deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-36057
Published: 2021-09-01
Description: XMP Toolkit SDK version 2020.1 (and earlier) is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of the current user.
CVSS Score: 3.3 (LOW)
CWE: CWE-123
References: https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html; https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html; https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html
CVE: CVE-2021-36058
Published: 2021-09-01
Description: XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Integer Overflow vulnerability potentially resulting in application-level denial of service in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html; https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html; https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html
CVE: CVE-2021-36059
Published: 2021-09-01
Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/bridge/apsb21-69.html; https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE: CVE-2021-36061
Published: 2021-09-01
Description: Adobe Connect version 11.2.2 (and earlier) is affected by a secure design principles violation vulnerability via the 'pbMode' parameter. An unauthenticated attacker could leverage this vulnerability to edit or delete recordings on the Connect environment. Exploitation of this issue requires user interaction in that a victim must publish a link of a Connect recording.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-657
References: https://helpx.adobe.com/security/products/connect/apsb21-66.html; https://helpx.adobe.com/security/products/connect/apsb21-66.html
CVE: CVE-2021-36062
Published: 2021-09-01
Description: Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/connect/apsb21-66.html; https://helpx.adobe.com/security/products/connect/apsb21-66.html
CVE: CVE-2021-36063
Published: 2021-09-01
Description: Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/connect/apsb21-66.html; https://helpx.adobe.com/security/products/connect/apsb21-66.html
CVE: CVE-2021-36064
Published: 2021-09-01
Description: XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-124
References: https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html; https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html; https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html
CVE: CVE-2021-36065
Published: 2021-09-01
Description: Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by a heap-based buffer overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb21-68.html; https://helpx.adobe.com/security/products/photoshop/apsb21-68.html
CVE: CVE-2021-36066
Published: 2021-09-01
Description: Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb21-68.html; https://helpx.adobe.com/security/products/photoshop/apsb21-68.html
CVE: CVE-2021-36067
Published: 2021-09-01
Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/bridge/apsb21-69.html; https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE: CVE-2021-36068
Published: 2021-09-01
Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/bridge/apsb21-69.html; https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE: CVE-2021-36069
Published: 2021-09-01
Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/bridge/apsb21-69.html; https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE: CVE-2021-36070
Published: 2021-09-01
Description: Adobe Media Encoder version 15.1 (and earlier) is affected by an improper memory access vulnerability when parsing a crafted .SVG file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/media-encoder/apsb21-70.html; https://helpx.adobe.com/security/products/media-encoder/apsb21-70.html
CVE: CVE-2021-36071
Published: 2021-09-01
Description: Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb21-69.html; https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE: CVE-2021-36072
Published: 2021-09-01
Description: Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb21-69.html; https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE: CVE-2021-36073
Published: 2021-09-01
Description: Adobe Bridge version 11.1 (and earlier) is affected by a heap-based buffer overflow vulnerability when parsing a crafted .SGI file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb21-69.html; https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE: CVE-2021-36074
Published: 2021-09-01
Description: Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb21-69.html; https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE: CVE-2021-36075
Published: 2021-09-01
Description: Adobe Bridge version 11.1 (and earlier) is affected by a Buffer Overflow vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://helpx.adobe.com/security/products/bridge/apsb21-69.html; https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE: CVE-2021-36076
Published: 2021-09-01
Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/bridge/apsb21-69.html; https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE: CVE-2021-36077
Published: 2021-09-01
Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in local application denial of service in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/bridge/apsb21-69.html; https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE: CVE-2021-36078
Published: 2021-09-01
Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/bridge/apsb21-69.html; https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE: CVE-2021-36079
Published: 2021-09-01
Description: Adobe Bridge version 11.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted .SGI file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb21-69.html; https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE: CVE-2021-39320
Published: 2021-09-01
Description: The underConstruction plugin <= 1.18 for WordPress echoes out the raw value of `$GLOBALS['PHP_SELF']` in the ucOptions.php file. On certain configurations including Apache+modPHP, this makes it possible to use it to perform a reflected Cross-Site Scripting attack by injecting malicious code in the request path.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/49ae1df0-d6d2-4cbb-9a9d-bf[PII_REDACTED]; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39320; https://wpscan.com/vulnerability/49ae1df0-d6d2-4cbb-9a9d-bf[PII_REDACTED]
CVE: CVE-2021-39816
Published: 2021-09-01
Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/bridge/apsb21-69.html; https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE: CVE-2021-39817
Published: 2021-09-01
Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/bridge/apsb21-69.html; https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE: CVE-2021-39847
Published: 2021-09-01
Description: XMP Toolkit SDK version 2020.1 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html; https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html; https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html
CVE: CVE-2021-40350
Published: 2021-09-01
Description: webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative cookie that the device does not validate.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://securityshards.wordpress.com/2021/08/31/cve-pending-christie-dwu850-gs-authentication-bypass/; https://securityshards.wordpress.com/2021/08/31/cve-pending-christie-dwu850-gs-authentication-bypass/
CVE: CVE-2021-29851
Published: 2021-09-01
Description: IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527.
