deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-37703
Published: 2021-08-13
Description: Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta5, a user's read state for a topic such as the last read post number and the notification level is exposed.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/discourse/discourse/commit/aed65ec16d38886d7be7209d8c02df4ffd4937a4; https://github.com/discourse/discourse/security/advisories/GHSA-gq2h-qhg2-phf9; https://github.com/discourse/discourse/commit/aed65ec16d38886d7be7209d8c02df4ffd4937a4
CVE: CVE-2021-38553
Published: 2021-08-13
Description: HashiCorp Vault and Vault Enterprise 1.4.0 through 1.7.3 initialized an underlying database file associated with the Integrated Storage feature with excessively broad filesystem permissions. Fixed in Vault and Vault Enterprise 1.8.0.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-281
References: https://discuss.hashicorp.com/t/hcsec-2021-20-vault-s-integrated-storage-backend-database-file-may-have-excessively-broad-permissions/28168; https://security.gentoo.org/glsa/202207-01; https://discuss.hashicorp.com/t/hcsec-2021-20-vault-s-integrated-storage-backend-database-file-may-have-excessively-broad-permissions/28168
CVE: CVE-2021-38554
Published: 2021-08-13
Description: HashiCorp Vault and Vault Enterprise’s UI erroneously cached and exposed user-viewed secrets between sessions in a single shared browser. Fixed in 1.8.0 and pending 1.7.4 / 1.6.6 releases.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-212
References: https://discuss.hashicorp.com/t/hcsec-2021-19-vault-s-ui-cached-user-viewed-secrets-between-shared-browser-sessions/28166; https://security.gentoo.org/glsa/202207-01; https://discuss.hashicorp.com/t/hcsec-2021-19-vault-s-ui-cached-user-viewed-secrets-between-shared-browser-sessions/28166
CVE: CVE-2021-3352
Published: 2021-08-13
Description: The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and 9.0.0.0 through 9.3.1.0 could allow an unauthenticated attacker to access (view and modify) user data without authorization due to improper handling of tokens.
CVSS Score: 9.1 (CRITICAL)
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0002; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-18753
Published: 2021-08-13
Description: An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to gain access to the system and escalate privileges via a crafted packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_start-stop.md; https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_start-stop.md
CVE: CVE-2020-18754
Published: 2021-08-13
Description: An information disclosure vulnerability exists within Dut Computer Control Engineering Co.'s PLC MAC1100.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_leak.md; https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_leak.md
CVE: CVE-2020-18756
Published: 2021-08-13
Description: An arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to read the contents of any variable area.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_read.md; https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_read.md
CVE: CVE-2020-18757
Published: 2021-08-13
Description: An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to cause persistent denial of service (DOS) via a crafted packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_DOS.md; https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_DOS.md
CVE: CVE-2020-18758
Published: 2021-08-13
Description: An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_upload.md; https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_upload.md
CVE: CVE-2020-18759
Published: 2021-08-13
Description: An information disclosure vulnerability exists in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_leak2.md; https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_leak2.md
CVE: CVE-2021-34823
Published: 2021-08-13
Description: The ON24 ScreenShare (aka DesktopScreenShare.app) plugin before 2.0 for macOS allows remote file access via its built-in HTTP server. This allows unauthenticated remote users to retrieve files accessible to the logged-on macOS user. When a remote user sends a crafted HTTP request to the server, it triggers a code path that will download a configuration file from a specified remote machine over HTTP. There is an XXE flaw in processing of this configuration file that allows reading local (to macOS) files and uploading them to remote machines.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: https://www.trustwave.com/en-us/resources/security-resources/security-advisories/; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=29105; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/
CVE: CVE-2021-36785
Published: 2021-08-13
Description: The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://typo3.org/help/security-advisories/security; https://typo3.org/security/advisory/typo3-ext-sa-2021-011; https://typo3.org/help/security-advisories/security
CVE: CVE-2021-36786
Published: 2021-08-13
Description: The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.
