deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-12864
Published: 2020-06-24
Description: An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-081.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html; https://alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html
CVE: CVE-2020-12865
Published: 2020-06-24
Description: A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-084.
CVSS Score: 8.0 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html; https://alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html
CVE: CVE-2020-12866
Published: 2020-06-24
Description: A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html; https://alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html
CVE: CVE-2020-15014
Published: 2020-06-24
Description: pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/pramodmahato/BlogCMS/issues/1; https://github.com/pramodmahato/BlogCMS/issues/1
CVE: CVE-2020-15018
Published: 2020-06-24
Description: playSMS through 1.4.3 is vulnerable to session fixation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-384
References: https://github.com/antonraharja/playSMS/issues/605; https://github.com/antonraharja/playSMS/issues/605
CVE: CVE-2020-4071
Published: 2020-06-24
Description: In django-basic-auth-ip-whitelist before 0.3.4, a potential timing attack exists on websites where the basic authentication is used or configured, i.e. BASIC_AUTH_LOGIN and BASIC_AUTH_PASSWORD is set. Currently the string comparison between configured credentials and the ones provided by users is performed through a character-by-character string comparison. This enables a possibility that attacker may time the time it takes the server to validate different usernames and password, and use this knowledge to work out the valid credentials. This attack is understood not to be realistic over the Internet. However, it may be achieved from within local networks where the website is hosted, e.g. from inside a data centre where a website's server is located. Sites protected by IP address whitelisting only are unaffected by this vulnerability. This vulnerability has been fixed on version 0.3.4 of django-basic-auth-ip-whitelist. Update to version 0.3.4 as soon as possible and change basic authentication username and password configured on a Django project using this package. A workaround without upgrading to version 0.3.4 is to stop using basic authentication and use the IP whitelisting component only. It can be achieved by not setting BASIC_AUTH_LOGIN and BASIC_AUTH_PASSWORD in Django project settings.
CVSS Score: 2.2 (LOW)
CWE: CWE-208
References: https://github.com/tm-kn/django-basic-auth-ip-whitelist/security/advisories/GHSA-m38j-pmg3-v5x5; https://groups.google.com/forum/#%21msg/django-developers/iAaq0pvHXuA/fpUuwjK3i2wJ; https://github.com/tm-kn/django-basic-auth-ip-whitelist/security/advisories/GHSA-m38j-pmg3-v5x5
CVE: CVE-2020-14005
Published: 2020-06-24
Description: Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event.
CVSS Score: 8.8 (HIGH)
References: https://gist.github.com/alert3/c9dcce5474e55f408c93c086c30cdbb7; https://www.zerodayinitiative.com/advisories/ZDI-21-063/; https://www.zerodayinitiative.com/advisories/ZDI-21-065/
CVE: CVE-2020-14006
Published: 2020-06-24
Description: Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/alert3/f8d33412ab0c671d3cac6a50b132a894; https://gist.github.com/alert3/f8d33412ab0c671d3cac6a50b132a894
CVE: CVE-2020-14007
Published: 2020-06-24
Description: Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/alert3/f8d33412ab0c671d3cac6a50b132a894; https://gist.github.com/alert3/f8d33412ab0c671d3cac6a50b132a894
CVE: CVE-2020-4322
Published: 2020-06-24
Description: IBM Security Secret Server 10.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 177511.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/177511; https://www.ibm.com/support/pages/node/6237266; https://exchange.xforce.ibmcloud.com/vulnerabilities/177511
CVE: CVE-2020-4323
Published: 2020-06-24
Description: IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 177514.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/177514; https://www.ibm.com/support/pages/node/6237286; https://exchange.xforce.ibmcloud.com/vulnerabilities/177514
CVE: CVE-2020-4327
Published: 2020-06-24
Description: IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 177599.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/177599; https://www.ibm.com/support/pages/node/6237260; https://exchange.xforce.ibmcloud.com/vulnerabilities/177599
CVE: CVE-2020-4341
Published: 2020-06-24
Description: IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 178181.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/178181; https://www.ibm.com/support/pages/node/6237084; https://exchange.xforce.ibmcloud.com/vulnerabilities/178181
CVE: CVE-2020-4342
Published: 2020-06-24
Description: IBM Security Secret Server 10.7 could disclose sensitive information included in installation files to an unauthorized user. IBM X-Force ID: 178182.
CVSS Score: 5.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/178182; https://www.ibm.com/support/pages/node/6237276; https://exchange.xforce.ibmcloud.com/vulnerabilities/178182
CVE: CVE-2020-4413
Published: 2020-06-24
Description: IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 179988.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-862
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/179988; https://www.ibm.com/support/pages/node/6237292; https://exchange.xforce.ibmcloud.com/vulnerabilities/179988
CVE: CVE-2020-13443
Published: 2020-06-24
Description: ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compose Msg, Add attachment, and Save As Draft actions. A user with low privileges (member) is able to upload this. It is possible to bypass the MIME type check and file-extension check while uploading new files. Short aliases are not used for an attachment; instead, direct access is allowed to the uploaded files. It is possible to upload PHP only if one has member access, or registration/forum is enabled and one can create a member with the default group id of 5. To exploit this, one must to be able to send and compose messages (at least).
