Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-10075 State: PUBLISHED Published: 2025-05-15T20:06:40.225Z Last Updated: 2025-05-20T16:10:57.508Z Vendors: Unknown Products: Jetpack Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The Jetpack WordPress plugin before 13.8 does not ensure that the post created by the Contact Form is only accessible to authorised users, which could allow unauthenticated users to run arbitrary shortcodes and block. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a984976c-291a-4f68-90d4-e452605ea7d1/
CVE ID: CVE-2024-10076 State: PUBLISHED Published: 2025-05-15T20:06:40.424Z Last Updated: 2025-05-20T16:03:22.267Z Vendors: Unknown Products: Jetpack, Jetpack Boost Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Jetpack WordPress plugin before 13.8, Jetpack Boost WordPress plugin before 3.4.8 use regexes in the Site Accelerator features when switching image URLs to their CDN counterpart. Unfortunately, some of them may match patterns it shouldn’t, ultimately making it possible for contributor and above users to perform Stored XSS attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/15f278f6-0418-4c83-b925-b1a2d8c53e2f/
CVE ID: CVE-2024-10078 State: PUBLISHED Published: 2024-10-18T07:35:26.905Z Last Updated: 2024-10-18T14:39:32.687Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: chertz Products: WP Easy Post Types Problem Types: CWE-862 Description: The WP Easy Post Types plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 1.4.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to add, modify, or delete plugin options and posts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ww
modify, or delete plugin options and posts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d12c4b1c-23d0-430f-a6ea-0a3ab487ed10?source=cve - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L111 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L112 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L113 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L114 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L115 - https://plugins.t
hp#L114 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L115 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L116 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L117 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L118 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L119 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L120 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L121 - https://plugins.trac.wordpress.org/brow
ins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L121 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L122 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L123 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L124 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L125 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L126 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L127 - https://plugins.trac.wordpress.org/browser/easy-post-types/ta
/browser/easy-post-types/tags/1.4.4/custom-type.php#L127 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L128 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L129 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L130 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L131 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L132 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L133 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.p
es/tags/1.4.4/custom-type.php#L133 - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L134
CVE ID: CVE-2024-10079 State: PUBLISHED Published: 2024-10-18T07:35:26.337Z Last Updated: 2024-10-18T13:58:16.183Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: chertz Products: WP Easy Post Types Problem Types: CWE-502 Description: The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajax_import_content' function. This allows authenticated attackers, with subscriber-level permissions and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin
ject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d038f1a2-4755-417f-965d-508b57c05738?source=cve - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L1318
CVE ID: CVE-2024-10080 State: PUBLISHED Published: 2024-10-18T07:35:25.011Z Last Updated: 2024-10-18T16:29:58.560Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: chertz Products: WP Easy Post Types Problem Types: CWE-79 Description: The WP Easy Post Types plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post meta in versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Add
ve permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1bee1eeb-5354-47c9-9ae1-b1608d87d7bb?source=cve - https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L1622
CVE ID: CVE-2024-10081 State: PUBLISHED Published: 2024-11-06T14:33:52.497Z Last Updated: 2024-11-06T15:01:01.881Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: Ericsson Products: CodeChecker Problem Types: CWE-288, CWE-420 Description: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the API URL ends with Authentication. This bypass allows superuser access to all API endpoints other than Authentication. These endpoints include the ability to add, edit, and remove products, among others. All endpoints, apart from the /Authentication is affected by the v
lity to add, edit, and remove products, among others. All endpoints, apart from the /Authentication is affected by the vulnerability. This issue affects CodeChecker: through 6.24.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Ericsson/codechecker/security/advisories/GHSA-f3f8-vx3w-hp5q
