deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-5909
Published: 2020-07-02
Description: In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX Controller user interface (UI) to fetch the agent installer, the server TLS certificate is not verified.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-295
References: https://support.f5.com/csp/article/K31150658; https://support.f5.com/csp/article/K31150658
CVE: CVE-2020-5910
Published: 2020-07-02
Description: In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the Neural Autonomic Transport System (NATS) messaging services in use by the NGINX Controller do not require any form of authentication, so any successful connection would be authorized.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://support.f5.com/csp/article/K59209532; https://support.f5.com/csp/article/K59209532
CVE: CVE-2020-5911
Published: 2020-07-02
Description: In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller installer starts the download of Kubernetes packages from an HTTP URL On Debian/Ubuntu system.
CVSS Score: 7.3 (HIGH)
References: https://support.f5.com/csp/article/K84084843; https://support.f5.com/csp/article/K84084843
CVE: CVE-2020-7820
Published: 2020-07-02
Description: Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the arguments to the vulnerable API. This can be leveraged for code execution by rebooting the victim’s PC
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: http://support.tobesoft.co.kr/Support/index.html; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35491; http://support.tobesoft.co.kr/Support/index.html
CVE: CVE-2020-7821
Published: 2020-07-02
Description: Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by modifying the value of registry path. This can be leveraged for code execution by rebooting the victim’s PC
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: http://support.tobesoft.co.kr/Support/index.html; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35491; http://support.tobesoft.co.kr/Support/index.html
CVE: CVE-2020-9497
Published: 2020-07-02
Description: Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels. If a userconnects to a malicious or compromised RDP server, specially-craftedPDUs could result in disclosure of information within the memory ofthe guacd process handling the connection.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44525; https://lists.apache.org/thread.html/r066543f0565e97b27c0dfe27e93e8a387b99e1e[PII_REDACTED]4ed96e7%40%3Cuser.guacamole.apache.org%3E; https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3E
CVE: CVE-2020-9498
Published: 2020-07-02
Description: Apache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via RDP static virtual channels. If a userconnects to a malicious or compromised RDP server, a series ofspecially-crafted PDUs could result in memory corruption, possiblyallowing arbitrary code to be executed with the privileges of therunning guacd process.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44525; https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3E; https://lists.apache.org/thread.html/r26fb170edebff842c74aacdb1333c1338f0e19e5ec7854d72e4680fc%40%3Cannounce.apache.org%3E
CVE: CVE-2020-15503
Published: 2020-07-02
Description: LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without validating T.tlength.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00075.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00001.html; https://github.com/LibRaw/LibRaw/commit/20ad21c0d87ca80217aee47533d91e633ce1864d
CVE: CVE-2020-12119
Published: 2020-07-02
Description: Ledger Live before 2.7.0 does not handle Bitcoin's Replace-By-Fee (RBF). It increases the user's balance with the value of an unconfirmed transaction as soon as it is received (before the transaction is confirmed) and does not decrease the balance when it is canceled. As a result, users are exposed to basic double spending attacks, amplified double spending attacks, and DoS attacks without user consent.
CVSS Score: 8.1 (HIGH)
CWE: CWE-345
References: https://donjon.ledger.com/lsb/012/; https://donjon.ledger.com/lsb/012/
CVE: CVE-2020-2201
Published: 2020-07-02
Description: Jenkins Sonargraph Integration Plugin 3.0.0 and earlier does not escape the file path for the Log file field form validation, resulting in a stored cross-site scripting vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1775; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2202
Published: 2020-07-02
Description: A missing permission check in Jenkins Fortify on Demand Plugin 6.0.0 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1690; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2203
Published: 2020-07-02
Description: A cross-site request forgery vulnerability in Jenkins Fortify on Demand Plugin 5.0.1 and earlier allows attackers to connect to the globally configured Fortify on Demand endpoint using attacker-specified credentials IDs.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1691; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2204
Published: 2020-07-02
Description: A missing permission check in Jenkins Fortify on Demand Plugin 5.0.1 and earlier allows attackers with Overall/Read permission to connect to the globally configured Fortify on Demand endpoint using attacker-specified credentials IDs.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1691; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2205
Published: 2020-07-02
Description: Jenkins VncRecorder Plugin 1.25 and earlier does not escape a tool path in the `checkVncServ` form validation endpoint, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by Jenkins administrators.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1728%20%281%29; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2206
Published: 2020-07-02
Description: Jenkins VncRecorder Plugin 1.25 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1728%20%282%29; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2207
Published: 2020-07-02
Description: Jenkins VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1776; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2208
Published: 2020-07-02
Description: Jenkins Slack Upload Plugin 1.7 and earlier stores a secret unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1627; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2209
Published: 2020-07-02
Description: Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1686; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2210
Published: 2020-07-02
Description: Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier transmits configured passwords in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-319
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1656; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2211
Published: 2020-07-02
Description: Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin 1.3 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1738; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2212
Published: 2020-07-02
Description: Jenkins GitHub Coverage Reporter Plugin 1.8 and earlier stores secrets unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system or read permissions on the system configuration.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1632; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2213
Published: 2020-07-02
Description: Jenkins White Source Plugin 19.1.1 and earlier stores credentials unencrypted in its global configuration file and in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission (config.xml), or access to the master file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1630; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2214
Published: 2020-07-02
Description: Jenkins ZAP Pipeline Plugin 1.9 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1811; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2215
Published: 2020-07-02
Description: A cross-site request forgery vulnerability in Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified username and password.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1762; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2216
Published: 2020-07-02
Description: A missing permission check in Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified username and password.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1762; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2217
Published: 2020-07-02
Description: Jenkins Compatibility Action Storage Plugin 1.0 and earlier does not escape the content coming from the MongoDB in the testConnection form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1771; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2218
Published: 2020-07-02
Description: Jenkins HP ALM Quality Center Plugin 1.6 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.
