Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
the client browser will execute within the session context of the authenticated user. Upgrading to Apache NiFi 1.28.0 or 2.0.0-M4 is the recommended mitigation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/shdv0tw9hggj7tx9pl7g93mgok2lwbj9
CVE ID: CVE-2024-45478 State: PUBLISHED Published: 2025-01-21T21:25:58.276Z Last Updated: 2025-06-10T09:05:27.590Z Vendors: Apache Software Foundation Products: Apache Ranger Problem Types: CWE-79 Description: Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
CVE ID: CVE-2024-45479 State: PUBLISHED Published: 2025-01-21T21:26:16.500Z Last Updated: 2025-06-10T09:06:33.435Z Vendors: Apache Software Foundation Products: Apache Ranger Problem Types: CWE-918 Description: SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
CVE ID: CVE-2024-45480 State: PUBLISHED Published: 2025-03-25T04:50:52.976Z Last Updated: 2025-03-25T14:32:15.379Z Vendors: B&R Industrial Automation Products: B&R APROL Problem Types: CWE-94 Description: An improper control of generation of code ('Code Injection') vulnerability in the AprolCreateReport component of B&R APROL <4.4-00P5 may allow an unauthenticated network-based attacker to read files from the local system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.br-automation.com/fileadmin/SA24P015-77573c08.pdf
CVE ID: CVE-2024-45481 State: PUBLISHED Published: 2025-03-25T04:52:06.675Z Last Updated: 2025-03-25T14:25:20.372Z Vendors: B&R Industrial Automation Products: B&R APROL Problem Types: CWE-791 Description: An Incomplete Filtering of Special Elements vulnerability in scripts using the SSH server on B&R APROL <4.4-00P5 may allow an authenticated local attacker to authenticate as another legitimate user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.br-automation.com/fileadmin/SA24P015-77573c08.pdf
CVE ID: CVE-2024-45482 State: PUBLISHED Published: 2025-03-25T04:52:56.296Z Last Updated: 2025-03-25T14:23:53.190Z Vendors: B&R Industrial Automation Products: B&R APROL Problem Types: CWE-829 Description: An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the SSH server on B&R APROL <4.4-00P1 may allow an authenticated local attacker from a trusted remote server to execute malicious commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.br-automation.com/fileadmin/SA24P015-77573c08.pdf
CVE ID: CVE-2024-45483 State: PUBLISHED Published: 2025-03-25T04:54:24.913Z Last Updated: 2025-03-25T13:16:57.912Z Vendors: B&R Industrial Automation GmbH Products: APROL Problem Types: CWE-306 Description: A Missing Authentication for Critical Function vulnerability in the GRUB configuration used B&R APROL <4.4-01 may allow an unauthenticated physical attacker to alter the boot configuration of the operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.br-automation.com/fileadmin/SA24P015-77573c08.pdf
CVE ID: CVE-2024-45484 State: PUBLISHED Published: 2025-03-25T04:55:02.781Z Last Updated: 2025-03-31T18:07:09.768Z Vendors: B&R Industrial Automation GmbH Products: APROL Problem Types: CWE-770 Description: An Allocation of Resources Without Limits or Throttling vulnerability in the operating system network configuration used in B&R APROL <4.4-00P5 may allow an unauthenticated adjacent attacker to per-form Denial-of-Service (DoS) attacks against the product. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.br-automation.com/fileadmin/SA24P015-77573c08.pdf
CVE ID: CVE-2024-45488 State: PUBLISHED Published: 2024-08-30T00:00:00.000Z Last Updated: 2025-03-13T18:23:42.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to cookies. This only affects virtual appliance installations (VMware or HyperV). The fixed versions are 7.0.5.1 LTS, 7.4.2, and 7.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.oneidentity.com/product-notification/noti-00001628 - https://support.oneidentity.com/kb/4376740/safeguard-for-privileged-passwords-security-vulnerability-notification-defect-460620
CVE ID: CVE-2024-45489 State: PUBLISHED Published: 2024-09-20T00:00:00 Last Updated: 2024-09-20T18:44:54.069475 Vendors: n/a Products: n/a Problem Types: n/a Description: Arc before 2024-08-26 allows remote code execution in JavaScript boosts. Boosts that run JavaScript cannot be shared by default; however (because of misconfigured Firebase ACLs), it is possible to create or update a boost using another user's ID. This installs the boost in the victim's browser and runs arbitrary Javascript on that browser in a privileged context. NOTE: this is a no-action cloud vulnerability with zero affected users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://kibty.town/blog/ar
