Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ress. The vulnerability requires the authentik instance to trust X-Forwarded-For header provided by the attacker, thus it is not reproducible from external hosts on a properly configured environment. The issue occurs due to the password stage having a policy bound to it, which skips the password stage if the Identification stage is setup to also contain a password stage. Due to the invalid X-Forwarded-For header, which does not get validated to be an IP Address early enough, the exception happens later and the policy fails. The default blueprint doesn't correctly set `failure_result` to `True` on the policy binding meaning that due to this exception the policy returns false and the password
re_result` to `True` on the policy binding meaning that due to this exception the policy returns false and the password stage is skipped. Versions 2024.8.3 and 2024.6.5 fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goauthentik/authentik/security/advisories/GHSA-7jxf-mmg9-9hg7 - https://github.com/goauthentik/authentik/commit/78f7b04d5a62b2a9d4316282a713c2c7857dbe29 - https://github.com/goauthentik/authentik/commit/dd8f809161e738b25765797eb2a5c77a7d3fc2cf
CVE ID: CVE-2024-47071 State: PUBLISHED Published: 2024-10-01T15:40:46.257Z Last Updated: 2024-10-01T16:15:01.398Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: FreePBX Products: security-reporting Problem Types: CWE-22 Description: OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FreePBX/security-reporting/security/advisories/GHSA-x9wc-qjrc-j7ww - https://github
nt: References: - https://github.com/FreePBX/security-reporting/security/advisories/GHSA-x9wc-qjrc-j7ww - https://github.com/FreePBX-ContributedModules/endpointman/commit/bad70ca3de2166bbd24f273f7f212a8b2c92a719
CVE ID: CVE-2024-47072 State: PUBLISHED Published: 2024-11-07T23:38:52.978Z Last Updated: 2025-11-03T22:19:56.488Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: x-stream Products: xstream Problem Types: CWE-121, CWE-502 Description: XStream is a simple library to serialize objects to XML and back again. This vulnerability may allow a remote attacker to terminate the application with a stack overflow error resulting in a denial of service only by manipulating the processed input stream when XStream is configured to use the BinaryStreamDriver. XStream 1.4.21 has been patched to detect the manipulation in the binary input stream causing the the stack overflow a
. XStream 1.4.21 has been patched to detect the manipulation in the binary input stream causing the the stack overflow and raises an InputManipulationException instead. Users are advised to upgrade. Users unable to upgrade may catch the StackOverflowError in the client code calling XStream if XStream is configured to use the BinaryStreamDriver. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/x-stream/xstream/security/advisories/GHSA-hfq9-hggm-c56q - https://github.com/x-stream/xstream/commit/bb838ce2269cac47433e31c77b2b236466e9f266 - https://x-stream.github.io/CVE-2024-47072.html
CVE ID: CVE-2024-47073 State: PUBLISHED Published: 2024-11-07T17:31:23.535Z Last Updated: 2024-11-21T16:23:47.430Z Vendors: dataease Products: dataease Problem Types: CWE-347 Description: DataEase is an open source data visualization analysis tool that helps users quickly analyze data and gain insights into business trends. In affected versions a the lack of signature verification of jwt tokens allows attackers to forge jwts which then allow access to any interface. The vulnerability has been fixed in v2.10.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dataease
nds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dataease/dataease/security/advisories/GHSA-5jr4-wrm2-xj36
CVE ID: CVE-2024-47074 State: PUBLISHED Published: 2024-10-11T14:45:31.107Z Last Updated: 2024-10-11T19:59:38.971Z Vendors: dataease Products: dataease Problem Types: CWE-502 Description: DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customize the JDBC connection parameters and the PG server target to be connected. In backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java, PgConfiguration class don't filter any parameters, directly concat user input. So, if the attacker adds some parameters in JDBC url, and connect to evil PG server, the attacker can trigger the PG jdbc deserialization vul
dds some parameters in JDBC url, and connect to evil PG server, the attacker can trigger the PG jdbc deserialization vulnerability, and eventually the attacker can execute through the deserialization vulnerability system commands and obtain server privileges. The vulnerability has been fixed in v1.18.25. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dataease/dataease/security/advisories/GHSA-jgg7-w629-wcpc - https://github.com/dataease/dataease/commit/86eafc4d77f0bbc0eaa7fc58e5076a085257f259
CVE ID: CVE-2024-47075 State: PUBLISHED Published: 2024-09-26T17:08:19.996Z Last Updated: 2024-09-26T18:06:22.177Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: layui Products: layui Problem Types: CWE-79 Description: LayUI is a native minimalist modular Web UI component library. Versions prior to 2.9.17 have a DOM Clobbering vulnerability that can lead to Cross-site Scripting (XSS) on web pages where attacker-controlled HTML elements (e.g., `img` tags with unsanitized `name` attributes) are present. Version 2.9.17 fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/layui/layui/security/advisories/GHSA-j827
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/layui/layui/security/advisories/GHSA-j827-6rgf-9629 - https://github.com/layui/layui/commit/f756b41d63bf3d488a2cb042918638c9851bf2b0
CVE ID: CVE-2024-47076 State: PUBLISHED Published: 2024-09-26T21:18:22.067Z Last Updated: 2025-11-03T22:19:59.403Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: OpenPrinting Products: libcupsfilters Problem Types: CWE-20 Description: CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a
not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5 - https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8 - https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47 - https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6 - https://www.cups.org - https://www.evilsocket.
/github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6 - https://www.cups.org - https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I
CVE ID: CVE-2024-47077 State: PUBLISHED Published: 2024-09-27T15:26:20.683Z Last Updated: 2024-09-27T17:51:19.674Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: goauthentik Products: authentik Problem Types: CWE-863 Description: authentik is an open-source identity provider. Prior to versions 2024.8.3 and 2024.6.5, access tokens issued to one application can be stolen by that application and used to impersonate the user against any other proxy provider. Also, a user can steal an access token they were legitimately issued for one application and use it to access another application that they aren't allowed to access. Anyone who has more than one proxy provi
on and use it to access another application that they aren't allowed to access. Anyone who has more than one proxy provider application with different trust domains or different access control is affected. Versions 2024.8.3 and 2024.6.5 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/goauthentik/authentik/security/advisories/GHSA-8gfm-pr6x-pfh9 - https://github.com/goauthentik/authentik/commit/22e586bd8cdc3d1db8a0f18314d76f82371129b2 - https://github.com/goauthentik/authentik/commit/57a31b5dd16d4adce716b9878455c0d6f58155fe - https://github.com/goauthentik/authentik/blob/70b5a214f2e7205572f914aaf68682501b9f5945/authentik/providers/oauth2/view
- https://github.com/goauthentik/authentik/blob/70b5a214f2e7205572f914aaf68682501b9f5945/authentik/providers/oauth2/views/introspection.py#L42-L51 - https://github.com/goauthentik/authentik/blob/70b5a214f2e7205572f914aaf68682501b9f5945/internal/outpost/proxyv2/application/auth_bearer.go#L30-L36
CVE ID: CVE-2024-47078 State: PUBLISHED Published: 2024-09-25T15:32:37.742Z Last Updated: 2024-09-25T15:43:25.312Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: meshtastic Products: firmware Problem Types: CWE-287, CWE-863 Description: Meshtastic is an open source, off-grid, decentralized, mesh network. Meshtastic uses MQTT to communicate over an internet connection to a shared or private MQTT Server. Nodes can communicate directly via an internet connection or proxied through a connected phone (i.e., via bluetooth). Prior to version 2.5.1, multiple weaknesses in the MQTT implementation allow for authentication and authorization bypasses resulting in unautho
multiple weaknesses in the MQTT implementation allow for authentication and authorization bypasses resulting in unauthorized control of MQTT-connected nodes. Version 2.5.1 contains a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/meshtastic/firmware/security/advisories/GHSA-vqcq-wjwx-7252
CVE ID: CVE-2024-47079 State: PUBLISHED Published: 2024-10-07T19:55:51.142Z Last Updated: 2024-10-07T20:19:33.259Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: meshtastic Products: firmware Problem Types: CWE-345 Description: Meshtastic is an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices. Meshtastic firmware is an open source firmware implementation for the broader project. The remote hardware module of the firmware does not have proper checks to ensure a remote hardware control message was received should be considered valid. This issue has been addressed in release version 2.5.1. All users are advised t
was received should be considered valid. This issue has been addressed in release version 2.5.1. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/meshtastic/firmware/security/advisories/GHSA-h8mh-p4r3-4jv7
CVE ID: CVE-2024-47080 State: PUBLISHED Published: 2024-10-15T14:53:01.752Z Last Updated: 2024-10-15T17:34:44.173Z Vendors: matrix-org Products: matrix-js-sdk Problem Types: CWE-200, CWE-287 Description: matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. In matrix-js-sdk versions versions 9.11.0 through 34.7.0, the method `MatrixClient.sendSharedHistoryKeys` is vulnerable to interception by malicious homeservers. The method was introduced by MSC3061) and is commonly used to share historical message keys with newly invited users, granting them access to past messages in the room. However, it unconditionally sends these "shared" keys to all of the invited user's devic
s to past messages in the room. However, it unconditionally sends these "shared" keys to all of the invited user's devices, regardless of whether the user's cryptographic identity is verified or whether the user's devices are signed by that identity. This allows the attacker to potentially inject its own devices to receive sensitive historical keys without proper security checks. Note that this only affects clients running the SDK with the legacy crypto stack. Clients using the new Rust cryptography stack (i.e. those that call `MatrixClient.initRustCrypto()` instead of `MatrixClient.initCrypto()`) are unaffected by this vulnerability, because `MatrixClient.sendSharedHistoryKeys()` raises an