CVSS Score: 3.3 (LOW)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1576; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2020-2219
Published: 2020-07-02
Description: Jenkins Link Column Plugin 1.0 and earlier does not filter URLs of links created by users with View/Configure permission, resulting in a stored cross-site scripting vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/07/02/7; https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1803; http://www.openwall.com/lists/oss-security/2020/07/02/7
CVE: CVE-2019-20894
Published: 2020-07-02
Description: Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where ERR_BAD_SSL_CLIENT_AUTH_CERT should have occurred.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://github.com/containous/traefik/issues/5312; https://github.com/containous/traefik/issues/5312
CVE: CVE-2020-13653
Published: 2020-07-02
Description: An XSS vulnerability exists in the Webmail component of Zimbra Collaboration Suite before 8.8.15 Patch 11. It allows an attacker to inject executable JavaScript into the account name of a user's profile. The injected code can be reflected and executed when changing an e-mail signature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P11; https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P4
CVE: CVE-2020-14092
Published: 2020-07-02
Description: The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wordpress.dwbooster.com/forms/payment-form-for-paypal-pro; https://wordpress.org/plugins/payment-form-for-paypal-pro/#developers; https://wpvulndb.com/vulnerabilities/10287
CVE: CVE-2020-11074
Published: 2020-07-02
Description: In PrestaShop from version 1.5.3.0 and before version 1.7.6.6, there is a stored XSS when using the name of a quick access item. The problem is fixed in 1.7.6.6.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/PrestaShop/PrestaShop/commit/d122b82bcc2ad8a7b05cfffc03df6c2cae08efe8; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-v4pg-q2cv-f7x4; https://github.com/PrestaShop/PrestaShop/commit/d122b82bcc2ad8a7b05cfffc03df6c2cae08efe8
CVE: CVE-2020-15079
Published: 2020-07-02
Description: In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, there is improper access control in Carrier page, Module Manager and Module Positions. The problem is fixed in version 1.7.6.6
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-284
References: https://github.com/PrestaShop/PrestaShop/commit/8833d9504cc5d69a2a6d10197f56f0c11443cbfa; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-xp3x-3h8q-c386; https://github.com/PrestaShop/PrestaShop/commit/8833d9504cc5d69a2a6d10197f56f0c11443cbfa
CVE: CVE-2020-15080
Published: 2020-07-02
Description: In PrestaShop from version 1.7.4.0 and before version 1.7.6.6, some files should not be in the release archive, and others should not be accessible. The problem is fixed in version 1.7.6.6 A possible workaround is to make sure `composer.json` and `docker-compose.yml` are not accessible on your server.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-862
References: https://github.com/PrestaShop/PrestaShop/commit/35ef7e9d892287c302df1fc5aa05ecfc6f15bc76; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-492w-2pp5-xhvg; https://github.com/PrestaShop/PrestaShop/commit/35ef7e9d892287c302df1fc5aa05ecfc6f15bc76
CVE: CVE-2020-15081
Published: 2020-07-02
Description: In PrestaShop from version 1.5.0.0 and before 1.7.6.6, there is information exposure in the upload directory. The problem is fixed in version 1.7.6.6. A possible workaround is to add an empty index.php file in the upload directory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-548, CWE-200
References: https://github.com/PrestaShop/PrestaShop/commit/bac9ea6936b073f84b1abd9864317af3713f1901; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-997j-f42g-x57c; https://github.com/PrestaShop/PrestaShop/commit/bac9ea6936b073f84b1abd9864317af3713f1901
CVE: CVE-2020-15082
Published: 2020-07-02
Description: In PrestaShop from version 1.6.0.1 and before version 1.7.6.6, the dashboard allows rewriting all configuration variables. The problem is fixed in 1.7.6.6
CVSS Score: 7.1 (HIGH)
References: https://github.com/PrestaShop/PrestaShop/commit/0f0d6238169a79d94f5ef28d24e60a9be8902f4b; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-mc98-xjm3-c4fm; https://github.com/PrestaShop/PrestaShop/commit/0f0d6238169a79d94f5ef28d24e60a9be8902f4b
