Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-48364 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-03-06T20:02:21.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: The undo_mark_statuses_as_sensitive method in app/services/approve_appeal_service.rb in Mastodon 3.5.x before 3.5.3 does not use the server's representative account, resulting in moderator identity disclosure when a moderator approves the appeal of a user whose status update was marked as sensitive. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mastodon/mastodon/pull/18525 - https://github.com/mastodon/mastodon/compare/v3.5.2...v3.5.3 - https://github.com/408
com/mastodon/mastodon/pull/18525 - https://github.com/mastodon/mastodon/compare/v3.5.2...v3.5.3 - https://github.com/40826d/advisories/blob/master/CVE-2022-48364/README.md - https://github.com/mastodon/mastodon/blob/main/CHANGELOG.md#353---2022-05-26
CVE ID: CVE-2022-48365 State: PUBLISHED Published: 2023-03-12T00:00:00.000Z Last Updated: 2025-03-04T20:44:16.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ezsystems/ezpublish-kernel/commit/957e67a08af2b3265753f9763943e8225ed779ab - https://developers.ibexa.co/security-advisories/ibexa-sa-2022-009-critical-vulnerabilities-in-graphql-role-assignment-ct-editing-and-drafts-tooltips - https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-
role-assignment-ct-editing-and-drafts-tooltips - https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-99r3-xmmq-7q7g - https://github.com/ezsystems/ezplatform-kernel/security/advisories/GHSA-8h83-chh2-fchp
CVE ID: CVE-2022-48366 State: PUBLISHED Published: 2023-03-12T00:00:00.000Z Last Updated: 2025-03-04T16:54:22.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developers.ibexa.co/security-advisories/ibexa-sa-2022-006-vulnerabilities-in-page-builder-login-and-commerce - https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-xfqg-p48g-hh94 - https://github.com/ezsystems/ezplatform-kernel/security/advisories/GHSA-342c-vcff-2ff2
CVE ID: CVE-2022-48367 State: PUBLISHED Published: 2023-03-12T00:00:00.000Z Last Updated: 2025-03-04T16:52:08.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developers.ibexa.co/security-advisories/ibexa-sa-2022-004-ineffective-object-state-limitation-and-unauthenticated-fastly-purge - https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-5x4f-7xgq-r42x
CVE ID: CVE-2022-48368 State: PUBLISHED Published: 2023-05-09T01:21:09.635Z Last Updated: 2025-01-28T19:26:37.048Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48369 State: PUBLISHED Published: 2023-05-09T01:21:10.694Z Last Updated: 2025-01-28T18:09:07.220Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48370 State: PUBLISHED Published: 2023-05-09T01:21:11.754Z Last Updated: 2025-01-28T18:06:51.543Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In dialer service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48371 State: PUBLISHED Published: 2023-05-09T01:21:12.835Z Last Updated: 2025-01-28T18:06:14.964Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In dialer service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48372 State: PUBLISHED Published: 2023-05-09T01:21:13.896Z Last Updated: 2025-01-28T18:04:41.419Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In bootcp service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48373 State: PUBLISHED Published: 2023-05-09T01:21:14.919Z Last Updated: 2025-01-28T18:00:17.680Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48374 State: PUBLISHED Published: 2023-05-09T01:21:16.079Z Last Updated: 2025-01-28T17:53:44.118Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48375 State: PUBLISHED Published: 2023-05-09T01:21:17.235Z Last Updated: 2025-01-28T17:52:57.677Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In contacts service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48376 State: PUBLISHED Published: 2023-05-09T01:21:18.302Z Last Updated: 2025-01-28T17:51:51.777Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48377 State: PUBLISHED Published: 2023-05-09T01:21:19.410Z Last Updated: 2025-01-28T17:50:33.669Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48378 State: PUBLISHED Published: 2023-05-09T01:21:20.548Z Last Updated: 2025-01-28T17:49:27.852Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In engineermode service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48379 State: PUBLISHED Published: 2023-05-09T01:21:21.761Z Last Updated: 2025-01-28T17:22:47.782Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48380 State: PUBLISHED Published: 2023-05-09T01:21:24.031Z Last Updated: 2025-01-28T17:21:04.359Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48381 State: PUBLISHED Published: 2023-05-09T01:21:25.225Z Last Updated: 2025-01-28T17:20:14.743Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48382 