CVE ID: CVE-2024-10082 State: PUBLISHED Published: 2024-11-06T14:34:38.263Z Last Updated: 2024-11-06T14:59:50.972Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: Ericsson Products: CodeChecker Problem Types: CWE-305, CWE-330, CWE-842 Description: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication method confusion allows logging in as the built-in root user from an external service. The built-in root user up until 6.24.1 is generated in a weak manner, cannot be disabled, and has universal access.This vulnerability allows an attacker who can create an account on an enabled extern
disabled, and has universal access.This vulnerability allows an attacker who can create an account on an enabled external authentication service, to log in as the root user, and access and control everything that can be controlled via the web interface. The attacker needs to acquire the username of the root user to be successful. This issue affects CodeChecker: through 6.24.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Ericsson/codechecker/security/advisories/GHSA-fpm5-2wcj-vfr7
CVE ID: CVE-2024-10083 State: PUBLISHED Published: 2025-02-13T05:40:13.596Z Last Updated: 2025-02-13T14:29:08.098Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Schneider Electric Products: Uni-Telway driver, Uni-Telway driver used in EcoStruxure Control Expert, Uni-Telway driver used in EcoStruxure Process Expert, Uni-Telway driver used in EcoStruxure Process Expert for AVEVA System Platform, Uni-Telway driver used in OPC Factory Server Problem Types: CWE-20 Description: CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering workstation when specific driver interface is invoked locally by an authenticated
ause denial of service of engineering workstation when specific driver interface is invoked locally by an authenticated user with crafted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-042-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-042-02.pdf
CVE ID: CVE-2024-10084 State: PUBLISHED Published: 2024-11-05T21:29:17.783Z Last Updated: 2024-11-05T21:44:09.263Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: sevenspark Products: Contact Form 7 – Dynamic Text Extension Problem Types: CWE-200 Description: The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Basic Information Disclosure in all versions up to, and including, 4.5 via the CF7_get_post_var shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract the titles and text contents of private and password-protected posts, they do not own. Additional Analyst Notes:
xtract the titles and text contents of private and password-protected posts, they do not own. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e051a83e-ad5a-4789-bfee-e03aa9d6a3fc?source=cve - https://plugins.trac.wordpress.org/browser/contact-form-7-dynamic-text-extension/tags/4.5.0/includes/shortcodes.php#L225
CVE ID: CVE-2024-10086 State: PUBLISHED Published: 2024-10-30T21:21:46.559Z Last Updated: 2025-01-10T13:06:42.658Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: HashiCorp Products: Consul, Consul Enterprise Problem Types: CWE-79 Description: A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP header, allowing user-provided inputs to be misinterpreted and lead to reflected XSS. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.hashicorp.com/t/hcsec-2024-24-consul-vulnerable-to-reflected-xss-on-content-type-error-manipul
rences: - https://discuss.hashicorp.com/t/hcsec-2024-24-consul-vulnerable-to-reflected-xss-on-content-type-error-manipulation
CVE ID: CVE-2024-10087 State: PUBLISHED Published: 2025-04-14T12:03:14.281Z Last Updated: 2025-04-14T13:22:19.228Z Vendors: SoftCOM Products: iKSORIS Problem Types: CWE-79 Description: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might craft a link containing a malicious script, which then gets directly embedded in references to other resources, what causes the script to run in user's context multiple times. This vulnerability has been patched in version 79.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/04/CVE-2024-10087 - https://www.iksoris.pl/system-reze
ISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/04/CVE-2024-10087 - https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html
CVE ID: CVE-2024-10088 State: PUBLISHED Published: 2025-04-14T12:03:34.794Z Last Updated: 2025-04-14T13:24:56.147Z Vendors: SoftCOM Products: iKSORIS Problem Types: CWE-79 Description: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a login form with a malicious script, what causes the script to run in user's context. This vulnerability has been patched in version 79.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/04/CVE-2024-10087 - https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html
CVE ID: CVE-2024-10089 State: PUBLISHED Published: 2025-04-14T12:03:59.097Z Last Updated: 2025-04-14T13:26:10.801Z Vendors: SoftCOM Products: iKSORIS Problem Types: CWE-79 Description: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a form designed for changing user's data with a malicious script, what causes the script to run in user's context. This vulnerability has been patched in version 79.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/04/CVE-2024-10087 - https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.htm
tps://cert.pl/en/posts/2025/04/CVE-2024-10087 - https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html
CVE ID: CVE-2024-10090 State: PUBLISHED Published: 2025-04-14T12:04:33.091Z Last Updated: 2025-04-14T12:55:44.672Z Vendors: SoftCOM Products: iKSORIS Problem Types: CWE-79 Description: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a form designed for adding users with a malicious script, what causes the script to run in user's context. This vulnerability has been patched in version 79.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/04/CVE-2024-10087 - https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html
CVE ID: CVE-2024-10091 State: PUBLISHED Published: 2024-10-26T02:31:30.951Z Last Updated: 2024-10-28T19:13:45.268Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: xpeedstudio Products: ElementsKit Elementor addons Problem Types: CWE-79 Description: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Comparison Widget in all versions up to, and including, 3.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute wh