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://expressionengine.com/blog; https://gist.github.com/mariuszpoplwski/51604d8a6d7d78fffdf590c25e844e09; https://expressionengine.com/blog
CVE: CVE-2020-13483
Published: 2020-06-24
Description: The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the items[ITEMS][ID] parameter to the components/bitrix/mobileapp.list/ajax.php/ URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/mariuszpoplwski/ca6258cf00c723184ebd2228ba81f558; https://gist.github.com/mariuszpoplwski/ca6258cf00c723184ebd2228ba81f558
CVE: CVE-2020-13484
Published: 2020-06-24
Description: Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview url parameter, if the destination URL hosts an HTML document containing '<meta name="og:image" content="' followed by an intranet URL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://gist.github.com/mariuszpoplwski/f261a4bc06adde5c78760559db9d63bd; https://gist.github.com/mariuszpoplwski/f261a4bc06adde5c78760559db9d63bd
CVE: CVE-2020-13700
Published: 2020-06-24
Description: An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress. It allows an insecure direct object reference via permalinks manipulation, as demonstrated by a wp-json/acf/v3/options/ request that reads sensitive information in the wp_options table, such as the login and pass values.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: https://gist.github.com/mariuszpoplwski/4fbaab7f271bea99c733e3f2a4bafbb5; https://github.com/airesvsg/acf-to-rest-api; https://wordpress.org/plugins/acf-to-rest-api/#developers
CVE: CVE-2020-14014
Published: 2020-06-24
Description: An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not perform sufficient data validation and/or encoding, making it vulnerable to reflected XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.sean-wright.com/navigate-cms/; https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://blog.sean-wright.com/navigate-cms/
CVE: CVE-2020-14015
Published: 2020-06-24
Description: An issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is emailed an activation code that allows them to reset their password. There is, however, a flaw when no activation code is supplied. The system will allow an unauthorized user to continue setting a password, even though no activation code was supplied, setting the password for the most recently created user in the system (the user with the highest user id).
CVSS Score: 7.5 (HIGH)
CWE: CWE-640
References: https://blog.sean-wright.com/navigate-cms/; https://blog.sean-wright.com/navigate-cms/
CVE: CVE-2020-14016
Published: 2020-06-24
Description: An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by using either their username or the email address associated with their account. However, the feature returns a not_found message when the provided username or email address does not match a user in the system. This can be used to enumerate users.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-640
References: https://blog.sean-wright.com/navigate-cms/; https://cwe.mitre.org/data/definitions/204.html; https://blog.sean-wright.com/navigate-cms/
CVE: CVE-2020-14017
Published: 2020-06-24
Description: An issue was discovered in Navigate CMS 2.9 r1433. Sessions, as well as associated information such as CSRF tokens, are stored in cleartext files in the directory /private/sessions. An unauthenticated user could use a brute-force approach to attempt to identify existing sessions, or view the contents of this file to discover details about a session.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://blog.sean-wright.com/navigate-cms/; https://blog.sean-wright.com/navigate-cms/
CVE: CVE-2020-14018
Published: 2020-06-24
Description: An issue was discovered in Navigate CMS 2.9 r1433. There is a stored XSS vulnerability that is executed on the page to view users, and on the page to edit users. This is present in both the User field and the E-Mail field. On the Edit user page, the XSS is only triggered via the E-Mail field; however, on the View user page the XSS is triggered via either the User field or the E-Mail field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.sean-wright.com/navigate-cms/; https://blog.sean-wright.com/navigate-cms/
CVE: CVE-2020-15015
Published: 2020-06-24
Description: The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/chppppp/9b003d8416e6d3a89d2873a58af2a95f; https://gist.github.com/chppppp/9b003d8416e6d3a89d2873a58af2a95f
CVE: CVE-2020-14094
Published: 2020-06-24
Description: In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the web interface, resulting in stack overflow or remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=17&locale=zh; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=17&locale=zh
CVE: CVE-2020-14095
Published: 2020-06-24
Description: In Xiaomi router R3600, ROM version<1.0.20, a connect service suffers from an injection vulnerability through the web interface, leading to a stack overflow or remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=18&locale=en; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=18&locale=en
CVE: CVE-2020-3969
Published: 2020-06-24
Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an off-by-one heap-overflow vulnerability in the SVGA device. A malicious actor with local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be present for exploitation to be possible.
