deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-44750
Published: 2022-03-10
Description: An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special configuration file, which when run by administrator can execute any commands.
CVSS Score: 6.4 (MEDIUM)
References: https://www.f-secure.com/en/business/support-and-downloads/security-advisories; https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-44750; https://www.f-secure.com/en/business/support-and-downloads/security-advisories
CVE: CVE-2021-46408
Published: 2022-03-10
Description: Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub_422CE4. This vulnerability allows attackers to cause a Denial of Service (DoS) via the strcpy parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX12/2; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX12/2
CVE: CVE-2021-4023
Published: 2022-03-10
Description: A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to execute io-uring requests to possibly crash the system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=2026484; https://bugzilla.redhat.com/show_bug.cgi?id=2026484
CVE: CVE-2021-4045
Published: 2022-03-10
Description: TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: http://packetstormsecurity.com/files/168472/TP-Link-Tapo-c200-1.1.15-Remote-Code-Execution.html; https://www.incibe-cert.es/en/early-warning/security-advisories/tp-link-tapo-c200-remote-code-execution-vulnerability; http://packetstormsecurity.com/files/168472/TP-Link-Tapo-c200-1.1.15-Remote-Code-Execution.html
CVE: CVE-2021-4095
Published: 2022-03-10
Description: A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacker on the host may use this flaw to cause a kernel oops condition and thus a denial of service by issuing a KVM_XEN_HVM_SET_ATTR ioctl. This flaw affects Linux kernel versions prior to 5.17-rc1.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: http://www.openwall.com/lists/oss-security/2022/01/17/1; https://bugzilla.redhat.com/show_bug.cgi?id=2031194; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIOQN7JJNN6ABIDGRSTVZA65MHRLMH2Q/
CVE: CVE-2022-0204
Published: 2022-03-10
Description: A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=2039807; https://github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0; https://github.com/bluez/bluez/security/advisories/GHSA-479m-xcq5-9g2q
CVE: CVE-2022-0433
Published: 2022-03-10
Description: A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908, CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=2048259; https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git/commit/?id=3ccdcee28415c4226de05438b4d89eb5514edf73; https://lore.kernel.org/bpf/[PII_REDACTED]-22421-1-git-send-email-tcs.kernel%40gmail.com/t/
CVE: CVE-2022-0507
Published: 2022-03-10
Description: Found a potential security vulnerability inside the Pandora API. Affected Pandora FMS version range: all versions of NG version, up to OUM 759. This vulnerability could allow an attacker with authenticated IP to inject SQL.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://khoori.org/posts/cve-2022-0507/; https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/; https://www.incibe.es/en/cve-assignment-publication/coordinated-cves
CVE: CVE-2022-0516
Published: 2022-03-10
Description: A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to 5.17-rc4.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=2050237; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=09a93c1df3eafa43bcdfd7bf837c574911f12f55; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-0618
Published: 2022-03-10
Description: A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS or HTTP/2 PUSH_PROMISE frame where the frame contains padding information without any other data. This logical error caused confusion about the size of the frame, leading to a parsing error. This parsing error immediately crashes the entire process. Sending a HEADERS frame or PUSH_PROMISE frame with HTTP/2 padding information does not require any special permission, so any HTTP/2 connection peer may send such a frame. For clients, this means any server to which they connect may launch this attack. For servers, anyone they allow to connect to them may launch such an attack. The attack is low-effort: it takes very little resources to send an appropriately crafted frame. The impact on availability is high: receiving the frame immediately crashes the server, dropping all in-flight connections and causing the service to need to restart. It is straightforward for an attacker to repeatedly send appropriately crafted frames, so attackers require very few resources to achieve a substantial denial of service. The attack does not have any confidentiality or integrity risks in and of itself: swift-nio-http2 is parsing the frame in memory-safe code, so the crash is safe. However, sudden process crashes can lead to violations of invariants in services, so it is possible that this attack can be used to trigger an error condition that has confidentiality or integrity risks. The risk can be mitigated if untrusted peers can be prevented from communicating with the service. This mitigation is not available to many services. The issue is fixed by rewriting the parsing code to correctly handle the condition. The issue was found by automated fuzzing by oss-fuzz.
