Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-8228 State: PUBLISHED Published: 2024-08-28T00:00:10.175Z Last Updated: 2024-08-28T15:56:18.417Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: O5 Problem Types: CWE-121 Description: A vulnerability was found in Tenda O5 1.0.0.8(5017). It has been classified as critical. This affects the function fromSafeSetMacFilter of the file /goform/setMacFilterList. The manipulation of the argument remark/type/time leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additiona
ic and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275937 - https://vuldb.com/?ctiid.275937 - https://vuldb.com/?submit.394029 - https://github.com/abcdefg-png/AHU-IoT-vulnerable/blob/main/Tenda/web-bridge/O5V1.0/fromSafeSetMacFilter.md - https://www.tenda.com.cn/
CVE ID: CVE-2024-8229 State: PUBLISHED Published: 2024-08-28T00:31:05.407Z Last Updated: 2024-08-28T15:54:55.065Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: O6 Problem Types: CWE-121 Description: A vulnerability was found in Tenda O6 1.0.0.7(2054). It has been declared as critical. This vulnerability affects the function frommacFilterModify of the file /goform/operateMacFilter. The manipulation of the argument mac leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst No
e used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275938 - https://vuldb.com/?ctiid.275938 - https://vuldb.com/?submit.394030 - https://github.com/abcdefg-png/AHU-IoT-vulnerable/blob/main/Tenda/web-bridge/O6V3.0/fromMacFilterModify.md - https://www.tenda.com.cn/
CVE ID: CVE-2024-8230 State: PUBLISHED Published: 2024-08-28T01:00:07.395Z Last Updated: 2024-08-28T15:53:48.670Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: O6 Problem Types: CWE-121 Description: A vulnerability was found in Tenda O6 1.0.0.7(2054). It has been rated as critical. This issue affects the function fromSafeSetMacFilter of the file /goform/setMacFilterList. The manipulation of the argument remark/type/time leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst
y be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275939 - https://vuldb.com/?ctiid.275939 - https://vuldb.com/?submit.394031 - https://github.com/abcdefg-png/AHU-IoT-vulnerable/blob/main/Tenda/web-bridge/O6V3.0/fromSafeSetMacFilter.md - https://www.tenda.com.cn/
CVE ID: CVE-2024-8231 State: PUBLISHED Published: 2024-08-28T01:00:09.903Z Last Updated: 2024-08-28T15:52:09.155Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: O6 Problem Types: CWE-121 Description: A vulnerability classified as critical has been found in Tenda O6 1.0.0.7(2054). Affected is the function fromVirtualSet of the file /goform/setPortForward. The manipulation of the argument ip/localPort/publicPort/app leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analys
ay be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.275940 - https://vuldb.com/?ctiid.275940 - https://vuldb.com/?submit.394032 - https://github.com/abcdefg-png/AHU-IoT-vulnerable/blob/main/Tenda/web-bridge/O6V3.0/fromVirtualSet.md - https://www.tenda.com.cn/
CVE ID: CVE-2024-8232 State: PUBLISHED Published: 2024-09-10T19:44:18.096Z Last Updated: 2024-09-12T13:36:10.295Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: iniNet Solutions GmbH Products: SpiderControl SCADA Web Server Problem Types: CWE-434 Description: SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious files without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-254-02
CVE ID: CVE-2024-8233 State: PUBLISHED Published: 2024-12-12T12:02:59.800Z Last Updated: 2024-12-12T15:44:14.399Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-407 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 9.4 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could cause a denial of service with requests for diff files on a commit or merge request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/480867 - https://hackerone.com/reports/2650086
