deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-31129
Published: 2022-07-06
Description: moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2) complexity on specific inputs. Users may notice a noticeable slowdown is observed with inputs above 10k characters. Users who pass user-provided strings without sanity length checks to moment constructor are vulnerable to (Re)DoS attacks. The problem is patched in 2.29.4, the patch can be applied to all affected versions with minimal tweaking. Users are advised to upgrade. Users unable to upgrade should consider limiting date lengths accepted from user input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-1333
References: https://github.com/moment/moment/commit/9a3b5894f3d5d602948ac8a02e4ee528a49ca3a3; https://github.com/moment/moment/pull/6015#issuecomment[PII_REDACTED]; https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g
CVE: CVE-2022-31131
Published: 2022-07-06
Description: Nextcloud mail is a Mail app for the Nextcloud home server product. Versions of Nextcloud mail prior to 1.12.2 were found to be missing user account ownership checks when performing tasks related to mail attachments. Attachments may have been exposed to incorrect system users. It is recommended that the Nextcloud Mail app is upgraded to 1.12.2. There are no known workarounds for this issue. ### Workarounds No workaround available ### References * [Pull request](https://github.com/nextcloud/mail/pull/6600) * [HackerOne](https://hackerone.com/reports/1579820) ### For more information If you have any questions or comments about this advisory: * Create a post in [nextcloud/security-advisories](https://github.com/nextcloud/security-advisories/discussions) * Customers: Open a support ticket at [support.nextcloud.com](https://support.nextcloud.com)
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-287, CWE-639
References: https://github.com/nextcloud/mail/pull/6600; https://github.com/nextcloud/mail/pull/6600/commits/6dd2527be8d4f6788b449c8a8f5577628b990605; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-xhv7-5mhv-299j
CVE: CVE-2022-2316
Published: 2022-07-06
Description: HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the rendering of the page or redirect a user to another site.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://devolutions.net/security/advisories/DEVO-2022-0006; https://devolutions.net/security/advisories/DEVO-2022-0006
CVE: CVE-2022-2318
Published: 2022-07-06
Description: There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6; https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-33047
Published: 2022-07-06
Description: OTFCC v0.10.4 was discovered to contain a heap buffer overflow after free via otfccbuild.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://otfcc.com; https://drive.google.com/file/d/1g3MQajVLZAaZMRfIQHSLT6XRw-B4Dmz8/view?usp=sharing; http://otfcc.com
CVE: CVE-2014-8164
Published: 2022-07-06
Description: A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red Hat CloudForms 5.x.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-295, CWE-295
References: https://bugzilla.redhat.com/show_bug.cgi?id=1151208; https://bugzilla.redhat.com/show_bug.cgi?id=1151208
CVE: CVE-2015-3172
Published: 2022-07-06
Description: EidoGo is susceptible to Cross-Site Scripting (XSS) attacks via maliciously crafted SGF input.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/jkk/eidogo/issues/27; https://github.com/jkk/eidogo/pull/26; https://github.com/jkk/eidogo/issues/27
CVE: CVE-2015-3173
Published: 2022-07-06
Description: custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94, CWE-94
References: https://blog.nettitude.com/uk/custom-content-type-manager-remote-code-execution; https://github.com/craftsmancoding/custom-content-type-manager/blob/master/readme.txt; https://wpscan.com/vulnerability/6b3d0736-7f08-4403-95eb-4385cb206f9e
CVE: CVE-2021-4234
Published: 2022-07-06
Description: OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-406
References: https://openvpn.net/vpn-server-resources/release-notes/#openvpn-access-server-2-11-0; https://openvpn.net/vpn-server-resources/release-notes/#openvpn-access-server-2-11-0
CVE: CVE-2022-20752
Published: 2022-07-06
Description: A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an unauthenticated, remote attacker to perform a timing attack. This vulnerability is due to insufficient protection of a system password. An attacker could exploit this vulnerability by observing the time it takes the system to respond to various queries. A successful exploit could allow the attacker to determine a sensitive system password.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-208, CWE-203
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucm-timing-JVbHECOK; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucm-timing-JVbHECOK
CVE: CVE-2022-20768
Published: 2022-07-06
Description: A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to access confidential information, some of which may contain personally identifiable information (PII). Note: To access the logs that are stored in the RoomOS Cloud, an attacker would need valid Administrator-level credentials.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-YOTz9Ct7; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-YOTz9Ct7
CVE: CVE-2022-20791
Published: 2022-07-06
Description: A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device. This vulnerability is due to insufficient file permission restrictions. An attacker could exploit this vulnerability by sending a crafted command from the API to the application. A successful exploit could allow the attacker to read arbitrary files on the underlying operating system of the affected device. The attacker would need valid user credentials to exploit this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-36, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-imp-afr-YBFLNyzd; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-imp-afr-YBFLNyzd
CVE: CVE-2022-20800
Published: 2022-07-06
Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), and Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-RgH7MpKA; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-RgH7MpKA
CVE: CVE-2022-20808
Published: 2022-07-06
Description: A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incorrect handling of multiple simultaneous device registrations on Cisco SSM On-Prem. An attacker could exploit this vulnerability by sending multiple device registration requests to Cisco SSM On-Prem. A successful exploit could allow the attacker to cause a DoS condition on an affected device.
