deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-48476
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, when adding and editing user records using the fill() method, there is no check for the absence of the password field in the data coming from the user, which leads to a mass-assignment vulnerability. As a result, a user with the right to edit other users of the system can change their password, and then log in to the system using the set password. This issue has been patched in version 1.8.180.
CVSS Score: 8.8 (HIGH)
CWE: CWE-841
References: https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-7h5m-q39p-h849
CVE: CVE-2025-48477
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application's logic requires the user to perform a correct sequence of actions to implement a functional capability, but the application allows access to the functional capability without correctly completing one or more actions in the sequence. The leaves the attributes of Mailbox object able to be changed by the fill method. This issue has been patched in version 1.8.180.
CVSS Score: 8.1 (HIGH)
CWE: CWE-841
References: https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-2c82-qx7x-35h8
CVE: CVE-2025-48478
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, insufficient input validation during user creation has resulted in a mass assignment vulnerability, allowing an attacker to manipulate all fields of the object, which are enumerated in the $fillable array (the User object), when creating a new user. This issue has been patched in version 1.8.180.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-841
References: https://github.com/freescout-help-desk/freescout/commit/d2048f59a899dbcfc9a71bb98549ead81cdb62a5; https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-fqjj-79j2-8qx6
CVE: CVE-2025-48479
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the laravel-translation-manager package does not correctly validate user input, enabling the deletion of any directory, given sufficient access rights. This issue has been patched in version 1.8.180.
CVSS Score: 2.7 (LOW)
CWE: CWE-841
References: https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-627h-pc3c-w68h
CVE: CVE-2025-48480
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, an authorized user with the administrator role or with the privilege User::PERM_EDIT_USERS can create a user, specifying the path to the user's avatar ../.htaccess during creation, and then delete the user's avatar, resulting in the deletion of the file .htaccess in the folder /storage/app/public. This issue has been patched in version 1.8.180.
CVSS Score: 2.7 (LOW)
CWE: CWE-841
References: https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-pfjf-43mp-3gp2
CVE: CVE-2025-48481
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, an attacker with an unactivated email invitation containing invite_hash, can exploit this vulnerability to self-activate their account, despite it being blocked or deleted, by leveraging the invitation link from the email to gain initial access to the account. This issue has been patched in version 1.8.180.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-841
References: https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-jgj2-x749-5wc7
CVE: CVE-2025-48482
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, there is a mass assignment vulnerability. The Customer object is updated using the fill() method, which processes fields such as channel and channel_id. However, the fill() method is called with all client-provided data, including unexpected values for channel and channel_id, leading to a mass assignment vulnerability. This issue has been patched in version 1.8.180.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-841
References: https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-7fjp-538q-9vrf
CVE: CVE-2025-48483
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application is vulnerable to Cross-Site Scripting (XSS) attacks due to incorrect input validation and sanitization of user-input data during mail signature sanitization. An attacker can inject arbitrary HTML code, including JavaScript scripts, into the page processed by the user's browser, allowing them to steal sensitive data, hijack user sessions, or conduct other malicious activities. Additionally, if an administrator accesses one of these emails with a modified signature, it could result in a subsequent Cross-Site Request Forgery (CSRF) vulnerability. This issue has been patched in version 1.8.180.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-352, CWE-79
References: https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-g2vq-qwx2-pc2m
CVE: CVE-2025-48484
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, the application is vulnerable to Cross-Site Scripting (XSS) attacks due to incorrect input validation and sanitization of user-input data in the conversation POST data body. This issue has been patched in version 1.8.178.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-w3j9-7fhq-m8x7
CVE: CVE-2025-41235
Published: 2025-05-30
Description: Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies.
CVSS Score: 8.6 (HIGH)
CWE: CWE-444
References: https://spring.io/security/cve-2025-41235
CVE: CVE-2025-48490
Published: 2025-05-30
Description: Laravel Rest Api is an API generator. Prior to version 2.13.0, a validation bypass vulnerability was discovered where multiple validations defined for the same attribute could be silently overridden. Due to how the framework merged validation rules across multiple contexts (such as index, store, and update actions), malicious actors could exploit this behavior by crafting requests that bypass expected validation rules, potentially injecting unexpected or dangerous parameters into the application. This could lead to unauthorized data being accepted or processed by the API, depending on the context in which the validation was bypassed. This issue has been patched in version 2.13.0.
CWE: CWE-20, CWE-1173
References: https://github.com/Lomkit/laravel-rest-api/commit/88b14587b4efd7e59d7379658c606d325bb513b4; https://github.com/Lomkit/laravel-rest-api/pull/172; https://github.com/Lomkit/laravel-rest-api/security/advisories/GHSA-69rh-hccr-cxrj
CVE: CVE-2025-48881
Published: 2025-05-30
Description: Valtimo is a platform for Business Process Automation. In versions starting from 11.0.0.RELEASE to 11.3.3.RELEASE and 12.0.0.RELEASE to 12.12.0.RELEASE, all objects for which an object-management configuration exists can be listed, viewed, edited, created or deleted by unauthorised users. If object-urls are exposed via other channels, the contents of these objects can be viewed independent of object-management configurations. This issue has been patched in version 12.13.0.RELEASE.  A workaround for this issue involves overriding the endpoint security as defined in ObjectenApiHttpSecurityConfigurer and ObjectManagementHttpSecurityConfigurer. Depending on the implementation, this could result in loss of functionality.
CVSS Score: 8.3 (HIGH)
CWE: CWE-863
References: https://github.com/valtimo-platform/valtimo-backend-libraries/commit/6ab04b30d3dab816bfea32d40ba50e5dd4517272; https://github.com/valtimo-platform/valtimo-backend-libraries/security/advisories/GHSA-965r-9cg9-g42p
CVE: CVE-2025-48889
Published: 2025-05-30
Description: Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Prior to version 5.31.0, an arbitrary file copy vulnerability in Gradio's flagging feature allows unauthenticated attackers to copy any readable file from the server's filesystem. While attackers can't read these copied files, they can cause DoS by copying large files (like /dev/urandom) to fill disk space. This issue has been patched in version 5.31.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/gradio-app/gradio/security/advisories/GHSA-8jw3-6x8j-v96g; https://github.com/gradio-app/gradio/security/advisories/GHSA-8jw3-6x8j-v96g
CVE: CVE-2025-4429
Published: 2025-05-30
Description: The Gearside Developer Dashboard WordPress plugin through 1.0.72 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/a487f5c9-7db6-4427-8d95-17acbfd49fd2/; https://wpscan.com/vulnerability/a487f5c9-7db6-4427-8d95-17acbfd49fd2/
CVE: CVE-2025-4659
Published: 2025-05-30
Description: The Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/changeset/3299864/; https://www.wordfence.com/threat-intel/vulnerabilities/id/a99456c4-c828-4dc9-9375-8981eafbeb15?source=cve
CVE: CVE-2025-5259
Published: 2025-05-30
Description: The Minimal Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ parameter in all versions up to, and including, 1.7.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/minimal-share-buttons/trunk/inc/class-minimal-share-buttons.php#L67; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3302704%40minimal-share-buttons&old=3074272%40minimal-share-buttons&sfp_email=&sfph_mail=; https://wordpress.org/plugins/minimal-share-buttons/#developers
CVE: CVE-2025-41385
Published: 2025-05-30
Description: An OS Command Injection issue exists in wivia 5 all versions. If this vulnerability is exploited, an arbitrary OS command may be executed by a logged-in administrative user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/jp/JVN51394666/; https://www.uchida.co.jp/wivia/support02.html
CVE: CVE-2025-41406
Published: 2025-05-30
Description: Cross-site scripting vulnerability exists in wivia 5 all versions. If exploited, when a user connects to the affected device with a specific operation, an arbitrary script may be executed on the web browser of the moderator user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN51394666/; https://www.uchida.co.jp/wivia/support02.html
CVE: CVE-2025-47697
Published: 2025-05-30
Description: Client-side enforcement of server-side security issue exists in wivia 5 all versions. If exploited, an unauthenticated attacker may bypass authentication and operate the affected device as the moderator user.
CVSS Score: 7.5 (HIGH)
CWE: CWE-602
References: https://jvn.jp/en/jp/JVN51394666/; https://www.uchida.co.jp/wivia/support02.html
CVE: CVE-2025-48485
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application is vulnerable to Cross-Site Scripting (XSS) attacks due to incorrect input validation and sanitization of user-input data when an authenticated user updates the profile of an arbitrary customer. This issue has been patched in version 1.8.180.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-556q-w535-xxg8
CVE: CVE-2025-48486
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the cross-site scripiting (XSS) vulnerability is caused by the lack of input validation and sanitization in both \Session::flash and __, allowing user input to be executed without proper filtering. This issue has been patched in version 1.8.180.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-9jpm-xrpc-cv66
CVE: CVE-2025-48487
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, when creating a translation of a phrase that appears in a flash-message after a completed action, it is possible to inject a payload to exploit XSS vulnerability. This issue has been patched in version 1.8.180.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-wg2q-m2fj-x6j4
CVE: CVE-2025-48488
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, deleting the file .htaccess allows an attacker to upload an HTML file containing malicious JavaScript code to the server, which can result in a Cross-Site Scripting (XSS) vulnerability. This issue has been patched in version 1.8.180.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-2m76-538h-7hf9
CVE: CVE-2025-48489
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application is vulnerable to Cross-Site Scripting (XSS) attacks due to insufficient data validation and sanitization during data reception. This issue has been patched in version 1.8.180.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-jqjf-f566-485j
CVE: CVE-2025-48492
Published: 2025-05-30
Description: GetSimple CMS is a content management system. In versions starting from 3.3.16 to 3.3.21, an authenticated user with access to the Edit component can inject arbitrary PHP into a component file and execute it via a crafted query string, resulting in Remote Code Execution (RCE). This issue is set to be patched in version 3.3.22.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-g435-p72m-p582; https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-g435-p72m-p582
CVE: CVE-2025-48865
Published: 2025-05-30
Description: Fabio is an HTTP(S) and TCP router for deploying applications managed by consul. Prior to version 1.6.6, Fabio allows clients to remove X-Forwarded headers (except X-Forwarded-For) due to a vulnerability in how it processes hop-by-hop headers. Fabio adds HTTP headers like X-Forwarded-Host and X-Forwarded-Port when routing requests to backend applications. Since the receiving application should trust these headers, allowing HTTP clients to remove or modify them creates potential security vulnerabilities. Some of these custom headers can be removed and, in certain cases, manipulated. The attack relies on the behavior that headers can be defined as hop-by-hop via the HTTP Connection header. This issue has been patched in version 1.6.6.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-345, CWE-348, CWE-345
References: https://github.com/fabiolb/fabio/commit/fdaf1e966162e9dd3b347ffdd0647b39dc71a1a3; https://github.com/fabiolb/fabio/releases/tag/v1.6.6; https://github.com/fabiolb/fabio/security/advisories/GHSA-q7p4-7xjv-j3wf
CVE: CVE-2025-48875
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.181, the system's incorrect validation of last_name and first_name during profile data updates allows for the injection of arbitrary JavaScript code, which will be executed in a flesh-message when the data is deleted, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This issue has been patched in version 1.8.181.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/freescout-help-desk/freescout/commit/508dda16853a39fcb6c2b46ea7b7f442d5f7eda7; https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-mjjx-rv96-w9hq
CVE: CVE-2025-48880
Published: 2025-05-30
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.181, when an administrative account is a deleting a user, there is the the possibility of a race condition occurring. This issue has been patched in version 1.8.181.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-362
References: https://github.com/freescout-help-desk/freescout/commit/3f5bb2841f7de3303bc3cb00930a28440754d122; https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-9vf2-mg4j-4v7f
CVE: CVE-2025-48936
Published: 2025-05-30
Description: Zitadel is open-source identity infrastructure software. Prior to versions 2.70.12, 2.71.10, and 3.2.2, a potential vulnerability exists in the password reset mechanism. ZITADEL utilizes the Forwarded or X-Forwarded-Host header from incoming requests to construct the URL for the password reset confirmation link. This link, containing a secret code, is then emailed to the user. If an attacker can manipulate these headers (e.g., via host header injection), they could cause ZITADEL to generate a password reset link pointing to a malicious domain controlled by the attacker. If the user clicks this manipulated link in the email, the secret reset code embedded in the URL can be captured by the attacker. This captured code could then be used to reset the user's password and gain unauthorized access to their account. This specific attack vector is mitigated for accounts that have Multi-Factor Authentication (MFA) or Passwordless authentication enabled. This issue has been patched in versions 2.70.12, 2.71.10, and 3.2.2.