CVSS Score: 4.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/205527; https://www.ibm.com/support/pages/node/6480413; https://exchange.xforce.ibmcloud.com/vulnerabilities/205527
CVE: CVE-2021-29852
Published: 2021-09-01
Description: IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205528.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/205528; https://www.ibm.com/support/pages/node/6480413; https://exchange.xforce.ibmcloud.com/vulnerabilities/205528
CVE: CVE-2021-29853
Published: 2021-09-01
Description: IBM Planning Analytics 2.0 could expose information that could be used to to create attacks by not validating the return values from some methods or functions. IBM X-Force ID: 205529.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-252
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/205529; https://www.ibm.com/support/pages/node/6480413; https://exchange.xforce.ibmcloud.com/vulnerabilities/205529
CVE: CVE-2021-23436
Published: 2021-09-01
Description: This affects the package immer before 9.0.6. A type confusion vulnerability can lead to a bypass of CVE-2020-28477 when the user-provided keys used in the path parameter are arrays. In particular, this bypass is possible because the condition (p === "__proto__" || p === "constructor") in applyPatches_ returns false if p is ['__proto__'] (or ['constructor']). The === operator (strict equality operator) returns false if the operands have different type.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-843
References: https://github.com/immerjs/immer/commit/fa671e55ee9bd42ae08cc239102b665a23958237; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1579266; https://snyk.io/vuln/SNYK-JS-IMMER-1540542
CVE: CVE-2021-30354
Published: 2021-09-01
Description: Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand() and results in a memory corruption that leads to code execution when parsing a crafted PDF book.
CVSS Score: 8.6 (HIGH)
CWE: CWE-680, CWE-190
References: https://research.checkpoint.com/2021/i-can-take-over-your-kindle/; https://research.checkpoint.com/2021/i-can-take-over-your-kindle/
CVE: CVE-2021-34435
Published: 2021-09-01
Description: In Eclipse Theia 0.3.9 to 1.8.1, the "mini-browser" extension allows a user to preview HTML files in an iframe inside the IDE. But with the way it is made it is possible for a previewed HTML file to trigger an RCE. This exploit only happens if a user previews a malicious file..
