Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-41945 State: PUBLISHED Published: 2024-07-30T19:42:06.663Z Last Updated: 2024-08-02T04:54:31.279Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: FuelLabs Products: fuels-ts Problem Types: CWE-20 Description: fuels-ts is a library for interacting with Fuel v2. The typescript SDK has no awareness of to-be-spent transactions causing some transactions to fail or silently get pruned as they are funded with already used UTXOs. The problem occurs, because the `fund` function in `fuels-ts/packages/account/src/account.ts` gets the needed ressources statelessly with the function `getResourcesToSpend` without taking into consideration already used UTXOs.
ded ressources statelessly with the function `getResourcesToSpend` without taking into consideration already used UTXOs. This issue will lead to unexpected SDK behaviour, such as a transaction not getting included in the `txpool` / in a block or a previous transaction silently getting removed from the `txpool` and replaced with a new one. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FuelLabs/fuels-ts/security/advisories/GHSA-3jcg-vx7f-j6qf
CVE ID: CVE-2024-41946 State: PUBLISHED Published: 2024-08-01T14:22:14.014Z Last Updated: 2025-11-03T20:38:34.071Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: ruby Products: rexml Problem Types: CWE-400 Description: REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ruby/rexml/security/advisories/GHSA-5866-49gr-22v4 - https://github.com/ruby/rexml/commit/033d1909a8f2
ttps://github.com/ruby/rexml/security/advisories/GHSA-5866-49gr-22v4 - https://github.com/ruby/rexml/commit/033d1909a8f259d5a7c53681bcaf14f13bcf0368 - https://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml - https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41946
CVE ID: CVE-2024-41947 State: PUBLISHED Published: 2024-07-31T15:24:20.271Z Last Updated: 2024-08-13T13:36:59.723Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-80 Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By creating a conflict when another user with more rights is currently editing a page, it is possible to execute JavaScript snippets on the side of the other user, which compromises the confidentiality, integrity and availability of the whole XWiki installation. This has been patched in XWiki 15.10.8 and 16.3.0RC1. Additional An
ty and availability of the whole XWiki installation. This has been patched in XWiki 15.10.8 and 16.3.0RC1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-692v-783f-mg8x - https://github.com/xwiki/xwiki-platform/commit/821d43ec45e67d45a6735a0717b9b77fffc1cd9f - https://github.com/xwiki/xwiki-platform/commit/e00e159d3737397eebd1f6ff925c1f5cb7cdec34 - https://jira.xwiki.org/browse/XWIKI-21626
CVE ID: CVE-2024-41948 State: PUBLISHED Published: 2024-08-01T22:03:15.788Z Last Updated: 2024-08-07T14:59:20.577Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N) Vendors: biscuit-auth Products: biscuit-java Problem Types: CWE-1259 Description: biscuit-java is the java implementation of Biscuit, an authentication and authorization token for microservices architectures. Third-party blocks can be generated without transferring the whole token to the third-party authority. Instead, a ThirdPartyBlock request can be sent, providing only the necessary info to generate a third-party block and to sign it, which includes the public key of the previous block (used in the signature)
generate a third-party block and to sign it, which includes the public key of the previous block (used in the signature) and the public keys part of the token symbol table (for public key interning in datalog expressions). A third-part block request forged by a malicious user can trick the third-party authority into generating datalog trusting the wrong keypair. This vulnerability is fixed in 4.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/biscuit-auth/biscuit-java/security/advisories/GHSA-5hcj-rwm6-xmw4