rixClient.initCrypto()`) are unaffected by this vulnerability, because `MatrixClient.sendSharedHistoryKeys()` raises an exception in such environments. The vulnerability was fixed in matrix-js-sdk 34.8.0 by removing the vulnerable functionality. As a workaround, remove use of affected functionality from clients. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-4jf8-g8wp-cx7c - https://github.com/matrix-org/matrix-spec-proposals/pull/3061 - https://github.com/matrix-org/matrix-js-sdk/commit/2fb1e659c81f75253c047832dc9dcc2beddfac5f
CVE ID: CVE-2024-47081 State: PUBLISHED Published: 2025-06-09T17:57:47.731Z Last Updated: 2025-06-09T18:40:40.996Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: psf Products: requests Problem Types: CWE-522 Description: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
on one's Requests Session. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7 - https://github.com/psf/requests/pull/6965 - https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef - https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env - https://seclists.org/fulldisclosure/2025/Jun/2
CVE ID: CVE-2024-47082 State: PUBLISHED Published: 2024-09-25T17:48:24.065Z Last Updated: 2024-09-25T18:05:24.810Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: strawberry-graphql Products: strawberry Problem Types: CWE-352 Description: Strawberry GraphQL is a library for creating GraphQL APIs. Prior to version 0.243.0, multipart file upload support as defined in the GraphQL multipart request specification was enabled by default in all Strawberry HTTP view integrations. This made all Strawberry HTTP view integrations vulnerable to cross-site request forgery (CSRF) attacks if users did not explicitly enable CSRF preventing security mechanism for their serve
ite request forgery (CSRF) attacks if users did not explicitly enable CSRF preventing security mechanism for their servers. Additionally, the Django HTTP view integration, in particular, had an exemption for Django's built-in CSRF protection (i.e., the `CsrfViewMiddleware` middleware) by default. In affect, all Strawberry integrations were vulnerable to CSRF attacks by default. Version `v0.243.0` is the first `strawberry-graphql` including a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/strawberry-graphql/strawberry/security/advisories/GHSA-79gp-q4wv-33fr - https://github.com/strawberry-graphql/strawberry/commit/37265b230e511480a9ceace492f9f6a484b
sories/GHSA-79gp-q4wv-33fr - https://github.com/strawberry-graphql/strawberry/commit/37265b230e511480a9ceace492f9f6a484be1387 - https://strawberry.rocks/docs/breaking-changes/0.243.0
CVE ID: CVE-2024-47083 State: PUBLISHED Published: 2024-09-25T21:21:28.818Z Last Updated: 2024-09-26T15:39:10.861Z Vendors: microsoft Products: terraform-provider-power-platform Problem Types: CWE-117, CWE-532 Description: Power Platform Terraform Provider allows managing environments and other resources within Power Platform. Versions prior to 3.0.0 have an issue in the Power Platform Terraform Provider where sensitive information, specifically the `client_secret` used in the service principal authentication, may be exposed in logs. This exposure occurs due to an error in the logging code that causes the `client_secret` to not be properly masked when logs are persisted or viewed. Users shou
the logging code that causes the `client_secret` to not be properly masked when logs are persisted or viewed. Users should upgrade to version 3.0.0 to receive a patched version of the provider that removes all logging of sensitive content. Users who have used this provider with the affected versions should take the following additional steps to mitigate the risk: Immediately rotate the `client_secret` for any service principal that has been configured using this Terraform provider. This will invalidate any potentially exposed secrets. Those who have set the `TF_LOG_PATH` environment variable or configured Terraform to persist logs to a file or an external system, consider disabling this unti
