deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-41554
Published: 2021-10-05
Description: ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests for access to data and functionality in these affected endpoints: /archibus/schema/ab-edit-users.axvw, /archibus/schema/ab-data-dictionary-table.axvw, /archibus/schema/ab-schema-add-field.axvw, /archibus/schema/ab-core/views/process-navigator/ab-my-user-profile.axvw. By not verifying the permissions for access to resources, it allows a potential attacker to view pages that are not allowed. Specifically, it was found that any authenticated user can reach the administrative console for user management by directly requesting access to the page via URL. This allows a malicious user to modify all users' profiles, to elevate any privileges to administrative ones, or to create or delete any type of user. It is also possible to modify the emails of other users, through a misconfiguration of the username parameter, on the user profile page. This is fixed in all recent versions, such as version 26. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Version 21.3 was officially de-supported by the end of 2020
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://www.gruppotim.it/redteam; https://www.gruppotim.it/redteam
CVE: CVE-2021-41555
Published: 2021-10-05
Description: In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XSS occurs in /archibus/dwr/call/plaincall/workflow.runWorkflowRule.dwr because the data received as input from clients is re-included within the HTTP response returned by the application without adequate validation. In this way, if HTML code or client-side executable code (e.g., Javascript) is entered as input, the expected execution flow could be altered. This is fixed in all recent versions, such as version 26. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Version 21.3 was officially de-supported by the end of 2020
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.gruppotim.it/redteam; https://www.gruppotim.it/redteam
CVE: CVE-2021-35491
Published: 2021-10-05
Description: A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5 allows a remote attacker to delete a user account via the /enginemanager/server/user/delete.htm userName parameter. The application does not implement a CSRF token for the GET request. This issue was resolved in Wowza Streaming Engine release 4.8.14.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://n4nj0.github.io/advisories/wowza-streaming-engine-i/; https://www.gruppotim.it/redteam; https://www.wowza.com/docs/wowza-streaming-engine-4-8-14-release-notes
CVE: CVE-2021-35492
Published: 2021-10-05
Description: Wowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote attacker to exhaust filesystem resources via the /enginemanager/server/vhost/historical.jsdata vhost parameter. This is due to the insufficient management of available filesystem resources. An attacker could exploit this vulnerability through the Virtual Host Monitoring section by requesting random virtual-host historical data and exhausting available filesystem resources. A successful exploit could allow the attacker to cause database errors and cause the device to become unresponsive to web-based management. (Manual intervention is required to free filesystem resources and return the application to an operational state.)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://n4nj0.github.io/advisories/wowza-streaming-engine-i/; https://www.gruppotim.it/redteam; https://www.wowza.com/docs/wowza-streaming-engine-4-8-14-release-notes
CVE: CVE-2021-41286
Published: 2021-10-05
Description: Omikron MultiCash Desktop 4.00.008.SP5 relies on a client-side authentication mechanism. When a user logs into the application, the validity of the password is checked locally. All communication to the database backend is made via the same technical account. Consequently, an attacker can attach a debugger to the process or create a patch that manipulates the behavior of the login function. When the function always returns the success value (corresponding to a correct password), an attacker can login with any desired account, such as the administrative account of the application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-047.txt; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-047.txt
CVE: CVE-2021-41553
Published: 2021-10-05
Description: In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), the Web Application in /archibus/login.axvw assign a session token that could be already in use by another user. It was therefore possible to access the application through a user whose credentials were not known, without any attempt by the testers to modify the application logic. It is also possible to set the value of the session token, client-side, simply by making an unauthenticated GET Request to the Home Page and adding an arbitrary value to the JSESSIONID field. The application, following the login, does not assign a new token, continuing to keep the inserted one, as the identifier of the entire session. This is fixed in all recent versions, such as version 26. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Version 21.3 was officially de-supported by the end of 2020
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384
References: https://www.gruppotim.it/redteam; https://www.gruppotim.it/redteam
CVE: CVE-2021-35497
Published: 2021-10-05
