Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ing-plesk-obsidian-18-0-70-anniversary-edition/ - https://support.plesk.com/hc/en-us/articles/33785727869847-Vulnerability-CVE-2025-54336 - https://blog.aziz.tn/2025/08/cve-2025-54336.html/
CVE ID: CVE-2025-54338 State: PUBLISHED Published: 2025-11-24T00:00:00.000Z Last Updated: 2025-11-24T21:37:24.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://desktopalert.net/cve-2025-54338/
CVE ID: CVE-2025-54339 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T18:31:37.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of Privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://desktopalert.net - https://desktopalert.net/cve-2025-54339/
CVE ID: CVE-2025-54340 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T18:33:12.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is a Broken or Risky Cryptographic Algorithm. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://desktopalert.net - https://desktopalert.net/cve-2025-54340/
CVE ID: CVE-2025-54341 State: PUBLISHED Published: 2025-11-24T00:00:00.000Z Last Updated: 2025-11-24T21:45:32.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There are Hard-coded configuration values. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://desktopalert.net/cve-2025-54341/
CVE ID: CVE-2025-54342 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T18:38:54.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is Exposure of Sensitive Information because of Incompatible Policies. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://desktopalert.net - https://desktopalert.net/cve-2025-54342/
CVE ID: CVE-2025-54343 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T18:34:23.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of Privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://desktopalert.net - https://desktopalert.net/CVE-2025-54343/
CVE ID: CVE-2025-54345 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T21:30:23.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. Sensitive Information is exposed to an Unauthorized Actor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://desktopalert.net - https://desktopalert.net/cve-2025-54345/
CVE ID: CVE-2025-54346 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T20:32:33.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://desktopalert.net - https://desktopalert.net/cve-2025-54346/
CVE ID: CVE-2025-54347 State: PUBLISHED Published: 2025-11-24T00:00:00.000Z Last Updated: 2025-11-24T21:30:25.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://desktopalert.net/cve-2025-54347/
CVE ID: CVE-2025-54348 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T18:35:05.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://desktopalert.net - https://desktopalert.net/cve-2025-54348/
CVE ID: CVE-2025-54349 State: PUBLISHED Published: 2025-08-03T00:00:00.000Z Last Updated: 2025-11-03T18:13:18.718Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: ES Products: iperf3 Problem Types: CWE-193 Description: In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/esnet/iperf/commit/4e5313bab0b9b3fe03513ab54f722c8a3e4b7bdf - https://github.com/esnet/iperf/releases/tag/3.19.1
CVE ID: CVE-2025-54350 State: PUBLISHED Published: 2025-08-03T00:00:00.000Z Last Updated: 2025-11-03T18:13:19.652Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: ES Products: iperf3 Problem Types: CWE-617 Description: In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/esnet/iperf/releases/tag/3.19.1 - https://github.com/esnet/iperf/commit/4eab661da0bbaac04493fa40164e928c6df7934a
CVE ID: CVE-2025-54351 State: PUBLISHED Published: 2025-08-03T00:00:00.000Z Last Updated: 2025-08-04T19:50:45.361Z Severity: HIGH (CVSS 8.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L) Vendors: ES Products: iperf3 Problem Types: CWE-420 Description: In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/esnet/iperf/releases/tag/3.19.1 - https://github.com/esnet/iperf/commit/969b7f70c447513e92c9798f22e82b40ebc53bf0
CVE ID: CVE-2025-54352 State: PUBLISHED Published: 2025-07-21T00:00:00.000Z Last Updated: 2025-07-21T18:15:20.785Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: WordPress Products: WordPress Problem Types: CWE-669 Description: WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts via pingback.ping XML-RPC requests. NOTE: the Supplier is not changing this behavior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.imperva.com/blog/beware-a-threat-actor-could-steal-the-titles-of-your-private-and-draft-wordpress-posts/
CVE ID: CVE-2025-54354 State: REJECTED Published: N/A Last Updated: 2025-07-22T02:55:09.205Z Description: No description available.
CVE ID: CVE-2025-54355 State: REJECTED Published: N/A Last Updated: 2025-07-22T02:55:08.739Z Description: No description available.
CVE ID: CVE-2025-54356 State: REJECTED Published: N/A Last Updated: 2025-07-22T02:55:08.286Z Description: No description available.
CVE ID: CVE-2025-54357 State: REJECTED Published: N/A Last Updated: 2025-07-22T02:55:07.795Z Description: No description available.
CVE ID: CVE-2025-54358 State: REJECTED Published: N/A Last Updated: 2025-07-22T02:55:07.302Z Description: No description available.
CVE ID: CVE-2025-54359 State: REJECTED Published: N/A Last Updated: 2025-07-22T02:55:06.723Z Description: No description available.