CVSS Score: 8.1 (HIGH)
CWE: CWE-601, CWE-77
References: https://github.com/zitadel/zitadel/commit/c097887bc5f680e12c998580fb56d98a15758f53; https://github.com/zitadel/zitadel/security/advisories/GHSA-93m4-mfpg-c3xf
CVE: CVE-2025-4943
Published: 2025-05-30
Description: The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-lakit-element-link’ parameter in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/lastudio-element-kit/trunk/assets/js/addons/wrapper-links.min.js; https://plugins.trac.wordpress.org/changeset/3302784/; https://wordpress.org/plugins/lastudio-element-kit/#developers
CVE: CVE-2025-4431
Published: 2025-05-30
Description: The Featured Image Plus – Quick & Bulk Edit with Unsplash plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fip_save_attach_featured function in all versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update featured image of any post.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284, CWE-862
References: https://plugins.trac.wordpress.org/browser/featured-image-plus/trunk/inc/admin/block-editor/block-editor-actions.php#L204; https://plugins.trac.wordpress.org/changeset/3300380/; https://plugins.trac.wordpress.org/changeset/3303087/
CVE: CVE-2025-5236
Published: 2025-05-30
Description: The NinjaTeam Chat for Telegram plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘username’ parameter in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/ninjateam-telegram/trunk/blocks/src/init.php#L130; https://plugins.trac.wordpress.org/changeset/3302588/; https://wordpress.org/plugins/ninjateam-telegram/#developers
CVE: CVE-2025-48334
Published: 2025-05-30
Description: Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro woo-slider-pro-drag-drop-slider-builder-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Slider Pro: from n/a through <= 1.12.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/woo-slider-pro-drag-drop-slider-builder-for-woocommerce/vulnerability/wordpress-woo-slider-pro-1-12-arbitrary-content-deletion-vulnerability?_s_id=cve
CVE: CVE-2025-48912
Published: 2025-05-30
Description: An authenticated malicious actor using specially crafted requests could bypass row level security configuration by injecting SQL into 'sqlExpression' fields. This allowed the execution of sub-queries to evade parsing defenses ultimately granting unauthorized access to data.

This issue affects Apache Superset: before 4.1.2.

Users are recommended to upgrade to version 4.1.2, which fixes the issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://lists.apache.org/thread/ms2t2oq218hb7l628trsogo4fj7h1135; http://www.openwall.com/lists/oss-security/2025/05/30/3
CVE: CVE-2025-4633
Published: 2025-05-30
Description: Default credentials were present in the web portal for Airpointer 2.4.107-2, allowing an unauthenticated malicious actor to log in via the web portal
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-798
References: https://jct-aq.com/products/airpointer2d/
CVE: CVE-2025-4634
Published: 2025-05-30
Description: The web portal on airpointer 2.4.107-2 was vulnerable local file inclusion. A malicious user with administrative privileges in the web portal would be able to manipulate requests to view files on the filesystem
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-552
References: https://jct-aq.com/products/airpointer2d/
CVE: CVE-2025-4635
Published: 2025-05-30
Description: A malicious user with administrative privileges in the web portal would be able to manipulate the Diagnostics module to obtain remote code execution on the local device as a low privileged user.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-20
References: https://jct-aq.com/products/airpointer2d/
CVE: CVE-2025-4636
Published: 2025-05-30
Description: Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains control of the this user would be able to privilege escalate to the root user
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://jct-aq.com/products/airpointer2d/