CVSS Score: 7.5 (HIGH)
CWE: CWE-922
References: https://typo3.org/help/security-advisories/security; https://typo3.org/security/advisory/typo3-ext-sa-2021-011; https://typo3.org/help/security-advisories/security
CVE: CVE-2021-36787
Published: 2021-08-13
Description: The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/165675/TYPO3-femanager-6.3.0-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2022/Jan/53; https://typo3.org/help/security-advisories/security
CVE: CVE-2021-36788
Published: 2021-08-13
Description: The yoast_seo (aka Yoast SEO) extension before 7.2.3 for TYPO3 allows XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://typo3.org/help/security-advisories/security; https://typo3.org/security/advisory/typo3-ext-sa-2021-013; https://typo3.org/help/security-advisories/security
CVE: CVE-2021-36789
Published: 2021-08-13
Description: The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://typo3.org/help/security-advisories/security; https://typo3.org/security/advisory/typo3-ext-sa-2021-013; https://typo3.org/help/security-advisories/security
CVE: CVE-2021-36790
Published: 2021-08-13
Description: The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://typo3.org/help/security-advisories/security; https://typo3.org/security/advisory/typo3-ext-sa-2021-013; https://typo3.org/help/security-advisories/security
CVE: CVE-2021-36791
Published: 2021-08-13
Description: The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data.
CVSS Score: 5.3 (MEDIUM)
References: https://typo3.org/help/security-advisories/security; https://typo3.org/security/advisory/typo3-ext-sa-2021-013; https://typo3.org/help/security-advisories/security
CVE: CVE-2021-36792
Published: 2021-08-13
Description: The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications.
CVSS Score: 7.2 (HIGH)
References: https://typo3.org/help/security-advisories/security; https://typo3.org/security/advisory/typo3-ext-sa-2021-013; https://typo3.org/help/security-advisories/security
CVE: CVE-2021-36793
Published: 2021-08-13
Description: The routes (aka Extbase Yaml Routes) extension before 2.1.1 for TYPO3, when CsrfTokenViewHelper is used, allows Sensitive Information Disclosure because a session identifier is unsafely present in HTML output.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://typo3.org/help/security-advisories/security; https://typo3.org/security/advisory/typo3-ext-sa-2021-008; https://typo3.org/help/security-advisories/security
CVE: CVE-2021-38302
Published: 2021-08-13
Description: The Newsletter extension through 4.0.0 for TYPO3 allows SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://typo3.org/help/security-advisories; https://typo3.org/security/advisory/typo3-ext-sa-2021-014; https://typo3.org/help/security-advisories
CVE: CVE-2021-38623
Published: 2021-08-13
Description: The deferred_image_processing (aka Deferred image processing) extension before 1.0.2 for TYPO3 allows Denial of Service via the FAL API because of /var/transient disk consumption.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://typo3.org/security/advisory/typo3-ext-sa-2021-009; https://typo3.org/security/advisory/typo3-ext-sa-2021-009
CVE: CVE-2021-21829
Published: 2021-08-13
Description: A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1292; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1292
CVE: CVE-2021-21830
Published: 2021-08-13
Description: A heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1293; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1293
CVE: CVE-2020-21064
Published: 2021-08-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-15048. Reason: This candidate is a reservation duplicate of CVE-2019-15048. Notes: All CVE users should reference CVE-2019-15048 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-21066
Published: 2021-08-13
Description: An issue was discovered in Bento4 v1.5.1.0. There is a heap-buffer-overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom.cpp, leading to a denial of service (program crash), as demonstrated by mp42aac.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/axiomatic-systems/Bento4/issues/408; https://github.com/axiomatic-systems/Bento4/issues/408
CVE: CVE-2021-37705
Published: 2021-08-13
Description: OneFuzz is an open source self-hosted Fuzzing-As-A-Service platform. Starting with OneFuzz 2.12.0 or greater, an incomplete authorization check allows an authenticated user from any Azure Active Directory tenant to make authorized API calls to a vulnerable OneFuzz instance. To be vulnerable, a OneFuzz deployment must be both version 2.12.0 or greater and deployed with the non-default --multi_tenant_domain option. This can result in read/write access to private data such as software vulnerability and crash information, security testing tools and proprietary code and symbols. Via authorized API calls, this also enables tampering with existing data and unauthorized code execution on Azure compute resources. This issue is resolved starting in release 2.31.0, via the addition of application-level check of the bearer token's `issuer` against an administrator-configured allowlist. As a workaround users can restrict access to the tenant of a deployed OneFuzz instance < 2.31.0 by redeploying in the default configuration, which omits the `--multi_tenant_domain` option.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-285, CWE-346, CWE-863
References: https://github.com/microsoft/onefuzz/commit/2fcb[PII_REDACTED]b4fa11894a068d689189742cb1; https://github.com/microsoft/onefuzz/pull/1153; https://github.com/microsoft/onefuzz/releases/tag/2.31.0
CVE: CVE-2021-21812
Published: 2021-08-13
Description: A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs’ Xmill 0.7. Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to strcpy copying the path provided by the user into a static sized buffer without any length checks resulting in a stack-buffer overflow. An attacker can provide malicious input to trigger these vulnerabilities.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1280; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1280
CVE: CVE-2021-21813
Published: 2021-08-13
Description: Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to memcpy copying the path provided by the user into a staticly sized buffer without any length checks resulting in a stack-buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1280; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1280
CVE: CVE-2021-21814
Published: 2021-08-13
Description: Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to strlen to determine the ending location of the char* passed in by the user, no checks are done to see if the passed in char* is longer than the staticly sized buffer data is memcpy‘d into, but after the memcpy a null byte is written to what is assumed to be the end of the buffer to terminate the char*, but without length checks, this null write occurs at an arbitrary offset from the buffer. An attacker can provide malicious input to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-88
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1280; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1280
CVE: CVE-2021-21815
Published: 2021-08-13
Description: A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmill 0.7. Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to strcpy copying the path provided by the user into a staticly sized buffer without any length checks resulting in a stack-buffer overflow. An attacker can provide malicious input to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1280; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1280
CVE: CVE-2020-36473
Published: 2021-08-14
Description: UCWeb UC 12.12.3.1219 through 12.12.3.1226 uses cleartext HTTP, and thus man-in-the-middle attackers can discover visited URLs.
CVSS Score: 3.7 (LOW)
CWE: CWE-312
References: https://medium.com/%40ciph3r/why-you-should-not-use-uc-browser-54558916d020; https://medium.com/%40ciph3r/why-you-should-not-use-uc-browser-54558916d020
CVE: CVE-2021-37326
Published: 2021-08-15
Description: NetSarang Xshell 7 before Build 0077 includes unintended code strings in paste operations.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.netsarang.com/en/xshell-update-history/; https://www.netsarang.com/en/xshell-update-history/
CVE: CVE-2021-38699
Published: 2021-08-15
Description: TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/system_logs.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/163843/TastyIgniter-3.0.7-Cross-Site-Scripting.html; https://github.com/HuskyHacks/CVE-2021-38699-Reflected-XSS; https://github.com/HuskyHacks/CVE-2021-38699-Stored-XSS
CVE: CVE-2021-25955
Published: 2021-08-15
Description: In “Dolibarr ERP CRM”, WYSIWYG Editor module, v2.8.1 to v13.0.2 are affected by a stored XSS vulnerability that allows low privileged application users to store malicious scripts in the “Private Note” field at “/adherents/note.php?id=1” endpoint. These scripts are executed in a victim’s browser when they open the page containing the vulnerable field. In the worst case, the victim who inadvertently triggers the attack is a highly privileged administrator. The injected scripts can extract the Session ID, which can lead to full Account takeover of the admin and due to other vulnerability (Improper Access Control on Private notes) a low privileged user can update the private notes which could lead to privilege escalation.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://github.com/Dolibarr/dolibarr/commit/796b2d201acb9938b903fb2afa297db289ecc93e; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25955; https://github.com/Dolibarr/dolibarr/commit/796b2d201acb9938b903fb2afa297db289ecc93e
CVE: CVE-2021-26086
Published: 2021-08-16
Description: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/web.xml endpoint. The affected versions are before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://packetstormsecurity.com/files/164405/Atlassian-Jira-Server-Data-Center-8.4.0-File-Read.html; https://jira.atlassian.com/browse/JRASERVER-72695; http://packetstormsecurity.com/files/164405/Atlassian-Jira-Server-Data-Center-8.4.0-File-Read.html
CVE: CVE-2021-38708
Published: 2021-08-16
Description: In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via Comcode for XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://compo.sr/news/view/announcements/two-new-xss-security.htm; https://compo.sr/news/view/announcements/two-new-xss-security.htm
CVE: CVE-2021-38709
Published: 2021-08-16
Description: In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staff_messaging messaging system for XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://compo.sr/news/view/announcements/two-new-xss-security.htm; https://compo.sr/news/view/announcements/two-new-xss-security.htm
CVE: CVE-2021-38711
Published: 2021-08-16
Description: In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://github.com/jgm/gitit/commit/eed32638f4f6e3b2f4b8a9a04c4b72001acf9ad8; https://github.com/jgm/gitit/compare/0.14.0.0...0.15.0.0; https://github.com/jgm/gitit/commit/eed32638f4f6e3b2f4b8a9a04c4b72001acf9ad8
CVE: CVE-2021-38712
Published: 2021-08-16
Description: OneNav 0.9.12 allows Information Disclosure of the onenav.db3 contents. NOTE: the vendor's recommended solution is to block the access via an NGINX configuration file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: https://github.com/helloxz/onenav/issues/25; https://github.com/helloxz/onenav/issues/25
CVE: CVE-2021-38713
Published: 2021-08-16
Description: imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/helloxz/imgurl/issues/72; https://github.com/helloxz/imgurl/issues/72
CVE: CVE-2021-3707
Published: 2021-08-16
Description: D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized configuration modification. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3708, to execute any OS commands on the vulnerable device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-15
References: https://github.com/HadiMed/firmware-analysis/blob/main/DSL-2750U%20%28firmware%20version%201.6%29/README.md; https://jvn.jp/en/vu/JVNVU92088210/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10230
CVE: CVE-2021-3708
Published: 2021-08-16
Description: D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3707, to execute any OS commands on the vulnerable device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/HadiMed/firmware-analysis/blob/main/DSL-2750U%20%28firmware%20version%201.6%29/README.md; https://jvn.jp/en/vu/JVNVU92088210/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10230
CVE: CVE-2021-23422
Published: 2021-08-16
Description: This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Command metadata is processed. When an arbitrary OS command is executed, the command output would be included in the HTML output.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd; https://snyk.io/vuln/SNYK-PYTHON-BIKESHED-1537646; https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd
CVE: CVE-2021-23423
Published: 2021-08-16
Description: This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing include, include-code or include-raw block is processed. The contents of arbitrary files could be disclosed in the HTML output.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd; https://snyk.io/vuln/SNYK-PYTHON-BIKESHED-1537647; https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd
CVE: CVE-2021-33193
Published: 2021-08-16
Description: A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.
CVSS Score: 7.5 (HIGH)
References: https://github.com/apache/httpd/commit/ecebcc035ccd8d0e2984fe41420d9e944f456b3c.patch; https://lists.apache.org/thread.html/re4162adc051c1a0a79e7a24093f3776373e8733abaff57253fef341d%40%3Ccvs.httpd.apache.org%3E; https://lists.apache.org/thread.html/ree7519d71415ecdd170ff1889cab552d71758d2ba2904a17ded21a70%40%3Ccvs.httpd.apache.org%3E
CVE: CVE-2021-35936
Published: 2021-08-16
Description: If remote logging is not used, the worker (in the case of CeleryExecutor) or the scheduler (in the case of LocalExecutor) runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG jobs. This issue affects Apache Airflow < 2.1.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-306
References: https://lists.apache.org/thread.html/r53d6bd7b0a66f92ddaf1313282f10fec802e71246606dd30c16536df%40%3Cusers.airflow.apache.org%3E; https://lists.apache.org/thread.html/r53d6bd7b0a66f92ddaf1313282f10fec802e71246606dd30c16536df%40%3Cusers.airflow.apache.org%3E