deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-14190
Published: 2020-11-25
Description: Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL. The affected versions are before version 4.8.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://jira.atlassian.com/browse/CRUC-8498; https://jira.atlassian.com/browse/FE-7336; https://jira.atlassian.com/browse/CRUC-8498
CVE: CVE-2020-29074
Published: 2020-11-25
Description: scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other than the current user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://github.com/LibVNC/x11vnc/commit/69eeb9f7baa14ca03b16c9de821f9876def7a36a; https://lists.debian.org/debian-lts-announce/2020/12/msg00018.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2FLWSVH32O6JXLRQBYDQLP7XRSTLUPQ/
CVE: CVE-2020-25651
Published: 2020-11-26
Description: A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an illegitimate local user in the VM system. Active file transfers from other users could also be interrupted, resulting in a denial of service. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://bugzilla.redhat.com/show_bug.cgi?id=1886359; https://lists.debian.org/debian-lts-announce/2021/01/msg00012.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GQT56LATVTB2DJOVVJOKQVMVUXYCT2VB/
CVE: CVE-2020-25652
Published: 2020-11-26
Description: A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket in `/run/spice-vdagentd/spice-vdagent-sock`. Any unprivileged local guest user could use this flaw to prevent legitimate agents from connecting to the spice-vdagentd daemon, resulting in a denial of service. The highest threat from this vulnerability is to system availability. This flaw affects spice-vdagent versions 0.20 and prior.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://bugzilla.redhat.com/show_bug.cgi?id=1886366; https://lists.debian.org/debian-lts-announce/2021/01/msg00012.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GQT56LATVTB2DJOVVJOKQVMVUXYCT2VB/
CVE: CVE-2020-25653
Published: 2020-11-26
Description: A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd, possibly resulting in a denial of service or information leakage from the host. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://bugzilla.redhat.com/show_bug.cgi?id=1886372; https://lists.debian.org/debian-lts-announce/2021/01/msg00012.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GQT56LATVTB2DJOVVJOKQVMVUXYCT2VB/
CVE: CVE-2020-27251
Published: 2020-11-26
Description: A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious port ranges, which could result in remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-329-01; https://us-cert.cisa.gov/ics/advisories/icsa-20-329-01
CVE: CVE-2020-27253
Published: 2020-11-26
Description: A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to specifically craft a malicious packet resulting in a denial-of-service condition on the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-329-01; https://us-cert.cisa.gov/ics/advisories/icsa-20-329-01
CVE: CVE-2020-27255
Published: 2020-11-26
Description: A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious set attribute requests, which could result in the leaking of sensitive information. This information disclosure could lead to the bypass of address space layout randomization (ASLR).
CVSS Score: 7.5 (HIGH)
CWE: CWE-122
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-329-01; https://us-cert.cisa.gov/ics/advisories/icsa-20-329-01
CVE: CVE-2020-29128
Published: 2020-11-26
Description: petl before 1.68, in some configurations, allows resolution of entities in an XML document.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-91
References: https://github.com/nvn1729/advisories/blob/master/cve-2020-29128.md; https://github.com/petl-developers/petl/compare/v1.6.7...v1.6.8; https://github.com/petl-developers/petl/issues/526
CVE: CVE-2020-7778
Published: 2020-11-26
Description: This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an object, which can lead to executing OS commands.
CVSS Score: 7.3 (HIGH)
CWE: CWE-78
References: https://gist.github.com/EffectRenan/b434438938eed0b21b376cedf5c81e80; https://github.com/sebhildebrandt/systeminformation/blob/master/lib/internet.js; https://github.com/sebhildebrandt/systeminformation/commit/11103a447ab9550c25f1fbec7e6d903720b3fea8%23diff-970ae648187190f86bafc8f193b7538200eba164fad0674428b6487582c089cc
CVE: CVE-2020-7779
Published: 2020-11-26
Description: All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://snyk.io/vuln/SNYK-JS-DJVALIDATOR-1018709; https://snyk.io/vuln/SNYK-JS-DJVALIDATOR-1018709
CVE: CVE-2020-13886
Published: 2020-11-26
Description: Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?page=../ Directory Traversal.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/lucxssouza/CVE-2020-13886; https://lucxs.medium.com/cve-2020-13886-lfi-voip-intelbras-d30f27a39b22; https://www.youtube.com/watch?v=nNKBRx8IglI
CVE: CVE-2020-27207
Published: 2020-11-26
Description: Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlite3.c. A remote denial of service attack can be performed. For example, a SQL injection can be used to execute the crafted SQL command sequence. After that, some unexpected RAM data is read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://github.com/sqlcipher/sqlcipher/compare/v4.4.0...v4.4.1; https://www.telekom.com/en/corporate-responsibility/data-protection-data-security/security/details/advisories-504842; https://www.telekom.com/resource/blob/612796/9f221708832a465f03585a45d7f59b45/dl-201112-denial-of-serviceen-data.pdf
CVE: CVE-2020-27662
Published: 2020-11-26
Description: In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any database table (e.g., glpi_tickets, glpi_users, etc.).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-wq38-gwxp-8p5p; https://github.com/glpi-project/glpi/security/advisories/GHSA-wq38-gwxp-8p5p
CVE: CVE-2020-27663
Published: 2020-11-26
Description: In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any itemType (e.g., Ticket, Users, etc.).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-pqfv-4pvr-55r4; https://github.com/glpi-project/glpi/security/advisories/GHSA-pqfv-4pvr-55r4
CVE: CVE-2020-29065
Published: 2020-11-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none
CVE: CVE-2020-29042
Published: 2020-11-26
Description: An issue was discovered in BigBlueButton through 2.2.29. A brute-force attack may occur because an unlimited number of codes can be entered for a meeting that is protected by an access code.