CVE ID: CVE-2024-8234 State: PUBLISHED Published: 2024-08-30T00:28:43.562Z Last Updated: 2024-08-30T14:53:25.378Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Zyxel Products: NWA1100-N firmware Problem Types: CWE-78 Description: ** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the functions formSysCmd(), formUpgradeCert(), and formDelcert() in the Zyxel NWA1100-N firmware version 1.00(AACE.1)C0 could allow an unauthenticated attacker to execute some OS commands to access system files on an affected device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://webservice.zyxel.com/eol/ArchivedEOLModel.pdf - https://gith
alyst Notes: - CISA ADP Vulnrichment: References: - https://webservice.zyxel.com/eol/ArchivedEOLModel.pdf - https://github.com/GroundCTL2MajorTom/pocs/blob/main/zyxel_NWAW1100-N_rce.md
CVE ID: CVE-2024-8235 State: PUBLISHED Published: 2024-08-30T16:16:57.214Z Last Updated: 2025-11-08T07:13:57.335Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8 Advanced Virtualization Problem Types: CWE-476 Description: A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereferenc
s where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:9128 - https://access.redhat.com/security/cve/CVE-2024-8235 - https://bugzilla.redhat.com/show_bug.cgi?id=2308680 - https://lists.libvirt.org/archives/list/devel@lists.libvirt.org/thread/X6WOVCL6QF3FQRFIIXL736RFZVSUWLWJ/
CVE ID: CVE-2024-8236 State: PUBLISHED Published: 2024-11-26T13:56:54.955Z Last Updated: 2024-11-26T14:28:37.152Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: elemntor Products: Elementor Website Builder – More than Just a Page Builder Problem Types: CWE-79 Description: The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter of the Icon widget in all versions up to, and including, 3.25.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web
ng. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b1305be5-8267-475f-b962-62e3930116e1?source=cve - https://plugins.trac.wordpress.org/browser/elementor/tags/3.23.4/includes/widgets/icon.php#L489 - https://plugins.trac.wordpress.org/changeset/3192020/
CVE ID: CVE-2024-8237 State: PUBLISHED Published: 2024-11-26T18:31:00.676Z Last Updated: 2024-11-26T18:42:11.715Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-407 Description: A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 12.6 prior to 17.4.5, 17.5 prior to 17.5.3, and 17.6 prior to 17.6.1. An attacker could cause a denial of service with a crafted cargo.toml file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/480900 - https://hackerone.com/reports/2648665
CVE ID: CVE-2024-8238 State: PUBLISHED Published: 2025-03-20T10:11:09.622Z Last Updated: 2025-10-15T12:49:56.303Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: aimhubio Products: aimhubio/aim Problem Types: CWE-1336 Description: In version 3.22.0 of aimhubio/aim, the AimQL query language uses an outdated version of the safer_getattr() function from RestrictedPython. This version does not protect against the str.format_map() method, allowing an attacker to leak server-side secrets or potentially gain unrestricted code execution. The vulnerability arises because str.format_map() can read arbitrary attributes of Python objects, enabling attackers to access se
ability arises because str.format_map() can read arbitrary attributes of Python objects, enabling attackers to access sensitive variables such as os.environ. If an attacker can write files to a known location on the Aim server, they can use str.format_map() to load a malicious .dll/.so file into the Python interpreter, leading to unrestricted code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/4e140ef9-f6d1-4e68-a44c-3b9e856924d3
CVE ID: CVE-2024-8239 State: PUBLISHED Published: 2024-09-30T06:00:06.516Z Last Updated: 2024-10-01T13:58:54.159Z Vendors: Unknown Products: Starbox Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Starbox WordPress plugin before 3.5.3 does not properly render social media profiles URLs in certain contexts, like the malicious user's profile or pages where the starbox shortcode is used, which may be abused by users with at least the contributor role to conduct Stored XSS attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/02796da0-218d-4cbb-98ca-49eeea83cac5/
CVE ID: CVE-2024-8240 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:41.414Z Description: No description available.
