Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
is is due to the plugin for WordPress allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d7f59489-9bff-4d22-8f99-6ea52d702ecf?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3080830%40back-in-stock-notifier-for-woocommerce&new=3080830%40back-in-stock-notifier-for-woocommerce&sfp_email=&sfph_mail=
CVE ID: CVE-2024-4039 State: PUBLISHED Published: 2024-05-10T09:32:09.525Z Last Updated: 2024-08-01T20:26:57.279Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: villatheme Products: Orders Tracking for WooCommerce Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The The Orders Tracking for WooCommerce plugin for WordPress for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.10. This is due to the plugin allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to exe
s not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. A partial patch was released in 1.2.10, and a complete patch was released in 1.2.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/991ab188-869c-4875-80f3-940000a1717b?source=cve - https://plugins.trac.wordpress.org/browser/woo-orders-tracking/trunk/includes/frontend/frontend.php#L55 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3083652%40woo-orders-tracking&new=3083652%40woo-orders-tracking&sfp_email=&sfph_mai
?sfp_email=&sfph_mail=&reponame=&old=3083652%40woo-orders-tracking&new=3083652%40woo-orders-tracking&sfp_email=&sfph_mail=
CVE ID: CVE-2024-4040 State: PUBLISHED Published: 2024-04-22T19:21:46.408Z Last Updated: 2025-10-21T23:05:20.925Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CrushFTP Products: CrushFTP Problem Types: CWE-1336 Description: A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform remote code execution on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.crushftp.com/c
er. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update - https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update - https://www.reddit.com/r/cybersecurity/comments/1c850i2/all_versions_of_crush_ftp_are_vulnerable/ - https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/ - https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_20240419_crushftp_virtual/ - https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-day-enables-complete-server-compromise/ - https://github.com/airbus-cert/CVE-2024-4040
CVE ID: CVE-2024-4041 State: PUBLISHED Published: 2024-05-09T20:03:25.752Z Last Updated: 2024-08-01T20:26:57.267Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: yoast Products: Yoast SEO Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Yoast SEO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 22.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an
attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4e04b161-3cd0-454d-869c-56f42bd8afb0?source=cve - https://plugins.trac.wordpress.org/browser/wordpress-seo/trunk/src/helpers/short-link-helper.php#L105 - https://plugins.trac.wordpress.org/browser/wordpress-seo/trunk/src/helpers/short-link-helper.php#L45 - https://plugins.trac.wordpress.org/browser/wordpress-seo/trunk/inc/class-wpseo-shortlinker.php#L20 - https://plugins.trac.wordpress.org/bro
c.wordpress.org/browser/wordpress-seo/trunk/inc/class-wpseo-shortlinker.php#L20 - https://plugins.trac.wordpress.org/browser/wordpress-seo/trunk/inc/class-wpseo-admin-bar-menu.php#L601 - https://plugins.trac.wordpress.org/changeset/3078555/wordpress-seo/trunk#file129
CVE ID: CVE-2024-4042 State: PUBLISHED Published: 2024-06-07T05:33:45.391Z Last Updated: 2024-08-01T20:26:57.268Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: pickplugins Products: Gutenberg Blocks, Page Builder – ComboBlocks Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' attribute of the menu-wrap-item block in all versions up to, and including, 2.2.80 due to insufficient input sanitization and output
the menu-wrap-item block in all versions up to, and including, 2.2.80 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/55e6eb58-79e2-4404-887a-0392ce7914aa?source=cve - https://plugins.trac.wordpress.org/changeset/3084503/post-grid/tags/2.2.81/includes/blocks/menu-wrap-item/index.php
CVE ID: CVE-2024-4043 State: PUBLISHED Published: 2024-05-23T06:46:02.238Z Last Updated: 2024-08-01T20:26:57.246Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: brechtvds Products: WP Ultimate Post Grid Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP Ultimate Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpupg-text' shortcode in all versions up to, and including, 3.9.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level acc
put escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/14e897f0-11e6-43b1-908c-be4ecdc7fd58?source=cve - https://plugins.trac.wordpress.org/browser/wp-ultimate-post-grid/trunk/includes/public/shortcodes/general/class-wpupg-sc-text.php#L97 - https://plugins.trac.wordpress.org/changeset/3086319/ - https://wordpress.org/plugins/wp-ultimate-post-grid/#developers
