Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
permissions or above, to download bookings, which contains customers' personal data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/476bc092-c623-4caf-9676-3036d27c4840?source=cve - https://codecanyon.net/item/eventer-wordpress-event-manager-plugin/20972534
CVE ID: CVE-2024-11135 State: PUBLISHED Published: 2025-01-28T04:21:32.872Z Last Updated: 2025-01-28T15:10:05.746Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: imithemes Products: Eventer - WordPress Event & Booking Manager Plugin Problem Types: CWE-89 Description: The Eventer plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'eventer_get_attendees' function in all versions up to, and including, 3.9.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already exis
sting SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a8dc0712-f78e-46c5-a0d1-2db752498d54?source=cve - https://codecanyon.net/item/eventer-wordpress-event-manager-plugin/20972534
CVE ID: CVE-2024-11136 State: PUBLISHED Published: 2024-11-14T15:25:18.693Z Last Updated: 2024-11-14T15:59:14.006Z Vendors: TCL Products: Camera Problem Types: CWE-35 Description: The default TCL Camera application exposes a provider vulnerable to path traversal vulnerability. Malicious application can supply malicious URI path and delete arbitrary files from user’s external storage. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/11/CVE-2024-11136/ - https://cert.pl/posts/2024/11/CVE-2024-11136/ - https://blog.oversecured.com/Content-Providers-and-the-potential-weak-spots-they-can-have/#path-traversal-when-using-data-from-uri
CVE ID: CVE-2024-11137 State: PUBLISHED Published: 2025-03-20T10:09:01.212Z Last Updated: 2025-10-15T12:50:16.087Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-639 Description: An Insecure Direct Object Reference (IDOR) vulnerability exists in the `PATCH /v1/runs/:id/score` endpoint of lunary-ai/lunary version 1.6.0. This vulnerability allows an attacker to update the score data of any run by manipulating the id parameter in the request URL, which corresponds to the `runId_score` in the database. The endpoint does not sufficiently validate whether the authenticated user has permission to modify the spe
he database. The endpoint does not sufficiently validate whether the authenticated user has permission to modify the specified runId, enabling an attacker with a valid account to modify other users' runId scores by specifying different id values. This issue was fixed in version 1.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/0a399d86-0105-4f48-a77b-9fa7d7054be8 - https://github.com/lunary-ai/lunary/commit/ded72a95c220904a151d27daf3c67e8644e386c6
CVE ID: CVE-2024-11138 State: PUBLISHED Published: 2024-11-12T18:00:15.714Z Last Updated: 2024-11-13T14:18:18.315Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:N/A:P) Vendors: n/a Products: DedeCMS Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlink_add.php. The manipulation of the argument logoimg leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283977 - https://vuldb.com/?ctii
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283977 - https://vuldb.com/?ctiid.283977 - https://vuldb.com/?submit.441900 - https://github.com/falling-snow1/cve1/blob/main/DedeCMS%20V5.7.116%20has%20Remote%20Code%20Excute%20vulnerability.md
CVE ID: CVE-2024-11139 State: PUBLISHED Published: 2025-01-17T08:37:24.886Z Last Updated: 2025-02-12T17:05:59.338Z Vendors: Schneider Electric Products: EcoStruxure™ Power Build Rapsody Problem Types: CWE-119 Description: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow local attackers to exploit these issues to potentially execute arbitrary code when opening a malicious project file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-09&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-09.pdf
CVE ID: CVE-2024-11140 State: PUBLISHED Published: 2025-05-15T20:06:47.458Z Last Updated: 2025-05-20T15:07:29.517Z Vendors: Unknown Products: Real WP Shop Lite Ajax eCommerce Shopping Cart Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Real WP Shop Lite Ajax eCommerce Shopping Cart WordPress plugin through 2.0.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b3448dff-a839-45aa-8d5a-d359e
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b3448dff-a839-45aa-8d5a-d359e50ab7fd/
CVE ID: CVE-2024-11141 State: PUBLISHED Published: 2025-05-15T20:06:47.658Z Last Updated: 2025-05-20T19:36:52.199Z Vendors: Unknown Products: Sailthru Triggermail Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings and is missing CSRF protection which could allow subscribers to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6fe3544b-fb86-43e4-9771-6e9343f9f
Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6fe3544b-fb86-43e4-9771-6e9343f9f835/
CVE ID: CVE-2024-11142 State: PUBLISHED Published: 2025-05-02T07:47:30.429Z Last Updated: 2025-09-29T18:11:17.265Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Gosoft Software Products: Proticaret E-Commerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Gosoft Software Proticaret E-Commerce allows Cross Site Request Forgery.This issue affects Proticaret E-Commerce: before v6.0 NOTE: According to the vendor, fixing process is still ongoing for v4.05. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0098