Description: The FTL Server (tibftlserver) and Docker images containing tibftlserver components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, TIBCO ActiveSpaces - Enterprise Edition, TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contain a vulnerability that theoretically allows a non-administrative, authenticated FTL user to trick the affected components into creating illegitimate certificates. These maliciously generated certificates can be used to enable man-in-the-middle attacks or to escalate privileges so that the malicious user has administrative privileges. Affected releases are TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition: versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.6.1, and 4.6.2, TIBCO ActiveSpaces - Developer Edition: versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.6.1, and 4.6.2, TIBCO ActiveSpaces - Enterprise Edition: versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.6.1, and 4.6.2, TIBCO FTL - Community Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0, TIBCO FTL - Developer Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0, TIBCO FTL - Enterprise Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0, TIBCO eFTL - Community Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0, TIBCO eFTL - Developer Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0, and TIBCO eFTL - Enterprise Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2021/10/tibco-security-advisory-october-5-2021-tibco-ftl-2021-35497; https://www.tibco.com/services/support/advisories
CVE: CVE-2021-39226
Published: 2021-10-05
Description: Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /api/snapshots/:key. If the snapshot "public_mode" configuration setting is set to true (vs default of false), unauthenticated users are able to delete the snapshot with the lowest database key by accessing the literal path: /api/snapshots-delete/:deleteKey. Regardless of the snapshot "public_mode" setting, authenticated users are able to delete the snapshot with the lowest database key by accessing the literal paths: /api/snapshots/:key, or /api/snapshots-delete/:deleteKey. The combination of deletion and viewing enables a complete walk through all snapshot data while resulting in complete snapshot data loss. This issue has been resolved in versions 8.1.6 and 7.5.11. If for some reason you cannot upgrade you can use a reverse proxy or similar to block access to the literal paths: /api/snapshots/:key, /api/snapshots-delete/:deleteKey, /dashboard/snapshot/:key, and /api/snapshots/:key. They have no normal function and can be disabled without side effects.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-862
References: http://www.openwall.com/lists/oss-security/2021/10/05/4; https://github.com/grafana/grafana/commit/2d456a[PII_REDACTED]d098ede379438bf7f0667269; https://github.com/grafana/grafana/security/advisories/GHSA-69j6-29vr-p3j9
CVE: CVE-2021-41113
Published: 2021-10-05
Description: TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the new TYPO3 v11 feature that allows users to create and share deep links in the backend user interface is vulnerable to cross-site-request-forgery. The impact is the same as described in TYPO3-CORE-SA-2020-006 (CVE-2020-11069). However, it is not limited to the same site context and does not require the attacker to be authenticated. In a worst case scenario, the attacker could create a new admin user account to compromise the system. To successfully carry out an attack, an attacker must trick his victim to access a compromised system. The victim must have an active session in the TYPO3 backend at that time. The following Same-Site cookie settings in $GLOBALS[TYPO3_CONF_VARS][BE][cookieSameSite] are required for an attack to be successful: SameSite=strict: malicious evil.example.org invoking TYPO3 application at good.example.org and SameSite=lax or none: malicious evil.com invoking TYPO3 application at example.org. Update your instance to TYPO3 version 11.5.0 which addresses the problem described.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/TYPO3/typo3/commit/fa51999203c5e5d913ecae5ea843ccb2b95fa33f; https://github.com/TYPO3/typo3/security/advisories/GHSA-657m-v5vm-f6rw; https://typo3.org/security/advisory/typo3-core-sa-2020-006
CVE: CVE-2021-41114
Published: 2021-10-05
Description: TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that TYPO3 CMS is susceptible to host spoofing due to improper validation of the HTTP Host header. TYPO3 uses the HTTP Host header, for example, to generate absolute URLs during the frontend rendering process. Since the host header itself is provided by the client, it can be forged to any value, even in a name-based virtual hosts environment. This vulnerability is the same as described in TYPO3-CORE-SA-2014-001 (CVE-2014-3941). A regression, introduced during TYPO3 v11 development, led to this situation. The already existing setting $GLOBALS['TYPO3_CONF_VARS']['SYS']['trustedHostsPattern'] (used as an effective mitigation strategy in previous TYPO3 versions) was not evaluated anymore, and reintroduced the vulnerability.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-20, CWE-644
References: https://github.com/TYPO3/typo3/commit/5cbff85506cebe343e5ae[PII_REDACTED]7cf8e3cf4; https://github.com/TYPO3/typo3/security/advisories/GHSA-m2jh-fxw4-gphm; https://typo3.org/security/advisory/typo3-core-sa-2021-015
CVE: CVE-2021-41116
Published: 2021-10-05
Description: Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependencies are subject to command injection and should upgrade their composer version. Other OSs and WSL are not affected. The issue has been resolved in composer versions 1.10.23 and 2.1.9. There are no workarounds for this issue.