CVE ID: CVE-2024-41949 State: PUBLISHED Published: 2024-08-01T22:03:11.198Z Last Updated: 2024-08-02T14:49:52.914Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N) Vendors: biscuit-auth Products: biscuit-rust Problem Types: CWE-269 Description: biscuit-rust is the Rust implementation of Biscuit, an authentication and authorization token for microservices architectures. Third-party blocks can be generated without transferring the whole token to the third-party authority. Instead, a ThirdPartyBlock request can be sent, providing only the necessary info to generate a third-party block and to sign it, which includes the public key of the previous block (used in the signature)
enerate a third-party block and to sign it, which includes the public key of the previous block (used in the signature) and the public keys part of the token symbol table (for public key interning in datalog expressions). A third-part block request forged by a malicious user can trick the third-party authority into generating datalog trusting the wrong keypair. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/biscuit-auth/biscuit-rust/security/advisories/GHSA-p9w4-585h-g3c7
CVE ID: CVE-2024-41950 State: PUBLISHED Published: 2024-07-31T15:50:59.837Z Last Updated: 2024-07-31T16:20:20.326Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: deepset-ai Products: haystack Problem Types: CWE-1336 Description: Haystack is an end-to-end LLM framework that allows you to build applications powered by LLMs, Transformer models, vector search and more. Haystack clients that let their users create and run Pipelines from scratch are vulnerable to remote code executions. Certain Components in Haystack use Jinja2 templates, if anyone can create and render that template on the client machine they run any code. The vulnerability has been fixed with Hay
e can create and render that template on the client machine they run any code. The vulnerability has been fixed with Haystack `2.3.1`. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/deepset-ai/haystack/security/advisories/GHSA-hx9v-6r9f-w677 - https://github.com/deepset-ai/haystack/pull/8095 - https://github.com/deepset-ai/haystack/pull/8096 - https://github.com/deepset-ai/haystack/commit/3fed1366c448b02189851bf08166c1f6477a02b0 - https://github.com/deepset-ai/haystack/commit/6c25a5c73e83aa32c3241ba84a5cbb3ac0e8a89e - https://github.com/deepset-ai/haystack/releases/tag/v2.3.1
CVE ID: CVE-2024-41951 State: PUBLISHED Published: 2024-07-31T19:24:41.373Z Last Updated: 2024-07-31T19:37:28.874Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: AkshuDev Products: PheonixAppAPI Problem Types: CWE-323 Description: Pheonix App is a Python application designed to streamline various tasks, from managing files to playing mini-games. The issue is that the map of encoding/decoding languages are visible in code. The Problem was patched in 0.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/AkshuDev/PheonixAppAPI/security/advisories/GHSA-258h-f687-4226
CVE ID: CVE-2024-41952 State: PUBLISHED Published: 2024-07-31T16:30:22.811Z Last Updated: 2024-07-31T17:36:34.317Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: zitadel Products: zitadel Problem Types: CWE-203 Description: Zitadel is an open source identity management system. ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which helps mitigate attacks that try to guess/enumerate usernames. If enabled, ZITADEL will show the password prompt even if the user doesn't exist and report "Username or Password invalid". Due to a implementation change to prevent deadlocks calling the database, the flag would not be correctly respected
id". Due to a implementation change to prevent deadlocks calling the database, the flag would not be correctly respected in all cases and an attacker would gain information if an account exist within ZITADEL, since the error message shows "object not found" instead of the generic error message. This vulnerability is fixed in 2.58.1, 2.57.1, 2.56.2, 2.55.5, 2.54.8, and 2.53.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zitadel/zitadel/security/advisories/GHSA-567v-6hmg-6qg7 - https://github.com/zitadel/zitadel/commit/0ab0c645ef914298c343fa39cccb1290aba48bf6 - https://github.com/zitadel/zitadel/commit/3c7d12834e32426416235b9e3374be0f4b9380b8 - https://g