CVSS Score: 7.7 (HIGH)
CWE: CWE-400, CWE-400
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-privesc-tP6uNZOS; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-privesc-tP6uNZOS
CVE: CVE-2022-20812
Published: 2022-07-06
Description: Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow a remote attacker to overwrite arbitrary files or conduct null byte poisoning attacks on an affected device. Note: Cisco Expressway Series refers to the Expressway Control (Expressway-C) device and the Expressway Edge (Expressway-E) device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-158, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-sqpsSfY6; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-overwrite-3buqW8LH; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-sqpsSfY6
CVE: CVE-2022-20813
Published: 2022-07-06
Description: Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow a remote attacker to overwrite arbitrary files or conduct null byte poisoning attacks on an affected device. Note: Cisco Expressway Series refers to the Expressway Control (Expressway-C) device and the Expressway Edge (Expressway-E) device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-158, CWE-295
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-overwrite-3buqW8LH; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-overwrite-3buqW8LH
CVE: CVE-2022-20815
Published: 2022-07-06
Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-ksKd5yfA; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-ksKd5yfA
CVE: CVE-2022-20859
Published: 2022-07-06
Description: A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions they should not be able to. This vulnerability is due to insufficient access control checks on the affected device. An attacker with read-only privileges could exploit this vulnerability by executing a specific vulnerable command on an affected device. A successful exploit could allow the attacker to perform a set of administrative actions they should not be able to.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucm-access-dMKvV2DY; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucm-access-dMKvV2DY
CVE: CVE-2022-20862
Published: 2022-07-06
Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to an affected system. A successful exploit could allow the attacker to access sensitive files on the operating system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-23, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucm-file-read-qgjhEc3A; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucm-file-read-qgjhEc3A
CVE: CVE-2022-27548
Published: 2022-07-06
Description: HCL Launch stores user credentials in plain clear text which can be read by a local user.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-256, CWE-522
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0099253; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0099253
CVE: CVE-2022-27549
Published: 2022-07-06
Description: HCL Launch may store certain data for recurring activities in a plain text format.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-532, CWE-312
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0099254; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0099254
CVE: CVE-2022-2339
Published: 2022-07-07
Description: With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/nocodb/nocodb/commit/000ecd886738b965b5997cd905825e3244f48b95; https://huntr.dev/bounties/fff06de8-2a82-49b1-8e81-968731e87eef; https://github.com/nocodb/nocodb/commit/000ecd886738b965b5997cd905825e3244f48b95
CVE: CVE-2022-2342
Published: 2022-07-07
Description: Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to v0.64.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/outline/outline/commit/85657b7340cdeaa696034f294489df8d6a4914d3; https://huntr.dev/bounties/b2caceaa-5b28-40ba-9[PII_REDACTED]9efba; https://github.com/outline/outline/commit/85657b7340cdeaa696034f294489df8d6a4914d3
CVE: CVE-2022-32567
Published: 2022-07-07
Description: The Appfire Jira Misc Custom Fields (JMCF) app 2.4.6 for Atlassian Jira allows XSS via a crafted project name to the Add Auto Indexing Rule function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://marketplace.atlassian.com/apps/27136/jira-misc-custom-fields-jmcf?hosting=server&tab=overview; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-039.txt; https://marketplace.atlassian.com/apps/27136/jira-misc-custom-fields-jmcf?hosting=server&tab=overview
CVE: CVE-2022-25046
Published: 2022-07-07
Description: A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/Immersive-Labs-Sec/CentOS-WebPanel; https://github.com/Immersive-Labs-Sec/CentOS-WebPanel