CVSS Score: 8.2 (HIGH)
CWE: CWE-77, CWE-77
References: https://github.com/composer/composer/commit/ca5e2f8d505fd3bfac6f7c85b82f2740becbc0aa; https://github.com/composer/composer/security/advisories/GHSA-frqg-7g38-6gcf; https://www.sonarsource.com/blog/securing-developer-tools-package-managers/
CVE: CVE-2021-3319
Published: 2021-10-05
Description: DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions >= > v2.4.0 contain NULL Pointer Dereference (CWE-476), Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94jg-2p6q-5364
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-588, CWE-476
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94jg-2p6q-5364; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94jg-2p6q-5364
CVE: CVE-2021-3436
Published: 2021-10-05
Description: BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known. Zephyr versions >= 1.14.2, >= 2.4.0, >= 2.5.0 contain Use of Multiple Resources with Duplicate Identifier (CWE-694). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-j76f-35mc-4h63
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-694
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-j76f-35mc-4h63; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-j76f-35mc-4h63
CVE: CVE-2021-3510
Published: 2021-10-05
Description: Zephyr JSON decoder incorrectly decodes array of array. Zephyr versions >= >1.14.0, >= >2.5.0 contain Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-289f-7mw3-2qf4
CVSS Score: 7.5 (HIGH)
CWE: CWE-588
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-289f-7mw3-2qf4; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-289f-7mw3-2qf4
CVE: CVE-2021-3581
Published: 2021-10-05
Description: Buffer Access with Incorrect Length Value in zephyr. Zephyr versions >= >=2.5.0 contain Buffer Access with Incorrect Length Value (CWE-805). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5
CVSS Score: 7.0 (HIGH)
CWE: CWE-805, CWE-1284
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5
CVE: CVE-2021-3625
Published: 2021-10-05
Description: Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions >= v2.5.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-122, CWE-787
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363
CVE: CVE-2021-41120
Published: 2021-10-05
Description: sylius/paypal-plugin is a paypal plugin for the Sylius development platform. In affected versions the URL to the payment page done after checkout was created with autoincremented payment id (/pay-with-paypal/{id}) and therefore it was easy to predict. The problem is that the Credit card form has prefilled "credit card holder" field with the Customer's first and last name and hence this can lead to personally identifiable information exposure. Additionally, the mentioned form did not require authentication. The problem has been patched in Sylius/PayPalPlugin 1.2.4 and 1.3.1. If users are unable to update they can override a sylius_paypal_plugin_pay_with_paypal_form route and change its URL parameters to (for example) {orderToken}/{paymentId}, then override the Sylius\PayPalPlugin\Controller\PayWithPayPalFormAction service, to operate on the payment taken from the repository by these 2 values. It would also require usage of custom repository method. Additionally, one could override the @SyliusPayPalPlugin/payWithPaypal.html.twig template, to add contingencies: ['SCA_ALWAYS'] line in hostedFields.submit(...) function call (line 421). It would then have to be handled in the function callback.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-639
References: https://github.com/Sylius/PayPalPlugin/commit/2adc46be2764ccee22b4247139b8056fb8d1afff; https://github.com/Sylius/PayPalPlugin/commit/814923c2e9d97fe6279dcee866c34ced3d2fb7a7; https://github.com/Sylius/PayPalPlugin/security/advisories/GHSA-25fx-mxc2-76g7
CVE: CVE-2021-41124
Published: 2021-10-05
Description: Scrapy-splash is a library which provides Scrapy and JavaScript integration. In affected versions users who use [`HttpAuthMiddleware`](http://doc.scrapy.org/en/latest/topics/downloader-middleware.html#module-scrapy.downloadermiddlewares.httpauth) (i.e. the `http_user` and `http_pass` spider attributes) for Splash authentication will have any non-Splash request expose your credentials to the request target. This includes `robots.txt` requests sent by Scrapy when the `ROBOTSTXT_OBEY` setting is set to `True`. Upgrade to scrapy-splash 0.8.0 and use the new `SPLASH_USER` and `SPLASH_PASS` settings instead to set your Splash authentication credentials safely. If you cannot upgrade, set your Splash request credentials on a per-request basis, [using the `splash_headers` request parameter](https://github.com/scrapy-plugins/scrapy-splash/tree/0.8.x#http-basic-auth), instead of defining them globally using the [`HttpAuthMiddleware`](http://doc.scrapy.org/en/latest/topics/downloader-middleware.html#module-scrapy.downloadermiddlewares.httpauth). Alternatively, make sure all your requests go through Splash. That includes disabling the [robots.txt middleware](https://docs.scrapy.org/en/latest/topics/downloader-middleware.html#topics-dlmw-robots).