CVE: CVE-2020-15083
Published: 2020-07-02
Description: In PrestaShop from version 1.7.0.0 and before version 1.7.6.6, if a target sends a corrupted file, it leads to a reflected XSS. The problem is fixed in 1.7.6.6
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/PrestaShop/PrestaShop/commit/bac749bf75a4e0d6312a70b37eb5b0a556f08fbd; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-qgh4-95j7-p3vj; https://github.com/PrestaShop/PrestaShop/commit/bac749bf75a4e0d6312a70b37eb5b0a556f08fbd
CVE: CVE-2020-15091
Published: 2020-07-02
Description: TenderMint from version 0.33.0 and before version 0.33.6 allows block proposers to include signatures for the wrong block. This may happen naturally if you start a network, have it run for some time and restart it (**without changing chainID**). A malicious block proposer (even with a minimal amount of stake) can use this vulnerability to completely halt the network. This issue is fixed in Tendermint 0.33.6 which checks all the signatures are for the block with 2/3+ majority before creating a commit.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-347, CWE-347
References: https://github.com/tendermint/tendermint/commit/480b995a31727593f58b361af979054d17d84340; https://github.com/tendermint/tendermint/issues/4926; https://github.com/tendermint/tendermint/security/advisories/GHSA-6jqj-f58p-mrw3
CVE: CVE-2020-4061
Published: 2020-07-02
Description: In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467.
CVSS Score: 3.7 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/octobercms/october/commit/b384954a29b89117e1c0d6035b3ede4f46df67c5; https://github.com/octobercms/october/security/advisories/GHSA-3pc2-fm7p-q2vg; https://research.securitum.com/the-curious-case-of-copy-paste/
CVE: CVE-2020-4074
Published: 2020-07-02
Description: In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, the authentication system is malformed and an attacker is able to forge requests and execute admin commands. The problem is fixed in 1.7.6.6.
CVSS Score: 8.9 (HIGH)
CWE: CWE-287, CWE-287
References: https://github.com/PrestaShop/PrestaShop/commit/30b6a7bdaca9cb940d3ce462906dbb062499fc30; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-ccvh-jh5x-mpg4; https://github.com/PrestaShop/PrestaShop/commit/30b6a7bdaca9cb940d3ce462906dbb062499fc30
CVE: CVE-2020-8161
Published: 2020-07-02
Description: A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.
CVSS Score: 8.6 (HIGH)
CWE: CWE-548, CWE-22
References: https://groups.google.com/g/rubyonrails-security/c/IOO1vNZTzPA; https://hackerone.com/reports/434404; https://lists.debian.org/debian-lts-announce/2020/07/msg00006.html
CVE: CVE-2020-8163
Published: 2020-07-02
Description: The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: http://packetstormsecurity.com/files/158604/Ruby-On-Rails-5.0.1-Remote-Code-Execution.html; https://groups.google.com/g/rubyonrails-security/c/hWuKcHyoKh0; https://hackerone.com/reports/304805
CVE: CVE-2020-8166
Published: 2020-07-02
Description: A CSRF forgery vulnerability exists in rails < 5.2.5, rails < 6.0.4 that makes it possible for an attacker to, given a global CSRF token such as the one present in the authenticity_token meta tag, forge a per-form CSRF token.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://groups.google.com/g/rubyonrails-security/c/NOjKiGeXUgw; https://hackerone.com/reports/732415; https://www.debian.org/security/2020/dsa-4766
CVE: CVE-2020-8176
Published: 2020-07-02
Description: A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the `shop` parameter on the `/shopify/auth/enable_cookies` endpoint.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Shopify/quilt/pull/1455; https://hackerone.com/reports/881409; https://github.com/Shopify/quilt/pull/1455
CVE: CVE-2020-8179
Published: 2020-07-02
Description: Improper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users decks.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-284, CWE-269
References: https://hackerone.com/reports/867052; https://nextcloud.com/security/advisory/?id=NC-SA-2020-022; https://hackerone.com/reports/867052
CVE: CVE-2020-8185
Published: 2020-07-02
Description: A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://groups.google.com/g/rubyonrails-security/c/pAe9EV8gbM0; https://hackerone.com/reports/899069; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XJ7NUWXAEVRQCROIIBV4C6WXO6IR3KSB/