deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-24789
Published: 2022-03-28
Description: C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist.
CVSS Score: 7.6 (HIGH)
CWE: CWE-918
References: https://github.com/Orckestra/C1-CMS-Foundation/releases/tag/v6.12; https://github.com/Orckestra/C1-CMS-Foundation/security/advisories/GHSA-j9c2-gr6m-pp45; https://github.com/Orckestra/C1-CMS-Foundation/releases/tag/v6.12
CVE: CVE-2022-26280
Published: 2022-03-28
Description: Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/libarchive/libarchive/issues/1672; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SBYGJICQ7FKDZ2IIOAH423IHWQ6MNONQ/; https://security.gentoo.org/glsa/202208-26
CVE: CVE-2022-26291
Published: 2022-03-28
Description: lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf() and clear_rulist(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted Irz file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/ckolivas/lrzip/issues/206; https://lists.debian.org/debian-lts-announce/2022/04/msg00012.html; https://www.debian.org/security/2022/dsa-5145
CVE: CVE-2021-43105
Published: 2022-03-28
Description: A vulnerability in the bailiwick checking function in Technitium DNS Server <= v7.0 exists that allows specific malicious users to inject `NS` records of any domain (even TLDs) into the cache and conduct a DNS cache poisoning attack.
CVSS Score: 4.3 (MEDIUM)
References: https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md; https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md
CVE: CVE-2022-26296
Published: 2022-03-28
Description: BOOM: The Berkeley Out-of-Order RISC-V Processor commit d77c2c3 was discovered to allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/riscv-boom/riscv-boom/issues/577; https://github.com/riscv-boom/riscv-boom/issues/577
CVE: CVE-2022-26639
Published: 2022-03-28
Description: TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the DNSServers parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120
References: https://github.com/Quadron-Research-Lab/Hardware-IoT/blob/main/tp-link%20tl-wr840n_DNSServers%3D.pdf; https://github.com/Quadron-Research-Lab/Hardware-IoT/blob/main/tp-link%20tl-wr840n_DNSServers%3D.pdf
CVE: CVE-2022-26640
Published: 2022-03-28
Description: TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the minAddress parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120
References: https://github.com/Quadron-Research-Lab/Hardware-IoT/blob/main/tp-link%20tl-wr840n_minAddress%3D.pdf; https://github.com/Quadron-Research-Lab/Hardware-IoT/blob/main/tp-link%20tl-wr840n_minAddress%3D.pdf
CVE: CVE-2022-26641
Published: 2022-03-28
Description: TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120
References: https://github.com/Quadron-Research-Lab/Hardware-IoT/blob/main/tp-link%20tl-wr840n_httpRemotePort%3D.pdf; https://github.com/Quadron-Research-Lab/Hardware-IoT/blob/main/tp-link%20tl-wr840n_httpRemotePort%3D.pdf
CVE: CVE-2022-26642
Published: 2022-03-28
Description: TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the X_TP_ClonedMACAddress parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120
References: https://github.com/Quadron-Research-Lab/Hardware-IoT/blob/main/tp-link%20tl-wr840n_X_TP_ClonedMACAddress%3D.pdf; https://github.com/Quadron-Research-Lab/Hardware-IoT/blob/main/tp-link%20tl-wr840n_X_TP_ClonedMACAddress%3D.pdf
CVE: CVE-2021-44581
Published: 2022-03-29
Description: An SQL Injection vulnerabilty exists in Kreado Kreasfero 1.5 via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://pvu-netze.de/; https://twitter.com/1ofThegutHakrs/status/[PII_REDACTED]85191682; http://pvu-netze.de/
CVE: CVE-2021-45865
Published: 2022-03-29
Description: A File Upload vulnerability exists in Sourcecodester Student Attendance Manageent System 1.0 via the file upload functionality.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/lohyt/Code-execution-via-vulnerable-file-upload-functionality-found-in-Student-Attendance-Management-Syste; https://github.com/lohyt/Code-execution-via-vulnerable-file-upload-functionality-found-in-Student-Attendance-Management-Syste
CVE: CVE-2021-45866
Published: 2022-03-29
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/lohyt/XSS-in-Student-attendance-management; https://github.com/lohyt/XSS-in-Student-attendance-management
CVE: CVE-2022-0331
Published: 2022-03-29
Description: An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older.
