deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-36112
Published: 2022-09-14
Description: GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Usage of RSS feeds or extenal calendar in planning is subject to SSRF exploit. Server-side requests can be used to scan server port or services opened on GLPI server or its private network. Queries responses are not exposed to end-user (blind SSRF). Users are advised to upgrade to version 10.0.3 to resolve this issue. There are no known workarounds.
CVSS Score: 3.5 (LOW)
CWE: CWE-918
References: https://github.com/glpi-project/glpi/commit/ad66d69049ae02bead8ed0f4ee654a458643244e; https://github.com/glpi-project/glpi/security/advisories/GHSA-rqgx-gqhp-x8vv; https://github.com/glpi-project/glpi/commit/ad66d69049ae02bead8ed0f4ee654a458643244e
CVE: CVE-2022-36113
Published: 2022-09-14
Description: Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code in the ~/.cargo folder on disk, making it available to the Rust projects it builds. To record when an extraction is successful, Cargo writes "ok" to the .cargo-ok file at the root of the extracted source code once it extracted all the files. It was discovered that Cargo allowed packages to contain a .cargo-ok symbolic link, which Cargo would extract. Then, when Cargo attempted to write "ok" into .cargo-ok, it would actually replace the first two bytes of the file the symlink pointed to with ok. This would allow an attacker to corrupt one file on the machine using Cargo to extract the package. Note that by design Cargo allows code execution at build time, due to build scripts and procedural macros. The vulnerabilities in this advisory allow performing a subset of the possible damage in a harder to track down way. Your dependencies must still be trusted if you want to be protected from attacks, as it's possible to perform the same attacks with build scripts and procedural macros. The vulnerability is present in all versions of Cargo. Rust 1.64, to be released on September 22nd, will include a fix for it. Since the vulnerability is just a more limited way to accomplish what a malicious build scripts or procedural macros can do, we decided not to publish Rust point releases backporting the security fix. Patch files are available for Rust 1.63.0 are available in the wg-security-response repository for people building their own toolchain.
Mitigations We recommend users of alternate registries to exercise care in which package they download, by only including trusted dependencies in their projects. Please note that even with these vulnerabilities fixed, by design Cargo allows arbitrary code execution at build time thanks to build scripts and procedural macros: a malicious dependency will be able to cause damage regardless of these vulnerabilities. crates.io implemented server-side checks to reject these kinds of packages years ago, and there are no packages on crates.io exploiting these vulnerabilities. crates.io users still need to exercise care in choosing their dependencies though, as remote code execution is allowed by design there as well.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-22, CWE-59
References: https://github.com/rust-lang/cargo/commit/97b80919e404b0768ea31ae329c3b4da54bed05a; https://github.com/rust-lang/cargo/security/advisories/GHSA-rfj2-q3h3-hm5j; https://github.com/rust-lang/cargo/commit/97b80919e404b0768ea31ae329c3b4da54bed05a
CVE: CVE-2022-36114
Published: 2022-09-14
Description: Cargo is a package manager for the rust programming language. It was discovered that Cargo did not limit the amount of data extracted from compressed archives. An attacker could upload to an alternate registry a specially crafted package that extracts way more data than its size (also known as a "zip bomb"), exhausting the disk space on the machine using Cargo to download the package. Note that by design Cargo allows code execution at build time, due to build scripts and procedural macros. The vulnerabilities in this advisory allow performing a subset of the possible damage in a harder to track down way. Your dependencies must still be trusted if you want to be protected from attacks, as it's possible to perform the same attacks with build scripts and procedural macros. The vulnerability is present in all versions of Cargo. Rust 1.64, to be released on September 22nd, will include a fix for it. Since the vulnerability is just a more limited way to accomplish what a malicious build scripts or procedural macros can do, we decided not to publish Rust point releases backporting the security fix. Patch files are available for Rust 1.63.0 are available in the wg-security-response repository for people building their own toolchain. We recommend users of alternate registries to excercise care in which package they download, by only including trusted dependencies in their projects. Please note that even with these vulnerabilities fixed, by design Cargo allows arbitrary code execution at build time thanks to build scripts and procedural macros: a malicious dependency will be able to cause damage regardless of these vulnerabilities. crates.io implemented server-side checks to reject these kinds of packages years ago, and there are no packages on crates.io exploiting these vulnerabilities. crates.io users still need to excercise care in choosing their dependencies though, as the same concerns about build scripts and procedural macros apply here.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://github.com/rust-lang/cargo/commit/d1f9553c825f6d7481453be8d58d0e7f117988a7; https://github.com/rust-lang/cargo/security/advisories/GHSA-2hvr-h6gw-qrxp; https://github.com/rust-lang/cargo/commit/d1f9553c825f6d7481453be8d58d0e7f117988a7
