deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-30777
Published: 2022-05-16
Description: Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://en.wikipedia.org/wiki/H-Sphere; https://medium.com/%40bhattronit96/cve-2022-30[PII_REDACTED]3ab59; https://en.wikipedia.org/wiki/H-Sphere
CVE: CVE-2021-25119
Published: 2022-05-16
Description: The AGIL WordPress plugin through 1.0 accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload an arbitrary file like PHP, leading to RCE
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/47235989-d9f1-48a5-9799-fdef0889bf8a; https://wpscan.com/vulnerability/47235989-d9f1-48a5-9799-fdef0889bf8a
CVE: CVE-2022-0573
Published: 2022-05-16
Description: JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead to DoS, Privilege Escalation and Remote Code Execution when a specially crafted request is sent by a low privileged authenticated user due to insufficient validation of a user-provided serialized object.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://www.jfrog.com/confluence/display/JFROG/CVE-2022-0573%3A+Artifactory+Vulnerable+to+Deserialization+of+Untrusted+Data; https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories; https://www.jfrog.com/confluence/display/JFROG/CVE-2022-0573%3A+Artifactory+Vulnerable+to+Deserialization+of+Untrusted+Data
CVE: CVE-2022-0574
Published: 2022-05-16
Description: Improper Access Control in GitHub repository publify/publify prior to 9.2.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284, CWE-863
References: https://github.com/publify/publify/commit/0e6c66ac[PII_REDACTED]662399bca9d838c80d9739; https://huntr.dev/bounties/6f322c84-9e20-4df6-97e8-92bc271ede3f; https://github.com/publify/publify/commit/0e6c66ac[PII_REDACTED]662399bca9d838c80d9739
CVE: CVE-2022-0578
Published: 2022-05-16
Description: Code Injection in GitHub repository publify/publify prior to 9.2.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://github.com/publify/publify/commit/b50df050c593cc532b2c516792989bcfce2d73f7; https://huntr.dev/bounties/02c81928-eb47-476f-8000-e93dc796dbcc; https://github.com/publify/publify/commit/b50df050c593cc532b2c516792989bcfce2d73f7
CVE: CVE-2022-0867
Published: 2022-05-16
Description: The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/62803aae-9896-410b-9398-3497a838e494; https://wpscan.com/vulnerability/62803aae-9896-410b-9398-3497a838e494
CVE: CVE-2022-0873
Published: 2022-05-16
Description: The Gmedia Photo Gallery WordPress plugin before 1.20.0 does not sanitise and escape the Album's name before outputting it in pages/posts with a media embed, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d5ce4b8a-9aa5-4df8-b521-c2105990a87e; https://wpscan.com/vulnerability/d5ce4b8a-9aa5-4df8-b521-c2105990a87e
CVE: CVE-2022-1051
Published: 2022-05-16
Description: The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not sanitise and escape the city, phone or profile credentials fields when outputting it in the profile page, allowing any authenticated user to perform Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/cb2fa587-da2f-460e-a402-225df7744765; https://wpscan.com/vulnerability/cb2fa587-da2f-460e-a402-225df7744765
CVE: CVE-2022-1062
Published: 2022-05-16
Description: The th23 Social WordPress plugin through 1.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e770ba87-95d2-40c9-89cc-5d7390e9cbb0; https://wpscan.com/vulnerability/e770ba87-95d2-40c9-89cc-5d7390e9cbb0
CVE: CVE-2022-1089
Published: 2022-05-16
Description: The Bulk Edit and Create User Profiles WordPress plugin before 1.5.14 does not sanitise and escape the Users Login, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/75a9fd23-7fa9-4cb1-a55b-ec5deae5d6fa; https://wpscan.com/vulnerability/75a9fd23-7fa9-4cb1-a55b-ec5deae5d6fa
CVE: CVE-2022-1103
Published: 2022-05-16
Description: The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/9ddeef95-7c7f-4296-a55b-fd3304c91c18; https://wpscan.com/vulnerability/9ddeef95-7c7f-4296-a55b-fd3304c91c18
CVE: CVE-2022-1182
Published: 2022-05-16
Description: The Visual Slide Box Builder WordPress plugin through 3.2.9 does not sanitise and escape various parameters before using them in SQL statements via some of its AJAX actions available to any authenticated users (such as subscriber), leading to SQL Injections
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/01d108bb-d134-4651-9c74-babcc88da177; https://wpscan.com/vulnerability/01d108bb-d134-4651-9c74-babcc88da177
CVE: CVE-2022-1216
Published: 2022-05-16
Description: The Advanced Image Sitemap WordPress plugin through 1.2 does not sanitise and escape the PHP_SELF PHP variable before outputting it back in an attribute in an admin page, leading to Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/31a5b138-3d9e-4cd6-b85c-d20406ab51bd; https://wpscan.com/vulnerability/31a5b138-3d9e-4cd6-b85c-d20406ab51bd
CVE: CVE-2022-1217
Published: 2022-05-16
Description: The Custom TinyMCE Shortcode Button WordPress plugin through 1.1 does not sanitise and escape the PHP_SELF variable before outputting it back in an attribute in an admin page, leading to Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/15875f52-7a49-44c7-8a36-b49ddf37c20c; https://wpscan.com/vulnerability/15875f52-7a49-44c7-8a36-b49ddf37c20c
CVE: CVE-2022-1265
Published: 2022-05-16
Description: The BulletProof Security WordPress plugin before 6.1 does not sanitize and escape some of its CAPTCHA settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/9b66819d-8479-4c0b-b206-7f7ff769f758; https://wpscan.com/vulnerability/9b66819d-8479-4c0b-b206-7f7ff769f758
CVE: CVE-2022-1267
Published: 2022-05-16
Description: The BMI BMR Calculator WordPress plugin through 1.3 does not sanitise and escape arbitrary POST data before outputting it back in the response, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ed2971c2-b99c-4320-ac46-bea5a0a493ed; https://wpscan.com/vulnerability/ed2971c2-b99c-4320-ac46-bea5a0a493ed
CVE: CVE-2022-1334
Published: 2022-05-16
Description: The WP YouTube Live WordPress plugin before 1.8.3 does not validate, sanitise and escape various of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/af3b32c9-f386-4bb6-a362-86a27f49a739; https://wpscan.com/vulnerability/af3b32c9-f386-4bb6-a362-86a27f49a739
CVE: CVE-2022-1349
Published: 2022-05-16
Description: The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not validate that the value passed to the image_id parameter of the ajax action wpqa_remove_image belongs to the requesting user, allowing any users (with privileges as low as Subscriber) to delete the profile pictures of any other user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: https://wpscan.com/vulnerability/7ee95a53-5fe9-404c-a77a-d1218265e4aa; https://wpscan.com/vulnerability/7ee95a53-5fe9-404c-a77a-d1218265e4aa
CVE: CVE-2022-1386
Published: 2022-05-16
Description: The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. This could be used to interact with hosts on the server's local network bypassing firewalls and access control measures.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://theme-fusion.com/version-7-6-2-security-update/; https://wpscan.com/vulnerability/bf7034ab-24c4-461f-a709-3f73988b536b; https://www.rootshellsecurity.net/rootshell-discovered-a-critical-vulnerability-in-top-wordpress-theme/
CVE: CVE-2022-1393
Published: 2022-05-16
Description: The WP Subtitle WordPress plugin before 3.4.1 adds a subtitle field and provides a shortcode to display it via [wp_subtitle]. The subtitle is stored as a custom post meta with the key: "wps_subtitle", which is sanitized upon post save/update, however is not sanitized when updating it directly from the post meta update button (via AJAX) - and this makes the XSS exploitable by authenticated users with a role as low as contributor.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/3491b889-94dd-4507-9fed-58f48d8275cf; https://wpscan.com/vulnerability/3491b889-94dd-4507-9fed-58f48d8275cf
CVE: CVE-2022-1398
Published: 2022-05-16
Description: The External Media without Import WordPress plugin through 1.1.2 does not have any authorisation and does to ensure that medias added via URLs are external medias, which could allow any authenticated users, such as subscriber to perform blind SSRF attacks
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://wpscan.com/vulnerability/5440d177-e995-403e-b2c9-42ceda14579e; https://wpscan.com/vulnerability/5440d177-e995-403e-b2c9-42ceda14579e
CVE: CVE-2022-1407
Published: 2022-05-16
Description: The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not have CSRF check in place when adding a tracking campaign, and does not escape the campaign fields when outputting them In attributes. As a result, attackers could make a logged in admin add tracking campaign with XSS payloads in them via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/19a9e266-daf6-4cc5-a300-2b5436b6d07d; https://wpscan.com/vulnerability/19a9e266-daf6-4cc5-a300-2b5436b6d07d
CVE: CVE-2022-1408
Published: 2022-05-16
Description: The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not escape various settings before outputting them in attributes, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/48dccf4c-07e0-4877-867d-f8f43aeb5705; https://wpscan.com/vulnerability/48dccf4c-07e0-4877-867d-f8f43aeb5705
CVE: CVE-2022-1409
Published: 2022-05-16
Description: The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not properly validate images, allowing high privilege users such as administrators to upload PHP files disguised as images and containing malicious PHP code
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/1330f8f7-4a59-4e9d-acae-21656a4101fe; https://wpscan.com/vulnerability/1330f8f7-4a59-4e9d-acae-21656a4101fe
CVE: CVE-2022-1418
Published: 2022-05-16
Description: The Social Stickers WordPress plugin through 2.2.9 does not have CSRF checks in place when updating its Social Network settings, and does not escape some of these fields, which could allow attackers to make a logged-in admin change them and lead to Stored Cross-Site Scripting issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://wpscan.com/vulnerability/3851e61e-f462-4259-af0a-8d832809d559; https://wpscan.com/vulnerability/3851e61e-f462-4259-af0a-8d832809d559
CVE: CVE-2022-1425
Published: 2022-05-16
Description: The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not validate that the message_id of the wpqa_message_view ajax action belongs to the requesting user, leading to any user being able to read messages for any other users via a Insecure Direct Object Reference (IDOR) vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://wpscan.com/vulnerability/b110e2f7-4aa3-47b5-a8f2-0a7fe53cc467; https://wpscan.com/vulnerability/b110e2f7-4aa3-47b5-a8f2-0a7fe53cc467
CVE: CVE-2022-1435
Published: 2022-05-16
Description: The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitize and escapes some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/ef5aa8a7-23a7-4ce0-bb09-d9c986386114; https://wpscan.com/vulnerability/ef5aa8a7-23a7-4ce0-bb09-d9c986386114
CVE: CVE-2022-1436
Published: 2022-05-16
Description: The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargo_tracking_number parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d5c6f894-6ad1-46f4-bd77-17ad9234cfc3; https://wpscan.com/vulnerability/d5c6f894-6ad1-46f4-bd77-17ad9234cfc3
CVE: CVE-2022-1455
Published: 2022-05-16
Description: The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflected Cross-Site Scripting when the premium is enabled
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8267046e-870e-4ccd-b920-340233ed3b93; https://wpscan.com/vulnerability/8267046e-870e-4ccd-b920-340233ed3b93
CVE: CVE-2022-1465
Published: 2022-05-16
Description: The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.9 does not sanitise and escape a parameter before outputting it back in an attribute via an AJAX action, leading to a Reflected Cross-Site Scripting issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/6781033a-f166-4198-874f-3e142854daf7; https://wpscan.com/vulnerability/6781033a-f166-4198-874f-3e142854daf7
CVE: CVE-2022-1512
Published: 2022-05-16
Description: The ScrollReveal.js Effects WordPress plugin through 1.2 does not sanitise and escape its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/166820/; https://wpscan.com/vulnerability/a754a516-07fc-44f1-9c34-31e963460301; https://packetstormsecurity.com/files/166820/
CVE: CVE-2022-1553
Published: 2022-05-16
Description: Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vulnerability to view the contents of any password-protected article present on the publify website, compromising confidentiality and integrity of users.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-284, CWE-863
References: https://github.com/publify/publify/commit/1a78f16f[PII_REDACTED]65a12a9555b3524892d7db; https://huntr.dev/bounties/b398e4c9-6cdf-4973-ad86-da796cde221f; https://github.com/publify/publify/commit/1a78f16f[PII_REDACTED]65a12a9555b3524892d7db
CVE: CVE-2022-1557
Published: 2022-05-16
Description: The ULeak Security & Monitoring WordPress plugin through 1.2.3 does not have authorisation and CSRF checks when updating its settings, and is also lacking sanitisation as well as escaping in some of them, which could allow any authenticated users such as subscriber to perform Stored Cross-Site Scripting attacks against admins viewing the settings
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/166564/; https://wpscan.com/vulnerability/e2b6dbf5-8709-4a2c-90be-3214ff55ed56; https://packetstormsecurity.com/files/166564/
CVE: CVE-2022-1559
Published: 2022-05-16
Description: The Clipr WordPress plugin through 1.2.3 does not sanitise and escape its API Key settings before outputting it in an attribute, leading to a Stored Cross-Site Scripting issue even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://packetstormsecurity.com/files/166530/; https://wpscan.com/vulnerability/99059337-c3cd-4e91-9a03-df32a05b719c; https://packetstormsecurity.com/files/166530/
CVE: CVE-2022-1560
Published: 2022-05-16
Description: The Amministrazione Aperta WordPress plugin before 3.8 does not validate the open parameter before using it in an include statement, leading to a Local File Inclusion issue. The original advisory mentions that unauthenticated users can exploit this, however the affected file generates a fatal error when accessed directly and the affected code is not reached. The issue can be exploited via the dashboard when logged in as an admin, or by making a logged in admin open a malicious link
