deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-4399
Published: 2022-12-10
Description: A vulnerability was found in TicklishHoneyBee nodau. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/db.c. The manipulation of the argument value/name leads to sql injection. The name of the patch is 7a7d737a3929f335b9717ddbd31db91151b69ad2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215252.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-707, CWE-89
References: https://github.com/TicklishHoneyBee/nodau/commit/7a7d737a3929f335b9717ddbd31db91151b69ad2; https://github.com/TicklishHoneyBee/nodau/pull/26; https://vuldb.com/?id.215252
CVE: CVE-2022-4400
Published: 2022-12-11
Description: A vulnerability was found in zbl1996 FS-Blog and classified as problematic. This issue affects some unknown processing of the component Title Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-215267.
CVSS Score: 3.5 (LOW)
CWE: CWE-707, CWE-79
References: https://gitee.com/zbl1996/FS-Blog/issues/I5Y6ZQ; https://vuldb.com/?id.215267; https://gitee.com/zbl1996/FS-Blog/issues/I5Y6ZQ
CVE: CVE-2022-4401
Published: 2022-12-11
Description: A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-215268.
CVSS Score: 3.5 (LOW)
CWE: CWE-707, CWE-79
References: https://gitee.com/pallidlight/online-course-selection-system/issues/I5XNHW; https://vuldb.com/?id.215268; https://gitee.com/pallidlight/online-course-selection-system/issues/I5XNHW
CVE: CVE-2022-4402
Published: 2022-12-11
Description: A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-215271.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://gitee.com/RainyGao/DocSys/issues/I65IYU; https://github.com/A-TGAO/MxsDocVul/blob/main/ZipSlipVul.md; https://vuldb.com/?id.215271
CVE: CVE-2022-4403
Published: 2022-12-11
Description: A vulnerability classified as critical was found in SourceCodester Canteen Management System. This vulnerability affects unknown code of the file ajax_represent.php. The manipulation of the argument customer_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-215272.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-707, CWE-89
References: https://blog.csdn.net/hzwsuki/article/details/128277038; https://vuldb.com/?id.215272; https://blog.csdn.net/hzwsuki/article/details/128277038
CVE: CVE-2022-4407
Published: 2022-12-11
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/1d73af34bf42764f9f9491c7ba5e9495d70e3ca5; https://huntr.dev/bounties/a1649f43-78c9-4927-b[PII_REDACTED]2a84b; https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2022-4407.md
CVE: CVE-2022-4408
Published: 2022-12-11
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.9.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/e2ea332a2b5e798f2c39203b2489a2dabe831751; https://huntr.dev/bounties/2ec4ddd4-de22-4f2d-ba92-3382b452bfea; https://github.com/thorsten/phpmyfaq/commit/e2ea332a2b5e798f2c39203b2489a2dabe831751
CVE: CVE-2022-4409
Published: 2022-12-11
Description: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.1.9.
CVSS Score: 7.5 (HIGH)
CWE: CWE-614, CWE-311
References: https://github.com/thorsten/phpmyfaq/commit/8b47f38; https://huntr.dev/bounties/5915ed4c-5fe2-42e7-8fac-5dd0d032727c; https://github.com/thorsten/phpmyfaq/commit/8b47f38
CVE: CVE-2022-4413
Published: 2022-12-12
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/nuxt/framework/commit/253c8f7ee0c0c580c44dedbe[PII_REDACTED]e90a1e; https://huntr.dev/bounties/70ac720d-c932-4ed3-98b1-dd2cbcb90185; https://github.com/nuxt/framework/commit/253c8f7ee0c0c580c44dedbe[PII_REDACTED]e90a1e
CVE: CVE-2022-4414
Published: 2022-12-12
Description: Cross-site Scripting (XSS) - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/nuxt/framework/commit/19a2cd14929ca9b55720cb81f71687830a9e59a4; https://huntr.dev/bounties/131a41e5-c936-4c3f-84fc-e0e1f0e090b5; https://github.com/nuxt/framework/commit/19a2cd14929ca9b55720cb81f71687830a9e59a4
CVE: CVE-2022-44031
Published: 2022-12-12
Description: Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization of the blockquote syntax in Textile-formatted fields.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.redmine.org/projects/redmine/wiki/Security_Advisories; https://www.redmine.org/projects/redmine/wiki/Security_Advisories
CVE: CVE-2022-44637
Published: 2022-12-12
Description: Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization in Redcloth3 Textile-formatted fields. Depending on the configuration, this may require login as a registered user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.redmine.org/projects/redmine/wiki/Security_Advisories; https://www.redmine.org/projects/redmine/wiki/Security_Advisories
CVE: CVE-2022-45227
Published: 2022-12-12
Description: The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-552
References: https://sectrio.com/vulnerability-research/cve-2022-45227/; https://sectrio.com/vulnerability-research/cve-2022-45227/
CVE: CVE-2022-45228
Published: 2022-12-12
Description: Dragino Lora LG01 18ed40 IoT v4.3.4 was discovered to contain a Cross-Site Request Forgery in the logout page.
CVSS Score: 3.5 (LOW)
CWE: CWE-352, CWE-352
References: https://sectrio.com/vulnerability-research/cve-2022-45228/; https://sectrio.com/vulnerability-research/cve-2022-45228/
CVE: CVE-2022-45756
Published: 2022-12-12
Description: SENS v1.0 is vulnerable to Cross Site Scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/saysky/SENS/issues/17; https://github.com/saysky/SENS/issues/17
CVE: CVE-2022-45758
Published: 2022-12-12
Description: SENS v1.0 is vulnerable to Cross Site Scripting (XSS) via com.liuyanzhao.sens.web.controller.admin, getRegister.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/saysky/SENS/issues/19; https://github.com/saysky/SENS/issues/19
CVE: CVE-2022-45759
Published: 2022-12-12
Description: SENS v1.0 has a file upload vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/saysky/SENS/issues/20; https://github.com/saysky/SENS/issues/20
CVE: CVE-2022-45760
Published: 2022-12-12
Description: SENS v1.0 is vulnerable to Incorrect Access Control vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://github.com/saysky/SENS/issues/21; https://github.com/saysky/SENS/issues/21
CVE: CVE-2022-25836
Published: 2022-12-12
Description: Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when the MITM negotiates Legacy Passkey Pairing with the pairing Initiator and Secure Connections Passkey Pairing with the pairing Responder and brute forces the Passkey entered by the user into the Initiator. The MITM attacker can use the identified Passkey value to complete authentication with the Responder via Bluetooth pairing method confusion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-294, CWE-294
References: https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/; https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/
CVE: CVE-2022-25837
Published: 2022-12-12
Description: Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when at least one device supports BR/EDR Secure Connections pairing and the other BR/EDR Legacy PIN code pairing if the MITM negotiates BR/EDR Secure Simple Pairing in Secure Connections mode using the Passkey association model with the pairing Initiator and BR/EDR Legacy PIN code pairing with the pairing Responder and brute forces the Passkey entered by the user into the Responder as a 6-digit PIN code. The MITM attacker can use the identified PIN code value as the Passkey value to complete authentication with the Initiator via Bluetooth pairing method confusion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-294, CWE-294
References: https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/; https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/
CVE: CVE-2022-31596
Published: 2022-12-12
Description: Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Network in SAP BusinessObjects Business Intelligence Platform (Monitoring DB) - version 430, can access BOE Monitoring database to retrieve and modify (non-personal) system data which would otherwise be restricted. Also, a potential attack could be used to leave the CMS's scope and impact the database. 



A successful attack could have a low impact on confidentiality, a high impact on integrity, and a low impact on availability.




CVSS Score: 6.0 (MEDIUM)
CWE: CWE-668
References: https://launchpad.support.sap.com/#/notes/3213507; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3213507
CVE: CVE-2022-46908
Published: 2022-12-12
Description: SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.
CVSS Score: 7.3 (HIGH)
References: https://news.ycombinator.com/item?id=33948588; https://security.gentoo.org/glsa/202311-03; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-4416
Published: 2022-12-12
Description: A vulnerability was found in RainyGao DocSys. It has been declared as critical. This vulnerability affects the function getReposAllUsers of the file /DocSystem/Repos/getReposAllUsers.do. The manipulation of the argument searchWord/reposId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-215278 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-707, CWE-89
References: https://gitee.com/RainyGao/DocSys/issues/I65QEE; https://vuldb.com/?id.215278; https://gitee.com/RainyGao/DocSys/issues/I65QEE
CVE: CVE-2021-38997
Published: 2022-12-12
Description: IBM API Connect V10.0.0.0 through V10.0.5.0, V10.0.1.0 through V10.0.1.7, and V2018.4.1.0 through 2018.4.1.19 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.  This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.  IBM X-Force ID:  213212.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-644, CWE-116
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/213212; https://www.ibm.com/support/pages/node/6842621; https://exchange.xforce.ibmcloud.com/vulnerabilities/213212
CVE: CVE-2022-20686
Published: 2022-12-12
Description: Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart.
 These vulnerabilities are due to missing length validation of certain LLDP packet header fields. An attacker could exploit these vulnerabilities by sending a malicious LLDP packet to an affected device. A successful exploit could allow the attacker to execute code on the affected device and cause LLDP to restart unexpectedly, resulting in a denial of service (DoS) condition.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-130, CWE-1284
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs
CVE: CVE-2022-20687
Published: 2022-12-12
Description: Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart.
 These vulnerabilities are due to missing length validation of certain LLDP packet header fields. An attacker could exploit these vulnerabilities by sending a malicious LLDP packet to an affected device. A successful exploit could allow the attacker to execute code on the affected device and cause LLDP to restart unexpectedly, resulting in a denial of service (DoS) condition.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120, CWE-1284
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs
CVE: CVE-2022-20688
Published: 2022-12-12
Description: A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause Cisco Discovery Protocol service to restart.
 This vulnerability is due to missing length validation of certain Cisco Discovery Protocol packet header fields. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to execute code on the affected device and cause Cisco Discovery Protocol to restart unexpectedly, resulting in a DoS condition.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-1284
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs
CVE: CVE-2022-20689
Published: 2022-12-12
Description: Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device.
 These vulnerabilities are due to missing length validation checks when processing Cisco Discovery Protocol messages. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to cause an out-of-bounds read of the valid Cisco Discovery Protocol packet data, which could allow the attacker to cause corruption in the internal Cisco Discovery Protocol database of the affected device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-130, CWE-1284
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs
CVE: CVE-2022-20690
Published: 2022-12-12
Description: Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device.
 These vulnerabilities are due to missing length validation checks when processing Cisco Discovery Protocol messages. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to cause an out-of-bounds read of the valid Cisco Discovery Protocol packet data, which could allow the attacker to cause corruption in the internal Cisco Discovery Protocol database of the affected device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-130, CWE-1284
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs
CVE: CVE-2022-20691
Published: 2022-12-12
Description: A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause a DoS condition of an affected device.
 This vulnerability is due to missing length validation of certain Cisco Discovery Protocol packet header fields. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol packets to an affected device. A successful exploit could allow the attacker to cause the device to exhaust available memory and cause the service to restart.
 Cisco has released firmware updates that address this vulnerability.  

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-1284
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs
CVE: CVE-2022-20968
Published: 2022-12-12
Description: A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenticated, adjacent attacker to cause a stack overflow on an affected device.

This vulnerability is due to insufficient input validation of received Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol traffic to an affected device. A successful exploit could allow the attacker to cause a stack overflow, resulting in possible remote code execution or a denial of service (DoS) condition on an affected device.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787, CWE-787
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipp-oobwrite-8cMF5r7U; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipp-oobwrite-8cMF5r7U
CVE: CVE-2022-3641
Published: 2022-12-12
Description: Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows an authenticated user to spoof a privileged account.

CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://devolutions.net/security/advisories/DEVO-2022-0010; https://devolutions.net/security/advisories/DEVO-2022-0010
CVE: CVE-2022-41296
Published: 2022-12-12
Description: IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 237210.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/237210; https://www.ibm.com/support/pages/node/6843071; https://exchange.xforce.ibmcloud.com/vulnerabilities/237210
CVE: CVE-2022-45797
Published: 2022-12-12
Description: An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges and delete files on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.1 (HIGH)
References: https://success.trendmicro.com/solution/000291830; https://success.trendmicro.com/solution/000291830
CVE: CVE-2022-46682
Published: 2022-12-12
Description: Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611, CWE-611
References: https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2940; https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2940
CVE: CVE-2022-46683
Published: 2022-12-12
Description: Jenkins Google Login Plugin 1.4 through 1.6 (both inclusive) improperly determines that a redirect URL after login is legitimately pointing to Jenkins.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2967; https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2967
CVE: CVE-2022-46684
Published: 2022-12-12
Description: Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2869; https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2869
CVE: CVE-2022-46685
Published: 2022-12-12
Description: In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2661; https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2661
CVE: CVE-2022-46686
Published: 2022-12-12
Description: Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display names on the Custom Build Properties and Build Summary pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set or change these values.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2810; https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2810
CVE: CVE-2022-46687
Published: 2022-12-12
Description: Jenkins Spring Config Plugin 2.0.0 and earlier does not escape build display names shown on the Spring Config view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to change build display names.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2814; https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2814
CVE: CVE-2022-46688
Published: 2022-12-12
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows attackers to have Jenkins connect to Gerrit servers (previously configured by Jenkins administrators) using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-1002; https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-1002