ty with zero affected users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://kibty.town/blog/arc/ - https://news.ycombinator.com/item?id=41597250 - https://arc.net/blog/CVE-2024-45489-incident-response
CVE ID: CVE-2024-45490 State: PUBLISHED Published: 2024-08-30T00:00:00.000Z Last Updated: 2025-11-04T16:15:47.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/libexpat/libexpat/pull/890 - https://github.com/libexpat/libexpat/issues/887
CVE ID: CVE-2024-45491 State: PUBLISHED Published: 2024-08-30T00:00:00.000Z Last Updated: 2025-11-04T16:15:48.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/libexpat/libexpat/pull/891 - https://github.com/libexpat/libexpat/issues/888
CVE ID: CVE-2024-45492 State: PUBLISHED Published: 2024-08-30T00:00:00.000Z Last Updated: 2025-11-04T16:15:49.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/libexpat/libexpat/pull/892 - https://github.com/libexpat/libexpat/issues/889
CVE ID: CVE-2024-45493 State: PUBLISHED Published: 2024-12-10T00:00:00 Last Updated: 2025-01-06T17:31:53.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 (Fixed in 7.0.0). The FieldServer Gateway has internal users, whose access is supposed to be restricted to login locally on the device. However, an attacker can bypass the check for this, which might allow them to authenticate with an internal user account from the network (if they know their password). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://us.msasafety.com/fieldserver - https://us.msasafety.com/security-notices
CVE ID: CVE-2024-45494 State: PUBLISHED Published: 2024-12-10T00:00:00 Last Updated: 2025-01-06T17:31:22.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 (Fixed in 7.0.0). The FieldServer Gateway has an internally used shared administrative user account on all devices. The authentication for this user is implemented through an unsafe shared secret that is static in all affected firmware versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://us.msasafety.com/fieldserver - https://us.msasafety.com/security-notices
CVE ID: CVE-2024-45495 State: PUBLISHED Published: 2024-11-29T00:00:00 Last Updated: 2024-12-04T16:38:06.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://us.msasafety.com/fieldserver - https://us.msasafety.com/security-notices
CVE ID: CVE-2024-45496 State: PUBLISHED Published: 2024-09-16T23:58:59.399Z Last Updated: 2025-11-11T15:21:40.789Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L) Vendors: Red Hat Products: Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17 Problem Types: CWE-269 Description: A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-c
elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An attacker with developer-level access can provide a crafted .gitconfig file containing commands executed during the cloning process, leading to arbitrary command execution on the worker node. An attacker running code in a privileged container could escalate their permissions on the node running the container. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:3718 - https://access.redhat.com/errata/RHSA-2024:6685 - ht
nt: References: - https://access.redhat.com/errata/RHSA-2024:3718 - https://access.redhat.com/errata/RHSA-2024:6685 - https://access.redhat.com/errata/RHSA-2024:6687 - https://access.redhat.com/errata/RHSA-2024:6689 - https://access.redhat.com/errata/RHSA-2024:6691 - https://access.redhat.com/errata/RHSA-2024:6705 - https://access.redhat.com/security/cve/CVE-2024-45496 - https://bugzilla.redhat.com/show_bug.cgi?id=2308661
CVE ID: CVE-2024-45497 State: PUBLISHED Published: 2024-12-31T02:19:22.553Z Last Updated: 2025-11-20T20:56:12.971Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: Red Hat Products: Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Container Platform 4.18, Red Hat OpenShift Container Platform 4.2, Red Hat Fuse 7, Red Hat OpenShift Container Platform 4 Problem Types: CWE-732 Description: A flaw was found in the OpenShift build process, where the docker-build container is configured