CVE: CVE-2022-1835
Published: 2022-09-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none
CVE: CVE-2022-1972
Published: 2022-09-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2078. Reason: This candidate is a reservation duplicate of CVE-2022-2078. Notes: All CVE users should reference CVE-2022-2078 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2022-36056
Published: 2022-09-14
Description: Cosign is a project under the sigstore organization which aims to make signatures invisible infrastructure. In versions prior to 1.12.0 a number of vulnerabilities have been found in cosign verify-blob, where Cosign would successfully verify an artifact when verification should have failed. First a cosign bundle can be crafted to successfully verify a blob even if the embedded rekorBundle does not reference the given signature. Second, when providing identity flags, the email and issuer of a certificate is not checked when verifying a Rekor bundle, and the GitHub Actions identity is never checked. Third, providing an invalid Rekor bundle without the experimental flag results in a successful verification. And fourth an invalid transparency log entry will result in immediate success for verification. Details and examples of these issues can be seen in the GHSA-8gw7-4j42-w388 advisory linked. Users are advised to upgrade to 1.12.0. There are no known workarounds for these issues.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-347
References: https://github.com/sigstore/cosign/commit/80b79ed8b4d28ccbce3d279fd273606b5cddcc25; https://github.com/sigstore/cosign/security/advisories/GHSA-8gw7-4j42-w388; https://github.com/sigstore/cosign/commit/80b79ed8b4d28ccbce3d279fd273606b5cddcc25
CVE: CVE-2022-3216
Published: 2022-09-14
Description: A vulnerability has been found in Nintendo Game Boy Color and classified as problematic. This vulnerability affects unknown code of the component Mobile Adapter GB. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-208606 is the identifier assigned to this vulnerability.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119, CWE-674
References: https://vuldb.com/?id.208606; https://xcellerator.github.io/posts/tetsuji/; https://vuldb.com/?id.208606
CVE: CVE-2022-2977
Published: 2022-09-14
Description: A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it may be possible to escalate privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d8e7007dc7c4d7c8366739bbcd3f5e51dcd470f; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d8e7007dc7c4d7c8366739bbcd3f5e51dcd470f
CVE: CVE-2022-37724
Published: 2022-09-14
Description: Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/wocommunity/wonder/pull/992; https://xmit.xyz/security/webobjects-url-tomfoolery/; https://github.com/wocommunity/wonder/pull/992
CVE: CVE-2022-38301
Published: 2022-09-14
Description: Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/theonedev/onedev/commit/5b6a19c1f7fe9c271acc4268bcd261a9a1cbb3ea; https://research.loginsoft.com/vulnerability/path-traversal-in-onedev-v7-4-14/; https://github.com/theonedev/onedev/commit/5b6a19c1f7fe9c271acc4268bcd261a9a1cbb3ea
CVE: CVE-2022-38308
Published: 2022-09-14
Description: TOTOLink A700RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cstesystem. This vulnerability allows attackers to execute arbitrary commands via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/WhoisZkuan/TOTOlink-A700RU; https://github.com/WhoisZkuan/TOTOlink-A700RU
CVE: CVE-2022-40365
Published: 2022-09-14
Description: Cross site scripting (XSS) vulnerability in ouqiang gocron through 1.5.3, allows attackers to execute arbitrary code via scope.row.hostname in web/vue/src/pages/taskLog/list.vue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ouqiang/gocron; https://github.com/ouqiang/gocron/issues/362; https://github.com/ouqiang/gocron
CVE: CVE-2022-40438
Published: 2022-09-14
Description: Buffer overflow vulnerability in function AP4_MemoryByteStream::WritePartial in mp42aac in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/axiomatic-systems/Bento4/issues/751; https://github.com/axiomatic-systems/Bento4/issues/751
CVE: CVE-2022-40439
Published: 2022-09-14
Description: An memory leak issue was discovered in AP4_StdcFileByteStream::Create in mp42ts in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/axiomatic-systems/Bento4/issues/750; https://github.com/axiomatic-systems/Bento4/issues/750
CVE: CVE-2022-40476
Published: 2022-09-14
Description: A null pointer dereference issue was discovered in fs/io_uring.c in the Linux kernel before 5.15.62. A local user could use this flaw to crash the system or potentially cause a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/fs/io_uring.c?h=v5.15.61&id=3746d62ecf1c872a520c4866118edccb121c44fd; https://lore.kernel.org/lkml/CAO4S-mdVW5GkODk0+vbQexNAAJZopwzFJ9ACvRCJ989fQ4A6Ow%40mail.gmail.com/; https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.62