CVSS Score: 7.8 (HIGH)
CWE: CWE-193
References: https://www.vmware.com/security/advisories/VMSA-2020-0015.html; https://www.zerodayinitiative.com/advisories/ZDI-20-786/; https://www.vmware.com/security/advisories/VMSA-2020-0015.html
CVE: CVE-2020-6870
Published: 2020-06-24
Description: The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to the FTP server to tamper with the password, and illegally download, modify, upload, or delete files, causing improper operation of the network management system and equipment. This affects: NetNumenU31R20 V12.17.20T115
CVSS Score: 8.0 (HIGH)
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013043; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013043
CVE: CVE-2020-9494
Published: 2020-06-24
Description: Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2 HEADERS frames that can cause the server to allocate a large amount of memory and spin the thread.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: http://www.openwall.com/lists/oss-security/2021/03/01/2; https://lists.apache.org/thread.html/rf7f86917f42fdaf904d99560cba0c016e03baea6244c47efeb60ecbe%40%3Cdev.trafficserver.apache.org%3E; https://www.debian.org/security/2020/dsa-4710
CVE: CVE-2020-10561
Published: 2020-06-24
Description: An issue was discovered on Xiaomi Mi Jia ink-jet printer < 3.4.6_0138. Injecting parameters to ippserver through the web management background, resulting in command execution vulnerabilities.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=13; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=13
CVE: CVE-2020-11959
Published: 2020-06-24
Description: An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50.
CVSS Score: 7.5 (HIGH)
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=14; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=14
CVE: CVE-2020-11960
Published: 2020-06-24
Description: Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in c_upload interface let attacker able to extract malicious file under any location in /tmp, lead to possible RCE and DoS
CVSS Score: 9.8 (CRITICAL)
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=15; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=15
CVE: CVE-2020-11961
Published: 2020-06-24
Description: Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface get_config_result without authentication
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=16; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=16
CVE: CVE-2020-14472
Published: 2020-06-24
Description: On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://gist.github.com/Cossack9989/fa9718434ceee4e6d4f6b0ad672c10f1; https://gist.github.com/WinMin/[PII_REDACTED]5f1d47ec257210428c0240; https://gist.github.com/Cossack9989/fa9718434ceee4e6d4f6b0ad672c10f1
CVE: CVE-2020-14473
Published: 2020-06-24
Description: Stack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Cossack9989/Vulns/blob/master/IoT/CVE-2020-14473.md; https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability-%28cve-2020-14473%29; https://github.com/Cossack9989/Vulns/blob/master/IoT/CVE-2020-14473.md
CVE: CVE-2020-3962
Published: 2020-06-24
Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain a use-after-free vulnerability in the SVGA device. A malicious actor with local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to execute code on the hypervisor from a virtual machine.
CVSS Score: 8.2 (HIGH)
CWE: CWE-416
References: https://www.vmware.com/security/advisories/VMSA-2020-0015.html; https://www.zerodayinitiative.com/advisories/ZDI-20-785/; https://www.vmware.com/security/advisories/VMSA-2020-0015.html
CVE: CVE-2020-13248
Published: 2020-06-24
Description: BooleBox Secure File Sharing Utility before 4.2.3.0 allows stored XSS via a crafted avatar field within My Account JSON data to Account.aspx.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://app.boolebox.com/release/vulnerabilities/CVE-2020-13247-13248.html; https://members.backbox.org/boolebox-secure-sharing-multiple-vulnerabilities/; https://app.boolebox.com/release/vulnerabilities/CVE-2020-13247-13248.html
CVE: CVE-2020-15025
Published: 2020-06-24
Description: ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00044.html; https://bugs.gentoo.org/729458
CVE: CVE-2020-15026
Published: 2020-06-24
Description: Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://github.com/bludit/bludit/issues/1214; https://github.com/bludit/bludit/issues/1214
CVE: CVE-2020-13247
Published: 2020-06-24
Description: BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1236
References: https://app.boolebox.com/release/vulnerabilities/CVE-2020-13247-13248.html; https://members.backbox.org/boolebox-secure-sharing-multiple-vulnerabilities/; https://app.boolebox.com/release/vulnerabilities/CVE-2020-13247-13248.html
CVE: CVE-2020-15038
Published: 2020-06-24
Description: The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/158649/WordPress-Maintenance-Mode-By-SeedProd-5.1.1-Cross-Site-Scripting.html; https://wordpress.org/plugins/coming-soon/#developers; https://wpvulndb.com/vulnerabilities/10283
CVE: CVE-2020-5962
Published: 2020-06-24
Description: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component, in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges.
CVSS Score: 7.8 (HIGH)
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5031; https://nvidia.custhelp.com/app/answers/detail/a_id/5031
CVE: CVE-2020-15041
Published: 2020-06-24
Description: PHP-Fusion 9.03.60 allows XSS via the administration/site_links.php Add Site Link field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/php-fusion/PHP-Fusion/issues/2330; https://github.com/php-fusion/PHP-Fusion/issues/2330
CVE: CVE-2020-15005
Published: 2020-06-24
Description: In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis behind a caching server using the img_auth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could view them. This occurs because Cache-Control and Vary headers were mishandled.
CVSS Score: 3.1 (LOW)
References: https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/REL1_31/RELEASE-NOTES-1.31; https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/REL1_33/RELEASE-NOTES-1.33; https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/REL1_34/RELEASE-NOTES-1.34