CVSS Score: 7.5 (HIGH)
CWE: CWE-130
References: https://github.com/apple/swift-nio-http2/security/advisories/GHSA-q36x-r5x4-h4q6; https://github.com/apple/swift-nio-http2/security/advisories/GHSA-q36x-r5x4-h4q6
CVE: CVE-2022-0725
Published: 2022-03-10
Description: A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-532
References: https://bugzilla.redhat.com/show_bug.cgi?id=2052696; https://bugzilla.redhat.com/show_bug.cgi?id=2052696
CVE: CVE-2022-0813
Published: 2022-03-10
Description: PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the pma_parameter, and the cookie section.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://security.gentoo.org/glsa/202311-17; https://www.incibe-cert.es/en/early-warning/security-advisories/phpmyadmin-exposure-sensitive-information; https://www.phpmyadmin.net/news/2022/2/11/phpmyadmin-4910-and-513-are-released/
CVE: CVE-2022-0847
Published: 2022-03-10
Description: A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665, CWE-665
References: http://packetstormsecurity.com/files/166229/Dirty-Pipe-Linux-Privilege-Escalation.html; http://packetstormsecurity.com/files/166230/Dirty-Pipe-SUID-Binary-Hijack-Privilege-Escalation.html; http://packetstormsecurity.com/files/166258/Dirty-Pipe-Local-Privilege-Escalation.html
CVE: CVE-2022-0856
Published: 2022-03-10
Description: libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of Service
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://github.com/cacalabs/libcaca/issues/65; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3E5GF2LSX2ZEY5JZNM7HXJMLHMY436X/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTDRPVX3HCYLQCLMQ6NNSRC3B7L6WGUM/
CVE: CVE-2022-0865
Published: 2022-03-10
Description: Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0865.json; https://gitlab.com/libtiff/libtiff/-/issues/385; https://gitlab.com/libtiff/libtiff/-/merge_requests/306
CVE: CVE-2022-0891
Published: 2022-03-10
Description: A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-787
References: https://gitlab.com/freedesktop-sdk/mirrors/gitlab/libtiff/libtiff/-/commit/232282fd8f9c21eefe8d2d2b96cdbbb172fe7b7c; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0891.json; https://gitlab.com/libtiff/libtiff/-/issues/380
CVE: CVE-2022-0903
Published: 2022-03-10
Description: A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-787
References: https://mattermost.com/security-updates/; https://mattermost.com/security-updates/
CVE: CVE-2022-0904
Published: 2022-03-10
Description: A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted Apple Pages document.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-787
References: https://mattermost.com/security-updates/; https://mattermost.com/security-updates/
CVE: CVE-2022-20047
Published: 2022-03-10
Description: In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917489; Issue ID: ALPS05917489.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/March-2022; https://corp.mediatek.com/product-security-bulletin/March-2022
CVE: CVE-2022-20048
Published: 2022-03-10
Description: In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917502; Issue ID: ALPS05917502.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/March-2022; https://corp.mediatek.com/product-security-bulletin/March-2022
CVE: CVE-2022-20049
Published: 2022-03-10
Description: In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05954679; Issue ID: ALPS05954679.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-862
References: https://corp.mediatek.com/product-security-bulletin/March-2022; https://corp.mediatek.com/product-security-bulletin/March-2022
CVE: CVE-2022-20050
Published: 2022-03-10
Description: In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06335038; Issue ID: ALPS06335038.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-59
References: https://corp.mediatek.com/product-security-bulletin/March-2022; https://corp.mediatek.com/product-security-bulletin/March-2022
CVE: CVE-2022-20051
Published: 2022-03-10
Description: In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219127; Issue ID: ALPS06219127.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-269
References: https://corp.mediatek.com/product-security-bulletin/March-2022; https://corp.mediatek.com/product-security-bulletin/March-2022
CVE: CVE-2022-20053
Published: 2022-03-10
Description: In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219097; Issue ID: ALPS06219097.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://corp.mediatek.com/product-security-bulletin/March-2022; https://corp.mediatek.com/product-security-bulletin/March-2022
CVE: CVE-2022-20054
Published: 2022-03-10
Description: In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219083; Issue ID: ALPS06219083.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://corp.mediatek.com/product-security-bulletin/March-2022; https://corp.mediatek.com/product-security-bulletin/March-2022
CVE: CVE-2022-20055
Published: 2022-03-10
Description: In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160830.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/March-2022; https://corp.mediatek.com/product-security-bulletin/March-2022
CVE: CVE-2022-20056
Published: 2022-03-10
Description: In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160820.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/March-2022; https://corp.mediatek.com/product-security-bulletin/March-2022
CVE: CVE-2022-20057
Published: 2022-03-10
Description: In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06271186; Issue ID: ALPS06271186.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-755