CVSS Score: 8.8 (HIGH)
CWE: CWE-942, CWE-346
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=568018; https://bugs.eclipse.org/bugs/show_bug.cgi?id=568018
CVE: CVE-2021-40378
Published: 2021-09-01
Description: An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. /cgi-bin/support/killps.cgi deletes all data from the device.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: http://packetstormsecurity.com/files/164024/Compro-Technology-IP-Camera-Denial-Of-Service.html; https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md; http://packetstormsecurity.com/files/164024/Compro-Technology-IP-Camera-Denial-Of-Service.html
CVE: CVE-2021-40379
Published: 2021-09-01
Description: An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. rstp://.../medias2 does not require authorization.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: http://packetstormsecurity.com/files/164026/Compro-Technology-IP-Camera-RTSP-Stream-Disclosure.html; https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md; http://packetstormsecurity.com/files/164026/Compro-Technology-IP-Camera-RTSP-Stream-Disclosure.html
CVE: CVE-2021-40380
Published: 2021-09-01
Description: An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. cameralist.cgi and setcamera.cgi disclose credentials.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/164027/Compro-Technology-IP-Camera-Credential-Disclosure.html; https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md; http://packetstormsecurity.com/files/164027/Compro-Technology-IP-Camera-Credential-Disclosure.html
CVE: CVE-2021-40381
Published: 2021-09-01
Description: An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. index_MJpeg.cgi allows video access.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/164031/Compro-Technology-IP-Camera-Stream-Disclosure.html; https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md; http://packetstormsecurity.com/files/164031/Compro-Technology-IP-Camera-Stream-Disclosure.html
CVE: CVE-2021-40382
Published: 2021-09-01
Description: An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. mjpegStreamer.cgi allows video screenshot access.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/164032/Compro-Technology-IP-Camera-Screenshot-Disclosure.html; https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md; http://packetstormsecurity.com/files/164032/Compro-Technology-IP-Camera-Screenshot-Disclosure.html
CVE: CVE-2021-23438
Published: 2021-09-01
Description: This affects the package mpath before 0.8.4. A type confusion vulnerability can lead to a bypass of CVE-2018-16490. In particular, the condition ignoreProperties.indexOf(parts[i]) !== -1 returns -1 if parts[i] is ['__proto__']. This is because the method that has been called if the input is an array is Array.prototype.indexOf() and not String.prototype.indexOf(). They behave differently depending on the type of the input.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-843
References: https://github.com/aheckmann/mpath/commit/89402d2880d4ea3518480a8c9847c541f2d824fc; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1579548; https://snyk.io/vuln/SNYK-JS-MPATH-1577289
CVE: CVE-2021-30355
Published: 2021-09-01
Description: Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges, allowing the framework user to elevate privileges to root.
CVSS Score: 8.6 (HIGH)
CWE: CWE-269, CWE-269
References: https://research.checkpoint.com/2021/i-can-take-over-your-kindle/; https://research.checkpoint.com/2021/i-can-take-over-your-kindle/
CVE: CVE-2020-20340
Published: 2021-09-01
Description: A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/mntn0x/POC/blob/master/S-CMS/S-CMS-SQL%E6%B3%A8%E5%85%A5.md; https://github.com/mntn0x/POC/blob/master/S-CMS/S-CMS-SQL%E6%B3%A8%E5%85%A5.md
CVE: CVE-2020-20341
Published: 2021-09-01
Description: YzmCMS v5.5 contains a server-side request forgery (SSRF) in the grab_image() function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/yzmcms/yzmcms/issues/44; https://github.com/yzmcms/yzmcms/issues/44
CVE: CVE-2021-39181
Published: 2021-09-01
Description: OpenOlat is a web-based learning management system (LMS). Prior to version 15.3.18, 15.5.3, and 16.0.0, using a prepared import XML file (e.g. a course) any class on the Java classpath can be instantiated, including spring AOP bean factories. This can be used to execute code arbitrary code by the attacker. The attack requires an OpenOlat user account with the authoring role. It can not be exploited by unregistered users. The problem is fixed in versions 15.3.18, 15.5.3, and 16.0.0. There are no known workarounds aside from upgrading.
CVSS Score: 8.8 (HIGH)
CWE: CWE-91
References: https://github.com/OpenOLAT/OpenOLAT/commit/3f219ac457afde82e3be57bc614352ab92c05684; https://github.com/OpenOLAT/OpenOLAT/security/advisories/GHSA-596v-3gwh-2m9w; https://jira.openolat.org/browse/OO-5548
CVE: CVE-2021-39185
Published: 2021-09-01
Description: Http4s is a minimal, idiomatic Scala interface for HTTP services. In http4s versions 0.21.26 and prior, 0.22.0 through 0.22.2, 0.23.0, 0.23.1, and 1.0.0-M1 through 1.0.0-M24, the default CORS configuration is vulnerable to an origin reflection attack. The middleware is also susceptible to a Null Origin Attack. The problem is fixed in 0.21.27, 0.22.3, 0.23.2, and 1.0.0-M25. The original `CORS` implementation and `CORSConfig` are deprecated. See the GitHub GHSA for more information, including code examples and workarounds.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-346
References: https://github.com/http4s/http4s/releases/tag/v0.23.2; https://github.com/http4s/http4s/security/advisories/GHSA-52cf-226f-rhr6; https://github.com/http4s/http4s/releases/tag/v0.23.2