CVE: CVE-2022-25047
Published: 2022-07-07
Description: The password reset token in CWP v0.9.8.1126 is generated using known or predictable values.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-330
References: https://github.com/Immersive-Labs-Sec/CentOS-WebPanel; https://github.com/Immersive-Labs-Sec/CentOS-WebPanel
CVE: CVE-2022-25048
Published: 2022-07-07
Description: Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/Immersive-Labs-Sec/CentOS-WebPanel; https://github.com/Immersive-Labs-Sec/CentOS-WebPanel
CVE: CVE-2022-33996
Published: 2022-07-07
Description: Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inherit the permissions of that previous user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://devolutions.net; https://devolutions.net/security/advisories/DEVO-2022-0006; https://devolutions.net
CVE: CVE-2022-34007
Published: 2022-07-07
Description: EQS Integrity Line Professional through 2022-07-01 allows a stored XSS via a crafted whistleblower entry.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://eusanctions.integrityline.com; https://packetstormsecurity.com/files/167706/EQS-Integrity-Line-Cross-Site-Scripting-Information-Disclosure.html; https://seclists.org/fulldisclosure/2022/Jul/1
CVE: CVE-2015-1784
Published: 2022-07-07
Description: In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the application validates user uploaded files and lack of security measures preventing unwanted HTTP requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://blog.nettitude.com/uk/crsf-and-unsafe-arbitrary-file-upload-in-nextgen-gallery-plugin-for-wordpress; https://wpscan.com/vulnerability/c894727a-b779-4583-a860-13c2c27275d4; https://blog.nettitude.com/uk/crsf-and-unsafe-arbitrary-file-upload-in-nextgen-gallery-plugin-for-wordpress
CVE: CVE-2015-1785
Published: 2022-07-07
Description: In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the application validates user uploaded files and lack of security measures preventing unwanted HTTP requests.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434, CWE-352
References: https://blog.nettitude.com/uk/crsf-and-unsafe-arbitrary-file-upload-in-nextgen-gallery-plugin-for-wordpress; https://wpscan.com/vulnerability/c894727a-b779-4583-a860-13c2c27275d4; https://blog.nettitude.com/uk/crsf-and-unsafe-arbitrary-file-upload-in-nextgen-gallery-plugin-for-wordpress
CVE: CVE-2015-3207
Published: 2022-07-07
Description: In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-614, CWE-311
References: https://bugzilla.redhat.com/show_bug.cgi?id=1221882; https://github.com/openshift/origin/pull/2261; https://github.com/openshift/origin/pull/2291
CVE: CVE-2022-31854
Published: 2022-07-07
Description: Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/167782/CodoForum-5.1-Remote-Code-Execution.html; https://codoforum.com; https://github.com/Vikaran101/CVE-2022-31854/blob/main/exploit.py
CVE: CVE-2022-32205
Published: 2022-07-07
Description: A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large amount of (big) cookies make subsequent HTTP requests to this, or other servers to which the cookies match, create requests that become larger than the threshold that curl uses internally to avoid sending crazy large requests (1048576 bytes) and instead returns an error.This denial state might remain for as long as the same cookies are kept, match and haven't expired. Due to cookie matching rules, a server on `foo.example.com` can set cookies that also would match for `bar.example.com`, making it it possible for a "sister server" to effectively cause a denial of service for a sibling site on the same second level domain using this method.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770, CWE-770
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf
CVE: CVE-2022-32206
Published: 2022-07-07
Description: curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable "links" in this "decompression chain" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a "malloc bomb", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770, CWE-770
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; http://www.openwall.com/lists/oss-security/2023/02/15/3
CVE: CVE-2022-32207
Published: 2022-07-07
Description: When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-840, CWE-276
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://hackerone.com/reports/1573634
CVE: CVE-2022-32208
Published: 2022-07-07
Description: When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-840, CWE-787
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://hackerone.com/reports/1590071