deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-15598
Published: 2020-10-06
Description: Trustwave ModSecurity 3.x through 3.0.4 allows denial of service via a special request. NOTE: The discoverer reports "Trustwave has signaled they are disputing our claims." The CVE suggests that there is a security issue with how ModSecurity handles regular expressions that can result in a Denial of Service condition. The vendor does not consider this as a security issue because1) there is no default configuration issue here. An attacker would need to know that a rule using a potentially problematic regular expression was in place, 2) the attacker would need to know the basic nature of the regular expression itself to exploit any resource issues. It's well known that regular expression usage can be taxing on system resources regardless of the use case. It is up to the administrator to decide on when it is appropriate to trade resources for potential security benefit
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://packetstormsecurity.com/files/159185/ModSecurity-3.0.x-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2020/Sep/32; https://coreruleset.org/20200914/cve-2020-15598/
CVE: CVE-2020-24216
Published: 2020-10-06
Description: An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. When the administrator configures a secret URL for RTSP streaming, the stream is still available via its default name such as /0. Unauthenticated attackers can view video streams that are meant to be private.
CVSS Score: 7.5 (HIGH)
References: https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/; https://www.kb.cert.org/vuls/id/896979; https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/
CVE: CVE-2020-24217
Published: 2020-10-06
Description: An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpoint does not enforce authentication. Attackers can send an unauthenticated HTTP request to upload a custom firmware component, possibly in conjunction with command injection, to achieve arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://packetstormsecurity.com/files/159597/HiSilicon-Video-Encoder-Command-Injection.html; http://packetstormsecurity.com/files/159599/HiSilicon-Video-Encoder-Malicious-Firmware-Code-Execution.html; https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/
CVE: CVE-2020-24218
Published: 2020-10-06
Description: An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can log in as root via the password that is hard-coded in the executable file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/; https://www.kb.cert.org/vuls/id/896979; https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/
CVE: CVE-2020-24219
Published: 2020-10-06
Description: An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can send crafted unauthenticated HTTP requests to exploit path traversal and pattern-matching programming flaws, and retrieve any file from the device's file system, including the configuration file with the cleartext administrative password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/159595/HiSilicon-Video-Encoder-1.97-File-Disclosure-Path-Traversal.html; https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/; https://www.kb.cert.org/vuls/id/896979
CVE: CVE-2020-25637
Published: 2020-10-06
Description: A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects the polkit access control driver. Specifically, clients connecting to the read-write socket with limited ACL permissions could use this flaw to crash the libvirt daemon, resulting in a denial of service, or potentially escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-415, CWE-415
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00072.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00073.html; https://bugzilla.redhat.com/show_bug.cgi?id=1881037
CVE: CVE-2020-25641
Published: 2020-10-06
Description: A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop, causing a denial of service. This flaw allows a local attacker with basic privileges to issue requests to a block device, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html; http://www.openwall.com/lists/oss-security/2020/10/06/9
CVE: CVE-2020-25643
Published: 2020-10-06
Description: A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html; https://bugzilla.redhat.com/show_bug.cgi?id=1879981
CVE: CVE-2020-25644
Published: 2020-10-06
Description: A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vulnerability is to system availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-401
References: https://bugzilla.redhat.com/show_bug.cgi?id=1885485; https://github.com/wildfly-security/wildfly-openssl-natives/pull/4/files; https://issues.redhat.com/browse/WFSSL-51
CVE: CVE-2020-25802
Published: 2020-10-06
Description: Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior to 3.1.7.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-913, CWE-913
References: https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]; https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]
CVE: CVE-2020-7465
Published: 2020-10-06
Description: The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service (memory corruption).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://sourceforge.net/p/mpd/bugs/70/; https://sourceforge.net/p/mpd/svn/2377/; https://sourceforge.net/p/mpd/bugs/70/
CVE: CVE-2020-7466
Published: 2020-10-06
Description: The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory buffer, which would result in a denial of service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://sourceforge.net/p/mpd/bugs/69/; https://sourceforge.net/p/mpd/svn/2374/; https://sourceforge.net/p/mpd/bugs/69/
CVE: CVE-2020-8781
Published: 2020-10-06
Description: Lack of input sanitization in UpdateRebootMgr service of ALEOS 4.11 and later allow an escalation to root from a low-privilege process.
CVSS Score: 7.8 (HIGH)
References: https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/; https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/
CVE: CVE-2020-8782
Published: 2020-10-06
Description: Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 4.14.0 allows remote code execution.
CVSS Score: 7.5 (HIGH)
References: https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/; https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/
CVE: CVE-2019-19200
Published: 2020-10-06
Description: REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: http://packetstormsecurity.com/files/159455/MailDepot-2032-SP2-2.2.1242-Authorization-Bypass.html; https://www.reddoxx.com/en/products/archiving/; https://www.syss.de/pentest-blog/
CVE: CVE-2020-25742
Published: 2020-10-06
Description: pci_change_irq_level in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because pci_get_bus() might not return a valid pointer.
