Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-47590 State: PUBLISHED Published: 2024-11-12T00:26:18.659Z Last Updated: 2024-11-12T17:11:38.220Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: SAP_SE Products: SAP Web Dispatcher Problem Types: CWE-791 Description: An unauthenticated attacker can create a malicious link which they can make publicly available. When an authenticated victim clicks on this malicious link, input data will be used by the web site page generation to create content which when executed in the victim's browser (XXS) or transmitted to another server (SSRF) gives the attacker the ability to execute arbitrary code on the server fully compromising confidentiality, integr
(SSRF) gives the attacker the ability to execute arbitrary code on the server fully compromising confidentiality, integrity and availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3520281 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-47592 State: PUBLISHED Published: 2024-11-12T00:27:10.881Z Last Updated: 2024-11-12T01:40:11.797Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP NetWeaver Application Server Java (Logon Application) Problem Types: CWE-307 Description: SAP NetWeaver AS Java allows an unauthenticated attacker to brute force the login functionality in order to identify the legitimate user IDs. This has an impact on confidentiality but not on integrity or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3393899 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-47593 State: PUBLISHED Published: 2024-11-12T00:27:17.815Z Last Updated: 2024-11-12T14:49:44.745Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP NetWeaver Application Server ABAP Problem Types: WE-524: Use of Cache Containing Sensitive Information Description: SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be restricted.This attack is possible only if a Web Dispatcher or some sort of Proxy Server is in use and the file in question was previously opened or downloaded in an application based on SAP GUI for HTML Technology. T
e and the file in question was previously opened or downloaded in an application based on SAP GUI for HTML Technology. This will not compromise the application's integrity or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3508947 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-47594 State: PUBLISHED Published: 2024-10-08T03:21:40.168Z Last Updated: 2024-10-08T15:28:13.135Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP NetWeaver Enterprise Portal (KMC) Problem Types: CWE-79 Description: SAP NetWeaver Enterprise Portal (KMC) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability in KMC servlet. An attacker could craft a script and trick the user into clicking it. When a victim who is registered on the portal clicks on such link, confidentiality and integrity of their web browser session could be compromised. Additional Analyst Notes: - CISA ADP Vul
onfidentiality and integrity of their web browser session could be compromised. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3503462 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-47595 State: PUBLISHED Published: 2024-11-12T00:27:23.692Z Last Updated: 2024-11-12T01:36:12.627Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: SAP_SE Products: SAP Host Agent Problem Types: CWE-266 Description: An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful exploitation the attacker could cause high impact on confidentiality and integrity of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3509619 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-47596 State: PUBLISHED Published: 2024-12-11T19:01:23.353Z Last Updated: 2025-11-03T20:39:44.577Z Vendors: gstreamer Products: gstreamer Problem Types: CWE-125 Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data function within qtdemux.c. In the FOURCC_SMI_ case, seqh_size is read from the input file without proper validation. If seqh_size is greater than the remaining size of the data buffer, it can lead to an OOB-read in the following call to gst_buffer_fill, which internally uses memcpy. This vulnerability can result in reading up to 4GB of process memory or potential
er_fill, which internally uses memcpy. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2024-244_Gstreamer/ - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch - https://gstreamer.freedesktop.org/security/sa-2024-0015.html
CVE ID: CVE-2024-47597 State: PUBLISHED Published: 2024-12-11T19:01:50.820Z Last Updated: 2025-11-03T20:39:46.216Z Vendors: gstreamer Products: gstreamer Problem Types: CWE-125 Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream->stco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This
d when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2024-245_Gstreamer/ - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch - https://gstreamer.freedesktop.org/security/sa-2024-0012.html