CVE: CVE-2020-36603
Published: 2022-09-14
Description: The HoYoVerse (formerly miHoYo) Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not adequately restrict unprivileged function calls, allowing local, unprivileged users to execute arbitrary code with SYSTEM privileges on Microsoft Windows systems. The mhyprot2.sys driver must first be installed by a user with administrative privileges.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://github.com/kagurazakasanae/Mhyprot2DrvControl; https://github.com/kkent030315/evil-mhyprot-cli; https://web.archive.org/web/[PII_REDACTED]1301/https://www.godeye.club/2021/05/20/001-disclosure-mhyprot.html
CVE: CVE-2022-40734
Published: 2022-09-14
Description: UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/UniSharp/laravel-filemanager/issues/1150; https://github.com/UniSharp/laravel-filemanager/issues/1150#issuecomment[PII_REDACTED]; https://github.com/UniSharp/laravel-filemanager/issues/1150#issuecomment[PII_REDACTED]
CVE: CVE-2018-25047
Published: 2022-09-15
Description: In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smarty_function_mailto, and that could be parameterized using GET or POST input parameters, could allow injection of JavaScript code by a user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bugs.gentoo.org/870100; https://github.com/smarty-php/smarty/issues/454; https://github.com/smarty-php/smarty/releases/tag/v3.1.47
CVE: CVE-2022-38323
Published: 2022-09-15
Description: Event Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /Royal_Event/update_image.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/Gsir97/bug_report/blob/main/vendors/Nikhil_B/event-management-system/RCE-1.md; https://github.com/Gsir97/bug_report/blob/main/vendors/Nikhil_B/event-management-system/RCE-1.md
CVE: CVE-2022-38352
Published: 2022-09-15
Description: ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/top-think/framework/issues/2749; https://github.com/top-think/framework/issues/2749
CVE: CVE-2022-38594
Published: 2022-09-15
Description: Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_visitor.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Estbonxby/bug_report/blob/main/vendors/Godfrey%20De%20Blessed/church-management-system/SQLi-1.md; https://github.com/Estbonxby/bug_report/blob/main/vendors/Godfrey%20De%20Blessed/church-management-system/SQLi-1.md
CVE: CVE-2022-38595
Published: 2022-09-15
Description: Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_user.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Estbonxby/bug_report/blob/main/vendors/Godfrey%20De%20Blessed/church-management-system/SQLi-2.md; https://github.com/Estbonxby/bug_report/blob/main/vendors/Godfrey%20De%20Blessed/church-management-system/SQLi-2.md
CVE: CVE-2022-40736
Published: 2022-09-15
Description: An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in AP4_CttsAtom::Create in Core/Ap4CttsAtom.cpp.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/axiomatic-systems/Bento4/issues/755; https://github.com/axiomatic-systems/Bento4/issues/755
CVE: CVE-2022-40737
Published: 2022-09-15
Description: An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4_StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4_ByteStream::Write and AP4_HdlrAtom::WriteFields.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/axiomatic-systems/Bento4/issues/756; https://github.com/axiomatic-systems/Bento4/issues/756
CVE: CVE-2022-40738
Published: 2022-09-15
Description: An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, called from AP4_EsDescriptor::WriteFields and AP4_Expandable::Write.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/axiomatic-systems/Bento4/issues/756; https://github.com/axiomatic-systems/Bento4/issues/756
CVE: CVE-2022-31735
Published: 2022-09-15
Description: OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601). When accessing an affected server through some specially crafted URL, the user may be redirected to an arbitrary website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/openam-jp/openam/issues/259; https://jvn.jp/en/vu/JVNVU99326969/; https://github.com/openam-jp/openam/issues/259
CVE: CVE-2022-3221
Published: 2022-09-15
Description: Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/ikus060/rdiffweb/commit/9125f5a2d918fed0f3fc1c86fa94cd1779ed9f73; https://huntr.dev/bounties/1fa1aac9-b16a-4a70-a7da-960b3908ae1d; https://github.com/ikus060/rdiffweb/commit/9125f5a2d918fed0f3fc1c86fa94cd1779ed9f73
CVE: CVE-2022-3222
Published: 2022-09-15
Description: Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf; https://huntr.dev/bounties/b29c69fa-3eac-41e4-9d4f-d861aba18235; https://www.debian.org/security/2023/dsa-5411
CVE: CVE-2022-38788
Published: 2022-09-15
Description: An issue was discovered in Nokia FastMile 5G Receiver 5G14-B 1.2104.00.0281. Bluetooth on the Nokia ODU uses outdated pairing mechanisms, allowing an attacker to passively intercept a paring handshake and (after offline cracking) retrieve the PIN and LTK (long-term key).
CVSS Score: 4.3 (MEDIUM)
References: https://github.com/ProxyStaffy/Nokia-FastMile-5G-Receiver-5G14-B; https://www.nokia.com/notices/responsible-disclosure/; https://github.com/ProxyStaffy/Nokia-FastMile-5G-Receiver-5G14-B
CVE: CVE-2022-38789
Published: 2022-09-15
Description: An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map the LAN, because of Insecure Direct Object Reference.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-639
References: https://airties.com/airties-information-security-policy/; https://github.com/ProxyStaffy/Airties-CVE-2022-38789/blob/main/Description; https://airties.com/airties-information-security-policy/
CVE: CVE-2022-3224
Published: 2022-09-15
Description: Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-115
References: https://github.com/ionicabizau/parse-url/commit/9cacf38de02db0fb1358bd6ec04543e523cd6a8e; https://huntr.dev/bounties/3587a567-7fcd-4702-b7c9-d9ca565e3c62; https://github.com/ionicabizau/parse-url/commit/9cacf38de02db0fb1358bd6ec04543e523cd6a8e
CVE: CVE-2021-44076
Published: 2022-09-15
Description: An issue was discovered in CrushFTP 9. The creation of a new user through the /WebInterface/UserManager/ interface allows an attacker, with access to the administration panel, to perform Stored Cross-Site Scripting (XSS). The payload can be executed in multiple scenarios, for example when the user's page appears in the Most Visited section of the page.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://labs.nettitude.com/blog/cve-2021-44076-cross-site-scripting-xss-in-crushftp/; https://www.crushftp.com/; https://labs.nettitude.com/blog/cve-2021-44076-cross-site-scripting-xss-in-crushftp/
CVE: CVE-2022-37257
Published: 2022-09-15
Description: Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: http://steal.com; http://stealjs.com; https://github.com/stealjs/steal/blob/c9dd1eb19ed3f97aeb93cf9dcea5d68ad5d0ced9/ext/npm-convert.js#L362
CVE: CVE-2022-37266
Published: 2022-09-15
Description: Prototype pollution vulnerability in function extend in babel.js in stealjs steal 2.2.4 via the key variable in babel.js.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/stealjs/steal/blob/c9dd1eb19ed3f97aeb93cf9dcea5d68ad5d0ced9/ext/babel.js#L29165; https://github.com/stealjs/steal/blob/c9dd1eb19ed3f97aeb93cf9dcea5d68ad5d0ced9/ext/babel.js#L29169; https://github.com/stealjs/steal/issues/1535
CVE: CVE-2022-2471
Published: 2022-09-15
Description: Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This issue affects: EZVIZ CS-CV248 versions prior to 5.2.3 build 220725. EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428. EZVIZ CS-DB1C-A0-1E2W2FR versions prior to 5.3.0 build 220802. EZVIZ CS-C6N-B0-1G2WF versions prior to 5.3.0 build 220712. EZVIZ CS-C3W-A0-3H4WFRL versions prior to 5.3.5 build 220723.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-121
References: https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-ezviz-smart-cams; https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-ezviz-smart-cams
CVE: CVE-2022-2472
Published: 2022-09-15
Description: Improper Initialization vulnerability in the local server component of EZVIZ CS-C6N-A0-1C2WFR allows a local attacker to read the contents of the memory space containing the encrypted admin password. This issue affects: EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428.
CVSS Score: 7.6 (HIGH)
CWE: CWE-665
References: https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-ezviz-smart-cams; https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-ezviz-smart-cams
CVE: CVE-2022-3211
Published: 2022-09-15
Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.6.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/0508c491c6a4f3d119ec8dcf444e52ff25028c36; https://huntr.dev/bounties/31ac0506-ae38-4128-a46d-71d5d079f8b7; https://github.com/pimcore/pimcore/commit/0508c491c6a4f3d119ec8dcf444e52ff25028c36
CVE: CVE-2022-29649
Published: 2022-09-15
Description: Qsmart Next v4.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://qsmart.com; https://gist.github.com/arifseyda/bce00ed14562975d1a96d1d9a0660ec7; http://qsmart.com
CVE: CVE-2022-37207
Published: 2022-09-15
Description: JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/AgainstTheLight/CVE-2022-37207/blob/main/README.md; https://github.com/AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql10.md; https://github.com/AgainstTheLight/CVE-2022-37207/blob/main/README.md