CVE ID: CVE-2025-54360 State: REJECTED Published: N/A Last Updated: 2025-07-22T02:55:06.259Z Description: No description available.
CVE ID: CVE-2025-54361 State: REJECTED Published: N/A Last Updated: 2025-07-22T02:55:05.810Z Description: No description available.
CVE ID: CVE-2025-54362 State: REJECTED Published: N/A Last Updated: 2025-07-22T02:55:05.306Z Description: No description available.
CVE ID: CVE-2025-54363 State: PUBLISHED Published: 2025-08-20T00:00:00.000Z Last Updated: 2025-08-21T15:37:24.848Z Vendors: Microsoft Products: Knack Problem Types: CWE-1333 Description: Microsoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module. extract_full_summary_from_signature employs an inefficient regular expression pattern: "\s(:param)\s+(.+?)\s:(.*)" that is susceptible to catastrophic backtracking when processing crafted docstrings containing a large volume of whitespace without a terminating colon. An attacker who can control or inject docstring content into affected applications can trigger excessive CPU consumption. This software
can control or inject docstring content into affected applications can trigger excessive CPU consumption. This software is used by Azure CLI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/microsoft/knack - https://www.vulncheck.com/advisories/microsoft-knack-python-package-regular-expression-dos - https://github.com/microsoft/knack/issues/281
CVE ID: CVE-2025-54364 State: PUBLISHED Published: 2025-08-20T00:00:00.000Z Last Updated: 2025-08-26T13:42:50.158Z Vendors: Microsoft Products: Knack Problem Types: CWE-1333 Description: Microsoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module. option_descriptions employs an inefficient regular expression pattern: "\s(:param)\s+(.+?)\s:(.*)" that is susceptible to catastrophic backtracking when processing crafted docstrings containing a large volume of whitespace without a terminating colon. An attacker who can control or inject docstring content into affected applications can trigger excessive CPU consumption. This software is used by Azur
inject docstring content into affected applications can trigger excessive CPU consumption. This software is used by Azure CLI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/microsoft/knack - https://www.vulncheck.com/advisories/microsoft-knack-python-package-regular-expression-dos
CVE ID: CVE-2025-54365 State: PUBLISHED Published: 2025-07-23T22:11:36.441Z Last Updated: 2025-07-24T13:36:52.638Z Vendors: rennf93 Products: fastapi-guard Problem Types: CWE-20, CWE-185 Description: fastapi-guard is a security library for FastAPI that provides middleware to control IPs, log requests, detect penetration attempts and more. In version 3.0.1, the regular expression patched to mitigate the ReDoS vulnerability by limiting the length of string fails to catch inputs that exceed this limit. This type of patch fails to detect cases in which the string representing the attributes of a <script> tag exceeds 100 characters. As a result, most of the regex patterns present in version 3.0.1
he attributes of a <script> tag exceeds 100 characters. As a result, most of the regex patterns present in version 3.0.1 can be bypassed. This is fixed in version 3.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rennf93/fastapi-guard/security/advisories/GHSA-rrf6-pxg8-684g - https://github.com/rennf93/fastapi-guard/commit/0829292c322d33dc14ab00c5451c5c138148035a - https://github.com/rennf93/fastapi-guard/commit/d9d50e8130b7b434cdc1b001b8cfd03a06729f7f
CVE ID: CVE-2025-54366 State: PUBLISHED Published: 2025-07-26T03:35:17.444Z Last Updated: 2025-07-28T15:00:13.862Z Vendors: freescout-help-desk Products: freescout Problem Types: CWE-502 Description: FreeScout is a lightweight free open source help desk and shared inbox built with PHP (Laravel framework). In versions 1.8.185 and below, there is a critical deserialization vulnerability in the /conversation/ajax endpoint that allows authenticated users with knowledge of the APP_KEY to achieve remote code execution. The vulnerability occurs when the application processes the attachments_all and attachments POST parameters through the insecure Helper::decrypt() function, which performs unsafe de
ttachments_all and attachments POST parameters through the insecure Helper::decrypt() function, which performs unsafe deserialization of user-controlled data without proper validation. This flaw enables attackers to create arbitrary objects and manipulate their properties, leading to complete compromise of the web application. This is fixed in version 1.8.186. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-vcc2-6r66-gvvj - https://github.com/freescout-help-desk/freescout/commit/9669c57f1ddbee896752d9e16270abfd97b20eb9
CVE ID: CVE-2025-54368 State: PUBLISHED Published: 2025-08-08T00:00:39.001Z Last Updated: 2025-08-08T17:32:18.259Z Vendors: astral-sh Products: uv Problem Types: CWE-436, CWE-20 Description: uv is a Python package and project manager written in Rust. In versions 0.8.5 and earlier, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. An attacker could contrive a ZIP archive that would extract with legitimate contents on some package installers, and malicious contents on others due to multiple local file entries. An attacker could also contrive a "stacked" ZIP input with multiple internal ZIPs, which would be ha
local file entries. An attacker could also contrive a "stacked" ZIP input with multiple internal ZIPs, which would be handled differently by different package installers. The attacker could choose which installer to target in both scenarios. This issue is fixed in version 0.8.6. To work around this issue, users may choose to set UV_INSECURE_NO_ZIP_VALIDATION=1 to revert to the previous behavior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/astral-sh/uv/security/advisories/GHSA-8qf3-x8v5-2pj8 - https://github.com/astral-sh/uv/commit/7f1eaf48c193e045ca2c62c4581048765c55505f - https://astral.sh/blog/uv-security-advisory-cve-2025-54368 - https://blog.pypi.o
eaf48c193e045ca2c62c4581048765c55505f - https://astral.sh/blog/uv-security-advisory-cve-2025-54368 - https://blog.pypi.org/posts/2025-08-07-wheel-archive-confusion-attacks
CVE ID: CVE-2025-54369 State: REJECTED Published: N/A Last Updated: 2025-07-24T22:31:47.364Z Description: No description available.
CVE ID: CVE-2025-54370 State: PUBLISHED Published: 2025-08-25T14:08:58.228Z Last Updated: 2025-08-25T14:34:39.628Z Vendors: PHPOffice Products: PhpSpreadsheet Problem Types: CWE-918 Description: PhpOffice/PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to versions 1.30.0, 2.1.12, 2.4.0, 3.10.0, and 5.0.0, SSRF can occur when a processed HTML document is read and displayed in the browser. The vulnerability lies in the setPath method of the PhpOffice\PhpSpreadsheet\Worksheet\Drawing class, where a crafted string from the user is passed to the HTML reader. This issue has been patched in versions 1.30.0, 2.1.12, 2.4.0, 3.10.0, and 5.0.0. Additional Analyst N
the HTML reader. This issue has been patched in versions 1.30.0, 2.1.12, 2.4.0, 3.10.0, and 5.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-rx7m-68vc-ppxh - https://github.com/PHPOffice/PhpSpreadsheet/commit/334a67797ace574d1d37c0992ffe283b7415471a - https://github.com/PHPOffice/PhpSpreadsheet/commit/4050f14521d70634c3320b170236574a6106eb39 - https://github.com/PHPOffice/PhpSpreadsheet/commit/81a0de2261f698404587a6421a5c6eb263c40b31 - https://github.com/PHPOffice/PhpSpreadsheet/commit/ac4befd2f7ccc21a59daef606a02a3d1828ade09 - https://github.com/PHPOffice/PhpSpreadsheet/commit/c2cd0e64392438e4c6af08
mit/ac4befd2f7ccc21a59daef606a02a3d1828ade09 - https://github.com/PHPOffice/PhpSpreadsheet/commit/c2cd0e64392438e4c6af082796eb65c1d629a266
CVE ID: CVE-2025-54371 State: REJECTED Published: N/A Last Updated: 2025-07-23T20:34:34.646Z Description: No description available.
CVE ID: CVE-2025-54374 State: PUBLISHED Published: 2025-10-03T20:00:25.946Z Last Updated: 2025-10-03T20:45:49.500Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: mayneyao Products: eidos Problem Types: CWE-94 Description: Eidos is an extensible framework for Personal Data Management. Versions 0.21.0 and below contain a one-click remote code execution vulnerability. An attacker can exploit this vulnerability by embedding a specially crafted eidos: URL on any website, including a malicious one they control. When a victim visits such a site or clicks on the link, the browser triggers the app’s custom URL handler (eidos:), causing the Eidos application to launch
clicks on the link, the browser triggers the app’s custom URL handler (eidos:), causing the Eidos application to launch and process the URL, leading to remote code execution on the victim’s machine. This issue does not have a fix as of October 3, 2025 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mayneyao/eidos/security/advisories/GHSA-qhhm-56qp-xr2r
CVE ID: CVE-2025-54376 State: PUBLISHED Published: 2025-09-10T19:49:08.752Z Last Updated: 2025-09-10T20:05:22.071Z Vendors: SpectoLabs Products: hoverfly Problem Types: CWE-200, CWE-287 Description: Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, Hoverfly’s admin WebSocket endpoint /api/v2/ws/logs is not protected by the same authentication middleware that guards the REST admin API. Consequently, an unauthenticated remote attacker can stream real-time application logs (information disclosure) and/or gain insight into internal file paths, request/response bodies, and other potentially sensitive data emitted in logs. Version 1.12.0 contains a fix for the issue. Ad
t/response bodies, and other potentially sensitive data emitted in logs. Version 1.12.0 contains a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/SpectoLabs/hoverfly/security/advisories/GHSA-jxmr-2h4q-rhxp - https://github.com/SpectoLabs/hoverfly/commit/ffc2cc34563de67fe1a04f7ba5d78fa2d4564424
CVE ID: CVE-2025-54377 State: PUBLISHED Published: 2025-07-23T20:36:01.878Z Last Updated: 2025-07-23T20:48:31.557Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: RooCodeInc Products: Roo-Code Problem Types: CWE-77 Description: Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.23.18 and below, RooCode does not validate line breaks (\n) in its command input, allowing potential bypass of the allow-list mechanism. The project appears to lack parsing or validation logic to prevent multi-line command injection. When commands are evaluated for execution, only the first line or token may be considered, enabling attackers to