CVE ID: CVE-2024-11143 State: PUBLISHED Published: 2024-11-13T02:33:20.521Z Last Updated: 2024-11-13T16:25:05.517Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: kognetiks Products: Kognetiks Chatbot for WordPress Problem Types: CWE-352 Description: The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.8. This is due to missing or incorrect nonce validation on the update_assistant, add_new_assistant, and delete_assistant functions. This makes it possible for unauthenticated attackers to modify assistants via a forged request granted they can trick a site administrator i
le for unauthenticated attackers to modify assistants via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f16b11b0-11df-4fb7-a6af-123f6c09d791?source=cve - https://plugins.trac.wordpress.org/changeset/3185255/chatbot-chatgpt/trunk/includes/utilities/chatbot-assistants.php
CVE ID: CVE-2024-11144 State: PUBLISHED Published: 2024-12-16T17:00:52.214Z Last Updated: 2024-12-16T17:20:26.175Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: LightFTP Products: LightFTP Problem Types: CWE-362 Description: The server lacks thread safety and can be crashed by anomalous data sent by an anonymous user from a remote network. The crash causes the FTP service to become unavailable, affecting all users and processes that rely on it for file transfers. If the crash occurs during file upload or download, it could lead to incomplete file transfers, potentially corrupting data. The repeated crash might also affect the stability of the underlying syst
e file transfers, potentially corrupting data. The repeated crash might also affect the stability of the underlying system, especially if it leads to resource leaks or affects other services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.blackduck.com/blog/cyrc-advisory-LightFTP.html
CVE ID: CVE-2024-11145 State: PUBLISHED Published: 2024-11-26T19:17:44.520Z Last Updated: 2024-11-26T19:39:10.277Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Valor Apps Products: Easy Folder Listing Pro Problem Types: CWE-502 Description: Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.valorapps.com/web-products/easy-folder-listing-pro.html - https://github.com/cisagov/CSAF/blob/develop/csaf_files/IT/wh
.valorapps.com/web-products/easy-folder-listing-pro.html - https://github.com/cisagov/CSAF/blob/develop/csaf_files/IT/white/2024/va-24-331-01.json
CVE ID: CVE-2024-11146 State: PUBLISHED Published: 2025-01-17T05:21:15.264Z Last Updated: 2025-02-28T18:01:30.397Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: i3 Verticals Products: TrueFiling Problem Types: CWE-807, CWE-639 Description: TrueFiling is a collaborative, web-based electronic filing system where attorneys, paralegals, court reporters and self-represented filers collect public legal documentation into cases. TrueFiling is an entirely cloud-hosted application. Prior to version 3.1.112.19, TrueFiling trusted some client-controlled identifiers passed in URL requests to retrieve information. Platform users must self-register for an account, and o
lled identifiers passed in URL requests to retrieve information. Platform users must self-register for an account, and once authenticated, could manipulate those identifiers to gain partial access to case information and the ability to partially change user access to case information. This vulnerability was addressed in version 3.1.112.19 and all instances were updated by 2024-11-08. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2024/va-25-017-01.json - https://infosec.exchange/@abreacher
CVE ID: CVE-2024-11147 State: PUBLISHED Published: 2025-01-23T16:37:54.479Z Last Updated: 2025-02-12T17:07:28.749Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: ECOVACS Products: Unspecified robots Problem Types: CWE-798 Description: ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf - https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf - https://builder.dontvacuum.me/ecopassword.php
CVE ID: CVE-2024-11148 State: PUBLISHED Published: 2024-12-05T19:50:19.954Z Last Updated: 2024-12-06T18:58:45.147Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: OpenBSD Products: OpenBSD Problem Types: CWE-476 Description: In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/006_httpd.patch.sig - https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/020_httpd.patch.sig
CVE ID: CVE-2024-11149 State: PUBLISHED Published: 2024-12-06T01:56:12.697Z Last Updated: 2024-12-06T16:41:55.500Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H) Vendors: OpenBSD Products: OpenBSD Problem Types: CWE-noinfo Not enough information Description: In OpenBSD 7.4 before errata 014, vmm(4) did not restore GDTR limits properly on Intel (VMX) CPUs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/014_vmm.patch.sig
CVE ID: CVE-2024-11150 State: PUBLISHED Published: 2024-11-13T04:29:07.068Z Last Updated: 2024-11-13T15:04:31.817Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: vanquish Products: WordPress User Extra Fields Problem Types: CWE-22 Description: The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_tmp_uploaded_file() function in all versions up to, and including, 16.6. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
s on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ad39d797-9230-41d9-a335-864845b56aa0?source=cve - https://codecanyon.net/item/user-extra-fields/12949844
CVE ID: CVE-2024-11153 State: PUBLISHED Published: 2025-03-05T11:22:10.516Z Last Updated: 2025-03-05T14:13:43.913Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: codeatlantic Products: Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More Problem Types: CWE-200 Description: The Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.0 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sens