CVE ID: CVE-2024-47598 State: PUBLISHED Published: 2024-12-11T19:02:32.029Z Last Updated: 2025-11-03T20:39:47.592Z Vendors: gstreamer Products: gstreamer Problem Types: CWE-125 Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table function within qtdemux.c. The problem is that the size of the stts buffer isn’t properly checked before reading stts_duration, allowing the program to read 4 bytes beyond the boundaries of stts->data. This vulnerability reads up to 4 bytes past the allocated bounds of the stts array. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: -
4 bytes past the allocated bounds of the stts array. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2024-246_Gstreamer/ - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch - https://gstreamer.freedesktop.org/security/sa-2024-0006.html
CVE ID: CVE-2024-47599 State: PUBLISHED Published: 2024-12-11T19:02:52.412Z Last Updated: 2025-11-03T20:39:48.976Z Vendors: gstreamer Products: gstreamer Problem Types: CWE-476 Description: GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_jpeg_dec_negotiate function in gstjpegdec.c. This function does not check for a NULL return value from gst_video_decoder_set_output_state. When this happens, dereferences of the outstate pointer will lead to a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is f
vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2024-247_Gstreamer/ - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8040.patch - https://gstreamer.freedesktop.org/security/sa-2024-0016.html
CVE ID: CVE-2024-47600 State: PUBLISHED Published: 2024-12-11T19:03:13.938Z Last Updated: 2025-11-03T22:20:18.566Z Vendors: gstreamer Products: gstreamer Problem Types: CWE-125 Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the format_channel_mask function in gst-discoverer.c. The vulnerability affects the local array position, which is defined with a fixed size of 64 elements. However, the function gst_discoverer_audio_info_get_channels may return a guint channels value greater than 64. This causes the for loop to attempt access beyond the bounds of the position array, resulting in an OOB-read when an
4. This causes the for loop to attempt access beyond the bounds of the position array, resulting in an OOB-read when an index greater than 63 is used. This vulnerability can result in reading unintended bytes from the stack. Additionally, the dereference of value->value_nick after the OOB-read can lead to further memory corruption or undefined behavior. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2024-248_Gstreamer/ - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8034.patch - https://gstreamer.freedesktop.org/security/sa-2024-0018.html
CVE ID: CVE-2024-47601 State: PUBLISHED Published: 2024-12-11T19:03:36.650Z Last Updated: 2025-11-03T20:39:50.359Z Vendors: gstreamer Products: gstreamer Problem Types: CWE-476 Description: GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_parse_blockgroup_or_simpleblock function within matroska-demux.c. This function does not properly check the validity of the GstBuffer *sub pointer before performing dereferences. As a result, null pointer dereferences may occur. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: R
r. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2024-249_Gstreamer/ - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch - https://gstreamer.freedesktop.org/security/sa-2024-0020.html
CVE ID: CVE-2024-47602 State: PUBLISHED Published: 2024-12-11T19:10:31.683Z Last Updated: 2025-11-03T20:39:51.745Z Vendors: gstreamer Products: gstreamer Problem Types: CWE-476, CWE-125 Description: GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. This function does not properly check the validity of the stream->codec_priv pointer in the following code. If stream->codec_priv is NULL, the call to GST_READ_UINT16_LE will attempt to dereference a null pointer, leading to a crash of the application. This vulnerability is fixed in 1.2
LE will attempt to dereference a null pointer, leading to a crash of the application. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2024-250_Gstreamer/ - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch - https://gstreamer.freedesktop.org/security/sa-2024-0019.html
CVE ID: CVE-2024-47603 State: PUBLISHED Published: 2024-12-11T19:11:51.382Z Last Updated: 2025-11-03T20:39:53.128Z Vendors: gstreamer Products: gstreamer Problem Types: CWE-476 Description: GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_update_tracks function within matroska-demux.c. The vulnerability occurs when the gst_caps_is_equal function is called with invalid caps values. If this happen, then in the function gst_buffer_get_size the call to GST_BUFFER_MEM_PTR can return a null pointer. Attempting to dereference the size field of this null pointer results in a null pointe