icated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/00b278af-6ce6-4e70-a83a-a1b035542cd4?source=cve - https://plugins.trac.wordpress.org/browser/elementskit-lite/tags/3.2.9/widgets/image-comparison/image-comparison.php#L657
CVE ID: CVE-2024-10092 State: PUBLISHED Published: 2024-10-26T07:36:08.238Z Last Updated: 2024-10-28T18:00:57.330Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: wpchill Products: Download Monitor Problem Types: CWE-862 Description: The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_handle_api_key_actions function in all versions up to, and including, 5.0.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to revoke existing API keys and generate new ones. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
revoke existing API keys and generate new ones. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f1e50d8c-e61c-4e94-b5e8-b24832dc24b6?source=cve - https://plugins.trac.wordpress.org/browser/download-monitor/tags/5.0.12/src/KeyGeneration/class-dlm-key-generation.php#L299 - https://plugins.trac.wordpress.org/changeset/3173614/download-monitor/trunk/src/KeyGeneration/class-dlm-key-generation.php
CVE ID: CVE-2024-10093 State: PUBLISHED Published: 2024-10-17T22:31:03.384Z Last Updated: 2024-10-18T17:20:02.194Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: VSO Products: ConvertXtoDvd Problem Types: CWE-427 Description: A vulnerability, which was classified as critical, was found in VSO ConvertXtoDvd 7.0.0.83. Affected is an unknown function in the library avcodec.dll of the file ConvertXtoDvd.exe. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes
y be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280758 - https://vuldb.com/?ctiid.280758 - https://vuldb.com/?submit.420798
CVE ID: CVE-2024-10094 State: PUBLISHED Published: 2024-11-20T14:45:22.464Z Last Updated: 2024-11-20T15:39:07.542Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Pegasystems Products: Pega Infinity Problem Types: CWE-94 Description: Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.pega.com/support-doc/pega-security-advisory-d24-vulnerability-remediation-note
CVE ID: CVE-2024-10095 State: PUBLISHED Published: 2024-12-16T16:59:25.572Z Last Updated: 2024-12-16T17:26:03.808Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Progress Software Products: Telerik UI for WPF Problem Types: CWE-502 Description: In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.telerik.com/devtools/wpf/knowledge-base/kb-security-unsafe-deserialization-vulnerability-cve-2024-10095
CVE ID: CVE-2024-10096 State: REJECTED Published: 2025-03-20T10:09:07.496Z Last Updated: 2025-03-26T16:41:42.163Z Description: No description available.
CVE ID: CVE-2024-10097 State: PUBLISHED Published: 2024-11-05T06:42:46.533Z Last Updated: 2025-02-19T17:41:22.773Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Softaculous, softaculous Products: Loginizer Security, Loginizer Problem Types: CWE-287 Description: The Loginizer Security and Loginizer plugins for WordPress are vulnerable to authentication bypass in all versions up to, and including, 1.9.2. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email and the u
tackers to log in as any existing user on the site, such as an administrator, if they have access to the email and the user does not have an already-existing account for the service returning the token. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5db00b22-d766-4fde-86fe-98d90936028c?source=cve - https://loginizer.com/ - https://plugins.trac.wordpress.org/browser/loginizer/trunk/main/social-login.php?rev=3108779#L127 - https://plugins.trac.wordpress.org/changeset/3173657/
CVE ID: CVE-2024-10098 State: PUBLISHED Published: 2025-05-15T20:06:40.631Z Last Updated: 2025-05-20T16:05:10.105Z Vendors: Unknown Products: ApplyOnline Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The ApplyOnline WordPress plugin before 2.6.3 does not protect uploaded files during the application process, allowing unauthenticated users to access them and any private information they contain Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/242dac1f-9a1f-4fde-b8c7-374bd451071d/
CVE ID: CVE-2024-10099 State: PUBLISHED Published: 2024-10-17T18:14:44.953Z Last Updated: 2024-10-17T18:47:57.850Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: comfyanonymous Products: comfyanonymous/comfyui Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in comfyanonymous/comfyui version 0.2.2 and possibly earlier. The vulnerability occurs when an attacker uploads an HTML file containing a malicious XSS payload via the `/api/upload/image` endpoint. The payload is executed when the file is viewed through the `/view` API endpoint, leading to potential execution of arbitrary JavaScript code. Additional Analyst Not
ed through the `/view` API endpoint, leading to potential execution of arbitrary JavaScript code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/14fb8c9a-692a-4d8c-b4b2-24c6f91a383c
CVE ID: CVE-2024-10100 State: PUBLISHED Published: 2024-10-17T18:12:06.622Z Last Updated: 2025-04-04T14:46:58.848Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: binary-husky Products: binary-husky/gpt_academic Problem Types: CWE-22 Description: A path traversal vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability is due to improper handling of the file parameter, which is open to path traversal through URL encoding. This allows attackers to view any file on the host system, including sensitive files such as critical application files, SSH keys, API keys, and configuration values. Additional Analyst Notes: - CISA ADP Vulnrichmen
itical application files, SSH keys, API keys, and configuration values. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/e58a0fb4-2b1d-49ef-b32e-bb62659a6f99