State: PUBLISHED Published: 2023-05-09T01:21:26.379Z Last Updated: 2025-01-28T17:18:51.256Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48383 State: PUBLISHED Published: 2023-05-09T01:21:27.473Z Last Updated: 2025-01-28T17:18:15.172Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: .In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48384 State: PUBLISHED Published: 2023-05-09T01:21:28.680Z Last Updated: 2025-01-28T17:16:57.385Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48385 State: PUBLISHED Published: 2023-05-09T01:21:29.801Z Last Updated: 2025-01-28T17:13:59.535Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48386 State: PUBLISHED Published: 2023-05-09T01:21:30.810Z Last Updated: 2025-01-28T19:23:13.119Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: the apipe driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48387 State: PUBLISHED Published: 2023-05-09T01:21:31.816Z Last Updated: 2025-01-28T17:09:43.695Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: the apipe driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48388 State: PUBLISHED Published: 2023-05-09T01:21:34.928Z Last Updated: 2025-01-28T17:07:52.541Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In powerEx service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48389 State: PUBLISHED Published: 2023-05-09T01:21:37.162Z Last Updated: 2025-01-28T17:04:39.872Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48390 State: PUBLISHED Published: 2023-06-06T05:12:56.627Z Last Updated: 2025-01-07T20:56:20.868Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498
CVE ID: CVE-2022-48391 State: PUBLISHED Published: 2023-06-06T05:12:57.525Z Last Updated: 2025-01-08T15:23:22.690Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498
CVE ID: CVE-2022-48392 State: PUBLISHED Published: 2023-06-06T05:12:58.543Z Last Updated: 2025-01-08T15:21:10.882Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498
CVE ID: CVE-2022-48422 State: PUBLISHED Published: 2023-03-19T00:00:00.000Z Last Updated: 2025-02-27T16:12:44.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the current working directory, which may be any directory in which an ONLYOFFICE document is located. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forum.onlyoffice.com/t/security-hole-library-from-cwd/3302
CVE ID: CVE-2022-48423 State: PUBLISHED Published: 2023-03-19T00:00:00.000Z Last Updated: 2025-02-27T16:14:52.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write may occur. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54e45702b648b7c0000e90b3e9b890e367e16ea8 - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.3 - https://security.netapp.com/advisory/ntap-20230505-0003/
CVE ID: CVE-2022-48424 State: PUBLISHED Published: 2023-03-19T00:00:00.000Z Last Updated: 2025-02-27T16:17:48.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. An unhandled page fault may occur. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.3 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4f1dc7d9756e66f3f876839ea174df2e656b7f79 - https://security.netapp.com/advisory/ntap-20230505-0002/
CVE ID: CVE-2022-48425 State: PUBLISHED Published: 2023-03-19T00:00:00.000Z Last Updated: 2025-02-26T19:56:45.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/fs/ntfs3?id=467333af2f7b95eeaa61a5b5369a80063cd971fd - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=467333af2f7b95eeaa61a5b5369a80063cd971fd - https://security.netapp.com/advisory/ntap-20230413-00
ds/linux.git/commit/?id=467333af2f7b95eeaa61a5b5369a80063cd971fd - https://security.netapp.com/advisory/ntap-20230413-0006/
CVE ID: CVE-2022-48426 State: PUBLISHED Published: 2023-03-27T15:27:16.592Z Last Updated: 2025-02-19T16:57:27.243Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-48427 State: PUBLISHED Published: 2023-03-27T15:27:17.311Z Last Updated: 2025-02-19T16:03:17.083Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was possible Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-48428 State: PUBLISHED Published: 2023-03-27T15:27:17.671Z Last Updated: 2025-02-19T16:05:55.576Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-48429 State: PUBLISHED Published: 2023-03-27T15:51:43.848Z Last Updated: 2025-02-19T16:53:12.754Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: Hub Problem Types: CWE-79 Description: In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-48430 State: PUBLISHED Published: 2023-03-29T12:07:13.119Z Last Updated: 2025-02-12T16:23:21.483Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-200 Description: In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-48431 State: PUBLISHED Published: 2023-03-29T12:07:17.183Z Last Updated: 2025-02-12T16:22:58.700Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-345 Description: In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/