CVSS Score: 3.2 (LOW)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2020/09/29/1; https://bugzilla.redhat.com/show_bug.cgi?id=1883178; https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05294.html
CVE: CVE-2020-25743
Published: 2020-10-06
Description: hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call.
CVSS Score: 3.2 (LOW)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2020/09/29/1; https://bugzilla.redhat.com/show_bug.cgi?id=1881409; https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05967.html
CVE: CVE-2020-25803
Published: 2020-10-06
Description: Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior to 3.1.7.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-913, CWE-913
References: https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]; https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]
CVE: CVE-2020-25862
Published: 2020-10-06
Description: In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by changing the handling of the invalid 0xFFFF checksum.
CVSS Score: 7.5 (HIGH)
CWE: CWE-354
References: http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00038.html; https://gitlab.com/wireshark/wireshark/-/commit/7f3fe6164a68b76d9988c4253b24d43f498f1753
CVE: CVE-2020-25863
Published: 2020-10-06
Description: In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This was addressed in epan/dissectors/packet-multipart.c by correcting the deallocation of invalid MIME parts.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00038.html; https://gitlab.com/wireshark/wireshark/-/commit/5803c7b87b3414cdb8bf502af50bb406ca774482
CVE: CVE-2020-25866
Published: 2020-10-06
Description: In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed (not uncompressed) messages. This was addressed in epan/dissectors/packet-blip.c by allowing reasonable compression ratios and rejecting ZIP bombs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00038.html; https://gitlab.com/wireshark/wireshark/-/commit/4a948427100b6c109f4ec7b4361f0d2aec5e5c3f
CVE: CVE-2020-26574
Published: 2020-10-06
Description: Leostream Connection Broker 8.2.x is affected by stored XSS. An unauthenticated attacker can inject arbitrary JavaScript code via the webquery.pl User-Agent HTTP header. It is rendered by the admins the next time they log in. The JavaScript injected can be used to force the admin to upload a malicious Perl script that will be executed as root via libMisc::browser_client. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://adepts.of0x.cc/leostream-xss-to-rce/; https://www.leostream.com/resources/product-lifecycle/; https://adepts.of0x.cc/leostream-xss-to-rce/
CVE: CVE-2020-26575
Published: 2020-10-06
Description: In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://gitlab.com/wireshark/wireshark/-/commit/3ff940652962c099b73ae3233322b8697b0d10ab; https://gitlab.com/wireshark/wireshark/-/issues/16887; https://gitlab.com/wireshark/wireshark/-/merge_requests/467
CVE: CVE-2020-7739
Published: 2020-10-06
Description: This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SSRF attack.
CVSS Score: 8.2 (HIGH)
CWE: CWE-918
References: https://github.com/areverberi/phantomjs-seo/blob/083f66892f97d67031668decb917389ffc32a94c/index.js%23L17; https://snyk.io/vuln/SNYK-JS-PHANTOMJSSEO-609638; https://github.com/areverberi/phantomjs-seo/blob/083f66892f97d67031668decb917389ffc32a94c/index.js%23L17
CVE: CVE-2020-7741
Published: 2020-10-06
Description: This affects the package hellojs before 1.18.6. The code get the param oauth_redirect from url and pass it to location.assign without any check and sanitisation. So we can simply pass some XSS payloads into the url param oauth_redirect, such as javascript:alert(1).
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-79
References: https://github.com/MrSwitch/hello.js/blob/3b79ec93781b3d7b9c0b56f598e060301d1f3e73/dist/hello.all.js%23L1545; https://github.com/MrSwitch/hello.js/commit/d6f5137f30de6e0ef7048191ee6ae575fdc2f669; https://snyk.io/vuln/SNYK-JS-HELLOJS-1014546
CVE: CVE-2019-4725
Published: 2020-10-06
Description: IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172131.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/172131; https://www.ibm.com/support/pages/node/6342889; https://exchange.xforce.ibmcloud.com/vulnerabilities/172131
CVE: CVE-2020-26582
Published: 2020-10-06
Description: D-Link DAP-1360U before 3.0.1 devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the IP JSON value for ping (aka res_config_action=3&res_config_id=18).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10191; https://wilomousky.blogspot.com/2020/10/dap-1360u-cmdi.html; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10191
CVE: CVE-2020-4528
Published: 2020-10-06
Description: IBM MQ Appliance (IBM DataPower Gateway 10.0.0.0 and 2018.4.1.0 through 2018.4.1.12) could allow a local user, under special conditions, to obtain highly sensitive information from log files. IBM X-Force ID: 182658.
CVSS Score: 5.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/182658; https://www.ibm.com/support/pages/node/6333033; https://exchange.xforce.ibmcloud.com/vulnerabilities/182658
CVE: CVE-2019-4325
Published: 2020-10-06
Description: "HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details."
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-327
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0082503; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0082503
CVE: CVE-2019-4326
Published: 2020-10-06
Description: "HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header."