vironment variable or configured Terraform to persist logs to a file or an external system, consider disabling this until they have updated to a fixed version of the provider. Those who have existing logs that may contain the `client_secret` should remove or sanitize these logs to prevent unauthorized access. This includes logs on disk, in monitoring systems, or in logging services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/microsoft/terraform-provider-power-platform/security/advisories/GHSA-7w3w-pjm5-m36c - https://github.com/microsoft/terraform-provider-power-platform/releases/tag/v3.0.0 - https://registry.terraform.io/providers/microsoft/power-pla
soft/terraform-provider-power-platform/releases/tag/v3.0.0 - https://registry.terraform.io/providers/microsoft/power-platform/latest/docs#authenticating-to-power-platform-using-a-service-principal-with-oidc
CVE ID: CVE-2024-47084 State: PUBLISHED Published: 2024-10-10T21:53:51.940Z Last Updated: 2024-10-11T15:24:05.733Z Vendors: gradio-app Products: gradio Problem Types: CWE-285 Description: Gradio is an open-source Python package designed for quick prototyping. This vulnerability is related to **CORS origin validation**, where the Gradio server fails to validate the request origin when a cookie is present. This allows an attacker’s website to make unauthorized requests to a local Gradio server. Potentially, attackers can upload files, steal authentication tokens, and access user data if the victim visits a malicious website while logged into Gradio. This impacts users who have deployed Gradio
ser data if the victim visits a malicious website while logged into Gradio. This impacts users who have deployed Gradio locally and use basic authentication. Users are advised to upgrade to `gradio>4.44` to address this issue. As a workaround, users can manually enforce stricter CORS origin validation by modifying the `CustomCORSMiddleware` class in their local Gradio server code. Specifically, they can bypass the condition that skips CORS validation for requests containing cookies to prevent potential exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gradio-app/gradio/security/advisories/GHSA-3c67-5hwx-f6wx
CVE ID: CVE-2024-47085 State: PUBLISHED Published: 2024-09-19T05:56:23.460Z Last Updated: 2024-09-20T12:15:03.789Z Vendors: Apex Softcell Products: LD DP Back Office Problem Types: CWE-359 Description: This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters (cCdslClicentcode and cLdClientCode) in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-202
es: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0296
CVE ID: CVE-2024-47086 State: PUBLISHED Published: 2024-09-19T06:03:10.218Z Last Updated: 2024-09-19T14:22:31.163Z Vendors: Apex Softcell Products: LD DP Back Office Problem Types: CWE-302 Description: This vulnerability exists in Apex Softcell LD DP Back Office due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by providing arbitrary OTP value for authentication and subsequently changing its API response. Successful exploitation of this vulnerability could allow the attacker to bypass OTP verification for other user accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
to bypass OTP verification for other user accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0296
CVE ID: CVE-2024-47087 State: PUBLISHED Published: 2024-09-19T06:08:46.528Z Last Updated: 2024-09-19T13:49:16.221Z Vendors: Apex Softcell Products: LD Geo Problem Types: CWE-359 Description: This vulnerability exists in Apex Softcell LD Geo due to improper validation of the certain parameters (Client ID, DPID or BOID) in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0296
CVE ID: CVE-2024-47088 State: PUBLISHED Published: 2024-09-19T06:13:40.801Z Last Updated: 2024-09-19T13:47:33.613Z Vendors: Apex Softcell Products: LD Geo Problem Types: CWE-307 Description: This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on login OTP, which could lead to gain unauthorized access to other user accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0296
CVE ID: CVE-2024-47089 State: PUBLISHED Published: 2024-09-19T06:18:33.392Z Last Updated: 2024-09-19T13:45:30.139Z Vendors: Apex Softcell Products: LD Geo Problem Types: CWE-354 Description: This vulnerability exists in the Apex Softcell LD Geo due to improper validation of the transaction token ID in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating the transaction token ID in the API request leading to unauthorized access and modification of transactions belonging to other users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0296
CVE ID: CVE-2024-47090 State: PUBLISHED Published: 2025-05-27T07:02:53.607Z Last Updated: 2025-11-03T19:31:16.593Z Vendors: Nagvis Products: Nagvis Problem Types: CWE-79 Description: Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.nagvis.org/downloads/changelog/1.9.47