EM_PTR can return a null pointer. Attempting to dereference the size field of this null pointer results in a null pointer dereference. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2024-251_Gstreamer/ - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch - https://gstreamer.freedesktop.org/security/sa-2024-0021.html
CVE ID: CVE-2024-47604 State: PUBLISHED Published: 2024-10-01T15:26:18.383Z Last Updated: 2024-10-01T17:13:16.824Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N) Vendors: NuGet Products: NuGetGallery Problem Types: CWE-79 Description: NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/NuGet/NuGetGallery/security/advisories/GHSA-hq63-27r7-2j64 - https://github.com/NuGet/NuGetGallery/pull/10193 - h
ub.com/NuGet/NuGetGallery/security/advisories/GHSA-hq63-27r7-2j64 - https://github.com/NuGet/NuGetGallery/pull/10193 - https://github.com/NuGet/NuGetGallery/commit/3a18689dd0de856e03d081af999783f0e6e7ca70
CVE ID: CVE-2024-47605 State: PUBLISHED Published: 2025-01-14T22:42:31.153Z Last Updated: 2025-01-15T14:53:56.830Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: silverstripe Products: silverstripe-asset-admin Problem Types: CWE-79 Description: silverstripe-asset-admin is a silverstripe assets gallery for asset management. When using the "insert media" functionality, the linked oEmbed JSON includes an HTML attribute which will replace the embed shortcode. The HTML is not sanitized before replacing the shortcode, allowing a script payload to be executed on both the CMS and the front-end of the website. This issue has been addressed in silverstripe/framework
o be executed on both the CMS and the front-end of the website. This issue has been addressed in silverstripe/framework version 5.3.8 and users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/silverstripe/silverstripe-asset-admin/security/advisories/GHSA-7cmp-cgg8-4c82 - https://github.com/silverstripe/silverstripe-framework/commit/09b5052c86932f273e0d733428c9aade70ff2a4a - https://www.silverstripe.org/download/security-releases/cve-2024-47605
CVE ID: CVE-2024-47606 State: PUBLISHED Published: 2024-12-11T19:12:40.186Z Last Updated: 2025-11-03T20:39:54.545Z Vendors: gstreamer Products: gstreamer Problem Types: CWE-190 Description: GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended value when cast to an unsigned integer. This 32-bit negative value is then cast to a 64-bit unsigned integer (0xfffffffffffffffa) in a subsequent call to gst_buffer_new_and_alloc. The function gst_buffer_new_allo
unsigned integer (0xfffffffffffffffa) in a subsequent call to gst_buffer_new_and_alloc. The function gst_buffer_new_allocate then attempts to allocate memory, eventually calling _sysmem_new_block. The function _sysmem_new_block adds alignment and header size to the (unsigned) size, causing the overflow of the 'slice_size' variable. As a result, only 0x89 bytes are allocated, despite the large input size. When the following memcpy call occurs in gst_buffer_fill, the data from the input file will overwrite the content of the GstMapInfo info structure. Finally, during the call to gst_memory_unmap, the overwritten memory may cause a function pointer hijack, as the mem->allocator->mem_unmap_full
to gst_memory_unmap, the overwritten memory may cause a function pointer hijack, as the mem->allocator->mem_unmap_full function is called with a corrupted pointer. This function pointer overwrite could allow an attacker to alter the execution flow of the program, leading to arbitrary code execution. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2024-166_Gstreamer/ - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8032.patch - https://gstreamer.freedesktop.org/security/sa-2024-0014.html
CVE ID: CVE-2024-47607 State: PUBLISHED Published: 2024-12-11T19:13:27.569Z Last Updated: 2025-11-03T22:20:20.140Z Vendors: gstreamer Products: gstreamer Problem Types: CWE-121 Description: GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gst_opus_dec_parse_header function within `gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If n_channels exceeds 64, the for loop will write beyond the boundaries of the pos array. The value written will always be GST_AUDIO_CHANNEL_POSITION_NONE. This bug allows to overwrite the EIP address allocated in the stack. This vulnerability is fixed in 1.24.10. Additiona
. This bug allows to overwrite the EIP address allocated in the stack. This vulnerability is fixed in 1.24.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/ - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8037.patch - https://gstreamer.freedesktop.org/security/sa-2024-0024.html