CVE ID: CVE-2024-4044 State: PUBLISHED Published: 2024-05-10T14:59:10.943Z Last Updated: 2024-08-01T20:26:57.269Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NI Products: FlexLogger, InstrumentStudio Problem Types: CWE-502 Description: A deserialization of untrusted data vulnerability exists in common code used by FlexLogger and InstrumentStudio that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects NI FlexLogger 2024 Q1 and prior versions as well as NI InstrumentStudio 2024 Q1 and prior versions. Additional Analyst Notes: - CISA ADP Vulnrichm
prior versions as well as NI InstrumentStudio 2024 Q1 and prior versions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ni.com/r/CVE-2024-4044
CVE ID: CVE-2024-4045 State: PUBLISHED Published: 2024-05-25T05:36:43.663Z Last Updated: 2024-08-01T20:26:57.273Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: optinmonster Products: Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘campaign_id’ parameter in versions up to, and including, 2.16.1 due to insufficient
tored Cross-Site Scripting via the ‘campaign_id’ parameter in versions up to, and including, 2.16.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b4dfeb49-38d3-495d-af96-d67a29b339fa?source=cve - https://plugins.trac.wordpress.org/browser/optinmonster/tags/2.16.0/OMAPI/Elementor/Widget.php#L532 - https://plugins.trac.wordpress.org/chang
ordpress.org/browser/optinmonster/tags/2.16.0/OMAPI/Elementor/Widget.php#L532 - https://plugins.trac.wordpress.org/changeset/3087905/
CVE ID: CVE-2024-4046 State: PUBLISHED Published: 2024-05-11T10:14:22.270Z Last Updated: 2024-08-01T20:26:57.306Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-840 Description: Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/5/ - https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-0000001902628049
CVE ID: CVE-2024-4056 State: PUBLISHED Published: 2024-04-26T06:02:21.917Z Last Updated: 2024-08-27T10:47:45.585Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: M-Files Corporation Products: M-Files Server Problem Types: CWE-1333 Description: Denial of service condition in M-Files Server in versions before 24.4.13592.4 and after 23.11 (excluding 24.2 LTS) allows unauthenticated user to consume computing resources. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://product.m-files.com/security-advisories/cve-2024-4056/
CVE ID: CVE-2024-4057 State: PUBLISHED Published: 2024-06-04T06:00:02.423Z Last Updated: 2024-08-01T20:26:57.268Z Vendors: Unknown Products: Gutenberg Blocks with AI by Kadence WP Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Gutenberg Blocks with AI by Kadence WP WordPress plugin before 3.2.37 does not validate and escape some of its block attributes before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/da4d4d87-07b3-4f7d-bcbd-d29
SA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/da4d4d87-07b3-4f7d-bcbd-d29968a30b4f/
CVE ID: CVE-2024-4058 State: PUBLISHED Published: 2024-05-01T12:49:03.276Z Last Updated: 2025-11-04T17:22:01.781Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html - https://issues.chromium.org/issues/332546345 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/mes
romium.org/issues/332546345 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/
CVE ID: CVE-2024-4059 State: PUBLISHED Published: 2024-05-01T12:49:03.693Z Last Updated: 2025-11-04T17:22:04.539Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Out of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html - https://issues.chromium.org/issues/333182464 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3H
/issues/333182464 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/
CVE ID: CVE-2024-4060 State: PUBLISHED Published: 2024-05-01T12:49:04.072Z Last Updated: 2025-11-04T17:22:07.241Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_24.html - https://issues.chromium.org/issues/333420620 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/
m.org/issues/333420620 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOC3HLIZCGMIJLJ6LME5UWUUIFLXEGRN/
CVE ID: CVE-2024-4061 State: PUBLISHED Published: 2024-05-21T06:00:02.007Z Last Updated: 2025-03-28T23:17:49.657Z Vendors: Unknown Products: Survey Maker Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Survey Maker WordPress plugin before 4.2.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/175a9f3a-1f8d-44d1-8a12-e037251b025d/
CVE ID: CVE-2024-4062 State: PUBLISHED Published: 2024-04-23T18:31:04.417Z Last Updated: 2024-08-01T20:26:57.294Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Hualai Xiaofang Products: iSC5 Problem Types: CWE-295 Description: A vulnerability was found in Hualai Xiaofang iSC5 3.2.2_112 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improper certificate validation. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The identifier of this vulnerability is VDB-261788. NOTE: The vendor was contacted early about this disclosure b
ficult. The identifier of this vulnerability is VDB-261788. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.261788 - https://vuldb.com/?ctiid.261788 - https://vuldb.com/?submit.316407 - https://github.com/kzLiu2017/CVE_Document/blob/main/Hualai_Xiaofang_camera.pdf