CVSS Score: 3.7 (LOW)
CWE: CWE-307
References: http://packetstormsecurity.com/files/160238/BigBlueButton-2.2.29-Brute-Force.html; https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://github.com/bigbluebutton/bigbluebutton/releases
CVE: CVE-2020-29043
Published: 2020-11-26
Description: An issue was discovered in BigBlueButton through 2.2.29. When at attacker is able to view an account_activations/edit?token= URI, the attacker can create an approved user account associated with an email address that has an arbitrary domain name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/160239/BigBlueButton-2.2.29-E-mail-Validation-Bypass.html; https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://github.com/bigbluebutton/bigbluebutton/releases
CVE: CVE-2020-26936
Published: 2020-11-26
Description: Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://docs.cloudera.com/data-engineering/cloud/overview/topics/cde-service-overview.html; https://my.cloudera.com/knowledge/TSB-2020-447-Cross-Site-Request-Forgery-vulnerability-in-CDE?id=304992; https://docs.cloudera.com/data-engineering/cloud/overview/topics/cde-service-overview.html
CVE: CVE-2020-29129
Published: 2020-11-26
Description: ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2020/11/27/1; https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45S5IHSWYITJKMRT23HCHJQDI674AMTQ/
CVE: CVE-2020-29130
Published: 2020-11-26
Description: slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2020/11/27/1; https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html
CVE: CVE-2020-12262
Published: 2020-11-27
Description: Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.skullsec.com.br/CVE-2020-12262/; https://lucxs.medium.com/cve-2020-12262-xss-voip-intelbras-d5697e31fbf6; https://www.youtube.com/watch?v=rihboOgiJRs
CVE: CVE-2020-29133
Published: 2020-11-27
Description: jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/fa1c0n1/fa1c0n-vim/blob/master/temp/core_tmp.md; https://github.com/fa1c0n1/fa1c0n-vim/blob/master/temp/core_tmp.md
CVE: CVE-2020-29135
Published: 2020-11-27
Description: cPanel before 90.0.17 has multiple instances of URL parameter injection (SEC-567).
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-838
References: https://docs.cpanel.net/changelogs/90-change-log/; https://news.cpanel.com/cpanel-tsr-2020-0007-full-disclosure/; https://docs.cpanel.net/changelogs/90-change-log/
CVE: CVE-2020-29136
Published: 2020-11-27
Description: In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach (SEC-575).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-307
References: https://docs.cpanel.net/changelogs/90-change-log/; https://news.cpanel.com/cpanel-tsr-2020-0007-full-disclosure/; https://www.digitaldefense.com/news/zero-day-cpanel-and-webhost-manager/
CVE: CVE-2020-29137
Published: 2020-11-27
Description: cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface (SEC-577).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.cpanel.net/changelogs/90-change-log/; https://news.cpanel.com/cpanel-tsr-2020-0007-full-disclosure/; https://docs.cpanel.net/changelogs/90-change-log/
CVE: CVE-2020-29144
Published: 2020-11-27
Description: In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or exploiting admins' browsers by using the beef framework.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://the-it-wonders.blogspot.com/2020/01/ericsson-bscs-ix-r18-billing-rating.html; http://the-it-wonders.blogspot.com/2020/01/ericsson-bscs-ix-r18-billing-rating.html
CVE: CVE-2020-29145
Published: 2020-11-27
Description: In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a solutionUnitServlet?SuName=UserReferenceDataSU Access Rights Group. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or exploiting admins' browsers by using the beef framework.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://the-it-wonders.blogspot.com/2020/01/ericsson-bscs-ix-r18-billing-rating.html; http://the-it-wonders.blogspot.com/2020/01/ericsson-bscs-ix-r18-billing-rating.html
CVE: CVE-2020-25738
Published: 2020-11-27
Description: CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-427
References: https://gist.github.com/inc0d3/47294c1e73ef8cbdc098e739d086efbc; https://www.cyberark.com/resources/blog/introducing-cyberark-endpoint-privilege-manager; https://gist.github.com/inc0d3/47294c1e73ef8cbdc098e739d086efbc
CVE: CVE-2019-19869
Published: 2020-11-27
Description: An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed (unencrypted) by using the IosHttp service and the JSON interface.
