deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-22523
Published: 2024-01-30
Description: Directory Traversal vulnerability in Qiyu iFair version 23.8_ad0 and before, allows remote attackers to obtain sensitive information via uploadimage component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.yuque.com/for82/vdzwqe/sc8ictw8poo8v5gl; https://www.yuque.com/for82/vdzwqe/sc8ictw8poo8v5gl
CVE: CVE-2024-1030
Published: 2024-01-30
Description: A vulnerability was found in Cogites eReserv 7.7.58. It has been classified as problematic. This affects an unknown part of the file /front/admin/tenancyDetail.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-252303.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.252303; https://vuldb.com/?id.252303; https://vuldb.com/?ctiid.252303
CVE: CVE-2024-1063
Published: 2024-01-30
Description: Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159.

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://www.tenable.com/security/research/tra-2024-03; https://www.tenable.com/security/research/tra-2024-03
CVE: CVE-2024-22894
Published: 2024-01-30
Description: An issue fixed in AIT-Deutschland Alpha Innotec Heatpumps V2.88.3 or later, V3.89.0 or later, V4.81.3 or later and Novelan Heatpumps V2.88.3 or later, V3.89.0 or later, V4.81.3 or later, allows remote attackers to execute arbitrary code via the password component in the shadow file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-326, CWE-326
References: https://github.com/Jaarden/AlphaInnotec-Password-Vulnerability/; https://github.com/Jaarden/CVE-2024-22894; https://github.com/Jaarden/AlphaInnotec-Password-Vulnerability/
CVE: CVE-2024-0674
Published: 2024-01-30
Description: Privilege escalation vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, which could allow a local user to acquire root permissions by modifying the updatescript.js, inserting special code inside the script and creating the done.txt file. This would cause the watchdog process to run as root and execute the payload stored in the updatescript.js.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-269, CWE-281
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-lamassu-bitcoin-atm-douro-machines; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-lamassu-bitcoin-atm-douro-machines
CVE: CVE-2024-0675
Published: 2024-01-30
Description: Vulnerability of improper checking for unusual or exceptional conditions

in Lamassu Bitcoin ATM Douro machines, in its 7.1 version,

 the exploitation of which could allow an attacker with physical access to the ATM to escape kiosk mode, access the underlying Xwindow interface and execute arbitrary commands as an unprivileged user.

CVSS Score: 6.3 (MEDIUM)
CWE: CWE-754
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-lamassu-bitcoin-atm-douro-machines; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-lamassu-bitcoin-atm-douro-machines
CVE: CVE-2024-0676
Published: 2024-01-30
Description: Weak password requirement vulnerability 