CVE ID: CVE-2024-4063 State: PUBLISHED Published: 2024-04-23T18:31:05.822Z Last Updated: 2024-08-01T20:26:57.287Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: EZVIZ Products: CS-C6-21WFR-8 Problem Types: CWE-295 Description: A vulnerability was found in EZVIZ CS-C6-21WFR-8 5.2.7 Build 170628. It has been classified as problematic. This affects an unknown part of the component Davinci Application. The manipulation leads to improper certificate validation. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The identifier VDB-261789 was assigned to this vulnerability. NOTE: The
igh. The exploitability is told to be difficult. The identifier VDB-261789 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.261789 - https://vuldb.com/?ctiid.261789 - https://vuldb.com/?submit.316408 - https://github.com/kzLiu2017/CVE_Document/blob/main/CVE_%20advisory_ezviz.pdf
CVE ID: CVE-2024-4064 State: PUBLISHED Published: 2024-04-23T20:00:05.584Z Last Updated: 2024-09-03T18:17:48.583Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC8 Problem Types: CWE-121 Description: A vulnerability was found in Tenda AC8 16.03.34.09. It has been declared as critical. This vulnerability affects the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-261790 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this d
be used. VDB-261790 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.261790 - https://vuldb.com/?ctiid.261790 - https://vuldb.com/?submit.316493 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC8/R7WebsSecurityHandler.md
CVE ID: CVE-2024-4065 State: PUBLISHED Published: 2024-04-23T20:00:07.093Z Last Updated: 2024-08-01T20:26:57.322Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC8 Problem Types: CWE-121 Description: A vulnerability was found in Tenda AC8 16.03.34.09. It has been rated as critical. This issue affects the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-261791. NOTE: The vendor was contacted early about this disclosu
The associated identifier of this vulnerability is VDB-261791. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.261791 - https://vuldb.com/?ctiid.261791 - https://vuldb.com/?submit.316494 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC8/formSetRebootTimer.md
CVE ID: CVE-2024-4066 State: PUBLISHED Published: 2024-04-23T21:00:08.132Z Last Updated: 2024-08-01T20:26:57.266Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC8 Problem Types: CWE-121 Description: A vulnerability classified as critical has been found in Tenda AC8 16.03.34.09. Affected is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The manipulation of the argument wanMTU/wanSpeed/cloneType/mac/serviceName/serverName leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-261792. NOTE: The vendor was cont
n disclosed to the public and may be used. The identifier of this vulnerability is VDB-261792. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.261792 - https://vuldb.com/?ctiid.261792 - https://vuldb.com/?submit.316495 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC8/fromAdvSetMacMtuWan.md
CVE ID: CVE-2024-4067 State: PUBLISHED Published: 2024-05-13T10:04:42.886Z Last Updated: 2024-09-17T19:47:41.783Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: micromatch Products: micromatch Problem Types: CWE-1333 Description: The NPM package `micromatch` prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in `micromatch.braces()` in `index.js` because the pattern `.*` will greedily match anything. By passing a malicious payload, the pattern matching will keep backtracking to the input while it doesn't find the closing bracket. As the input size increases, the consumption time will also increase until it
while it doesn't find the closing bracket. As the input size increases, the consumption time will also increase until it causes the application to hang or slow down. There was a merged fix but further testing shows the issue persists. This issue should be mitigated by using a safe pattern that won't start backtracking the regular expression due to greedy matching. This issue was fixed in version 4.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://devhub.checkmarx.com/cve-details/CVE-2024-4067/ - https://github.com/micromatch/micromatch/pull/266 - https://github.com/micromatch/micromatch/commit/03aa8052171e878897eee5d7bb2ae0ae83ec2ade - htt
tch/micromatch/pull/266 - https://github.com/micromatch/micromatch/commit/03aa8052171e878897eee5d7bb2ae0ae83ec2ade - https://github.com/micromatch/micromatch/releases/tag/4.0.8 - https://advisory.checkmarx.net/advisory/CVE-2024-4067/
CVE ID: CVE-2024-4068 State: PUBLISHED Published: 2024-05-13T10:06:38.152Z Last Updated: 2024-11-06T13:10:11.179Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: micromatch Products: braces Problem Types: CWE-1050 Description: The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash. Addit
reeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/micromatch/braces/issues/35 - https://devhub.checkmarx.com/cve-details/CVE-2024-4068/ - https://github.com/micromatch/braces/pull/37 - https://github.com/micromatch/braces/pull/40 - https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff