deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-20002
Published: 2021-01-01
Description: The REST/JSON project 7.x-1.x for Drupal allows comment access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://www.drupal.org/node/2744889; https://www.drupal.org/node/2744889
CVE: CVE-2016-20003
Published: 2021-01-01
Description: The REST/JSON project 7.x-1.x for Drupal allows user enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
CVSS Score: 7.5 (HIGH)
References: https://www.drupal.org/node/2744889; https://www.drupal.org/node/2744889
CVE: CVE-2016-20004
Published: 2021-01-01
Description: The REST/JSON project 7.x-1.x for Drupal allows field access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://www.drupal.org/node/2744889; https://www.drupal.org/node/2744889
CVE: CVE-2016-20005
Published: 2021-01-01
Description: The REST/JSON project 7.x-1.x for Drupal allows user registration bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://www.drupal.org/node/2744889; https://www.drupal.org/node/2744889
CVE: CVE-2017-20001
Published: 2021-01-01
Description: The AES encryption project 7.x and 8.x for Drupal does not sufficiently prevent attackers from decrypting data, aka SA-CONTRIB-2017-027. NOTE: This project is not covered by Drupal's security advisory policy.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: https://www.drupal.org/node/2857028; https://www.drupal.org/node/2857028
CVE: CVE-2018-25002
Published: 2021-01-01
Description: uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024. NOTE: This project is not covered by Drupal's security advisory policy.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.drupal.org/project/kcfinder/issues/1768718; https://www.drupal.org/project/kcfinder/issues/1768720; https://www.drupal.org/sa-contrib-2018-024
CVE: CVE-2019-25012
Published: 2021-01-01
Description: The Webform Report project 7.x-1.x-dev for Drupal allows remote attackers to view submissions by visiting the /rss.xml page. NOTE: This project is not covered by Drupal's security advisory policy.
CVSS Score: 7.5 (HIGH)
CWE: CWE-425
References: https://www.drupal.org/project/webform_report/issues/3101410; https://www.drupal.org/project/webform_report/issues/3101410
CVE: CVE-2020-35932
Published: 2021-01-01
Description: Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with minimal privileges (such as subscribers) to use the tpnc_render AJAX action to inject arbitrary PHP objects via the options[inline_edits] parameter. NOTE: exploitability depends on PHP objects that might be present with certain other plugins or themes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://www.wordfence.com/blog/2020/08/newsletter-plugin-vulnerabilities-affect-over-300000-sites/; https://www.wordfence.com/blog/2020/08/newsletter-plugin-vulnerabilities-affect-over-300000-sites/
CVE: CVE-2020-35933
Published: 2021-01-01
Description: A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress allows remote attackers to trick a victim into submitting a tnpc_render AJAX request containing either JavaScript in an options parameter, or a base64-encoded JSON string containing JavaScript in the encoded_options parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://www.wordfence.com/blog/2020/08/newsletter-plugin-vulnerabilities-affect-over-300000-sites/; https://www.wordfence.com/blog/2020/08/newsletter-plugin-vulnerabilities-affect-over-300000-sites/
CVE: CVE-2020-35934
Published: 2021-01-01
Description: The Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object (including all metadata) upon login via the REST API (aam/v1/authenticate or aam/v2/authenticate). This is a security problem if this object stores information that the user is not supposed to have (e.g., custom metadata added by a different plugin).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://www.wordfence.com/blog/2020/08/high-severity-vulnerability-patched-in-advanced-access-manager/; https://www.wordfence.com/blog/2020/08/high-severity-vulnerability-patched-in-advanced-access-manager/
CVE: CVE-2020-35935
Published: 2021-01-01
Description: The Advanced Access Manager plugin before 6.6.2 for WordPress allows privilege escalation on profile updates via the aam_user_roles POST parameter if Multiple Role support is enabled. (The mechanism for deciding whether a user was entitled to add a role did not work in various custom-role scenarios.)