ection. When commands are evaluated for execution, only the first line or token may be considered, enabling attackers to smuggle additional commands in subsequent lines. This is fixed in version 3.23.19. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-p278-52x9-cffx - https://github.com/RooCodeInc/Roo-Code/commit/9d434c2db9b20eb5c78b698cb2b0037cd2074534
CVE ID: CVE-2025-54378 State: PUBLISHED Published: 2025-07-26T03:27:34.305Z Last Updated: 2025-07-28T19:01:27.428Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H) Vendors: haxtheweb Products: issues Problem Types: CWE-285, CWE-862 Description: HAX CMS allows you to manage your microsite universe with PHP or NodeJs backends. In versions 11.0.13 and below of haxcms-nodejs and versions 11.0.8 and below of haxcms-php, API endpoints do not perform authorization checks when interacting with a resource. Both the JS and PHP versions of the CMS do not verify that a user has permission to interact with a resource before performing a given operation. The API endpoints within the
hat a user has permission to interact with a resource before performing a given operation. The API endpoints within the HAX CMS application check if a user is authenticated, but don't check for authorization before performing an operation. This is fixed in versions 11.0.14 of haxcms-nodejs and 11.0.9 of haxcms-php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/haxtheweb/issues/security/advisories/GHSA-9jr9-8ff3-m894 - https://github.com/haxtheweb/haxcms-nodejs/commit/5826e9b7f3d8c7c7635411768b86b199fad36969 - https://github.com/haxtheweb/haxcms-php/commit/24d30222481ada037597c4d7c0a51a1ef7af6cfd
CVE ID: CVE-2025-54379 State: PUBLISHED Published: 2025-07-24T22:24:23.709Z Last Updated: 2025-07-25T13:26:34.392Z Vendors: lf-edge Products: ekuiper Problem Types: CWE-89 Description: LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability in the getLast API functionality of the eKuiper project. This flaw allows unauthenticated remote attackers to execute arbitrary SQL statements on the underlying SQLite database by manipulating the table name input in an API request. Exploitation can lead to data theft, corruption, or deletion, and full database co
e table name input in an API request. Exploitation can lead to data theft, corruption, or deletion, and full database compromise. This is fixed in version 2.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lf-edge/ekuiper/security/advisories/GHSA-526j-mv3p-f4vv - https://github.com/lf-edge/ekuiper/commit/72c4918744934deebf04e324ae66933ec089ebd3
CVE ID: CVE-2025-54380 State: PUBLISHED Published: 2025-07-26T03:28:25.194Z Last Updated: 2025-07-28T19:00:02.211Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: opencast Products: opencast Problem Types: CWE-200, CWE-522 Description: Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to version 17.6, Opencast would incorrectly send the hashed global system account credentials (ie: org.opencastproject.security.digest.user and org.opencastproject.security.digest.pass) when attempting to fetch mediapackage elements included in a mediapackage XML file. A previous CVE prevented many cases where the c
ting to fetch mediapackage elements included in a mediapackage XML file. A previous CVE prevented many cases where the credentials were inappropriately sent, but not all. Anyone with ingest permissions could cause Opencast to send its hashed global system account credentials to a url of their choosing. This issue is fixed in Opencast 17.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/opencast/opencast/security/advisories/GHSA-j63h-hmgw-x4j7 - https://github.com/opencast/opencast/security/advisories/GHSA-hcxx-mp6g-6gr9 - https://github.com/opencast/opencast/commit/e8980435342149375802648b9c9e696c9a5f0c9a
CVE ID: CVE-2025-54381 State: PUBLISHED Published: 2025-07-29T22:11:24.407Z Last Updated: 2025-07-30T15:07:10.836Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L) Vendors: bentoml Products: BentoML Problem Types: CWE-918 Description: BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force the server to make arbitrary HTTP requests. The vulnerability stems from the multipart form data and JSON request handlers, which automatically download files from user-provided URL