References: https://corp.mediatek.com/product-security-bulletin/March-2022; https://corp.mediatek.com/product-security-bulletin/March-2022
CVE: CVE-2022-20058
Published: 2022-03-10
Description: In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160485.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/March-2022; https://corp.mediatek.com/product-security-bulletin/March-2022
CVE: CVE-2022-20059
Published: 2022-03-10
Description: In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160781.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/March-2022; https://corp.mediatek.com/product-security-bulletin/March-2022
CVE: CVE-2022-20060
Published: 2022-03-10
Description: In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06137462.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-306
References: https://corp.mediatek.com/product-security-bulletin/March-2022; https://corp.mediatek.com/product-security-bulletin/March-2022
CVE: CVE-2022-21124
Published: 2022-03-10
Description: Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25234.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2022/06/14/4; http://www.openwall.com/lists/oss-security/2022/06/16/1; http://xenbits.xen.org/xsa/advisory-404.html
CVE: CVE-2022-21132
Published: 2022-03-10
Description: Directory traversal vulnerability in pfSense-pkg-WireGuard pfSense-pkg-WireGuard 0.1.5 versions prior to 0.1.5_4 and pfSense-pkg-WireGuard 0.1.6 versions prior to 0.1.6_1 allows a remote authenticated attacker to lead a pfSense user to view a file outside the public folder.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/pfsense/FreeBSD-ports/commits/devel/net/pfSense-pkg-WireGuard; https://jvn.jp/en/jp/JVN85572374/index.html; https://github.com/pfsense/FreeBSD-ports/commits/devel/net/pfSense-pkg-WireGuard
CVE: CVE-2022-21146
Published: 2022-03-10
Description: Persistent cross-site scripting in the web interface of ipDIO allows an unauthenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into a specific parameter. The XSS payload will be executed when a legitimate user attempts to review history.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-062-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-062-01
CVE: CVE-2022-21158
Published: 2022-03-10
Description: A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper handling of the link (with javascript: scheme) inside the document may allow an attacker to execute an arbitrary script on the PC of the user using marktext.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/marktext/marktext/releases/tag/v0.17.0; https://jvn.jp/en/jp/JVN89524240/index.html; https://github.com/marktext/marktext/releases/tag/v0.17.0
CVE: CVE-2022-21170
Published: 2022-03-10
Description: Improper check for certificate revocation in i-FILTER Ver.10.45R01 and earlier, i-FILTER Ver.9.50R10 and earlier, i-FILTER Browser & Cloud MultiAgent for Windows Ver.4.93R04 and earlier, and D-SPA (Ver.3 / Ver.4) using i-FILTER allows a remote unauthenticated attacker to conduct a man-in-the-middle attack and eavesdrop on an encrypted communication.
CVSS Score: 3.7 (LOW)
CWE: CWE-295
References: https://download.daj.co.jp/user/dspa/V3/; https://download.daj.co.jp/user/dspa/V4/; https://download.daj.co.jp/user/ifb/
CVE: CVE-2022-21219
Published: 2022-03-10
Description: Out-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://jvn.jp/en/vu/JVNVU90121984/index.html; https://jvn.jp/en/vu/JVNVU90121984/index.html
CVE: CVE-2022-22547
Published: 2022-03-10
Description: Simple Diagnostics Agent - versions 1.0 (up to version 1.57.), allows an attacker to access information which would otherwise be restricted via a random port 9000-65535. This allows information gathering which could be used exploit future open-source security exploits.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/167562/SAP-FRUN-Simple-Diagnostics-Agent-1.0-Information-Disclosure.html; http://seclists.org/fulldisclosure/2022/Jun/40; https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
CVE: CVE-2022-22795
Published: 2022-03-10
Description: Signiant - Manager+Agents XML External Entity (XXE) - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such as passwd, shadow, hosts and so on. By gaining access to these files, attackers can steal sensitive information from the victims machine.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2022-22814
Published: 2022-03-10
Description: The System Diagnosis service of MyASUS before 3.1.2.0 allows privilege escalation.
CVSS Score: 9.8 (CRITICAL)
References: https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/; https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/
CVE: CVE-2022-22834
Published: 2022-03-10
Description: An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XSLT Injection vulnerability. Attackers could exploit this issue to achieve remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-91
References: https://labs.yarix.com/2022/03/overit-framework-xslt-injection-and-xxe-cve-2022-22834-cve-2022-22835/; https://labs.yarix.com/advisories/cve-2022-22834/; https://overit.us/products/geocall/
CVE: CVE-2022-22835
Published: 2022-03-10
Description: An issue was discovered in OverIT Geocall before version 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XXE vulnerability to read arbitrary files from the filesystem.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://labs.yarix.com/2022/03/overit-framework-xslt-injection-and-xxe-cve-2022-22834-cve-2022-22835/; https://labs.yarix.com/advisories/cve-2022-22835/; https://overit.us/products/geocall/