343fa39cccb1290aba48bf6 - https://github.com/zitadel/zitadel/commit/3c7d12834e32426416235b9e3374be0f4b9380b8 - https://github.com/zitadel/zitadel/commit/5c2526c98aafd1ba206be2fa4291b1d24c384f6d - https://github.com/zitadel/zitadel/commit/8565d24fd8df5bd35294313cfbfcc2e15aea20e9 - https://github.com/zitadel/zitadel/commit/b0e71a81ef39667ce2a149ce037c1ca0edbe059d - https://github.com/zitadel/zitadel/commit/fc1d415b8db5b8d481bb65206ce3fc944c0eecea - https://github.com/zitadel/zitadel/releases/tag/v2.53.9 - https://github.com/zitadel/zitadel/releases/tag/v2.54.8 - https://github.com/zitadel/zitadel/releases/tag/v2.55.5 - https://github.com/zitadel/zitadel/releases/tag/v2.56.2 - https://github.co
b.com/zitadel/zitadel/releases/tag/v2.55.5 - https://github.com/zitadel/zitadel/releases/tag/v2.56.2 - https://github.com/zitadel/zitadel/releases/tag/v2.57.1 - https://github.com/zitadel/zitadel/releases/tag/v2.58.1
CVE ID: CVE-2024-41953 State: PUBLISHED Published: 2024-07-31T16:42:33.125Z Last Updated: 2024-08-01T13:48:32.705Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: zitadel Products: zitadel Problem Types: CWE-79 Description: Zitadel is an open source identity management system. ZITADEL uses HTML for emails and renders certain information such as usernames dynamically. That information can be entered by users or administrators. Due to a missing output sanitization, these emails could include malicious code. This may potentially lead to a threat where an attacker, without privileges, could send out altered notifications that are part of the registration process
at where an attacker, without privileges, could send out altered notifications that are part of the registration processes. An attacker could create a malicious link, where the injected code would be rendered as part of the email. On the user's detail page, the username was also not sanitized and would also render HTML, giving an attacker the same vulnerability. While it was possible to inject HTML including javascript, the execution of such scripts would be prevented by most email clients and the Content Security Policy in Console UI. This vulnerability is fixed in 2.58.1, 2.57.1, 2.56.2, 2.55.5, 2.54.8 2.53.9, and 2.52.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
2.57.1, 2.56.2, 2.55.5, 2.54.8 2.53.9, and 2.52.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zitadel/zitadel/security/advisories/GHSA-v333-7h2p-5fhv - https://github.com/zitadel/zitadel/commit/0e1f99e987b5851caec45a72660fe9f67e425747 - https://github.com/zitadel/zitadel/commit/38da602ee1cfc35c0d7918c298fbfc3f3674133b - https://github.com/zitadel/zitadel/commit/4b59cac67bb89c1f3f84a2041dd273d11151d29f - https://github.com/zitadel/zitadel/commit/c1a3fc72dde16e987d8a09aa291e7c2edfc928f7 - https://github.com/zitadel/zitadel/commit/c353f82f89c6982c0888c6763363296cf4263cb2 - https://github.com/zitadel/zitadel/commit/d04ac6df8f2f0243e649b802a8bfa6176cef092
f82f89c6982c0888c6763363296cf4263cb2 - https://github.com/zitadel/zitadel/commit/d04ac6df8f2f0243e649b802a8bfa6176cef0923 - https://github.com/zitadel/zitadel/commit/f846616a3f022e88e3ea8cea05d3254ad86f1615 - https://github.com/zitadel/zitadel/releases/tag/v2.52.3 - https://github.com/zitadel/zitadel/releases/tag/v2.53.9 - https://github.com/zitadel/zitadel/releases/tag/v2.54.8 - https://github.com/zitadel/zitadel/releases/tag/v2.55.5 - https://github.com/zitadel/zitadel/releases/tag/v2.56.2 - https://github.com/zitadel/zitadel/releases/tag/v2.57.1 - https://github.com/zitadel/zitadel/releases/tag/v2.58.1
CVE ID: CVE-2024-41954 State: PUBLISHED Published: 2024-07-31T19:23:41.492Z Last Updated: 2024-07-31T20:30:19.312Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: FOGProject Products: fogproject Problem Types: CWE-732 Description: FOG is a cloning/imaging/rescue suite/inventory management system. The application stores plaintext service account credentials in the "/opt/fog/.fogsettings" file. This file is by default readable by all users on the host. By exploiting these credentials, a malicious user could create new accounts for the web application and much more. The vulnerability is fixed in 1.5.10.41. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
lication and much more. The vulnerability is fixed in 1.5.10.41. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FOGProject/fogproject/security/advisories/GHSA-pcqm-h8cx-282c - https://github.com/FOGProject/fogproject/commit/97ed6d51608e52fc087ca1d2f03d6b8df612fc90