CVE ID: CVE-2024-8241 State: PUBLISHED Published: 2024-09-10T09:30:18.787Z Last Updated: 2024-09-10T13:28:32.304Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: pixelgrade Products: Nova Blocks by Pixelgrade Problem Types: CWE-79 Description: The Nova Blocks by Pixelgrade plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' attribute of the 'wp:separator' Gutenberg block in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pa
it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3011befd-c0c6-4800-a370-e592c3ec483f?source=cve - https://wordpress.org/plugins/nova-blocks/#developers - https://plugins.trac.wordpress.org/changeset/3148752/ - https://github.com/pixelgrade/nova-blocks/commit/655b5b804306c3ca3a59707cc2f12098e193b4ca
CVE ID: CVE-2024-8242 State: PUBLISHED Published: 2024-09-13T15:10:45.570Z Last Updated: 2024-09-13T15:30:41.571Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: inspireui Products: MStore API – Create Native Android & iOS Apps On The Cloud Problem Types: CWE-434 Description: The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_user_profile() function in all versions up to, and including, 4.15.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files (not including PHP files) o
r authenticated attackers, with subscriber-level access and above, to upload arbitrary files (not including PHP files) on the affected site's server which may make remote code execution possible. This can be paired with a registration endpoint for unauthenticated users to exploit the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fe3834a6-a6f5-4cc7-951e-a6ada6346b07?source=cve - https://plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/flutter-user.php#L1053 - https://plugins.trac.wordpress.org/changeset/3147900/mstore-api/trunk/controllers/flutter-user.php - https://plugins.trac.wordpress.org/ch
ac.wordpress.org/changeset/3147900/mstore-api/trunk/controllers/flutter-user.php - https://plugins.trac.wordpress.org/changeset/3147900/mstore-api/trunk/functions/index.php
CVE ID: CVE-2024-8243 State: PUBLISHED Published: 2025-04-09T06:00:06.866Z Last Updated: 2025-04-09T19:09:34.522Z Vendors: Unknown Products: WordPress/Plugin Upgrade Time Out Plugin Problem Types: CWE-352 Cross-Site Request Forgery (CSRF), CWE-79 Cross-Site Scripting (XSS) Description: The WordPress/Plugin Upgrade Time Out Plugin WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8e1e2d8d-41aa-49bc-95d5-dae75be788d5/
CVE ID: CVE-2024-8244 State: PUBLISHED Published: 2025-08-06T15:32:27.357Z Last Updated: 2025-11-03T19:47:26.652Z Vendors: Go standard library Products: path/filepath Problem Types: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition Description: The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU (time of check/time of use) race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://go.dev/issue/70007 - https://pkg.go.dev/vuln/GO-2025-9999
CVE ID: CVE-2024-8245 State: PUBLISHED Published: 2025-05-15T20:07:14.375Z Last Updated: 2025-05-17T03:23:21.278Z Vendors: Unknown Products: GamiPress Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The GamiPress WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3fb6292c-502c-481a-8223-ecda03d4c3fe/
CVE ID: CVE-2024-8246 State: PUBLISHED Published: 2024-09-14T03:19:27.488Z Last Updated: 2024-09-16T19:09:35.192Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: svenl77 Products: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) Problem Types: CWE-269 Description: The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.8.11. This is due to plugin not properly restricting what users have access to set the default role on registration for
.8.11. This is due to plugin not properly restricting what users have access to set the default role on registration forms. This makes it possible for authenticated attackers, with contributor-level access and above, to create a registration form with a custom role that allows them to register as administrators. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/40760f60-b81a-447b-a2c8-83c7666ce410?source=cve - https://plugins.trac.wordpress.org/changeset/3149760/buddyforms/trunk/includes/admin/form-builder/meta-boxes/metabox-registration.php
CVE ID: CVE-2024-8247 State: PUBLISHED Published: 2024-09-06T03:30:40.728Z Last Updated: 2024-09-06T13:37:42.412Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: contrid Products: Newsletters Problem Types: CWE-269 Description: The Newsletters plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.9.9.2. This is due to the plugin not restricting what user meta can be updated as screen options. This makes it possible for authenticated attackers, with subscriber-level access and above, to escalate their privileges to that of an administrator. Please note that this only affects users with access to edit/update screen op