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://wpscan.com/vulnerability/5c5fbbea-92d2-46bb-9a70-75155fffb6de; https://wpscan.com/vulnerability/5c5fbbea-92d2-46bb-9a70-75155fffb6de
CVE: CVE-2022-1713
Published: 2022-05-16
Description: SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918, CWE-918
References: https://github.com/jgraph/drawio/commit/283d41ec80ad410d68634245cf56114bc19331ee; https://huntr.dev/bounties/cad3902f-3afb-4ed2-abd0-9f96a248de11; https://github.com/jgraph/drawio/commit/283d41ec80ad410d68634245cf56114bc19331ee
CVE: CVE-2022-1721
Published: 2022-05-16
Description: Path Traversal in WellKnownServlet in GitHub repository jgraph/drawio prior to 18.0.5. Read local files of the web application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/jgraph/drawio/commit/01ccb271d34258872b859c0fc1d253cc81341917; https://huntr.dev/bounties/000931cc-6d0e-4a4f-b4d8-4ba46ba0e699; https://github.com/jgraph/drawio/commit/01ccb271d34258872b859c0fc1d253cc81341917
CVE: CVE-2022-1722
Published: 2022-05-16
Description: SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal link-local IPv6 addresses
CVSS Score: 3.3 (LOW)
CWE: CWE-918, CWE-918
References: https://github.com/jgraph/drawio/commit/cf5c78aa0f3127fb10053db55b39f3017a0654ae; https://huntr.dev/bounties/c903d563-ba97-44e9-b421-22bfab1e0cbd; https://github.com/jgraph/drawio/commit/cf5c78aa0f3127fb10053db55b39f3017a0654ae
CVE: CVE-2022-1726
Published: 2022-05-16
Description: Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/wenzhixin/bootstrap-table/commit/b4a1e5dd332be652e0bc376fd9256886cf4bbde9; https://huntr.dev/bounties/9b85cc33-0395-4c31-8a42-3a94beb2efea; https://github.com/wenzhixin/bootstrap-table/commit/b4a1e5dd332be652e0bc376fd9256886cf4bbde9
CVE: CVE-2022-1728
Published: 2022-05-16
Description: Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://github.com/polonel/trudesk/commit/e836d04d16787c2c9c72e7bf011cf396d1f73c19; https://huntr.dev/bounties/3c6cb129-6995-4722-81b5-af052572b519; https://github.com/polonel/trudesk/commit/e836d04d16787c2c9c72e7bf011cf396d1f73c19
CVE: CVE-2022-30523
Published: 2022-05-16
Description: Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow a low privileged local attacker to delete the contents of an arbitrary folder as SYSTEM which can then be used for privilege escalation on the affected machine.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://helpcenter.trendmicro.com/en-us/article/tmka-09071; https://www.zerodayinitiative.com/advisories/ZDI-22-759/; https://helpcenter.trendmicro.com/en-us/article/tmka-09071
CVE: CVE-2021-33318
Published: 2022-05-16
Description: An Input Validation Vulnerability exists in Joel Christner .NET C# packages WatsonWebserver, IpMatcher 1.0.4.1 and below (IpMatcher) and 4.1.3 and below (WatsonWebserver) due to insufficient validation of input IP addresses and netmasks against the internal Matcher list of IP addresses and subnets.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-704
References: https://github.com/jchristn/IpMatcher; https://github.com/jchristn/IpMatcher/commit/81d77c2f33aa912dbd032b34b9e184fc6e041d89; https://github.com/jchristn/WatsonWebserver
CVE: CVE-2021-23265
Published: 2022-05-16
Description: A logged-in and authenticated user with a Reviewer Role may lock a content item.
CVSS Score: 3.5 (LOW)
CWE: CWE-269
References: https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]; https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]
CVE: CVE-2021-23266
Published: 2022-05-16
Description: An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the administrator.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-117, CWE-116
References: https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]; https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]
CVE: CVE-2021-23267
Published: 2022-05-16
Description: Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker static methods.
CVSS Score: 7.6 (HIGH)
CWE: CWE-913, CWE-913
References: https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]; https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]
CVE: CVE-2022-25169
Published: 2022-05-16
Description: The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: http://www.openwall.com/lists/oss-security/2022/05/16/4; https://lists.apache.org/thread/t3tb51sf0k2pmbnzsrrrm23z9r1c10rk; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-30050
Published: 2022-05-16
Description: Gnuboard 5.55 and 5.56 is vulnerable to Cross Site Scripting (XSS) via bbs/member_confirm.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gratis-herring-da5.notion.site/Gnuboard-Reflected-XSS-25d593d8a2b84a46a998bfd5816c54fc; https://gratis-herring-da5.notion.site/Gnuboard-Reflected-XSS-25d593d8a2b84a46a998bfd5816c54fc