CVE ID: CVE-2024-41955 State: PUBLISHED Published: 2024-07-31T19:21:16.048Z Last Updated: 2024-08-01T13:40:36.551Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:N) Vendors: MobSF Products: Mobile-Security-Framework-MobSF Problem Types: CWE-601 Description: Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile. An open redirect vulnerability exist in MobSF authentication view. Update to MobSF v4.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-8m9j-2f32-2vx4 - https://github.com/MobSF/Mobile-Securi
m/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-8m9j-2f32-2vx4 - https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/fdaad81314f393d324c1ede79627e9d47986c8c8
CVE ID: CVE-2024-41956 State: PUBLISHED Published: 2024-08-01T22:07:32.899Z Last Updated: 2024-08-02T14:47:38.561Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: charmbracelet Products: soft-serve Problem Types: CWE-78 Description: Soft Serve is a self-hostable Git server for the command line. Prior to 0.7.5, it is possible for a user who can commit files to a repository hosted by Soft Serve to execute arbitrary code via environment manipulation and Git. The issue is that Soft Serve passes all environment variables given by the client to git subprocesses. This includes environment variables that control program execution, such as LD_PRELOAD. This vulnerabilit
subprocesses. This includes environment variables that control program execution, such as LD_PRELOAD. This vulnerability is fixed in 0.7.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/charmbracelet/soft-serve/security/advisories/GHSA-m445-w3xr-vp2f - https://github.com/charmbracelet/soft-serve/commit/4daebdd422a6ba8c04162d023f8be355a8fe3184
CVE ID: CVE-2024-41957 State: PUBLISHED Published: 2024-08-01T21:41:42.921Z Last Updated: 2025-11-04T16:13:39.839Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: vim Products: vim Problem Types: CWE-415 Description: Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user mu
m will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vim/vim/security/advisories/GHSA-f9cr-gv85-hcr4 - https://github.com/vim/vim/commit/8a0bbe7b8aad6f8da28dee218c01bc8a0185a
CVE ID: CVE-2024-41958 State: PUBLISHED Published: 2024-08-05T19:59:44.744Z Last Updated: 2024-08-07T20:42:37.692Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N) Vendors: mailcow Products: mailcow-dockerized Problem Types: CWE-697 Description: mailcow: dockerized is an open source groupware/email suite based on docker. A vulnerability has been discovered in the two-factor authentication (2FA) mechanism. This flaw allows an authenticated attacker to bypass the 2FA protection, enabling unauthorized access to other accounts that are otherwise secured with 2FA. To exploit this vulnerability, the attacker must first have access to an account within the system and possess
with 2FA. To exploit this vulnerability, the attacker must first have access to an account within the system and possess the credentials of the target account that has 2FA enabled. By leveraging these credentials, the attacker can circumvent the 2FA process and gain access to the protected account. This issue has been addressed in the `2024-07` release. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-4fcc-q245-qqgg - https://github.com/mailcow/mailcow-dockerized/commit/f33d82ffc11ed3438609d4e7a6baa78cb3305bc3
CVE ID: CVE-2024-41959 State: PUBLISHED Published: 2024-08-05T19:59:46.318Z Last Updated: 2024-08-05T20:24:22.327Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H) Vendors: mailcow Products: mailcow-dockerized Problem Types: CWE-79 Description: mailcow: dockerized is an open source groupware/email suite based on docker. An unauthenticated attacker can inject a JavaScript payload into the API logs. This payload is executed whenever the API logs page is viewed, potentially allowing an attacker to run malicious scripts in the context of the user's browser. This could lead to unauthorized actions, data theft, or further exploitation of the affected system. This issue has be
. This could lead to unauthorized actions, data theft, or further exploitation of the affected system. This issue has been addressed in the `2024-07` release. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-v3r3-8f69-ph29 - https://github.com/mailcow/mailcow-dockerized/commit/66aa28b5de282fc037e0d2f02fbdc84539b614a1