in Lamassu Bitcoin ATM Douro machines, in its 7.1 version

, which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from the machine and crack long 4-character passwords using a dictionary attack.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-521
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-lamassu-bitcoin-atm-douro-machines; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-lamassu-bitcoin-atm-douro-machines
CVE: CVE-2024-1031
Published: 2024-01-30
Description: A vulnerability was found in CodeAstro Expense Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file templates/5-Add-Expenses.php of the component Add Expenses Page. The manipulation of the argument item leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252304.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://docs.qq.com/doc/DYmhqV3piekZ5dlZi; https://vuldb.com/?ctiid.252304; https://vuldb.com/?id.252304
CVE: CVE-2024-1032
Published: 2024-01-30
Description: A vulnerability classified as critical was found in openBI up to 1.0.8. Affected by this vulnerability is the function testConnection of the file /application/index/controller/Databasesource.php of the component Test Connection Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252307.
CVSS Score: 7.3 (HIGH)
CWE: CWE-502
References: https://note.zhaoj.in/share/6ISYe2urjlkI; https://vuldb.com/?ctiid.252307; https://vuldb.com/?id.252307
CVE: CVE-2024-1033
Published: 2024-01-30
Description: A vulnerability, which was classified as problematic, has been found in openBI up to 1.0.8. Affected by this issue is the function agent of the file /application/index/controller/Datament.php. The manipulation of the argument api leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252308.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://note.zhaoj.in/share/nD654ot6zRQZ; https://vuldb.com/?ctiid.252308; https://vuldb.com/?id.252308
CVE: CVE-2024-0564
Published: 2024-01-30
Description: A flaw was found in the Linux kernel's memory deduplication mechanism. The max page sharing of Kernel Samepage Merging (KSM), added in Linux kernel version 4.4.0-96.119, can create a side channel. When the attacker and the victim share the same host and the default setting of KSM is "max page sharing=256", it is possible for the attacker to time the unmap to merge with the victim's page. The unmapping time depends on whether it merges with the victim's page and additional physical pages are created beyond the KSM's "max page share". Through these operations, the attacker can leak the victim's page.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://access.redhat.com/security/cve/CVE-2024-0564; https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1680513; https://bugzilla.redhat.com/show_bug.cgi?id=2258514
CVE: CVE-2024-1034
Published: 2024-01-30
Description: A vulnerability, which was classified as critical, was found in openBI up to 1.0.8. This affects the function uploadFile of the file /application/index/controller/File.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252309 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434, CWE-434
References: https://note.zhaoj.in/share/ABYkFE4wRPW5; https://vuldb.com/?ctiid.252309; https://vuldb.com/?id.252309
CVE: CVE-2024-24324
Published: 2024-01-30
Description: TOTOLINK A8000RU v7.1cu.643_B20200521 was discovered to contain a hardcoded password for root stored in /etc/shadow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A8000RU/TOTOlink%20A8000RU%20hard%20code.md; https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A8000RU/TOTOlink%20A8000RU%20hard%20code.md
CVE: CVE-2024-24325
Published: 2024-01-30
Description: TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setParentalRules function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/11/TOTOlink%20A3300R%20setParentalRules.md; https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/11/TOTOlink%20A3300R%20setParentalRules.md
CVE: CVE-2024-24326
Published: 2024-01-30
Description: TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpRules function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/8/TOTOlink%20A3300R%20setStaticDhcpRules.md; https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/8/TOTOlink%20A3300R%20setStaticDhcpRules.md
CVE: CVE-2024-24327
Published: 2024-01-30
Description: TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pppoePass parameter in the setIpv6Cfg function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/7/TOTOlink%20A3300R%20setIpv6Cfg.md; https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/7/TOTOlink%20A3300R%20setIpv6Cfg.md
CVE: CVE-2024-24328
Published: 2024-01-30
Description: TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/12/TOTOlink%20A3300R%20setMacFilterRules.md; https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/12/TOTOlink%20A3300R%20setMacFilterRules.md
CVE: CVE-2024-24329
Published: 2024-01-30
Description: TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setPortForwardRules function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/10/TOTOlink%20A3300R%20setPortForwardRules.md; https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/10/TOTOlink%20A3300R%20setPortForwardRules.md
CVE: CVE-2024-24330
Published: 2024-01-30
Description: TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the port or enable parameter in the setRemoteCfg function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/14/TOTOlink%20A3300R%20setRemoteCfg.md; https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/14/TOTOlink%20A3300R%20setRemoteCfg.md
CVE: CVE-2024-24331
Published: 2024-01-30
Description: TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setWiFiScheduleCfg function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/13/TOTOlink%20A3300R%20setWiFiScheduleCfg.md; https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/13/TOTOlink%20A3300R%20setWiFiScheduleCfg.md
CVE: CVE-2024-24332
Published: 2024-01-30
Description: TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilterRules function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/9/TOTOlink%20A3300R%20setUrlFilterRules.md; https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/9/TOTOlink%20A3300R%20setUrlFilterRules.md
CVE: CVE-2024-24333
Published: 2024-01-30
Description: TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the desc parameter in the setWiFiAclRules function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/15/TOTOlink%20A3300R%20setWiFiAclRules.md; https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/15/TOTOlink%20A3300R%20setWiFiAclRules.md
CVE: CVE-2023-37518
Published: 2024-01-30
Description: HCL BigFix ServiceNow is vulnerable to arbitrary code injection.  A malicious authorized attacker could inject arbitrary code and execute within the context of the running user.

CVSS Score: 6.4 (MEDIUM)
CWE: CWE-94, CWE-94
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0110202; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0110202
CVE: CVE-2024-1019
Published: 2024-01-30
Description: ModSecurity / libModSecurity 3.0.0 to 3.0.11 is affected by a WAF bypass for path-based payloads submitted via specially crafted request URLs. ModSecurity v3 decodes percent-encoded characters present in request URLs before it separates the URL path component from the optional query string component. This results in an impedance mismatch versus RFC compliant back-end applications. The vulnerability hides an attack payload in the path component of the URL from WAF rules inspecting it. A back-end may be vulnerable if it uses the path component of request URLs to construct queries. Integrators and users are advised to upgrade to 3.0.12. The ModSecurity v2 release line is not affected by this vulnerability.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20
References: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/34KDQNZE2RS3CWFG5654LNHKXXDPIW5I/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K6ZGABPJK2JPVH2JDFHZ5LQLWGONUH7V/; https://owasp.org/www-project-modsecurity/tab_cves#cve-2024-1019-2024-01-30
CVE: CVE-2024-1035
Published: 2024-01-30
Description: A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function uploadIcon of the file /application/index/controller/Icon.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-252310 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434
References: https://note.zhaoj.in/share/AIbnbytIW9Bq; https://vuldb.com/?ctiid.252310; https://vuldb.com/?id.252310
CVE: CVE-2024-21649
Published: 2024-01-30
Description: The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). Prior to 4.2.0, authenticated users could inject code into algorithm environment variables, resulting in remote code execution.  This vulnerability is patched in 4.2.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://github.com/vantage6/vantage6/commit/eac19db737145d3ca987adf037a454fae0790ddd; https://github.com/vantage6/vantage6/security/advisories/GHSA-w9h2-px87-74vx; https://github.com/vantage6/vantage6/commit/eac19db737145d3ca987adf037a454fae0790ddd
CVE: CVE-2024-21653
Published: 2024-01-30
Description: The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC).  Nodes and servers get a ssh config by default that permits root login with password authentication. In a proper deployment, the SSH service is not exposed so there is no risk, but not all deployments are ideal. The default should therefore be less permissive.  The vulnerability can be mitigated by removing the ssh part from the docker file and rebuilding the docker image.  Version 4.2.0 patches the vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://github.com/vantage6/vantage6/commit/3fcc6e6a8bd1142fd7a558d8fdd2b246e55c8841; https://github.com/vantage6/vantage6/security/advisories/GHSA-2wgc-48g2-cj5w; https://github.com/vantage6/vantage6/commit/3fcc6e6a8bd1142fd7a558d8fdd2b246e55c8841
CVE: CVE-2024-21671
Published: 2024-01-30
Description: The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC).  It is possible to find out usernames from the response time of login requests. This could aid attackers in credential attacks.  Version 4.2.0 patches this vulnerability.
CVSS Score: 3.7 (LOW)
CWE: CWE-208, CWE-203
References: https://github.com/vantage6/vantage6/commit/389f416c445da4f2438c72f34c3b1084485c4e30; https://github.com/vantage6/vantage6/security/advisories/GHSA-45gq-q4xh-cp53; https://github.com/vantage6/vantage6/commit/389f416c445da4f2438c72f34c3b1084485c4e30
CVE: CVE-2024-22193
Published: 2024-01-30
Description: The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). There are no checks on whether the input is encrypted if a task is created in an encrypted collaboration. Therefore, a user may accidentally create a task with sensitive input data that will then be stored unencrypted in a database.  Users should ensure they set the encryption setting correctly.  This vulnerability is patched in 4.2.0.
CVSS Score: 3.5 (LOW)
CWE: CWE-922
References: https://github.com/vantage6/vantage6/commit/[PII_REDACTED]b81abfcacfec7538dc4dc882e98074; https://github.com/vantage6/vantage6/security/advisories/GHSA-rjmv-52mp-gjrr; https://github.com/vantage6/vantage6/commit/[PII_REDACTED]b81abfcacfec7538dc4dc882e98074
CVE: CVE-2024-22200
Published: 2024-01-30
Description: vantage6-UI is the User Interface for vantage6. The docker image used to run the UI leaks the nginx version. To mitigate the vulnerability, users can run the UI as an angular application.  This vulnerability was patched in 4.2.0.

CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://github.com/vantage6/vantage6-UI/commit/92e0fb5102b544d5bcc23980d973573733e2e020; https://github.com/vantage6/vantage6-UI/security/advisories/GHSA-8wxq-346h-xmr8; https://github.com/vantage6/vantage6-UI/commit/92e0fb5102b544d5bcc23980d973573733e2e020
CVE: CVE-2023-46230
Published: 2024-01-30
Description: In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files.
CVSS Score: 8.2 (HIGH)
CWE: CWE-532, CWE-532
References: https://advisory.splunk.com/advisories/SVD-2024-0111; https://advisory.splunk.com/advisories/SVD-2024-0111
CVE: CVE-2023-46231
Published: 2024-01-30
Description: In Splunk Add-on Builder versions below 4.1.4, the application writes user session tokens to its internal log files when you visit the Splunk Add-on Builder or when you build or edit a custom app or add-on.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://advisory.splunk.com/advisories/SVD-2024-0110; https://advisory.splunk.com/advisories/SVD-2024-0110
CVE: CVE-2023-6258
Published: 2024-01-30
Description: A security vulnerability has been identified in the pkcs11-provider, which is associated with Public-Key Cryptography Standards (PKCS#11). If exploited successfully, this vulnerability could result in a Bleichenbacher-like security flaw, potentially enabling a side-channel attack on PKCS#1 1.5 decryption.
CVSS Score: 8.1 (HIGH)
CWE: CWE-1300, CWE-203
References: https://bugzilla.redhat.com/show_bug.cgi?id=2251062; https://github.com/latchset/pkcs11-provider/pull/308; https://bugzilla.redhat.com/show_bug.cgi?id=2251062
CVE: CVE-2024-23647
Published: 2024-01-30
Description: Authentik is an open-source Identity Provider. There is a bug in our implementation of PKCE that allows an attacker to circumvent the protection that PKCE offers. PKCE adds the code_challenge parameter to the authorization request and adds the code_verifier parameter to the token request. Prior to 2023.8.7 and 2023.10.7, a downgrade scenario is possible: if the attacker removes the code_challenge parameter from the authorization request, authentik will not do the PKCE check. Because of this bug, an attacker can circumvent the protection PKCE offers, such as CSRF attacks and code injection attacks.  Versions 2023.8.7 and 2023.10.7 fix the issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://github.com/goauthentik/authentik/commit/38e04ae12720e5d81b4f7ac77997eb8d1275d31a; https://github.com/goauthentik/authentik/security/advisories/GHSA-mrx3-gxjx-hjqj; https://github.com/goauthentik/authentik/commit/38e04ae12720e5d81b4f7ac77997eb8d1275d31a
CVE: CVE-2024-23825
Published: 2024-01-30
Description: TablePress is a table plugin for Wordpress. For importing tables, TablePress makes external HTTP requests based on a URL that is provided by the user. That user input is filtered insufficiently, which makes it is possible to send requests to unintended network locations and receive responses. On sites in a cloud environment like AWS, an attacker can potentially make GET requests to the instance's metadata REST API. If the instance's configuration is insecure, this can lead to the exposure of internal data, including credentials. This vulnerability is fixed in 2.2.5.
CVSS Score: 3.0 (LOW)
CWE: CWE-918, CWE-918
References: https://github.com/TablePress/TablePress/commit/62aab50e7a9c486caaeff26dff4dc01e059ecb91; https://github.com/TablePress/TablePress/security/advisories/GHSA-x8rf-c8x6-mrpg; https://github.com/TablePress/TablePress/commit/62aab50e7a9c486caaeff26dff4dc01e059ecb91
CVE: CVE-2024-23838
Published: 2024-01-30
Description: TrueLayer.NET is the .Net client for TrueLayer.  The vulnerability could potentially allow a malicious actor to gain control over the destination URL of the HttpClient used in the API classes. For applications using the SDK, requests to unexpected resources on local networks or to the internet could be made which could lead to information disclosure. The issue can be mitigated by having strict egress rules limiting the destinations to which requests can be made, and applying strict validation to any user input passed to the `truelayer-dotnet` library. Versions of TrueLayer.Client `v1.6.0` and later are not affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/TrueLayer/truelayer-dotnet/commit/75e436ed5360faa73d6e7ce3a9903a3c49505e3e; https://github.com/TrueLayer/truelayer-dotnet/security/advisories/GHSA-67m4-qxp3-j6hh; https://github.com/TrueLayer/truelayer-dotnet/commit/75e436ed5360faa73d6e7ce3a9903a3c49505e3e
CVE: CVE-2024-23840
Published: 2024-01-30
Description: GoReleaser builds Go binaries for several platforms, creates a GitHub release and then pushes a Homebrew formula to a tap repository. `goreleaser release --debug` log shows secret values used in the in the custom publisher. This vulnerability is fixed in 1.24.0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://github.com/goreleaser/goreleaser/commit/d5b6a533ca1dc3366983d5d31ee2d2b6232b83c0; https://github.com/goreleaser/goreleaser/security/advisories/GHSA-h3q2-8whx-c29h; https://github.com/goreleaser/goreleaser/commit/d5b6a533ca1dc3366983d5d31ee2d2b6232b83c0
CVE: CVE-2024-24565
Published: 2024-01-30
Description: CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY FROM function to import arbitrary file content into database tables, resulting in information leakage. This vulnerability is patched in 5.3.9, 5.4.8, 5.5.4, and 5.6.1.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-22
References: https://github.com/crate/crate/commit/4e857d[PII_REDACTED]45dd524d6ba03e692c70ecd6; https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96; https://github.com/crate/crate/commit/4e857d[PII_REDACTED]45dd524d6ba03e692c70ecd6