CVE ID: CVE-2024-47608 State: PUBLISHED Published: 2024-10-01T17:01:05.233Z Last Updated: 2024-10-01T19:05:28.166Z Vendors: DefinetlyNotAI Products: Logicytics Problem Types: CWE-78 Description: Logicytics is designed to harvest and collect data for forensic analysis. Logicytics has a basic vuln affecting compromised devices from shell injections. This vulnerability is fixed in 2.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/DefinetlyNotAI/Logicytics/security/advisories/GHSA-5wvr-vvqf-668m - https://www.codefactor.io/repository/github/definetlynotai/logicytics/issues/main
CVE ID: CVE-2024-47609 State: PUBLISHED Published: 2024-10-01T20:13:55.017Z Last Updated: 2024-11-21T16:56:13.633Z Vendors: hyperium Products: tonic Problem Types: CWE-755 Description: Tonic is a native gRPC client & server implementation with async/await support. When using tonic::transport::Server there is a remote DoS attack that can cause the server to exit cleanly on accepting a TCP/TLS stream. This can be triggered by causing the accept call to error out with errors that were not covered correctly causing the accept loop to exit. Upgrading to tonic 0.12.3 and above contains the fix. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/hyperium/tonic/secur
ntains the fix. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/hyperium/tonic/security/advisories/GHSA-4jwc-w2hc-78qv - https://github.com/hyperium/tonic/issues/1897 - https://github.com/hyperium/tonic/commit/a4472a86f3290e60c7c01348b7e6a8164d6e7e48
CVE ID: CVE-2024-47610 State: PUBLISHED Published: 2024-10-07T20:45:20.510Z Last Updated: 2024-10-08T14:20:43.155Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: inventree Products: InvenTree Problem Types: CWE-79 Description: InvenTree is an Open Source Inventory Management System. In affected versions of InvenTree it is possible for a registered user to store javascript in markdown notes fields, which are then displayed to other logged in users who visit the same page and executed. The vulnerability has been addressed as follows: 1. HTML sanitization has been enabled in the front-end markdown rendering library - `easymde`. 2. Stored markdown is also validat
anitization has been enabled in the front-end markdown rendering library - `easymde`. 2. Stored markdown is also validated on the backend, to ensure that malicious markdown is not stored in the database. These changes are available in release versions 0.16.5 and later. All users are advised to upgrade. There are no workarounds, an update is required to get the new validation functions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/inventree/InvenTree/security/advisories/GHSA-wp3m-jhgv-rhqr - https://github.com/inventree/InvenTree/commit/6e37f0cd8ba5fc527412f18f66cd6a37015fa690
CVE ID: CVE-2024-47611 State: PUBLISHED Published: 2024-10-02T14:16:07.318Z Last Updated: 2024-11-21T16:55:27.310Z Vendors: tukaani-project Products: xz Problem Types: CWE-88, CWE-176 Description: XZ Utils provide a general-purpose data-compression library plus command-line tools. When built for native Windows (MinGW-w64 or MSVC), the command line tools from XZ Utils 5.6.2 and older have a command line argument injection vulnerability. If a command line contains Unicode characters (for example, filenames) that don't exist in the current legacy code page, the characters are converted to similar-looking characters with best-fit mapping. Some best-fit mappings result in ASCII characters that ch
converted to similar-looking characters with best-fit mapping. Some best-fit mappings result in ASCII characters that change the meaning of the command line, which can be exploited with malicious filenames to do argument injection or directory traversal attacks. This vulnerability is fixed in 5.6.3. Command line tools built for Cygwin or MSYS2 are unaffected. liblzma is unaffected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/tukaani-project/xz/security/advisories/GHSA-m538-c5qw-3cg4 - https://github.com/tukaani-project/xz/commit/bf518b9ba446327a062ddfe67e7e0a5baed2394f
CVE ID: CVE-2024-47612 State: PUBLISHED Published: 2024-10-02T14:22:52.059Z Last Updated: 2024-10-02T15:12:04.288Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: miraheze Products: DataDump Problem Types: CWE-79, CWE-80 Description: DataDump is a MediaWiki extension that provides dumps of wikis. Several interface messages are unescaped (more specifically, (datadump-table-column-queued), (datadump-table-column-in-progress), (datadump-table-column-completed), (datadump-table-column-failed)). If these messages are edited (which requires the (editinterface) right by default), anyone who can view Special:DataDump (which requires the (view-dump) right by default) ca
tinterface) right by default), anyone who can view Special:DataDump (which requires the (view-dump) right by default) can be XSSed. This vulnerability is fixed with 601688ee8e8808a23b102fa305b178f27cbd226d. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/miraheze/DataDump/security/advisories/GHSA-h8x8-24c7-r2rj - https://github.com/miraheze/DataDump/commit/601688ee8e8808a23b102fa305b178f27cbd226d.patch - https://issue-tracker.miraheze.org/T12670