deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-35517
Published: 2021-01-28
Description: A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices.
CVSS Score: 8.2 (HIGH)
CWE: CWE-269, CWE-269
References: https://bugzilla.redhat.com/show_bug.cgi?id=1915823; https://github.com/qemu/qemu/commit/ebf101955ce8f8d72fba103b5151115a4335de2c; https://lists.gnu.org/archive/html/qemu-devel/2021-01/msg05461.html
CVE: CVE-2020-35754
Published: 2021-01-28
Description: OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Language tab.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/161189/Quick.CMS-6.7-Remote-Code-Execution.html; https://opensolution.org/cms-system-quick-cms.html; https://opensolution.org/security-fix-for-cart-and-cms%21-en-1136.html
CVE: CVE-2020-36115
Published: 2021-01-28
Description: Stored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49484; https://www.exploit-db.com/exploits/49484
CVE: CVE-2021-20185
Published: 2021-01-28
Description: It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose a character limit when sending messages, which could result in client-side (browser) denial of service for users receiving very large messages.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://moodle.org/mod/forum/discuss.php?d=417168; https://moodle.org/mod/forum/discuss.php?d=417168
CVE: CVE-2021-3160
Published: 2021-01-28
Description: Deserialization of untrusted data in the login page of ASSUWEB 359.3 build 1 subcomponent of ACA ASSUREX RENTES product allows a remote attacker to inject unsecure serialized Java object using a specially crafted HTTP request, resulting in an unauthenticated remote code execution on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://www.aca.fr/solution/assurex-solution-gestion-des-contrats-assurance/; https://www.digital.security/fr/sites/default/files/advisories/cert-ds_advisory_cve-2021-3160.txt; https://www.aca.fr/solution/assurex-solution-gestion-des-contrats-assurance/
CVE: CVE-2021-3337
Published: 2021-01-28
Description: The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: http://packetstormsecurity.com/files/161185/MyBB-Hide-Thread-Content-1.0-Information-Disclosure.html; https://github.com/snlbaral/Hide-Thread-Content/issues/1; http://packetstormsecurity.com/files/161185/MyBB-Hide-Thread-Content-1.0-Information-Disclosure.html
CVE: CVE-2020-8585
Published: 2021-01-28
Description: OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link (plink).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]
CVE: CVE-2021-3341
Published: 2021-01-29
Description: A path traversal vulnerability in the DxWebEngine component of DH2i DxEnterprise and DxOdyssey for Windows, version 19.5 through 20.x before 20.0.219.0, allows an attacker to read any file on the host file system via an HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://clients.dh2i.com/Support/Article.aspx?ID=2963454; https://clients.dh2i.com/Support/Article.aspx?ID=2963454
CVE: CVE-2021-26303
Published: 2021-01-29
Description: PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/161114/Daily-Expense-Tracker-System-1.0-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/161114/Daily-Expense-Tracker-System-1.0-Cross-Site-Scripting.html
CVE: CVE-2021-26304
Published: 2021-01-29
Description: PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/161114/Daily-Expense-Tracker-System-1.0-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/161114/Daily-Expense-Tracker-System-1.0-Cross-Site-Scripting.html
CVE: CVE-2021-26305
Published: 2021-01-29
Description: An issue was discovered in Deserializer::read_vec in the cdr crate before 0.2.4 for Rust. A user-provided Read implementation can gain access to the old contents of newly allocated heap memory, violating soundness.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-908
References: https://rustsec.org/advisories/RUSTSEC-2021-0012.html; https://rustsec.org/advisories/RUSTSEC-2021-0012.html
CVE: CVE-2021-26306
Published: 2021-01-29
Description: An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It has unsound transmute calls within as_string() methods.
CVSS Score: 7.5 (HIGH)
References: https://rustsec.org/advisories/RUSTSEC-2021-0013.html; https://rustsec.org/advisories/RUSTSEC-2021-0013.html
CVE: CVE-2021-26307
Published: 2021-01-29
Description: An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It allows __cpuid_count() calls even if the processor does not support the CPUID instruction, which is unsound and causes a deterministic crash.
CVSS Score: 5.5 (MEDIUM)
References: https://rustsec.org/advisories/RUSTSEC-2021-0013.html; https://rustsec.org/advisories/RUSTSEC-2021-0013.html
CVE: CVE-2021-26308
Published: 2021-01-29
Description: An issue was discovered in the marc crate before 2.0.0 for Rust. A user-provided Read implementation can gain access to the old contents of newly allocated memory, violating soundness.
CVSS Score: 7.5 (HIGH)
References: https://rustsec.org/advisories/RUSTSEC-2021-0014.html; https://rustsec.org/advisories/RUSTSEC-2021-0014.html
CVE: CVE-2021-3336
Published: 2021-01-29
Description: DoTls13CertificateVerify in tls13.c in wolfSSL before 4.7.0 does not cease processing for certain anomalous peer behavior (sending an ED22519, ED448, ECC, or RSA signature without the corresponding certificate). The client side is affected because man-in-the-middle attackers can impersonate TLS 1.3 servers.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295
References: https://github.com/wolfSSL/wolfssl/pull/3676; https://www.wolfssl.com/docs/security-vulnerabilities; https://github.com/wolfSSL/wolfssl/pull/3676
CVE: CVE-2019-25014
Published: 2021-01-29
Description: A NULL pointer dereference was found in pkg/proxy/envoy/v2/debug.go getResourceVersion in Istio pilot before 1.5.0-alpha.0. If a particular HTTP GET request is made to the pilot API endpoint, it is possible to cause the Go runtime to panic (resulting in a denial of service to the istio-pilot application).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=1919066; https://github.com/istio/istio/compare/1.4.2...1.5.0-alpha.0; https://bugzilla.redhat.com/show_bug.cgi?id=1919066
CVE: CVE-2021-3298
Published: 2021-01-29
Description: Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://collabtive.o-dyn.de/forum/viewforum.php?f=6; https://www.exploit-db.com/exploits/49468; https://collabtive.o-dyn.de/forum/viewforum.php?f=6
CVE: CVE-2020-28401
Published: 2021-01-29
Description: An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about jobs he should not have access to.
CVSS Score: 6.5 (MEDIUM)
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-28401; https://excellium-services.com/cert-xlm-advisory/CVE-2020-28401; https://www.starpracticemanagement.com/
CVE: CVE-2020-28402
Published: 2021-01-29
Description: An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Launcher Configuration Panel.
CVSS Score: 5.4 (MEDIUM)
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-28402; https://excellium-services.com/cert-xlm-advisory/CVE-2020-28402; https://www.starpracticemanagement.com/
CVE: CVE-2020-28403
Published: 2021-01-29
Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an attacker to change the privileges of any user of the application. This can be used to grant himself administrative role or remove the administrative account of the application.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-28403; https://excellium-services.com/cert-xlm-advisory/CVE-2020-28403; https://www.starpracticemanagement.com/
CVE: CVE-2020-28404
Published: 2021-01-29
Description: An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access the Billing page without the appropriate privileges.
CVSS Score: 6.5 (MEDIUM)
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-28404; https://excellium-services.com/cert-xlm-advisory/CVE-2020-28404; https://www.starpracticemanagement.com/
CVE: CVE-2020-28405
Published: 2021-01-29
Description: An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to change the privileges of any user of the application. This can be used to grant himself the administrative role or remove all administrative accounts of the application.
CVSS Score: 8.8 (HIGH)
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-28405; https://excellium-services.com/cert-xlm-advisory/CVE-2020-28405; https://www.starpracticemanagement.com/
CVE: CVE-2020-28406
Published: 2021-01-29
Description: An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access details about jobs he should not have access to via the Audit Trail Feature.
CVSS Score: 6.5 (MEDIUM)
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-28406; https://excellium-services.com/cert-xlm-advisory/CVE-2020-28406; https://www.starpracticemanagement.com/
CVE: CVE-2020-29004
Published: 2021-01-29
Description: The API in the Push extension for MediaWiki through 1.35 did not require an edit token in ApiPushBase.php and therefore facilitated a CSRF attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Push/+/625988; https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Push/+/625988/10/src/api/ApiPushBase.php; https://phabricator.wikimedia.org/T262724
CVE: CVE-2020-29005
Published: 2021-01-29
Description: The API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials, allowing for potential information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-522
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Push/+/625988; https://phabricator.wikimedia.org/T262724; https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Push/+/625988
CVE: CVE-2020-29535
Published: 2021-01-29
Description: Archer before 6.8 P4 (6.8.0.4) contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When application users access the corrupted data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-79
References: https://community.rsa.com/docs/DOC-115223; https://www.rsa.com/en-us/company/vulnerability-response-policy; https://community.rsa.com/docs/DOC-115223
CVE: CVE-2020-29536
Published: 2021-01-29
Description: Archer before 6.8 P2 (6.8.0.2) is affected by a path exposure vulnerability. A remote authenticated malicious attacker with access to service files may obtain sensitive information to use it in further attacks.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-327
References: https://community.rsa.com/docs/DOC-115223; https://www.rsa.com/en-us/company/vulnerability-response-policy; https://community.rsa.com/docs/DOC-115223
CVE: CVE-2020-29537
Published: 2021-01-29
Description: Archer before 6.8 P2 (6.8.0.2) is affected by an open redirect vulnerability. A remote privileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. The attacker could then steal the victims' credentials and silently authenticate them to the Archer application without the victims realizing an attack occurred.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-601
References: https://community.rsa.com/docs/DOC-115223; https://www.rsa.com/en-us/company/vulnerability-response-policy; https://community.rsa.com/docs/DOC-115223
CVE: CVE-2020-29538
Published: 2021-01-29
Description: Archer before 6.9 P1 (6.9.0.1) contains an improper access control vulnerability in an API. A remote authenticated malicious administrative user can potentially exploit this vulnerability to gather information about the system, and may use this information in subsequent attacks.
CVSS Score: 4.9 (MEDIUM)
References: https://community.rsa.com/docs/DOC-115223; https://www.rsa.com/en-us/company/vulnerability-response-policy; https://community.rsa.com/docs/DOC-115223
CVE: CVE-2020-29603
Published: 2021-01-29
Description: In manage_proj_edit_page.php in MantisBT before 2.24.4, any unprivileged logged-in user can retrieve Private Projects' names via the manage_proj_edit_page.php project_id parameter, without having access to them.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-922
References: https://mantisbt.org/bugs/view.php?id=27357; https://mantisbt.org/bugs/view.php?id=27726; https://mantisbt.org/bugs/view.php?id=27357
CVE: CVE-2020-29604
Published: 2021-01-29
Description: An issue was discovered in MantisBT before 2.24.4. A missing access check in bug_actiongroup.php allows an attacker (with rights to create new issues) to use the COPY group action to create a clone, including all bugnotes and attachments, of any private issue (i.e., one having Private view status, or belonging to a private Project) via the bug_arr[] parameter. This provides full access to potentially confidential information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://mantisbt.org/bugs/view.php?id=27357; https://mantisbt.org/bugs/view.php?id=27728; https://mantisbt.org/bugs/view.php?id=27357
CVE: CVE-2020-29605
Published: 2021-01-29
Description: An issue was discovered in MantisBT before 2.24.4. Due to insufficient access-level checks, any logged-in user allowed to perform Group Actions can get access to the Summary fields of private Issues via bug_arr[]= in a crafted bug_actiongroup_page.php URL. (The target Issues can have Private view status, or belong to a private Project.)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://mantisbt.org/bugs/view.php?id=27357; https://mantisbt.org/bugs/view.php?id=27727; https://mantisbt.org/bugs/view.php?id=27357
CVE: CVE-2020-35145
Published: 2021-01-29
Description: Acronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a DLL hijacking vulnerability in multiple components, aka an Untrusted Search Path issue.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.acronis.com/en-us/products/true-image/; https://www.acronis.com/en-us/support/updates/changes.html?p=42246; https://www.acronis.com/en-us/products/true-image/
CVE: CVE-2020-35547
Published: 2021-01-29
Description: A library index page in NuPoint Messenger in Mitel MiCollab before 9.2 FP1 could allow an unauthenticated attacker to gain access (view and modify) to user data.
CVSS Score: 9.1 (CRITICAL)
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0016; https://www.mitel.com/support/security-advisories
CVE: CVE-2021-3176
Published: 2021-01-29
Description: The chat window of the Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.15 and 7.x before 7.1.2 could allow an attacker to gain access to user information by sending certain code, due to improper input validation of http links. A successful exploit could allow an attacker to view user information and application data.
CVSS Score: 8.0 (HIGH)
CWE: CWE-20
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0001; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-35652
Published: 2021-01-29
Description: An issue was discovered in res_pjsip_diversion.c in Sangoma Asterisk before 13.38.0, 14.x through 16.x before 16.15.0, 17.x before 17.9.0, and 18.x before 18.1.0. A crash can occur when a SIP message is received with a History-Info header that contains a tel-uri, or when a SIP 181 response is received that contains a tel-uri in the Diversion header.
CVSS Score: 6.5 (MEDIUM)
References: https://downloads.asterisk.org/pub/security/AST-2020-003.html; https://downloads.asterisk.org/pub/security/AST-2020-004.html; https://issues.asterisk.org/jira/browse/ASTERISK-29191
CVE: CVE-2021-25123
Published: 2021-01-29
Description: The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice addlicense_func function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us
CVE: CVE-2021-25909
Published: 2021-01-29
Description: ZIV Automation 4CCT-EA6-334126BF firmware version 3.23.80.27.36371, allows an unauthenticated, remote attacker to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending specific packets to the port 7919.
CVSS Score: 8.6 (HIGH)
CWE: CWE-400, CWE-400
References: https://www.incibe-cert.es/en/early-warning/ics-advisories/4cct-vulnerable-denial-service-attack; https://www.incibe-cert.es/en/early-warning/ics-advisories/4cct-vulnerable-denial-service-attack
CVE: CVE-2021-25910
Published: 2021-01-29
Description: Improper Authentication vulnerability in the cookie parameter of ZIV AUTOMATION 4CCT-EA6-334126BF allows a local attacker to perform modifications in several parameters of the affected device as an authenticated user.
CVSS Score: 8.0 (HIGH)
CWE: CWE-287, CWE-287
References: https://www.incibe-cert.es/en/early-warning/ics-advisories/4cct-vulnerable-improper-authentication; https://www.incibe-cert.es/en/early-warning/ics-advisories/4cct-vulnerable-improper-authentication
CVE: CVE-2021-20586
Published: 2021-01-29
Description: Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-*V*D" of RV-*FR***-D-* all versions, controller "CR800-*HD" of RH-*FRH***-D-* all versions, controller "CR800-*HRD" of RH-*FRHR***-D-* all versions, controller "CR800-*V*R with R16RTCPU" of RV-*FR***-R-* all versions, controller "CR800-*HR with R16RTCPU" of RH-*FRH***-R-* all versions, controller "CR800-*HRR with R16RTCPU" of RH-*FRHR***-R-* all versions, controller "CR800-*V*Q with Q172DSRCPU" of RV-*FR***-Q-* all versions, controller "CR800-*HQ with Q172DSRCPU" of RH-*FRH***-Q-* all versions, controller "CR800-*HRQ with Q172DSRCPU" of RH-*FRHR***-Q-* all versions) and a robot controller of MELFA CR Series(controller "CR800-CVD" of RV-8CRL-D-* all versions, controller "CR800-CHD" of RH-*CRH**-D-* all versions) as well as a cooperative robot ASSISTA(controller "CR800-05VD" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs.
CVSS Score: 7.5 (HIGH)
References: https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-019_en.pdf; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-019_en.pdf
CVE: CVE-2021-3345
Published: 2021-01-29
Description: _gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value. It is recommended to upgrade to 1.9.1 or later.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://bugs.gentoo.org/show_bug.cgi?id=767814; https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=512c0c75276949f13b6373b5c04f7065af750b08; https://gnupg.org
CVE: CVE-2021-23328
Published: 2021-01-29
Description: This affects all versions of package iniparserjs. This vulnerability relates when ini_parser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program.
CVSS Score: 5.6 (MEDIUM)
References: https://snyk.io/vuln/SNYK-JS-INIPARSERJS-1065989; https://www.npmjs.com/package/iniparserjs; https://snyk.io/vuln/SNYK-JS-INIPARSERJS-1065989
CVE: CVE-2021-3346
Published: 2021-01-29
Description: Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template.
CVSS Score: 9.8 (CRITICAL)
References: https://gitlab.nic.cz/turris/foris/foris/-/blob/master/CHANGELOG.rst; https://gitlab.nic.cz/turris/foris/foris/-/issues/201; https://www.turris.com/
CVE: CVE-2021-3347
Published: 2021-01-29
Description: An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://www.openwall.com/lists/oss-security/2021/01/29/4; http://www.openwall.com/lists/oss-security/2021/01/29/5; http://www.openwall.com/lists/oss-security/2021/02/01/4
CVE: CVE-2020-24664
Published: 2021-01-29
Description: The dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'pho:title' attribute of 'dashboardXml' parameter. Remediated in >= 7.1.0.25, >= 8.2.0.6, and >= 8.3.0.0 GA.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]92-hirt-sec-2020-601-Multiple-Vulnerabilities-in-Pentaho; https://www.accenture.com; https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]92-hirt-sec-2020-601-Multiple-Vulnerabilities-in-Pentaho
CVE: CVE-2020-24665
Published: 2021-01-29
Description: The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains an XML Entity Expansion injection vulnerability, which allows an authenticated remote users to trigger a denial of service (DoS) condition. Specifically, the vulnerability lies in the 'dashboardXml' parameter. Remediated in >= 7.1.0.25, >= 8.2.0.6, >= 8.3.0.0 GA
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-776
References: http://www.hitachi.com/hirt/hitachi-sec/2020/601.html; https://www.accenture.com; http://www.hitachi.com/hirt/hitachi-sec/2020/601.html