uding, 2.5.0 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-level roles such as logged-in users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bbe51f96-82b2-4091-acd8-a8131a47eb07?source=cve - https://wordpress.org/plugins/content-control/
CVE ID: CVE-2024-11154 State: PUBLISHED Published: 2024-11-20T13:55:13.662Z Last Updated: 2024-11-20T14:36:45.683Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: kevinb Products: PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes Problem Types: CWE-862 Description: The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.15 via the 'actAjaxRevisionDiffs' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive data i
This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive data including revisions of posts and pages. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c785b7a0-5091-4d89-87d3-cd7d9984553e?source=cve - https://github.com/publishpress/PublishPress-Revisions/blob/master/admin/history_rvy.php#L322 - https://plugins.trac.wordpress.org/browser/revisionary/trunk/admin/history_rvy.php#L322 - https://plugins.trac.wordpress.org/changeset/3192492/
CVE ID: CVE-2024-11155 State: PUBLISHED Published: 2024-12-05T17:32:22.847Z Last Updated: 2024-12-06T18:58:28.586Z Vendors: Rockwell Automation Products: Arena® Problem Types: CWE-416 Description: A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.co
by the threat actor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1713.html
CVE ID: CVE-2024-11156 State: PUBLISHED Published: 2024-12-05T17:37:09.718Z Last Updated: 2024-12-10T14:47:32.371Z Vendors: Rockwell Automation Products: Arena® Problem Types: CWE-787 Description: An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trus
at actor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1713.html
CVE ID: CVE-2024-11157 State: PUBLISHED Published: 2024-12-19T20:48:35.802Z Last Updated: 2025-03-13T15:37:28.015Z Vendors: Rockwell Automation Products: Arena® Description: A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1713.html
CVE ID: CVE-2024-11158 State: PUBLISHED Published: 2024-12-05T17:41:57.954Z Last Updated: 2024-12-06T16:43:59.422Z Vendors: Rockwell Automation Products: Arena® Problem Types: CWE-665 Description: An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.roc
cious code crafted by the threat actor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1713.html
CVE ID: CVE-2024-11159 State: PUBLISHED Published: 2024-11-13T13:42:50.499Z Last Updated: 2024-12-06T20:02:31.681Z Vendors: Mozilla Products: Thunderbird Problem Types: Potential disclosure of plaintext in OpenPGP encrypted message Description: Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird < 128.4.3 and Thunderbird < 132.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1925929 - https://www.mozilla.org/security/advisories/mfsa2024-61/ - https://www.mozilla.org/security/advisories/mfsa2024-62/
CVE ID: CVE-2024-11160 State: REJECTED Published: N/A Last Updated: 2024-11-27T17:27:48.664Z Description: No description available.
CVE ID: CVE-2024-11165 State: PUBLISHED Published: 2024-11-13T14:19:51.342Z Last Updated: 2024-11-21T16:13:44.168Z Vendors: YugabyteDB Products: YugabyteDB Anywhere Problem Types: CWE-532 Description: An information disclosure vulnerability exists in the backup configuration process where the SAS token is not masked in the configuration response. This oversight results in sensitive information leakage within the yb_backup log files, exposing the SAS token in plaintext. The leakage occurs during the backup procedure, leading to potential unauthorized access to resources associated with the SAS token. This issue affects YugabyteDB Anywhere: from 2.20.0.0 before 2.20.7.0, from 2.23.0.0 before 2
ciated with the SAS token. This issue affects YugabyteDB Anywhere: from 2.20.0.0 before 2.20.7.0, from 2.23.0.0 before 2.23.1.0, from 2024.1.0.0 before 2024.1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/yugabyte/yugabyte-db/commit/920989b6c0db0222bb7a0cce46febc76cf72d438
CVE ID: CVE-2024-11166 State: PUBLISHED Published: 2025-01-22T18:40:30.977Z Last Updated: 2025-02-12T17:08:00.961Z Vendors: Traffic Alert and Collision Avoidance System (TCAS) II Products: Collision Avoidance Systems Problem Types: CWE-15 Description: For TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F, an attacker can impersonate a ground station and issue a Comm-A Identity Request. This action can set the Sensitivity Level Control (SLC) to the lowest setting and disable the Resolution Advisory (RA), leading to a denial-of-service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-01
CVE ID: CVE-2024-11167 State: PUBLISHED Published: 2025-03-20T10:09:49.100Z Last Updated: 2025-07-15T10:48:56.854Z Severity: CRITICAL (CVSS 9.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: danny-avila Products: danny-avila/librechat Problem Types: CWE-639 Description: An improper access control vulnerability in danny-avila/librechat versions prior to 0.7.6 allows authenticated users to delete other users' prompts via the groupid parameter. This issue occurs because the endpoint does not verify whether the provided prompt ID belongs to the current user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/298f5760-5797-4432-8b9e-544609d612c0 -
Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/298f5760-5797-4432-8b9e-544609d612c0 - https://github.com/danny-avila/librechat/commit/5071bdbf9ac621165f0e8d009818851f3951eee7