CVSS Score: 5.3 (MEDIUM)
References: https://www.sophos.com/en-us/security-advisories/sophos-sa-20220328-sfos-18-5-3; https://www.sophos.com/en-us/security-advisories/sophos-sa-20220328-sfos-18-5-3
CVE: CVE-2022-25521
Published: 2022-03-29
Description: NUUO v03.11.00 was discovered to contain access control issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://nuuo.com; https://medium.com/%40dnyaneshgawande111/use-of-default-credentials-to-unauthorised-remote-access-of-internal-panel-of-network-video-5490d107fa0; http://nuuo.com
CVE: CVE-2022-26269
Published: 2022-03-29
Description: Suzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages.
CVSS Score: 4.6 (MEDIUM)
References: https://github.com/nsbogam/CVE-2022-26269/blob/main/README.md; https://www.marutisuzuki.com/; https://www.marutisuzuki.com/corporate/technology/suzuki-connect
CVE: CVE-2022-23937
Published: 2022-03-29
Description: In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: https://support2.windriver.com/index.php?page=cve&pg=21#list; https://support2.windriver.com/index.php?page=security-notices; https://support2.windriver.com/index.php?page=cve&pg=21#list
CVE: CVE-2022-24956
Published: 2022-03-29
Description: An issue was discovered in Shopware B2B-Suite through 4.4.1. The sort-by parameter of the search functionality of b2border and b2borderlist allows SQL injection. Possible techniques are boolean-based blind, time-based blind, and potentially stacked queries. The vulnerability allows a remote authenticated attacker to dump the underlying database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://syss.de; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-018.txt; https://syss.de
CVE: CVE-2022-24957
Published: 2022-03-29
Description: DHC Vision eQMS through 5.4.8.322 has Persistent XSS due to insufficient encoding of untrusted input/output. To exploit the vulnerability, the attacker has to create or edit a new information object and use the XSS payload as the name. Any user that opens the object's version or history tab will be attacked.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://syss.de; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-019.txt; https://syss.de
CVE: CVE-2022-25420
Published: 2022-03-29
Description: NTT Resonant Incorporated goo blog App Web Application 1.0 is vulnerable to CLRF injection. This vulnerability allows attackers to execute arbitrary code via a crafted HTTP request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://github.com/abhiunix/goo-blog-App-CVE; https://github.com/abhiunix/goo-blog-App-CVE
CVE: CVE-2022-1072
Published: 2022-03-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-26254. Reason: This candidate is a reservation duplicate of CVE-2022-26254. Notes: All CVE users should reference CVE-2022-26254 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2022-1073
Published: 2022-03-29
Description: A vulnerability was found in Automatic Question Paper Generator 1.0. It has been declared as critical. An attack leads to privilege escalation. The attack can be launched remotely.