CVSS Score: 7.4 (HIGH)
CWE: CWE-200
References: https://github.com/scrapy-plugins/scrapy-splash/commit/2b253e57fe64ec575079c8cdc99fe2013502ea31; https://github.com/scrapy-plugins/scrapy-splash/security/advisories/GHSA-823f-cwm9-4g74; https://github.com/scrapy-plugins/scrapy-splash/commit/2b253e57fe64ec575079c8cdc99fe2013502ea31
CVE: CVE-2020-21503
Published: 2021-10-05
Description: waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: https://github.com/caokang/waimai/issues/15; https://github.com/caokang/waimai/issues/15
CVE: CVE-2020-21504
Published: 2021-10-05
Description: waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=login.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/caokang/waimai/issues/16; https://github.com/caokang/waimai/issues/16
CVE: CVE-2020-21505
Published: 2021-10-05
Description: waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/caokang/waimai/issues/16; https://github.com/caokang/waimai/issues/16
CVE: CVE-2020-21506
Published: 2021-10-05
Description: waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Config&a=add.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/caokang/waimai/issues/16; https://github.com/caokang/waimai/issues/16
CVE: CVE-2021-31986
Published: 2021-10-05
Description: User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://www.axis.com/files/tech_notes/CVE-2021-31986.pdf; https://www.axis.com/files/tech_notes/CVE-2021-31986.pdf
CVE: CVE-2021-31987
Published: 2021-10-05
Description: A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1286
References: https://www.axis.com/files/tech_notes/CVE-2021-31987.pdf; https://www.axis.com/files/tech_notes/CVE-2021-31987.pdf
CVE: CVE-2021-31988
Published: 2021-10-05
Description: A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and include arbitrary SMTP headers in the generated test email.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1286, CWE-74
References: https://www.axis.com/files/tech_notes/CVE-2021-31988.pdf; https://www.axis.com/files/tech_notes/CVE-2021-31988.pdf
CVE: CVE-2021-33849
Published: 2021-10-05
Description: A Cross-Site Scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user’s browser while the browser is connected to a trusted website. The attack targets your application's users and not the application itself while using your application as the attack's vehicle. The XSS payload executes whenever the user changes the form values or deletes a created form in Zoho CRM Lead Magnet Version 1.7.2.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2020-29322-telnet-hardcoded-credentials.html; https://cybersecurityworks.com/zerodays/cve-2021-33849-stored-cross-site-scripting-xss-in-wordpress-plugin-zoho-crm-lead-magnet-version-1-7-2-4.html; https://cybersecurityworks.com/zerodays/cve-2020-29322-telnet-hardcoded-credentials.html
CVE: CVE-2021-41122
Published: 2021-10-05
Description: Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions external functions did not properly validate the bounds of decimal arguments. The can lead to logic errors. This issue has been resolved in version 0.3.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-682
References: https://github.com/vyperlang/vyper/pull/2447; https://github.com/vyperlang/vyper/security/advisories/GHSA-c7pr-343r-5c46; https://github.com/vyperlang/vyper/pull/2447
CVE: CVE-2020-15941
Published: 2021-10-06
Description: A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete the files of the server via the name parameter of Deployment Packages.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-22
References: https://fortiguard.com/advisory/FG-IR-20-074; https://fortiguard.com/advisory/FG-IR-20-074
CVE: CVE-2021-24019
Published: 2021-10-06
Description: An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)
CVSS Score: 8.1 (HIGH)
CWE: CWE-613
References: https://fortiguard.com/advisory/FG-IR-20-072; https://fortiguard.com/advisory/FG-IR-20-072
CVE: CVE-2021-24021
Published: 2021-10-06
Description: An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below and 6.0.10 and below may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the column settings of Logview in FortiAnalyzer, should the attacker be able to obtain that POST request, via other, hypothetical attacks.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-20-098; https://fortiguard.com/advisory/FG-IR-20-098