CVSS Score: 7.5 (HIGH)
CWE: CWE-116
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0082505; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0082505
CVE: CVE-2020-15174
Published: 2020-10-06
Description: In Electron before versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 the `will-navigate` event that apps use to prevent navigations to unexpected destinations as per our security recommendations can be bypassed when a sub-frame performs a top-frame navigation across sites. The issue is patched in versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 As a workaround sandbox all your iframes using the sandbox attribute. This will prevent them creating top-frame navigations and is good practice anyway.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-693
References: https://github.com/electron/electron/commit/[PII_REDACTED]ba319da7f497b6deed85ad712c59b; https://github.com/electron/electron/security/advisories/GHSA-2q4g-w47c-4674; https://github.com/electron/electron/commit/[PII_REDACTED]ba319da7f497b6deed85ad712c59b
CVE: CVE-2020-15215
Published: 2020-10-06
Description: Electron before versions 11.0.0-beta.6, 10.1.2, 9.3.1 or 8.5.2 is vulnerable to a context isolation bypass. Apps using both `contextIsolation` and `sandbox: true` are affected. Apps using both `contextIsolation` and `nodeIntegrationInSubFrames: true` are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-668, CWE-693
References: https://github.com/electron/electron/security/advisories/GHSA-56pc-6jqp-xqj8; https://github.com/electron/electron/security/advisories/GHSA-56pc-6jqp-xqj8
CVE: CVE-2020-1901
Published: 2020-10-06
Description: Receiving a large text message containing URLs in WhatsApp for iOS prior to v2.20.91.4 could have caused the application to freeze while processing the message.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://www.whatsapp.com/security/advisories/2020/; https://www.whatsapp.com/security/advisories/2020/
CVE: CVE-2020-1902
Published: 2020-10-06
Description: A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from v2.20.35 to v2.20.49 could have been sent to the Google service over plain HTTP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-319
References: https://www.whatsapp.com/security/advisories/2020/; https://www.whatsapp.com/security/advisories/2020/
CVE: CVE-2020-1903
Published: 2020-10-06
Description: An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have resulted in an out-of-memory denial of service. This issue would have required the receiver to explicitly open the attachment if it was received from a number not in the receiver's WhatsApp contacts.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://www.whatsapp.com/security/advisories/2020/; https://www.whatsapp.com/security/advisories/2020/
CVE: CVE-2020-1904
Published: 2020-10-06
Description: A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traversal overwriting files when sending specially crafted docx, xlsx, and pptx files as attachments to messages.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-23, CWE-22
References: https://www.whatsapp.com/security/advisories/2020/; https://www.whatsapp.com/security/advisories/2020/
CVE: CVE-2020-1905
Published: 2020-10-06
Description: Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for Android v2.20.185, which could have allowed a malicious third party app chosen to open the file to guess the URIs for previously opened attachments until the opener app is terminated.
CVSS Score: 3.3 (LOW)
CWE: CWE-340, CWE-330
References: https://www.whatsapp.com/security/advisories/2020/; https://www.whatsapp.com/security/advisories/2020/
CVE: CVE-2020-1906
Published: 2020-10-06
Description: A buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android prior to v2.20.46 could have allowed an out-of-bounds write when processing malformed local videos with E-AC-3 audio streams.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://www.whatsapp.com/security/advisories/2020/; https://www.whatsapp.com/security/advisories/2020/
CVE: CVE-2020-1907
Published: 2020-10-06
Description: A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.90, WhatsApp Business for iOS prior to v2.20.90, and WhatsApp for Portal prior to v173.0.0.29.505 could have allowed arbitrary code execution when parsing the contents of an RTP Extension header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://www.whatsapp.com/security/advisories/2020/; https://www.whatsapp.com/security/advisories/2020/
CVE: CVE-2020-24807
Published: 2020-10-06
Description: The socket.io-file package through 2.0.31 for Node.js relies on client-side validation of file types, which allows remote attackers to execute arbitrary code by uploading an executable file via a modified JSON name field. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/advisories/GHSA-6495-8jvh-f28x; https://github.com/rico345100/socket.io-file; https://www.npmjs.com/advisories/1564
CVE: CVE-2020-7740
Published: 2020-10-06
Description: This affects all versions of package node-pdf-generator. Due to lack of user input validation and sanitization done to the content given to node-pdf-generator, it is possible for an attacker to craft a url that will be passed to an external server allowing an SSRF attack.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20, CWE-918
References: https://github.com/darrenhaken/node-pdf-generator/blob/master/index.js%23L29; https://snyk.io/vuln/SNYK-JS-NODEPDFGENERATOR-609636; https://github.com/darrenhaken/node-pdf-generator/blob/master/index.js%23L29
CVE: CVE-2020-13333
Published: 2020-10-06
Description: A potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3. The api to update an asset as a link from a release had a regex check which caused exponential number of backtracks for certain user supplied values resulting in high CPU usage.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13333.json; https://gitlab.com/gitlab-org/gitlab/-/issues/218753; https://hackerone.com/reports/870820
CVE: CVE-2020-13343
Published: 2020-10-06
Description: An issue has been discovered in GitLab affecting all versions starting from 11.2. Unauthorized Users Can View Custom Project Template
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13343.json; https://gitlab.com/gitlab-org/gitlab/-/issues/14861; https://hackerone.com/reports/689314