CVSS Score: 7.5 (HIGH)
References: https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf; https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf
CVE: CVE-2019-19872
Published: 2020-11-27
Description: An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf; https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf
CVE: CVE-2020-29138
Published: 2020-11-27
Description: Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET_4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://medium.com/%40alexandrevvo/improper-access-control-in-the-sagemcom-router-model-f-st3486-net-797968e8adc8; https://medium.com/%40alexandrevvo/improper-access-control-in-the-sagemcom-router-model-f-st3486-net-797968e8adc8
CVE: CVE-2019-19873
Published: 2020-11-27
Description: An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983.
CVSS Score: 7.5 (HIGH)
References: https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf; https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf
CVE: CVE-2019-19874
Published: 2020-11-27
Description: An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Some web scripts in the web interface allowed injection and execution of arbitrary unintended commands on the web server, a different vulnerability than CVE-2019-16364.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf; https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf
CVE: CVE-2019-19875
Published: 2020-11-27
Description: An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Arbitrary commands could be injected (using Python scripts) via the AprolCluster script that is invoked via sudo and thus executes with root privileges, a different vulnerability than CVE-2019-16364.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf; https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf
CVE: CVE-2019-19876
Published: 2020-11-27
Description: An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An EnMon PHP script was vulnerable to SQL injection, a different vulnerability than CVE-2019-10006.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf; https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf
CVE: CVE-2019-19877
Published: 2020-11-27
Description: An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer, a different vulnerability than CVE-2019-16357.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf; https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf
CVE: CVE-2019-19878
Published: 2020-11-27
Description: An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to historical data from AprolSqlServer by bypassing authentication, a different vulnerability than CVE-2019-16358.
CVSS Score: 7.5 (HIGH)
References: https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf; https://www.br-automation.com/downloads_br_productcatalogue/BRP[PII_REDACTED][PII_REDACTED]952/APROL_R42_A1_ReleaseNotes_001.pdf
CVE: CVE-2020-27745
Published: 2020-11-27
Description: Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://lists.debian.org/debian-lts-announce/2022/01/msg00011.html; https://www.debian.org/security/2021/dsa-4841; https://www.schedmd.com/news.php
CVE: CVE-2020-7780
Published: 2020-11-27
Description: This affects the package com.softwaremill.akka-http-session:core_2.13 before 0.5.11; the package com.softwaremill.akka-http-session:core_2.12 before 0.5.11; the package com.softwaremill.akka-http-session:core_2.11 before 0.5.11. For older versions, endpoints protected by randomTokenCsrfProtection could be bypassed with an empty X-XSRF-TOKEN header and an empty XSRF-TOKEN cookie.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/softwaremill/akka-http-session/commit/57f11663eecb84be03383d164f655b9c5f953b41; https://github.com/softwaremill/akka-http-session/issues/74; https://github.com/softwaremill/akka-http-session/issues/77
CVE: CVE-2017-15680
Published: 2020-11-27
Description: In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://crafter.com; https://docs.craftercms.org/en/3.0/security/advisory.html; http://crafter.com
CVE: CVE-2017-15681
Published: 2020-11-27
Description: In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://crafter.com; https://docs.craftercms.org/en/3.0/security/advisory.html; http://crafter.com
CVE: CVE-2017-15682
Published: 2020-11-27
Description: In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://crafter.com; https://docs.craftercms.org/en/3.0/security/advisory.html; http://crafter.com
CVE: CVE-2017-15683
Published: 2020-11-27
Description: In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.
CVSS Score: 8.6 (HIGH)
CWE: CWE-91
References: http://crafter.com; https://docs.craftercms.org/en/3.0/security/advisory.html; http://crafter.com
CVE: CVE-2017-15684
Published: 2020-11-27
Description: Crafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://crafter.com; https://docs.craftercms.org/en/3.0/security/advisory.html; http://crafter.com
CVE: CVE-2017-15685
Published: 2020-11-27
Description: Crafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE). An unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.
CVSS Score: 8.6 (HIGH)
CWE: CWE-91
References: http://crafter.com; https://docs.craftercms.org/en/3.0/security/advisory.html; http://crafter.com
CVE: CVE-2017-15686
Published: 2020-11-27
Description: Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users’ cookies.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.craftercms.org/en/3.0/security/advisory.html; https://docs.craftercms.org/en/3.0/security/advisory.html