CVE ID: CVE-2024-41960 State: PUBLISHED Published: 2024-08-05T19:59:48.492Z Last Updated: 2024-08-05T20:47:28.482Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: mailcow Products: mailcow-dockerized Problem Types: CWE-79 Description: mailcow: dockerized is an open source groupware/email suite based on docker. An authenticated admin user can inject a JavaScript payload into the Relay Hosts configuration. The injected payload is executed whenever the configuration page is viewed, enabling the attacker to execute arbitrary scripts in the context of the user's browser. This could lead to data theft, or further exploitation. This issue has been addressed in the `20
of the user's browser. This could lead to data theft, or further exploitation. This issue has been addressed in the `2024-07` release. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-jpp8-rhg6-4vvv - https://github.com/mailcow/mailcow-dockerized/commit/efb2572f0fa57628ad98a76a4ae884a10cac0a1a
CVE ID: CVE-2024-41961 State: PUBLISHED Published: 2024-08-01T14:33:46.684Z Last Updated: 2024-08-07T14:23:43.106Z Severity: CRITICAL (CVSS 9.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H/E:X/RL:O/RC:C) Vendors: sapcc Products: elektra Problem Types: CWE-94 Description: Elektra is an opinionated Openstack Dashboard for Operators and Consumers of Openstack Services. A code injection vulnerability was found in the live search functionality of the Ruby on Rails based Elektra web application. An authenticated user can craft a search term containing Ruby code, which later flows into an `eval` sink which executes the code. Fixed in commit 8bce00be93b95a6512ff68fe86bf9554e486bc02. Additional Analy
into an `eval` sink which executes the code. Fixed in commit 8bce00be93b95a6512ff68fe86bf9554e486bc02. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sapcc/elektra/security/advisories/GHSA-6j2h-486h-487q - https://github.com/sapcc/elektra/commit/49aea3b365082681558bf3bf7bf4a51766cfc44d - https://github.com/sapcc/elektra/commit/8bce00be93b95a6512ff68fe86bf9554e486bc02
CVE ID: CVE-2024-41962 State: PUBLISHED Published: 2024-08-01T16:30:57.629Z Last Updated: 2024-08-01T17:45:32.389Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: Yonle Products: bostr Problem Types: CWE-285 Description: Bostr is an nostr relay aggregator proxy that acts like a regular nostr relay. bostr let everyone in even having authorized_keys being set when noscraper is set to true. This vulnerability is fixed in 3.0.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Yonle/bostr/security/advisories/GHSA-5cf7-cxrf-mq73 - https://github.com/Yonle/bostr/commit/49181f4ec9ae1472c6675cab56bbc01e723855af - https://github.co
GHSA-5cf7-cxrf-mq73 - https://github.com/Yonle/bostr/commit/49181f4ec9ae1472c6675cab56bbc01e723855af - https://github.com/Yonle/bostr/blob/8665374a66e2afb9f92d0414b0d6f420a95d5d2d/auth.js#L21 - https://github.com/Yonle/bostr/releases/tag/3.0.10
CVE ID: CVE-2024-41964 State: PUBLISHED Published: 2024-08-29T16:19:21.676Z Last Updated: 2024-08-29T16:36:08.820Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: getkirby Products: kirby Problem Types: CWE-863 Description: Kirby is a CMS targeting designers and editors. Kirby allows to restrict the permissions of specific user roles. Users of that role can only perform permitted actions. Permissions for creating and deleting languages have already existed and could be configured, but were not enforced by Kirby's frontend or backend code. A permission for updating existing languages has not existed before the patched versions. So disabling the languages.* wild
ermission for updating existing languages has not existed before the patched versions. So disabling the languages.* wildcard permission for a role could not have prohibited updates to existing language definitions. The missing permission checks allowed attackers with Panel access to manipulate the language definitions. The problem has been patched in Kirby 3.6.6.6, Kirby 3.7.5.5, Kirby 3.8.4.4, Kirby 3.9.8.2, Kirby 3.10.1.1, and Kirby 4.3.1. Please update to one of these or a later version to fix the vulnerability. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/getkirby/kirby/security/advisories/GHSA-
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/getkirby/kirby/security/advisories/GHSA-jm9m-rqr3-wfmh - https://github.com/getkirby/kirby/commit/ab95d172667c3cd529917c2bc94d3c7969706d23