CVSS Score: 7.3 (HIGH)
CWE: CWE-640, CWE-640
References: https://vuldb.com/?id.194839; https://vuldb.com/?id.194839
CVE: CVE-2022-1074
Published: 2022-03-29
Description: A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input <h1>HTML Injection</h1> in the WiFi settings of the dashboard leads to html injection.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-74, CWE-79
References: https://vuldb.com/?id.194845; https://vuldb.com/?id.194845
CVE: CVE-2022-1075
Published: 2022-03-29
Description: A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue is the file /cwms/classes/Master.php?f=save_contact of the component Contact Handler. The manipulation leads to persistent cross site scripting. The attack may be launched remotely and requires authentication.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://vuldb.com/?id.194846; https://www.sourcecodester.com/php/15203/college-website-content-management-system-phpoop-free-source-code.ht; https://vuldb.com/?id.194846
CVE: CVE-2022-1076
Published: 2022-03-29
Description: A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is possible to initiate the attack remotely.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://vuldb.com/?id.194847; https://vuldb.com/?id.194847
CVE: CVE-2022-1077
Published: 2022-03-29
Description: A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any form of authentication.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-425
References: https://vuldb.com/?id.194848; https://vuldb.com/?id.194848
CVE: CVE-2022-1078
Published: 2022-03-29
Description: A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. Affected is the file /cwms/admin/?page=articles/view_article/. The manipulation of the argument id with the input ' and (select * from(select(sleep(10)))Avx) and 'abc' = 'abc with an unknown input leads to sql injection. It is possible to launch the attack remotely and without authentication.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.194856; https://vuldb.com/?id.194856
CVE: CVE-2022-1079
Published: 2022-03-29
Description: A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and parameters which are prone to to cross site scripting. It is possible to launch the attack remotely.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://vuldb.com/?id.195426; https://vuldb.com/?id.195426
CVE: CVE-2022-1080
Published: 2022-03-29
Description: A vulnerability was found in SourceCodester One Church Management System 1.0. It has been declared as critical. This vulnerability affects code of the file attendancy.php as the manipulation of the argument search2 leads to sql injection. The attack can be initiated remotely.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.195442; https://vuldb.com/?id.195442
CVE: CVE-2022-1081
Published: 2022-03-29
Description: A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument first_name, middle_name, and surname leads to cross site scripting. The attack can be initiated remotely.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://vuldb.com/?id.195640; https://vuldb.com/?id.195640
CVE: CVE-2022-1082
Published: 2022-03-29
Description: A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1# leads to sql injection. The attack may be initiated remotely.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.195641; https://vuldb.com/?id.195641
CVE: CVE-2022-1083
Published: 2022-03-29
Description: A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customer_type_number/account_number/account_status_number/account_type_number with the input ' and (select * from(select(sleep(10)))Avx) and 'abc' = 'abc leads to sql injection in multiple files. It is possible to launch the attack remotely.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.195642; https://vuldb.com/?id.195642
CVE: CVE-2022-1084
Published: 2022-03-29
Description: A vulnerability classified as critical was found in SourceCodester One Church Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /one_church/userregister.php. The manipulation leads to authentication bypass. The attack can be launched remotely.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287, CWE-287
References: https://vuldb.com/?id.195643; https://vuldb.com/?id.195643
CVE: CVE-2022-1085
Published: 2022-03-29
Description: A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://vuldb.com/?id.194857; https://vuldb.com/?id.194857
CVE: CVE-2022-1086
Published: 2022-03-29
Description: A vulnerability was found in DolphinPHP up to 1.5.0 and classified as problematic. Affected by this issue is the User Management Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/xiahao90/CVEproject/blob/main/DolphinPHPV1.5.0_xss.md; https://vuldb.com/?id.195368; https://github.com/xiahao90/CVEproject/blob/main/DolphinPHPV1.5.0_xss.md
CVE: CVE-2022-1087
Published: 2022-03-29
Description: A vulnerability, which was classified as problematic, has been found in htmly 5.3 whis affects the component Edit Profile Module. The manipulation of the field Title with script tags leads to persistent cross site scripting. The attack may be initiated remotely and requires an authentication. A simple POC has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/liaojia-99/project/blob/main/htmly/1.md; https://github.com/liaojia-99/project/tree/main/htmly; https://vuldb.com/?id.195203
CVE: CVE-2021-46743
Published: 2022-03-29
Description: In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue (e.g., RS256 / HS256) exists via the kid (aka Key ID) header, when multiple types of keys are loaded in a key ring. This allows an attacker to forge tokens that validate under the incorrect key. NOTE: this provides a straightforward way to use the PHP-JWT library unsafely, but might not be considered a vulnerability in the library itself.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-843