s: CWE-732 Description: A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories. The mount is not read-only, which allows the attacker to overwrite it. By modifying the config.json file, the attacker can cause a denial of service by preventing the node from pulling new images and potentially exfiltrating sensitive secrets. This flaw impacts the availability of services dependent on image pulls and exposes sensitive information to unauthorized parties. Addi
ts the availability of services dependent on image pulls and exposes sensitive information to unauthorized parties. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:10270 - https://access.redhat.com/errata/RHSA-2025:10294 - https://access.redhat.com/errata/RHSA-2025:10747 - https://access.redhat.com/errata/RHSA-2025:9269 - https://access.redhat.com/errata/RHSA-2025:9562 - https://access.redhat.com/errata/RHSA-2025:9759 - https://access.redhat.com/errata/RHSA-2025:9765 - https://access.redhat.com/security/cve/CVE-2024-45497 - https://bugzilla.redhat.com/show_bug.cgi?id=2308673
CVE ID: CVE-2024-45498 State: PUBLISHED Published: 2024-09-07T07:43:43.899Z Last Updated: 2024-11-04T16:24:53.972Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-116 Description: Example DAG: example_inlet_event_extra.py shipped with Apache Airflow version 2.10.0 has a vulnerability that allows an authenticated attacker with only DAG trigger permission to execute arbitrary commands. If you used that example as the base of your DAGs - please review if you have not copied the dangerous example; see https://github.com/apache/airflow/pull/41873 for more information. We recommend against exposing the example DAGs in your deployment. If you must expose the example
for more information. We recommend against exposing the example DAGs in your deployment. If you must expose the example DAGs, upgrade Airflow to version 2.10.1 or later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/41873 - https://lists.apache.org/thread/tl7lzczcqdmqj2pcpbvtjdpd2tb9561n
CVE ID: CVE-2024-45504 State: PUBLISHED Published: 2024-09-10T04:35:19.457Z Last Updated: 2024-11-04T20:53:34.282Z Vendors: Alps System Integration Co., Ltd., Trend Micro Incorporated, MIROKU JYOHO SERVICE CO., LTD., Hammock Corporation, MOTEX Inc., AXSEED,Inc., QualitySoft Corporation, JMA Systems Corporation Products: InterSafe WebFilter, InterSafe LogDirector, InterSafe GatewayConnection, InterSafe LogNavigator, InterSafe CATS, InterSafe MobileSecurity, InterScan WebManager, MJS WebFiltering, AssetView F, LANSCOPE EndpointManager WebFiltering, SPPM BizBrowser, SPPM Secure Filtering, URL Filtering, KAITO SecureBrowser Problem Types: Cross-site request forgery (CSRF) Description: Cross-site
e Filtering, URL Filtering, KAITO SecureBrowser Problem Types: Cross-site request forgery (CSRF) Description: Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged in. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://alsifaq.dga.jp/faq_detail.html?id=6494 - https://success.trendmicro.com/ja-JP/solution/KA-0017618 - https://www.motex.co.jp/news/notice/2024/release240909/ - https://jvn.jp/en/jp/JVN05579230/
CVE ID: CVE-2024-45505 State: PUBLISHED Published: 2024-11-18T08:44:46.165Z Last Updated: 2024-11-18T15:05:53.026Z Vendors: Apache Software Foundation Products: Apache HertzBeat Problem Types: CWE-77 Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat (incubating). This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat (incubating): before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/h8k14o1bfyod66p113pkgnt1s52p6
Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/h8k14o1bfyod66p113pkgnt1s52p6p19 - https://lists.apache.org/thread/gvbc68krhqhht7mkkkx7k13k6k6fdhy0
CVE ID: CVE-2024-45506 State: PUBLISHED Published: 2024-09-04T00:00:00.000Z Last Updated: 2025-03-14T19:16:38.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2 zero-copy forwarding (h2_send loop) under a certain set of conditions, as exploited in the wild in 2024. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.haproxy.org/ - https://www.haproxy.org/download/3.1/src/CHANGELOG - https://www.mail-archive.com/haproxy%40formilux.org/msg45281.html - https://www.mail-archive.com/haproxy%40formilux.org/msg45280.html - http://git.haproxy.