CVSS Score: 7.5 (HIGH)
References: https://www.wordfence.com/blog/2020/08/high-severity-vulnerability-patched-in-advanced-access-manager/; https://www.wordfence.com/blog/2020/08/high-severity-vulnerability-patched-in-advanced-access-manager/
CVE: CVE-2020-35936
Published: 2021-01-01
Description: Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafted payload in the source parameter via AJAX. The action must be set to post_grid_import_xml_layouts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79
References: https://www.wordfence.com/blog/2020/10/high-severity-vulnerabilities-in-post-grid-and-team-showcase-plugins/; https://www.wordfence.com/blog/2020/10/high-severity-vulnerabilities-in-post-grid-and-team-showcase-plugins/
CVE: CVE-2020-35937
Published: 2021-01-01
Description: Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafted payload in the source parameter via AJAX. The action must be set to team_import_xml_layouts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79
References: https://www.wordfence.com/blog/2020/10/high-severity-vulnerabilities-in-post-grid-and-team-showcase-plugins/; https://www.wordfence.com/blog/2020/10/high-severity-vulnerabilities-in-post-grid-and-team-showcase-plugins/
CVE: CVE-2020-35938
Published: 2021-01-01
Description: PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data supplied in a remotely hosted crafted payload in the source parameter via AJAX. The action must be set to post_grid_import_xml_layouts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://www.wordfence.com/blog/2020/10/high-severity-vulnerabilities-in-post-grid-and-team-showcase-plugins/; https://www.wordfence.com/blog/2020/10/high-severity-vulnerabilities-in-post-grid-and-team-showcase-plugins/
CVE: CVE-2020-35939
Published: 2021-01-01
Description: PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data supplied in a remotely hosted crafted payload in the source parameter via AJAX. The action must be set to team_import_xml_layouts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://www.wordfence.com/blog/2020/10/high-severity-vulnerabilities-in-post-grid-and-team-showcase-plugins/; https://www.wordfence.com/blog/2020/10/high-severity-vulnerabilities-in-post-grid-and-team-showcase-plugins/
CVE: CVE-2020-35944
Published: 2021-01-01
Description: An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. The pagelayer_settings_page function is vulnerable to CSRF, which can lead to XSS.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-352
References: https://wpscan.com/vulnerability/10240; https://www.wordfence.com/blog/2020/05/high-severity-vulnerabilities-in-pagelayer-plugin-affect-over-200000-wordpress-sites/; https://wpscan.com/vulnerability/10240
CVE: CVE-2020-35945
Published: 2021-01-01
Description: An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress. Authenticated attackers, with contributor-level or above capabilities, can upload arbitrary files, including .php files. This occurs because the check for file extensions is on the client side.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434
References: https://wpscan.com/vulnerability/10342; https://www.wordfence.com/blog/2020/08/critical-vulnerability-exposes-over-700000-sites-using-divi-extra-and-divi-builder/; https://wpscan.com/vulnerability/10342
CVE: CVE-2020-35946
Published: 2021-01-01
Description: An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/10320; https://www.wordfence.com/blog/2020/07/2-million-users-affected-by-vulnerability-in-all-in-one-seo-pack/; https://wpscan.com/vulnerability/10320
CVE: CVE-2020-35947
Published: 2021-01-01
Description: An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. Nearly all of the AJAX action endpoints lacked permission checks, allowing these actions to be executed by anyone authenticated on the site. This happened because nonces were used as a means of authorization, but a nonce was present in a publicly viewable page. The greatest impact was the pagelayer_save_content function that allowed pages to be modified and allowed XSS to occur.
CVSS Score: 7.4 (HIGH)
CWE: CWE-79
References: https://wpscan.com/vulnerability/10239; https://www.wordfence.com/blog/2020/05/high-severity-vulnerabilities-in-pagelayer-plugin-affect-over-200000-wordpress-sites/; https://wpscan.com/vulnerability/10239
CVE: CVE-2020-35948
Published: 2021-01-01
Description: An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xcloner_restore.php write_file_action could overwrite wp-config.php, for example. Alternatively, an attacker could create an exploit chain to obtain a database dump.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-863
References: http://packetstormsecurity.com/files/163336/WordPress-XCloner-4.2.12-Remote-Code-Execution.html; https://github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2020-35948; https://wpscan.com/vulnerability/10412
CVE: CVE-2020-35949
Published: 2021-01-01
Description: An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made it possible for unauthenticated attackers to upload arbitrary files and achieve remote code execution. If a quiz question could be answered by uploading a file, only the Content-Type header was checked during the upload, and thus the attacker could use text/plain for a .php file.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434
References: https://wpscan.com/vulnerability/10349; https://www.wordfence.com/blog/2020/08/critical-vulnerabilities-patched-in-quiz-and-survey-master-plugin/; https://wpscan.com/vulnerability/10349
CVE: CVE-2020-35950
Published: 2021-01-01
Description: An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF (via almost any endpoint).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-352
References: https://wpscan.com/vulnerability/10413; https://www.wordfence.com/blog/2020/09/critical-vulnerabilities-patched-in-xcloner-backup-and-restore-plugin/; https://wpscan.com/vulnerability/10413
CVE: CVE-2020-35951
Published: 2021-01-01
Description: An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offline and allow an attacker to reinstall with a WordPress instance under their control. This occurred via qsm_remove_file_fd_question, which allowed unauthenticated deletions (even though it was only intended for a person to delete their own quiz-answer files).
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-306
References: https://wpscan.com/vulnerability/10348; https://www.wordfence.com/blog/2020/08/critical-vulnerabilities-patched-in-quiz-and-survey-master-plugin/; https://wpscan.com/vulnerability/10348
CVE: CVE-2020-35391
Published: 2021-01-01
Description: Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must be placed after the RouterCfm.cfg filename, or that the HTTP request headers must be unusual, but it is not known why these are relevant to the device's HTTP response behavior.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-425
References: http://packetstormsecurity.com/files/171773/Tenda-N300-F3-12.01.01.48-Header-Processing.html; https://medium.com/%40signalhilltech/tenda-n300-authentication-bypass-via-malformed-http-request-header-5b8744ca685e; http://packetstormsecurity.com/files/171773/Tenda-N300-F3-12.01.01.48-Header-Processing.html
CVE: CVE-2020-35717
Published: 2021-01-01
Description: zonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because nodeIntegration in webPreferences is true).
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://github.com/hmartos/cve-2020-35717; https://github.com/zonetti/zonote; https://medium.com/bugbountywriteup/remote-code-execution-through-cross-site-scripting-in-electron-f3b891ad637
CVE: CVE-2021-3002
Published: 2021-01-01
Description: Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.cinquino.eu/SeoPanelReflect.htm; https://github.com/seopanel/Seo-Panel/issues/202; http://www.cinquino.eu/SeoPanelReflect.htm
CVE: CVE-2020-28851
Published: 2021-01-02
Description: In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)
CVSS Score: 7.5 (HIGH)
CWE: CWE-129
References: https://github.com/golang/go/issues/42535; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://github.com/golang/go/issues/42535
CVE: CVE-2020-28852
Published: 2021-01-02
Description: In x/text in Go before v0.3.5, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)
CVSS Score: 7.5 (HIGH)
CWE: CWE-129
References: https://github.com/golang/go/issues/42536; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://github.com/golang/go/issues/42536
CVE: CVE-2020-35952
Published: 2021-01-03
Description: login.php in PHPFusion (aka PHP-Fusion) Andromeda 9.x before 2020-12-30 generates error messages that distinguish between incorrect username and incorrect password (i.e., not a single "Incorrect username or password" message in both cases), which might allow enumeration.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PHPFusion/PHPFusion/issues/2346; https://github.com/PHPFusion/PHPFusion/issues/2346
CVE: CVE-2021-3004
Published: 2021-01-03
Description: The _deposit function in the smart contract implementation for Stable Yield Credit (yCREDIT), an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should.
CVSS Score: 7.5 (HIGH)
CWE: CWE-682
References: https://blocksecteam.medium.com/deposit-less-get-more-ycredit-attack-details-f589f71674c3; https://etherscan.io/address/0xe0839f9b9688a77924208ad509e29952dc660261; https://blocksecteam.medium.com/deposit-less-get-more-ycredit-attack-details-f589f71674c3
CVE: CVE-2021-3005
Published: 2021-01-03
Description: MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information (e.g., a CPF number) via a modified titulo (aka invoice number) value to the central/recibo.php URI.
CVSS Score: 4.3 (MEDIUM)
References: http://mk-auth.com.br/; https://gist.github.com/alacerda/3b925cb333eb839ae808d6f01642aeb3; http://mk-auth.com.br/
CVE: CVE-2020-28841
Published: 2021-01-03
Description: MyDrivers64.sys in DriverGenius 9.61.3708.3054 allows attackers to cause a system crash via the ioctl command 0x9c402000 to \\.\MyDrivers0_0_1.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/datadancer/WinSysVuln/blob/main/DriverGenius-MyDrivers64.md; https://www.cnvd.org.cn/flaw/show/CNVD-2020-53152; https://github.com/datadancer/WinSysVuln/blob/main/DriverGenius-MyDrivers64.md
CVE: CVE-2021-3006
Published: 2021-01-03
Description: The breed function in the smart contract implementation for Farm in Seal Finance (Seal), an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021.
CVSS Score: 7.5 (HIGH)
References: https://blocksecteam.medium.com/security-incident-on-seal-finance-fa79c27a1c3b; https://etherscan.io/address/0x33c2da7fd5b125e629b3950f3c38d7f721d7b30d; https://blocksecteam.medium.com/security-incident-on-seal-finance-fa79c27a1c3b
CVE: CVE-2020-35962
Published: 2021-01-03
Description: The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring (LRC), an Ethereum token, lacks access control for fee swapping and thus allows price manipulation.
CVSS Score: 7.5 (HIGH)
References: https://blocksecteam.medium.com/loopring-lrc-protocol-incident-66e9470bd51f; https://etherscan.io/address/0x4b89f8996892d137c3de1312d1dd4e4f4ffca171; https://blocksecteam.medium.com/loopring-lrc-protocol-incident-66e9470bd51f
CVE: CVE-2020-35963
Published: 2021-01-03
Description: flb_gzip_compress in flb_gzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it does not use the correct calculation of the maximum gzip data-size expansion.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27261; https://fluentbit.io/announcements/v1.6.4/; https://github.com/fluent/fluent-bit/commit/cadff53c093210404aed01c4cf586adb8caa07af
CVE: CVE-2020-35964
Published: 2021-01-03
Description: track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26622; https://github.com/FFmpeg/FFmpeg/commit/27a99e2c7d450fef15594671eef4465c8a166bd7; https://security.gentoo.org/glsa/202105-24
CVE: CVE-2020-35965
Published: 2021-01-04
Description: decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26532; https://github.com/FFmpeg/FFmpeg/commit/3e5959b3457f7f1856d997261e6ac672bba49e8b; https://github.com/FFmpeg/FFmpeg/commit/b0a8b40294ea212c1938348ff112ef1b9bf16bb3
CVE: CVE-2021-21494
Published: 2021-01-04
Description: MK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_ajax.php tipo parameter. An attacker can leverage this to read the centralmka2 (session token) cookie, which is not set to HTTPOnly.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-732
References: http://mk-auth.com.br/; https://gist.github.com/alacerda/380b8923e36a29a02ba1457c1eb3ec2f; http://mk-auth.com.br/
CVE: CVE-2021-21495
Published: 2021-01-04
Description: MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://mk-auth.com.br/; https://gist.github.com/alacerda/98853283be6009e75b7d94968d50b88e; http://mk-auth.com.br/
CVE: CVE-2021-3007
Published: 2021-01-04
Description: Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the __destruct method of the Zend\Http\Response\Stream class in Stream.php. NOTE: Zend Framework is no longer supported by the maintainer. NOTE: the laminas-http vendor considers this a "vulnerability in the PHP language itself" but has added certain type checking as a way to prevent exploitation in (unrecommended) use cases where attacker-supplied data can be deserialized
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/Ling-Yizhou/zendframework3-/blob/main/zend%20framework3%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%20rce.md; https://github.com/laminas/laminas-http/commits/2.15.x/src/Response/Stream.php; https://github.com/laminas/laminas-http/pull/48
CVE: CVE-2019-16956
Published: 2021-01-04
Description: SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://support.solarwinds.com/SuccessCenter/s/; https://www.esecforte.com/cross-site-scripting-vulnerability-india-responsible-vulnerability-disclosure/; https://www.solarwinds.com/free-tools/free-help-desk-software
CVE: CVE-2019-16960
Published: 2021-01-04
Description: SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://support.solarwinds.com/SuccessCenter/s/; https://www.esecforte.com/responsible-vulnerability-disclosure-cve-2019-16960-cross-site-scripting-vulnerability-in-solarwinds-web-help-desk/; https://www.solarwinds.com/free-tools/free-help-desk-software
CVE: CVE-2020-28464
Published: 2021-01-04
Description: This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/korzio/djv/blob/master/lib/utils/properties.js%23L55; https://github.com/korzio/djv/pull/98/files; https://snyk.io/vuln/SNYK-JS-DJV-1014545
CVE: CVE-2020-7771
Published: 2021-01-04
Description: The package asciitable.js before 1.0.3 are vulnerable to Prototype Pollution via the main function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321
References: https://github.com/victornpb/asciitable.js/pull/1; https://snyk.io/vuln/SNYK-JS-ASCIITABLEJS-1039799; https://github.com/victornpb/asciitable.js/pull/1
CVE: CVE-2020-4909
Published: 2021-01-04
Description: IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191273.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191273; https://www.ibm.com/support/pages/node/6393554; https://exchange.xforce.ibmcloud.com/vulnerabilities/191273
CVE: CVE-2020-4910
Published: 2021-01-04
Description: IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191274.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191274; https://www.ibm.com/support/pages/node/6393554; https://exchange.xforce.ibmcloud.com/vulnerabilities/191274
CVE: CVE-2020-4912
Published: 2021-01-04
Description: IBM Cloud Pak System 2.3 Self Service Console could allow a privilege escalation by capturing the user request URL when logged in as a privileged user. IBM X-Force ID: 191287.
CVSS Score: 7.2 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191287; https://www.ibm.com/support/pages/node/6393554; https://exchange.xforce.ibmcloud.com/vulnerabilities/191287