References: https://github.com/firebase/php-jwt/issues/351; https://github.com/firebase/php-jwt/issues/351
CVE: CVE-2022-1032
Published: 2022-03-29
Description: Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502, CWE-502
References: https://github.com/crater-invoice/crater/commit/7cde971f8b79579951df98384a5210d25f698af5; https://huntr.dev/bounties/cb9a0393-be34-4021-a06c-00c7791c7622; https://github.com/crater-invoice/crater/commit/7cde971f8b79579951df98384a5210d25f698af5
CVE: CVE-2022-23059
Published: 2022-03-29
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0 via the “Manage Images” tab, which allows an attacker to upload a SVG file containing malicious JavaScript code.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/shopizer-ecommerce/shopizer/commit/6b9f1ecd303b3b724d96bd08095c1a751dcc287e; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-23059; https://github.com/shopizer-ecommerce/shopizer/commit/6b9f1ecd303b3b724d96bd08095c1a751dcc287e
CVE: CVE-2022-23901
Published: 2022-03-29
Description: A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/skvadrik/re2c/issues/394; https://github.com/skvadrik/re2c/issues/394
CVE: CVE-2022-23903
Published: 2022-03-29
Description: A Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6, which allows a login account to access arbitrary functions and cause stored XSS through a fake User-Agent.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pearadmin/pear-admin-think/issues/1; https://github.com/pearadmin/pear-admin-think/issues/1
CVE: CVE-2022-28133
Published: 2022-03-29
Description: Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create BitBucket Server consumers.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2022/03/29/1; https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2639; http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE: CVE-2022-28134
Published: 2022-03-29
Description: Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to create, view, and delete BitBucket Server consumers.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2022/03/29/1; https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2640; http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE: CVE-2022-28135
Published: 2022-03-29
Description: Jenkins instant-messaging Plugin 1.41 and earlier stores passwords for group chats unencrypted in the global configuration file of plugins based on Jenkins instant-messaging Plugin on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2022/03/29/1; https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2161; http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE: CVE-2022-28136
Published: 2022-03-29
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins JiraTestResultReporter Plugin 165.v[PII_REDACTED]42 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://www.openwall.com/lists/oss-security/2022/03/29/1; https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2236; http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE: CVE-2022-28137
Published: 2022-03-29
Description: A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v[PII_REDACTED]42 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2022/03/29/1; https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2236; http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE: CVE-2022-28138
Published: 2022-03-29
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2022/03/29/1; https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2241; http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE: CVE-2022-28139
Published: 2022-03-29
Description: A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2022/03/29/1; https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2241; http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE: CVE-2022-28140
Published: 2022-03-29
Description: Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2022/03/29/1; https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-1896; http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE: CVE-2022-28141
Published: 2022-03-29
Description: Jenkins Proxmox Plugin 0.5.0 and earlier stores the Proxmox Datacenter password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2022/03/29/1; https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2079; http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE: CVE-2022-28142
Published: 2022-03-29
Description: Jenkins Proxmox Plugin 0.6.0 and earlier disables SSL/TLS certificate validation globally for the Jenkins controller JVM when configured to ignore SSL/TLS issues.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2022/03/29/1; https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2081; http://www.openwall.com/lists/oss-security/2022/03/29/1
CVE: CVE-2022-28143
Published: 2022-03-29
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Proxmox Plugin 0.7.0 and earlier allows attackers to connect to an attacker-specified host using attacker-specified username and password (perform a connection test), disable SSL/TLS validation for the entire Jenkins controller JVM as part of the connection test (see CVE-2022-28142), and test a rollback with attacker-specified parameters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2022/03/29/1; https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2082; http://www.openwall.com/lists/oss-security/2022/03/29/1