y%40formilux.org/msg45281.html - https://www.mail-archive.com/haproxy%40formilux.org/msg45280.html - http://git.haproxy.org/?p=haproxy-3.0.git%3Ba=commitdiff%3Bh=c725db17e8416ffb3c1537aea756356228ce5e3c - http://git.haproxy.org/?p=haproxy-3.0.git%3Ba=commitdiff%3Bh=d636e515453320c6e122c313c661a8ac7d387c7f
CVE ID: CVE-2024-45507 State: PUBLISHED Published: 2024-09-04T08:08:33.876Z Last Updated: 2024-09-13T03:55:20.597Z Vendors: Apache Software Foundation Products: Apache OFBiz Problem Types: CWE-918, CWE-94 Description: Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ofbiz.apache.org/download.html - https://ofbiz.apache.org/security.html - https://issues.apache.org/jira/browse/OFBIZ-13132 - https:
.org/download.html - https://ofbiz.apache.org/security.html - https://issues.apache.org/jira/browse/OFBIZ-13132 - https://lists.apache.org/thread/o90dd9lbk1hh3t2557t2y2qvrh92p7wy
CVE ID: CVE-2024-45508 State: PUBLISHED Published: 2024-09-01T00:00:00 Last Updated: 2024-09-03T15:07:42.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/michaelrsweet/htmldoc/issues/528 - https://github.com/michaelrsweet/htmldoc/commit/2d5b2ab9ddbf2aee2209010cebc11efdd1cab6e2 - https://github.com/michaelrsweet/htmldoc/blob/2d5b2ab9ddbf2aee2209010cebc11efdd1cab6e2/CHANGES.md
CVE ID: CVE-2024-45509 State: PUBLISHED Published: 2024-09-01T00:00:00 Last Updated: 2024-09-03T15:03:31.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MISP/MISP/commit/3f3b9a574f349182a545636e12efa39267e9db04
CVE ID: CVE-2024-45510 State: PUBLISHED Published: 2024-11-20T00:00:00 Last Updated: 2024-11-20T20:57:53.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zimbra Collaboration (ZCS) through 10.0. Zimbra Webmail (Modern UI) is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper sanitization of user input. This allows an attacker to inject malicious code into specific fields of an e-mail message. When the victim adds the attacker to their contacts, the malicious code is stored and executed when viewing the contact list. This can lead to unauthorized actions such as arbitrary mail sending, mailbox exfiltration, profile picture altera
list. This can lead to unauthorized actions such as arbitrary mail sending, mailbox exfiltration, profile picture alteration, and other malicious actions. Proper sanitization and escaping of input fields are necessary to mitigate this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy - https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes - https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes - https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes
CVE ID: CVE-2024-45511 State: PUBLISHED Published: 2024-11-20T00:00:00 Last Updated: 2024-11-20T20:57:53.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A reflected Cross-Site Scripting (XSS) issue exists through the Briefcase module due to improper sanitization of file content by the OnlyOffice formatter. This occurs when the victim opens a crafted URL pointing to a shared folder containing a malicious file uploaded by the attacker. The vulnerability allows the attacker to execute arbitrary JavaScript in the context of the victim's session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
JavaScript in the context of the victim's session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy - https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes - https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes
CVE ID: CVE-2024-45512 State: PUBLISHED Published: 2024-11-21T00:00:00 Last Updated: 2024-11-21T18:11:28.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in webmail in Zimbra Collaboration (ZCS) through 10.1. An attacker can exploit this vulnerability by creating a folder in the Briefcase module with a malicious payload and sharing it with a victim. When the victim interacts with the folder share notification, the malicious script executes in their browser. This stored Cross-Site Scripting (XSS) vulnerability can lead to unauthorized actions within the victim's session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.zimbra
ctions within the victim's session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy - https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes - https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes - https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes
CVE ID: CVE-2024-45513 State: PUBLISHED Published: 2024-11-21T00:00:00 Last Updated: 2024-11-21T18:03:40.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A stored Cross-Site Scripting (XSS) vulnerability exists in the /modern/contacts/print endpoint of Zimbra webmail. This allows an attacker to inject and execute arbitrary JavaScript code in the context of the victim's browser when a crafted vCard (VCF) file is processed and printed. This could lead to unauthorized actions within the victim's session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Security_Center
session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy - https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes - https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes - https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes