deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-4913
Published: 2021-01-04
Description: IBM Cloud Pak System 2.3 could reveal credential information in the HTTP response to a local privileged user. IBM X-Force ID: 191288.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-200, CWE-522
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191288; https://www.ibm.com/support/pages/node/6393554; https://exchange.xforce.ibmcloud.com/vulnerabilities/191288
CVE: CVE-2020-4916
Published: 2021-01-04
Description: IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191390.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191390; https://www.ibm.com/support/pages/node/6393554; https://exchange.xforce.ibmcloud.com/vulnerabilities/191390
CVE: CVE-2020-4917
Published: 2021-01-04
Description: IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191391.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191391; https://www.ibm.com/support/pages/node/6393554; https://exchange.xforce.ibmcloud.com/vulnerabilities/191391
CVE: CVE-2020-4918
Published: 2021-01-04
Description: IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service console for the Platform System Manager. IBM X-Force ID: 191392.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-639
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191392; https://www.ibm.com/support/pages/node/6393554; https://exchange.xforce.ibmcloud.com/vulnerabilities/191392
CVE: CVE-2020-4919
Published: 2021-01-04
Description: IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to impersonate another user on the system. IBM X-Force ID: 191395.
CVSS Score: 3.8 (LOW)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191395; https://www.ibm.com/support/pages/node/6393554; https://exchange.xforce.ibmcloud.com/vulnerabilities/191395
CVE: CVE-2020-4928
Published: 2021-01-04
Description: IBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files. By intercepting the request and modifying the file extention, the attacker could execute arbitrary code on the server. IBM X-Force ID: 191705.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-434
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191705; https://www.ibm.com/support/pages/node/6393554; https://exchange.xforce.ibmcloud.com/vulnerabilities/191705
CVE: CVE-2020-4942
Published: 2021-01-04
Description: IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191942.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191942; https://www.ibm.com/support/pages/node/6395108; https://exchange.xforce.ibmcloud.com/vulnerabilities/191942
CVE: CVE-2020-22550
Published: 2021-01-04
Description: Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://codecanyon.net/item/veno-file-manager-host-and-share-files/6114247; https://gist.github.com/Sp3eD-X/22640377f96340544baf12891f708b8f; https://codecanyon.net/item/veno-file-manager-host-and-share-files/6114247
CVE: CVE-2020-35493
Published: 2021-01-04
Description: A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1911437; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KOK3QWSVOUJWJ54HVGIFWNLWQ5ZY4S6/; https://security.gentoo.org/glsa/202107-24
CVE: CVE-2020-35494
Published: 2021-01-04
Description: There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-908
References: https://bugzilla.redhat.com/show_bug.cgi?id=1911439; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KOK3QWSVOUJWJ54HVGIFWNLWQ5ZY4S6/; https://security.gentoo.org/glsa/202107-24
CVE: CVE-2020-35495
Published: 2021-01-04
Description: There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=1911441; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KOK3QWSVOUJWJ54HVGIFWNLWQ5ZY4S6/; https://security.gentoo.org/glsa/202107-24
CVE: CVE-2020-35496
Published: 2021-01-04
Description: There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=1911444; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KOK3QWSVOUJWJ54HVGIFWNLWQ5ZY4S6/; https://security.gentoo.org/glsa/202107-24
CVE: CVE-2020-35507
Published: 2021-01-04
Description: There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=1911691; https://security.gentoo.org/glsa/202107-24; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-36112
Published: 2021-01-04
Description: CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database on which the web application is running.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/49314; https://www.exploit-db.com/exploits/49314
CVE: CVE-2020-17535
Published: 2021-01-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-17536
Published: 2021-01-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-17537
Published: 2021-01-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-24386
Published: 2021-01-04
Description: An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' email messages (and path disclosure).
CVSS Score: 6.8 (MEDIUM)
References: http://packetstormsecurity.com/files/160842/Dovecot-2.3.11.3-Access-Bypass.html; http://seclists.org/fulldisclosure/2021/Jan/18; http://www.openwall.com/lists/oss-security/2021/01/04/4
CVE: CVE-2020-25275
Published: 2021-01-04
Description: Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/160841/Dovecot-2.3.11.3-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2021/Jan/18; http://www.openwall.com/lists/oss-security/2021/01/04/3
CVE: CVE-2020-36154
Published: 2021-01-04
Description: The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative privileges via a Trojan horse application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://github.com/passtheticket/vulnerability-research/blob/main/privilege-escalation/pearsonvue-readme.md; https://www.exploit-db.com/exploits/49143; https://github.com/passtheticket/vulnerability-research/blob/main/privilege-escalation/pearsonvue-readme.md
CVE: CVE-2019-25013
Published: 2021-01-04
Description: The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://lists.apache.org/thread.html/r32d767ac804e9b8aad4355bb85960a6a1385eab7afff549a5e98660f%40%3Cjira.kafka.apache.org%3E; https://lists.apache.org/thread.html/r448bb851cc8e6e3f93f3c28c70032b37062625d[PII_REDACTED]4ac49e7%40%3Cdev.kafka.apache.org%3E; https://lists.apache.org/thread.html/r4806a391091e082bdea17266452ca656ebc176e51bb3932733b3a0a2%40%3Cjira.kafka.apache.org%3E
CVE: CVE-2020-26292
Published: 2021-01-04
Description: Creeper is an experimental dynamic, interpreted language. The binary release of Creeper Interpreter 1.1.3 contains potential malware. The compromised binary release was available for a few hours between December 26, 2020 at 3:22 PM EST to December 26, 2020 at 11:00 PM EST. If you used the source code, you are **NOT** affected. This only affects the binary releases. The binary of unknown quality has been removed from the release. If you have downloaded the binary, please delete it and run a reputable antivirus scanner to ensure that your computer is clean.
CVSS Score: 3.1 (LOW)
CWE: CWE-507
References: https://github.com/chatter-social/Creeper/security/advisories/GHSA-9v67-g2rg-m33j; https://github.com/chatter-social/Creeper/security/advisories/GHSA-9v67-g2rg-m33j
CVE: CVE-2020-35219
Published: 2021-01-04
Description: The ASUS DSL-N17U modem with firmware 1.1.0.2 allows attackers to access the admin interface by changing the admin password without authentication via a POST request to Advanced_System_Content.asp with the uiViewTools_username=admin&uiViewTools_Password= and uiViewTools_PasswordConfirm= substrings.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://securityforeveryone.com/blog/asus-dsl-n17u-model-cve-2020-35219; https://www.asus.com/Networking-IoT-Servers/Modem-LTE-Routers/All-series/DSL-N16/HelpDesk_BIOS/; https://securityforeveryone.com/blog/asus-dsl-n17u-model-cve-2020-35219
CVE: CVE-2020-36155
Published: 2021-01-04
Description: An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive metadata, such as the wp_capabilities user meta that defines a user's role. During the registration process, submitted registration details were passed to the update_profile function, and any metadata was accepted, e.g., wp_capabilities[administrator] for Administrator access.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-269
References: https://wordpress.org/plugins/ultimate-member/#developers; https://wpscan.com/vulnerability/cf13b0f8-5815-4d27-a276-5eff8985fc0b; https://www.wordfence.com/blog/2020/11/critical-privilege-escalation-vulnerabilities-affect-100k-sites-using-ultimate-member-plugin/
CVE: CVE-2020-36156
Published: 2021-01-04
Description: An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalation via Profile Update. Any user with wp-admin access to the profile.php page could supply the parameter um-role with a value set to any role (e.g., Administrator) during a profile update, and effectively escalate their privileges.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-269
References: https://wordpress.org/plugins/ultimate-member/#developers; https://wpscan.com/vulnerability/dd4c4ece-7206-4788-8747-f0c0f3ab0a53; https://www.wordfence.com/blog/2020/11/critical-privilege-escalation-vulnerabilities-affect-100k-sites-using-ultimate-member-plugin/
CVE: CVE-2020-36157
Published: 2021-01-04
Description: An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of filtering on the role parameter that could be supplied during the registration process, an attacker could supply the role parameter with a WordPress capability (or any custom Ultimate Member role) and effectively be granted those privileges.
CVSS Score: 10.0 (CRITICAL)
References: https://wordpress.org/plugins/ultimate-member/#developers; https://wpscan.com/vulnerability/33f059c5-58e5-44b9-bb27-793c3cedef3b; https://www.wordfence.com/blog/2020/11/critical-privilege-escalation-vulnerabilities-affect-100k-sites-using-ultimate-member-plugin/
CVE: CVE-2020-26293
Published: 2021-01-04
Description: HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. In HtmlSanitizer before version 5.0.372, there is a possible XSS bypass if style tag is allowed. If you have explicitly allowed the `<style>` tag, an attacker could craft HTML that includes script after passing through the sanitizer. The default settings disallow the `<style>` tag so there is no risk if you have not explicitly allowed the `<style>` tag. The problem has been fixed in version 5.0.372.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74, CWE-79
References: https://github.com/mganss/HtmlSanitizer/commit/a3a7602a44d4155d51ec0fbbedc2a49e9c7e2eb8; https://github.com/mganss/HtmlSanitizer/releases/tag/v5.0.372; https://github.com/mganss/HtmlSanitizer/security/advisories/GHSA-8j9v-h2vp-2hhv
CVE: CVE-2020-26294
Published: 2021-01-04
Description: Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela compiler before version 0.6.1 there is a vulnerability which allows exposure of server configuration. It impacts all users of Vela. An attacker can use Sprig's `env` function to retrieve configuration information, see referenced GHSA for an example. This has been fixed in version 0.6.1. In addition to upgrading, it is recommended to rotate all secrets.
CVSS Score: 7.4 (HIGH)
CWE: CWE-78
References: https://github.com/go-vela/compiler/commit/f1ace5f8a05c95c4d02264556e38a959ee2d9bda; https://github.com/go-vela/compiler/security/advisories/GHSA-gv2h-gf8m-r68j; https://pkg.go.dev/github.com/go-vela/compiler/compiler
CVE: CVE-2020-26297
Published: 2021-01-04
Description: mdBook is a utility to create modern online books from Markdown files and is written in Rust. In mdBook before version 0.4.5, there is a vulnerability affecting the search feature of mdBook, which could allow an attacker to execute arbitrary JavaScript code on the page. The search feature of mdBook (introduced in version 0.1.4) was affected by a cross site scripting vulnerability that allowed an attacker to execute arbitrary JavaScript code on an user's browser by tricking the user into typing a malicious search query, or tricking the user into clicking a link to the search page with the malicious search query prefilled. mdBook 0.4.5 fixes the vulnerability by properly escaping the search query. Owners of websites built with mdBook have to upgrade to mdBook 0.4.5 or greater and rebuild their website contents with it.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://crates.io/crates/mdbook; https://github.com/rust-lang/mdBook/blob/master/CHANGELOG.md#mdbook-045; https://github.com/rust-lang/mdBook/commit/32abeef088e98327ca0dfccdad92e84afa9d2e9b
CVE: CVE-2021-3014
Published: 2021-01-04
Description: In MikroTik RouterOS through 2021-01-04, the hotspot login page is vulnerable to reflected XSS via the target parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2021-01-04-mikrotik-xss-reflected.md; https://m4dm0e.github.io/2021/01/04/mikrotik-xss-reflected.html; https://github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2021-01-04-mikrotik-xss-reflected.md
CVE: CVE-2020-29491
Published: 2021-01-04
Description: Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin clients.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-276, CWE-276
References: https://www.dell.com/support/kbdoc/en-us/000180768/dsa-2020-281; https://www.dell.com/support/kbdoc/en-us/000180768/dsa-2020-281
CVE: CVE-2020-29492
Published: 2021-01-04
Description: Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable file and manipulate the configuration of any target specific station.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-276, CWE-276
References: https://www.dell.com/support/kbdoc/en-us/000180768/dsa-2020-281; https://www.dell.com/support/kbdoc/en-us/000180768/dsa-2020-281
CVE: CVE-2020-29496
Published: 2021-01-04
Description: Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with high privileges could exploit this vulnerability to store malicious HTML or JavaScript code while creating the Enduser. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.dell.com/support/kbdoc/en-us/000180983/dsa-2020-282; https://www.dell.com/support/kbdoc/en-us/000180983/dsa-2020-282
CVE: CVE-2020-29497
Published: 2021-01-04
Description: Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with low privileges could exploit this vulnerability to store malicious HTML or JavaScript code under the device tag. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.dell.com/support/kbdoc/en-us/000180983/dsa-2020-282; https://www.dell.com/support/kbdoc/en-us/000180983/dsa-2020-282
CVE: CVE-2020-29498
Published: 2021-01-04
Description: Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://www.dell.com/support/kbdoc/en-us/000180983/dsa-2020-282; https://www.dell.com/support/kbdoc/en-us/000180983/dsa-2020-282
CVE: CVE-2020-5361
Published: 2021-01-04
Description: Select Dell Client Commercial and Consumer platforms support a BIOS password reset capability that is designed to assist authorized customers who forget their passwords. Dell is aware of unauthorized password generation tools that can generate BIOS recovery passwords. The tools, which are not authorized by Dell, can be used by a physically present attacker to reset BIOS passwords and BIOS-managed Hard Disk Drive (HDD) passwords. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to bypass security restrictions for BIOS Setup configuration, HDD access and BIOS pre-boot authentication.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-640, CWE-640
References: https://www.dell.com/support/kbdoc/en-us/000180741/dsa-2020-119-dell-client-products-unauthorized-bios-password-reset-tool-vulnerability; https://www.dell.com/support/kbdoc/en-us/000180741/dsa-2020-119-dell-client-products-unauthorized-bios-password-reset-tool-vulnerability
CVE: CVE-2020-36158
Published: 2021-01-05
Description: mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c455c5ab332773464d02ba17015acdca198f03d; https://github.com/torvalds/linux/commit/5c455c5ab332773464d02ba17015acdca198f03d; https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html
CVE: CVE-2021-3018
Published: 2021-01-05
Description: ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/160815/IPeakCMS-3.5-SQL-Injection.html; https://github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2020-12-07-ipeak-cms-sqli.md; https://ipeak.ch
CVE: CVE-2021-3019
Published: 2021-01-05
Description: ffay lanproxy 0.1 allows Directory Traversal to read /../conf/config.properties to obtain credentials for a connection to the intranet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/ffay/lanproxy/commits/master; https://github.com/maybe-why-not/lanproxy/issues/1; https://github.com/ffay/lanproxy/commits/master
CVE: CVE-2020-17518
Published: 2021-01-05
Description: Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users should upgrade to Flink 1.11.3 or 1.12.0 if their Flink instance(s) are exposed. The issue was fixed in commit a5264a6f41524afe8ceadf1d8ddc8c80f323ebc4 from apache/flink:master.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23, CWE-22
References: http://www.openwall.com/lists/oss-security/2021/01/05/1; https://lists.apache.org/thread.html/r0b000dc028616d33cb9aa388eb45d516b789cab0024dad94bc06588a%40%3Cissues.flink.apache.org%3E; https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3E