaptors/product/ht801 - https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/ - https://github.com/SECFORCE/CVE-2021-37748
CVE ID: CVE-2021-37749 State: PUBLISHED Published: 2021-08-30T03:20:17 Last Updated: 2024-08-04T01:30:07.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: MapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 (aka 16.6.2.66) allows blind SQL Injection via the Id (within sourceItems) parameter to the GetMap method. Additional Analyst Notes: - CVE Program Container: References: - https://www.hexagongeospatial.com/products/power-portfolio/geomedia-webmap - https://download.hexagongeospatial.com/en/downloads/webgis/geomedia-webmap-2020-update-2 - https://www.silentgrid.com/blog/cve-2021-37749-hexagon-geomedia-webmap-2020-blind-sql-injection/
CVE ID: CVE-2021-37750 State: PUBLISHED Published: 2021-08-23T00:00:00 Last Updated: 2024-08-04T01:30:08.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field. Additional Analyst Notes: - CVE Program Container: References: - https://web.mit.edu/kerberos/advisories/ - https://github.com/krb5/krb5/releases - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCLW7D46E4VCREKKH453T5DA4XOLHU2/ - https://lists.debian.org/debian-lts-announce/202
e%40lists.fedoraproject.org/message/MFCLW7D46E4VCREKKH453T5DA4XOLHU2/ - https://lists.debian.org/debian-lts-announce/2021/09/msg00019.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://github.com/krb5/krb5/commit/d775c95af7606a51bf79547a94fa52ddd1cb7f49 - https://security.netapp.com/advisory/ntap-20210923-0002/ - https://www.starwindsoftware.com/security/sw-20220817-0004/
CVE ID: CVE-2021-37759 State: PUBLISHED Published: 2021-07-31T17:35:10 Last Updated: 2024-08-04T01:30:07.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID). Additional Analyst Notes: - CVE Program Container: References: - https://www.graylog.org/post/announcing-graylog-v4-1-2
CVE ID: CVE-2021-37760 State: PUBLISHED Published: 2021-07-31T17:35:00 Last Updated: 2024-08-04T01:30:07.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID). Additional Analyst Notes: - CVE Program Container: References: - https://www.graylog.org/post/announcing-graylog-v4-1-2
CVE ID: CVE-2021-37761 State: PUBLISHED Published: 2021-09-27T16:23:04 Last Updated: 2024-08-04T01:30:07.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com - https://www.manageengine.com/products/ad-manager/release-notes.html#7111
CVE ID: CVE-2021-37762 State: PUBLISHED Published: 2021-10-07T15:40:33 Last Updated: 2024-08-04T01:30:07.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite leading to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com - https://www.manageengine.com/products/ad-manager/release-notes.html#7111
CVE ID: CVE-2021-37764 State: PUBLISHED Published: 2022-06-16T20:36:25 Last Updated: 2024-08-04T01:30:08.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /shop/admin/manufacturers.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/XOS-Shop/xos_shop_system/issues/1
CVE ID: CVE-2021-37770 State: PUBLISHED Published: 2022-06-30T14:17:18 Last Updated: 2024-08-04T01:30:08.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nucleus CMS v3.71 is affected by a file upload vulnerability. In this vulnerability, we can use upload to change the upload path to the path without the Htaccess file. Upload an Htaccess file and write it to AddType application / x-httpd-php.jpg. In this way, an attacker can upload a picture with shell, treat it as PHP, execute commands, so as to take down website resources. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NucleusCMS/NucleusCMS/issues/96 - https://shimo.im/docs/Ch9CphJt8XwTv
rogram Container: References: - https://github.com/NucleusCMS/NucleusCMS/issues/96 - https://shimo.im/docs/Ch9CphJt8XwTvQ3d
CVE ID: CVE-2021-37774 State: PUBLISHED Published: 2023-01-19T00:00:00.000Z Last Updated: 2025-04-04T15:38:48.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in function httpProcDataSrv in TL-WDR7660 2.0.30 that allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fishykz/TP-POC
CVE ID: CVE-2021-37777 State: PUBLISHED Published: 2021-10-04T13:40:18 Last Updated: 2024-08-04T01:30:08.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visible by another site owner just by knowing the other site name and fuzzing for picture names. This leads to sensitive information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.navidkagalwalla.com/gila-cms-vulnerabilities
CVE ID: CVE-2021-37778 State: PUBLISHED Published: 2022-06-30T14:38:23 Last Updated: 2024-08-04T01:30:08.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a buffer overflow in gps-sdr-sim v1.0 when parsing long command line parameters, which can lead to DoS or code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osqzss/gps-sdr-sim/issues/294
CVE ID: CVE-2021-37781 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T16:17:32.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting (XSS) via editempprofile.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/employee-record-management-system-in-php-and-mysql/ - https://github.com/BigTiger2020/Employee-Record-Management-System/blob/main/Employee%20Record%20Management%20System%20-%20xss.md
CVE ID: CVE-2021-37782 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-12T19:42:14.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/employee-record-management-system-in-php-and-mysql/ - https://github.com/BigTiger2020/Employee-Record-Management-System/blob/main/Employee%20Record%20Management%20System.md
CVE ID: CVE-2021-37786 State: PUBLISHED Published: 2021-09-27T13:52:13 Last Updated: 2024-08-04T01:30:07.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Federal Office of Information Technology Systems and Telecommunication FOITT products are affected by improper handling of exceptional conditions. This affects COVID Certificate App IOS 2.2.0 and below affected, patch in progress and COVID Certificate Check App IOS 2.2.0 and below affected, patch in progress. A denial of service (physically proximate) could be caused by scanning a crafted QR code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/admin-ch/CovidCertificate-App-iOS/issu
ditional Analyst Notes: - CVE Program Container: References: - https://github.com/admin-ch/CovidCertificate-App-iOS/issues/146
CVE ID: CVE-2021-37787 State: PUBLISHED Published: 2025-03-11T00:00:00.000Z Last Updated: 2025-03-21T20:39:14.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is affected by a SQL Injection vulnerability via a HTTP POST request to the TinyMCE module Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.abocms.ru/
CVE ID: CVE-2021-37788 State: PUBLISHED Published: 2021-08-09T12:32:07 Last Updated: 2024-08-04T01:30:09.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the web UI of Gurock TestRail v5.3.0.3603 could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjacking attack. The vulnerability is due to insufficient input validation of iFrame data in HTTP requests that are sent to an affected device. An attacker could exploit this vulnerability by sending crafted HTTP packets with malicious iFrame data. A successful exploit could allow the attacker to perform a clickjacking attack where the user is tricked into clicking a malici
ssful exploit could allow the attacker to perform a clickjacking attack where the user is tricked into clicking a malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/rvismit/67bc11dd9ccb7423827564cb81d25740
CVE ID: CVE-2021-37789 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:58:29.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: stb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information Disclosure or Denial of Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nothings/stb/issues/1178 - https://lists.debian.org/debian-lts-announce/2023/01/msg00045.html
CVE ID: CVE-2021-37791 State: PUBLISHED Published: 2022-06-30T15:39:20 Last Updated: 2024-08-04T01:30:08.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyAdmin v1.0 is affected by an incorrect access control vulnerability in viewing personal center in /api/user/userData?userCode=admin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cdfan/my-admin/issues/3
CVE ID: CVE-2021-37794 State: PUBLISHED Published: 2021-08-31T17:28:09 Last Updated: 2024-08-04T01:30:08.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability exists in FileBrowser < v2.16.0 that allows an authenticated user authorized to upload a malicious .svg file which acts as a stored XSS payload. If this stored XSS payload is triggered by an administrator it will trigger malicious OS commands on the server running the FileBrowser instance. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/filebrowser/filebrowser - https://gist.github.com/omriinbar/1e28649f31d795b0e9b7698a9d255b5c - https://git
://github.com/filebrowser/filebrowser - https://gist.github.com/omriinbar/1e28649f31d795b0e9b7698a9d255b5c - https://github.com/filebrowser/filebrowser/commit/201329abce4e92ae9071b9ded81e267aae159fbd
CVE ID: CVE-2021-37803 State: PUBLISHED Published: 2021-10-27T15:28:49 Last Updated: 2024-08-04T01:30:09.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System 1.0 via the username in lognin.php . Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/163415/Online-Covid-Vaccination-Scheduler-System-1.0-SQL-Injection.html
CVE ID: CVE-2021-37805 State: PUBLISHED Published: 2021-10-27T15:52:49 Last Updated: 2024-08-04T01:30:08.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vunerability exists in Sourcecodeste Vehicle Parking Management System affected version 1.0 is via the add-vehicle.php endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/163625/Vehicle-Parking-Management-System-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2021-37806 State: PUBLISHED Published: 2021-10-27T16:01:42 Last Updated: 2024-08-04T01:30:08.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL Injection vulnerability exists in https://phpgurukul.com Vehicle Parking Management System affected version 1.0. The system is vulnerable to time-based SQL injection on multiple endpoints. Based on the SLEEP(N) function payload that will sleep for a number of seconds used on the (1) editid , (2) viewid, and (3) catename parameters, the server response is about (N) seconds delay respectively which mean it is vulnerable to MySQL Blind (Time Based). An attacker can use sqlmap to further the exploitation for extracting sen
it is vulnerable to MySQL Blind (Time Based). An attacker can use sqlmap to further the exploitation for extracting sensitive information from the database. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/163626/Vehicle-Parking-Management-System-1.0-SQL-Injection.html - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-37806 - https://streamable.com/rfcchi
CVE ID: CVE-2021-37807 State: PUBLISHED Published: 2021-10-27T16:06:21 Last Updated: 2024-08-04T01:30:08.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the email parameter on the /check_availability.php endpoint that serves as a checker whether a new user's email is already exist within the database. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/163574/Online-Shopping-Portal-3.1-SQL-Injection.html
CVE ID: CVE-2021-37808 State: PUBLISHED Published: 2021-10-27T16:21:03 Last Updated: 2024-08-04T01:30:08.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via the (1) category, (2) subcategory, (3) sucatdescription, and (4) username parameters, the server response is about (N) seconds delay respectively which mean it is vulnerable to MySQL Blind (Time Based). An attacker can use sqlmap to further the exploitation for extracting sensitive information from the database. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/163575/News-Portal-Proje
nal Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/163575/News-Portal-Project-3.1-SQL-Injection.html - https://www.nu11secur1ty.com/2021/12/cve-2021-37808.html - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-37808
CVE ID: CVE-2021-37819 State: PUBLISHED Published: 2022-09-09T21:48:53 Last Updated: 2024-08-04T01:30:08.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/pdftk-java/pdftk/-/merge_requests/21/diffs?commit_id=9b0cbb76c8434a8505f02ada02a94263dcae9247#diff-content-b3cfd29983c793bcae2375502abd5baa8f5d1081
CVE ID: CVE-2021-37823 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T13:39:30.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40nowczj/sql-injection-exists-in-the-background-of-opencart-d41b5c58e99e
CVE ID: CVE-2021-37832 State: PUBLISHED Published: 2021-08-03T12:30:57 Last Updated: 2024-08-04T01:30:08.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as the application database. A malicious attacker can issue SQL commands to the SQLite database through the vulnerable idappartamenti parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.hoteldruid.com - https://github.com/dievus/CVE-2021-37832
CVE ID: CVE-2021-37833 State: PUBLISHED Published: 2021-08-03T12:31:06 Last Updated: 2024-08-04T01:30:08.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability exists in multiple pages in version 3.0.2 of the Hotel Druid application that allows for arbitrary execution of JavaScript commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.hoteldruid.com - https://github.com/dievus/CVE-2021-37833
CVE ID: CVE-2021-37839 State: PUBLISHED Published: 2022-07-06T12:35:10 Last Updated: 2024-08-04T01:30:08.212Z Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-273 Description: Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/pwqyxxmn5gh7cnw3qsp66v0lt4xojt82
CVE ID: CVE-2021-37840 State: PUBLISHED Published: 2021-08-02T13:53:57 Last Updated: 2024-08-04T01:30:08.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: aaPanel through 6.8.12 allows Cross-Site WebSocket Hijacking (CSWH) involving OS commands within WebSocket messages at a ws:// URL for /webssh (the victim must have configured Terminal with at least one host). Successful exploitation depends on the browser used by a potential victim (e.g., exploitation can occur with Firefox but not Chrome). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aaPanel/aaPanel/issues/74 - https://ssd-disclosure.com/ssd-advisory-aapanel-cswh-to-rce/
CVE ID: CVE-2021-37841 State: PUBLISHED Published: 2021-08-12T13:30:30 Last Updated: 2024-08-04T01:30:08.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Docker Desktop before 3.6.0 suffers from incorrect access control. If a low-privileged account is able to access the server running the Windows containers, it can lead to a full container compromise in both process isolation and Hyper-V isolation modes. This security issue leads an attacker with low privilege to read, write and possibly even execute code inside the containers. Additional Analyst Notes: - CVE Program Container: References: - https://docs.docker.com/docker-for-windows/release-notes/
CVE ID: CVE-2021-37842 State: PUBLISHED Published: 2021-11-02T11:39:24 Last Updated: 2024-08-04T01:30:09.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: metakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information. Remote Cluster XDCR credentials can get leaked in debug logs. Config key tombstone purging was added in Couchbase Server 7.0.0. This issue happens when a config key, which is being logged, has a tombstone purger time-stamp attached to it. Additional Analyst Notes: - CVE Program Container: References: - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts
CVE ID: CVE-2021-37843 State: PUBLISHED Published: 2021-08-02T18:47:32 Last Updated: 2024-08-04T01:30:08.452Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The resolution SAML SSO apps for Atlassian products allow a remote attacker to login to a user account when only the username is known (i.e., no other authentication is provided). The fixed versions are for Jira: 3.6.6.1, 4.0.12, 5.0.5; for Confluence 3.6.6, 4.0.12, 5.0.5; for Bitbucket 2.5.9, 3.6.6, 4.0.12, 5.0.5; for Bamboo 2.5.9, 3.6.6, 4.0.12, 5.0.5; and for Fisheye 2.5.9. Additional Analyst Notes: - CVE Program Container: References: - https://wik
.6.6, 4.0.12, 5.0.5; and for Fisheye 2.5.9. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.resolution.de/doc/saml-sso/5.0.x/all/security-advisories/2021-07-29-authentication-bypass-network-attacker-can-login-to-users-accounts-when-usernames-are-known
CVE ID: CVE-2021-37845 State: PUBLISHED Published: 2023-05-29T00:00:00 Last Updated: 2025-01-14T17:46:34.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Citadel through webcit-932. A meddler-in-the-middle attacker can fixate their own session during the cleartext phase before a STARTTLS command (a violation of "The STARTTLS command is only valid in non-authenticated state." in RFC2595). This potentially allows an attacker to cause a victim's e-mail messages to be stored into an attacker's IMAP mailbox, but depends on details of the victim's client behavior. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
victim's client behavior. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://uncensored.citadel.org/dotgoto?room=Citadel%20Security - https://uncensored.citadel.org/msg/2099264259 - https://nostarttls.secvuln.info/