ir privileges to that of an administrator. Please note that this only affects users with access to edit/update screen options, which means an administrator would need to grant lower privilege users with access to the Sent & Draft Emails page of the plugin in order for this to be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2577102f-6355-4483-bd3d-1948497cb843?source=cve - https://plugins.trac.wordpress.org/browser/newsletters-lite/tags/4.9.9.1/wp-mailinglist.php#L3279 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3146287%40newsletters-lite&new=3146287%40newsletters-li
trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3146287%40newsletters-lite&new=3146287%40newsletters-lite&sfp_email=&sfph_mail=
CVE ID: CVE-2024-8248 State: PUBLISHED Published: 2025-03-20T10:11:32.456Z Last Updated: 2025-03-20T14:11:09.368Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-29 Description: A vulnerability in the normalizePath function in mintplex-labs/anything-llm version git 296f041 allows for path traversal, leading to arbitrary file read and write in the storage directory. This can result in privilege escalation from manager to admin. The issue is fixed in version 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/7d6c3b7a-1116-450d-b539-9c911a97537e -
Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/7d6c3b7a-1116-450d-b539-9c911a97537e - https://github.com/mintplex-labs/anything-llm/commit/47a5c7126c20e2277ee56e2c7ee11990886a40a7
CVE ID: CVE-2024-8249 State: PUBLISHED Published: 2025-03-20T10:09:41.740Z Last Updated: 2025-03-20T18:36:01.825Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-248 Description: mintplex-labs/anything-llm version git 6dc3642 contains an unauthenticated Denial of Service (DoS) vulnerability in the API for the embeddable chat functionality. An attacker can exploit this vulnerability by sending a malformed JSON payload to the API endpoint, causing a server crash due to an uncaught exception. This issue is fixed in version 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
aught exception. This issue is fixed in version 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/2fb0c93f-5bc1-4212-bdca-292db7c6951f - https://github.com/mintplex-labs/anything-llm/commit/548da9ade30368289c5beaf0a8ee2ed2b5c1d81c
CVE ID: CVE-2024-8250 State: PUBLISHED Published: 2024-08-28T23:30:36.975Z Last Updated: 2025-11-03T22:32:55.866Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-825 Description: NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2024-11.html - https://gitlab.com/wireshark/wireshark/-/issues/19943
CVE ID: CVE-2024-8251 State: PUBLISHED Published: 2025-03-20T10:08:48.644Z Last Updated: 2025-10-15T12:49:56.640Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-89 Description: A vulnerability in mintplex-labs/anything-llm prior to version 1.2.2 allows for Prisma injection. The issue exists in the API endpoint "/embed/:embedId/stream-chat" where user-provided JSON is directly taken to the Prisma library's where clause. An attacker can exploit this by providing a specially crafted JSON object, such as {"sessionId":{"not":"a"}}, causing Prisma to return all data from the table. This can lea
y crafted JSON object, such as {"sessionId":{"not":"a"}}, causing Prisma to return all data from the table. This can lead to unauthorized access to all user queries in embedded chat mode. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/7c263ef1-7d50-475a-9425-b15df4e0403c - https://github.com/mintplex-labs/anything-llm/commit/334fd9cdd02ad4aa6a3c9bdfc95e7764651c13f4
CVE ID: CVE-2024-8252 State: PUBLISHED Published: 2024-08-30T09:29:49.305Z Last Updated: 2024-08-30T14:49:20.901Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: hornero Products: Clean Login Problem Types: CWE-98 Description: The Clean Login plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.14.5 via the 'template' attribute of the clean-login-register shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain
n the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b9f99b51-e1b1-4cd3-a9f7-24e4b59811a7?source=cve - https://plugins.trac.wordpress.org/browser/clean-login/tags/1.14.5/include/shortcodes.php#L146 - https://plugins.trac.wordpress.org/browser/clean-login/tags/1.14.5/include/frontend.php#L20 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3143241%40cle