deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-35200
Published: 2020-12-12
Description: Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://discourse.igniterealtime.org/t/openfire-4-6-0-has-reflective-xss-vulnerabilities/89296; https://discourse.igniterealtime.org/t/openfire-4-6-0-has-reflective-xss-vulnerabilities/89296
CVE: CVE-2020-35201
Published: 2020-12-12
Description: Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp users Stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49234; https://www.exploit-db.com/exploits/49234
CVE: CVE-2020-35202
Published: 2020-12-12
Description: Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49235; https://www.exploit-db.com/exploits/49235
CVE: CVE-2020-35207
Published: 2020-12-12
Description: An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The PIN authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate with an arbitrary PIN. NOTE: the vendor has indicated that this is not an attack of interest within the context of their threat model, which excludes jailbroken devices
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-287
References: https://github.com/evilblazer/LastPassVulnerabilities; https://youtu.be/C5j7drIylsQ; https://github.com/evilblazer/LastPassVulnerabilities
CVE: CVE-2020-35208
Published: 2020-12-12
Description: An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate with an arbitrary password. NOTE: the vendor has indicated that this is not an attack of interest within the context of their threat model, which excludes jailbroken devices
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-287
References: https://github.com/evilblazer/LastPassVulnerabilities; https://youtu.be/63PfHVSr8iw; https://github.com/evilblazer/LastPassVulnerabilities
CVE: CVE-2020-29669
Published: 2020-12-14
Description: In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password hashes of each user (including root) can be dumped. The root hash can be cracked easily which results in a complete system compromise.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: http://packetstormsecurity.com/files/160478/Macally-WIFISD2-2A82-2.000.010-Privilege-Escalation.html; https://drive.google.com/file/d/1PpiRhhfph8U_0KAoIp0AnwY3mVtp-R-g/view; https://github.com/S1lkys/CVE-2020-29669
CVE: CVE-2020-8999
Published: 2020-12-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-9001
Published: 2020-12-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-35234
Published: 2020-12-14
Description: The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020. If an attacker can list the wp-content/plugins/easy-wp-smtp/ directory, then they can discover a log file (such as #############_debug_log.txt) that contains all password-reset links. The attacker can request a reset of the Administrator password and then use a link found there.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://blog.nintechnet.com/wordpress-easy-wp-smtp-plugin-fixed-zero-day-vulnerability/; https://wordpress.org/plugins/easy-wp-smtp/#developers; https://blog.nintechnet.com/wordpress-easy-wp-smtp-plugin-fixed-zero-day-vulnerability/
CVE: CVE-2020-35235
Published: 2020-12-14
Description: vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 8.8 (HIGH)
References: https://blog.nintechnet.com/authenticated-rce-vulnerability-in-wordpress-secure-file-manager-plugin-unpatched/; https://wordpress.org/plugins/secure-file-manager/#developers; https://blog.nintechnet.com/authenticated-rce-vulnerability-in-wordpress-secure-file-manager-plugin-unpatched/
CVE: CVE-2020-5635
Published: 2020-12-14
Description: Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker on the adjacent network to send a specially crafted request to a specific URL, which may result in an arbitrary command execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/jp/JVN55917325/index.html; https://jvn.jp/jp/JVN55917325/index.html; https://www.necplatforms.co.jp/product/security_ap/info_20201211.html
CVE: CVE-2020-5636
Published: 2020-12-14
Description: Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative privilege to send a specially crafted request to a specific URL, which may result in an arbitrary command execution.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://jvn.jp/en/jp/JVN55917325/index.html; https://jvn.jp/jp/JVN55917325/index.html; https://www.necplatforms.co.jp/product/security_ap/info_20201211.html
CVE: CVE-2020-5637
Published: 2020-12-14
Description: Improper validation of integrity check value vulnerability in Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative privilege to execute a malicious program.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-354
References: https://jvn.jp/en/jp/JVN55917325/index.html; https://jvn.jp/jp/JVN55917325/index.html; https://www.necplatforms.co.jp/product/security_ap/info_20201211.html
CVE: CVE-2020-5639
Published: 2020-12-14
Description: Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitrary file in a specific directory via unspecified vectors. As a result, an arbitrary OS command may be executed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://jvn.jp/en/jp/JVN12884935/index.html; https://jvn.jp/jp/JVN12884935/index.html; https://www.soliton.co.jp/support/2020/004278.html
CVE: CVE-2020-5665
Published: 2020-12-14
Description: Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service (DoS) condition on program execution and communication by sending a specially crafted ARP packet.
CVSS Score: 7.4 (HIGH)
References: https://jvn.jp/vu/JVNVU95638588/index.html; https://us-cert.cisa.gov/ics/advisories/icsa-20-345-01; https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-018.pdf
CVE: CVE-2020-35236
Published: 2020-12-14
Description: The GitLab Webhook Handler in amazee.io Lagoon before 1.12.3 has incorrect access control associated with project deletion.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/amazeeio/lagoon/commit/1140289bf9fa98b8602ab4662ae867b210d8476b; https://github.com/amazeeio/lagoon/compare/v1.12.2...v1.12.3; https://github.com/amazeeio/lagoon/tree/master/services/webhook-handler
CVE: CVE-2020-17511
Published: 2020-12-14
Description: In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Same happened when creating a Connection with a password field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312
References: https://lists.apache.org/thread.html/ree782a29d927b96bf0b39fb92e2f1f09ea3112a985f7a08ce93765ac%40%3Cusers.airflow.apache.org%3E; https://lists.apache.org/thread.html/ree782a29d927b96bf0b39fb92e2f1f09ea3112a985f7a08ce93765ac%40%3Cusers.airflow.apache.org%3E
CVE: CVE-2020-17513
Published: 2020-12-14
Description: In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://lists.apache.org/thread.html/rb3647269f07cc2775ca6568cbfd4994d862c842a58120d2aba9c658a%40%3Cusers.airflow.apache.org%3E; https://lists.apache.org/thread.html/rb3647269f07cc2775ca6568cbfd4994d862c842a58120d2aba9c658a%40%3Cusers.airflow.apache.org%3E
CVE: CVE-2020-29227
Published: 2020-12-14
Description: An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://loopspell.medium.com/cve-2020-29227-unauthenticated-local-file-inclusion-7d3bd2c5c6a5; https://www.sourcecodester.com/php/14544/car-rental-management-system-using-phpmysqli-source-code.html; https://loopspell.medium.com/cve-2020-29227-unauthenticated-local-file-inclusion-7d3bd2c5c6a5
CVE: CVE-2020-14244
Published: 2020-12-14
Description: A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the server or inject code into the system which would execute with the privileges of the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085761; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085761
CVE: CVE-2020-14268
Published: 2020-12-14
Description: A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the client or inject code into the system which would execute with the privileges of the client.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085762; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085762
CVE: CVE-2020-35378
Published: 2020-12-14
Description: SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/49212; https://www.exploit-db.com/exploits/49212
CVE: CVE-2020-35382
Published: 2020-12-14
Description: SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/craigrodway/classroombookings/issues/27; https://github.com/craigrodway/classroombookings/issues/27
CVE: CVE-2020-15733
Published: 2020-12-14
Description: An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to misrepresent itself in the URL bar. This issue affects: Bitdefender Antivirus Plus versions prior to 25.0.7.29.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-346, CWE-346
References: https://www.bitdefender.com/support/security-advisories/url-spoofing-vulnerability-bitdefender-safepay-va-8958; https://www.bitdefender.com/support/security-advisories/url-spoofing-vulnerability-bitdefender-safepay-va-8958
CVE: CVE-2020-25175
Published: 2020-12-14
Description: GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-523, CWE-522
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-343-01; https://us-cert.cisa.gov/ics/advisories/icsma-20-343-01
CVE: CVE-2020-25179
Published: 2020-12-14
Description: GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-497, CWE-200
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-343-01; https://us-cert.cisa.gov/ics/advisories/icsma-20-343-01
CVE: CVE-2020-28856
Published: 2020-12-14
Description: OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP address, allowing attackers to spoof it using X-Forwarded-For in the header, by supplying localhost address such as 127.0.0.1, effectively bypassing all IP address based access controls.
CVSS Score: 7.5 (HIGH)
CWE: CWE-290
References: http://openasset.com; http://packetstormsecurity.com/files/160453/OpenAsset-Digital-Asset-Management-IP-Access-Control-Bypass.html; http://seclists.org/fulldisclosure/2020/Dec/17
CVE: CVE-2020-35338
Published: 2020-12-14
Description: The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier has a default account with a password of "pokon."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://jeyaseelans.medium.com/cve-2020-35338-9e841f48defa; https://www.mobileviewpoint.com/; https://jeyaseelans.medium.com/cve-2020-35338-9e841f48defa
CVE: CVE-2020-20136
Published: 2020-12-14
Description: QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/QuantConnect/Lean/issues/3537; https://github.com/QuantConnect/Lean/issues/3537
CVE: CVE-2020-28857
Published: 2020-12-14
Description: OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://openasset.com; http://packetstormsecurity.com/files/160455/OpenAsset-Digital-Asset-Management-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2020/Dec/18
CVE: CVE-2020-28858
Published: 2020-12-14
Description: OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the application was intentionally made by the user, allowing for cross-site request forgery attacks on all user functions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://openasset.com; http://packetstormsecurity.com/files/160458/OpenAsset-Digital-Asset-Management-Cross-Site-Request-Forgery.html; http://seclists.org/fulldisclosure/2020/Dec/19
CVE: CVE-2020-28859
Published: 2020-12-14
Description: OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for reflected cross-site scripting attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://openasset.com; https://www.themissinglink.com.au/security-advisories-cve-2020-28859; http://openasset.com
CVE: CVE-2020-16102
Published: 2020-12-14
Description: Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to create items with invalid configuration, potentially causing the server to crash and fail to restart. This issue affects: Gallagher Command Centre 8.30 versions prior to 8.30.1299(MR2); 8.20 versions prior to 8.20.1218(MR4); 8.10 versions prior to 8.10.1253(MR6); 8.00 versions prior to 8.00.1252(MR7); version 7.90 and prior versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-287, CWE-306
References: https://security.gallagher.com/Security-Advisories/CVE-2020-16102; https://security.gallagher.com/Security-Advisories/CVE-2020-16102
CVE: CVE-2020-16103
Published: 2020-12-14
Description: Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or possibly cause remote code execution. This issue affects: Gallagher Command Centre 8.30 versions prior to 8.30.1236(MR1); 8.20 versions prior to 8.20.1166(MR3); 8.10 versions prior to 8.10.1211(MR5); version 8.00 and prior versions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704, CWE-843
References: https://security.gallagher.com/Security-Advisories/CVE-2020-16103; https://security.gallagher.com/Security-Advisories/CVE-2020-16103
CVE: CVE-2020-16104
Published: 2020-12-14
Description: SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a remote attacker with 'Edit Enterprise Data Interfaces' privilege to execute arbitrary SQL against a third party database if EDI is configured to import data from this database. This issue affects: Gallagher Command Centre 8.30 versions prior to 8.30.1236(MR1); 8.20 versions prior to 8.20.1166(MR3); 8.10 versions prior to 8.10.1211(MR5); 8.00 versions prior to 8.00.1228(MR6); version 7.90 and prior versions.
CVSS Score: 8.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://security.gallagher.com/Security-Advisories/CVE-2020-16104; https://security.gallagher.com/Security-Advisories/CVE-2020-16104
CVE: CVE-2020-20183
Published: 2020-12-14
Description: Insecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00(ABBX.3) and earlier allows attackers to gain privileges and access certain admin pages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: https://www.zyxel.com/us/en/support/P1302-T10D-v3-modem-insecure-direct-object-reference-vulnerability.shtml; https://www.zyxel.com/us/en/support/P1302-T10D-v3-modem-insecure-direct-object-reference-vulnerability.shtml
CVE: CVE-2020-20184
Published: 2020-12-14
Description: GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attempting an SSH connection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/liftoff/GateOne/issues/736; https://github.com/liftoff/GateOne/issues/736
CVE: CVE-2020-25183
Published: 2020-12-14
Description: Medtronic MyCareLink Smart 25000 contains 

an authentication protocol vulnerability where the method used to authenticate between the MCL Smart Patient Reader and the Medtronic MyCareLink Smart mobile app is vulnerable to bypass. This vulnerability enables an attacker to use another mobile device or malicious application on the patient’s smartphone to authenticate to the patient’s Medtronic Smart Reader, fooling the device into believing it is communicating with the original Medtronic smart phone application when executed within range of Bluetooth communication.
CVSS Score: 8.0 (HIGH)
CWE: CWE-287, CWE-287
References: https://global.medtronic.com/xg-en/product-security/security-bulletins/mycarelink-smart-security-vulnerability-patch.html; https://www.cisa.gov/news-events/ics-medical-advisories/icsma-20-345-01; https://us-cert.cisa.gov/ics/advisories/icsma-20-345-01
CVE: CVE-2020-25187
Published: 2020-12-14
Description: Medtronic MyCareLink Smart 25000 is 

 vulnerable when an authenticated attacker runs a debug command, which can be sent to the patient reader and cause a heap overflow event within the MCL Smart Patient Reader software stack. The heap overflow could allow an attacker to remotely execute code on the MCL Smart Patient Reader, potentially leading to control of the device
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://global.medtronic.com/xg-en/product-security/security-bulletins/mycarelink-smart-security-vulnerability-patch.html; https://www.cisa.gov/news-events/ics-medical-advisories/icsma-20-345-01; https://us-cert.cisa.gov/ics/advisories/icsma-20-345-01
CVE: CVE-2020-27252
Published: 2020-12-14
Description: Medtronic MyCareLink Smart 25000 is 

vulnerable to a race condition in the MCL Smart Patient Reader software update system, which allows unsigned firmware to be uploaded and executed on the Patient Reader. If exploited, an attacker could remotely execute code on the MCL Smart Patient Reader device, leading to control of the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-367, CWE-367
References: https://global.medtronic.com/xg-en/product-security/security-bulletins/mycarelink-smart-security-vulnerability-patch.html; https://www.cisa.gov/news-events/ics-medical-advisories/icsma-20-345-01; https://us-cert.cisa.gov/ics/advisories/icsma-20-345-01
CVE: CVE-2020-28860
Published: 2020-12-14
Description: OpenAssetDigital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input, incorporating it into its SQL queries, allowing for authenticated blind SQL injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://openasset.com; http://packetstormsecurity.com/files/160459/OpenAsset-Digital-Asset-Management-SQL-Injection.html; http://seclists.org/fulldisclosure/2020/Dec/21
CVE: CVE-2020-28861
Published: 2020-12-14
Description: OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing unauthenticated attackers to gain access to potentially sensitive project information stored by the application.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1236
References: http://openasset.com; http://packetstormsecurity.com/files/160457/OpenAsset-Digital-Asset-Management-Insecure-Direct-Object-Reference.html; http://seclists.org/fulldisclosure/2020/Dec/22
CVE: CVE-2020-29303
Published: 2020-12-14
Description: A cross-site scripting (XSS) vulnerability in the SabaiApp Directories Pro plugin 1.3.45 for WordPress allows remote attackers to inject arbitrary web script or HTML via a POST to /wp-admin/admin.php?page=drts/directories&q=%2F with _drts_form_build_id parameter containing the XSS payload and _t_ parameter set to an invalid or non-existent CSRF token.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/160452/WordPress-DirectoriesPro-1.3.45-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2020/Dec/14; https://directoriespro.com/directories-pro-1-3-46/
CVE: CVE-2020-29304
Published: 2020-12-14
Description: A cross-site scripting (XSS) vulnerability exists in the SabaiApps WordPress Directories Pro plugin version 1.3.45 and previous, allows attackers who have convinced a site administrator to import a specially crafted CSV file to inject arbitrary web script or HTML as the victim is proceeding through the file import workflow.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/160452/WordPress-DirectoriesPro-1.3.45-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2020/Dec/15; https://directoriespro.com/directories-pro-1-3-46/
CVE: CVE-2020-29509
Published: 2020-12-14
Description: The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-115
References: https://github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-attributes.md; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-attributes.md
CVE: CVE-2020-29510
Published: 2020-12-14
Description: The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-115
References: https://github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-directives.md; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-directives.md