deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-1267
Published: 2021-01-13
Description: A vulnerability in the dashboard widget of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper restrictions on XML entities. An attacker could exploit this vulnerability by crafting an XML-based widget on an affected server. A successful exploit could cause increased memory and CPU utilization, which could result in a DoS condition.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-776, CWE-776
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xee-DFzARDcs; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xee-DFzARDcs
CVE: CVE-2021-1307
Published: 2021-01-13
Description: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121, CWE-787
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U
CVE: CVE-2021-1310
Published: 2021-01-13
Description: A vulnerability in the web-based management interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to redirect a user to an untrusted web page, bypassing the warning mechanism that should prompt the user before the redirection. This vulnerability is due to improper input validation of the URL parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website, bypassing the Webex URL check that should result in a warning before the redirection to the web page. Attackers may use this type of vulnerability, known as an open redirect attack, as part of a phishing attack to convince users to unknowingly visit malicious sites.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-open-redirect-PWvBQ2q; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-open-redirect-PWvBQ2q
CVE: CVE-2021-1311
Published: 2021-01-13
Description: A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to take over the host role during a meeting. This vulnerability is due to a lack of protection against brute forcing of the host key. An attacker could exploit this vulnerability by sending crafted requests to a vulnerable Cisco Webex Meetings or Webex Meetings Server site. A successful exploit would require the attacker to have access to join a Webex meeting, including applicable meeting join links and passwords. A successful exploit could allow the attacker to acquire or take over the host role for a meeting.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-307, CWE-307
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-brutef-hostkey-FWRMxVF; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-brutef-hostkey-FWRMxVF
CVE: CVE-2021-1360
Published: 2021-01-13
Description: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121, CWE-787
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U
CVE: CVE-2013-1053
Published: 2021-01-13
Description: In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the file. This issue affects version 1.0.0-0ubuntu3 and prior versions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-261, CWE-327
References: https://launchpad.net/bugs/1158373; https://launchpad.net/bugs/1158373
CVE: CVE-2020-14097
Published: 2021-01-13
Description: Wrong nginx configuration, causing specific paths to be downloaded without authorization. This affects Xiaomi router AX6 ROM version < 1.0.18.
CVSS Score: 7.5 (HIGH)
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=21&locale=en; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=21&locale=en
CVE: CVE-2020-14098
Published: 2021-01-13
Description: The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.
CVSS Score: 7.5 (HIGH)
CWE: CWE-662
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=22&locale=en; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=22&locale=en
CVE: CVE-2020-14101
Published: 2021-01-13
Description: The data collection SDK of the router web management interface caused the leakage of the token. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.
CVSS Score: 7.5 (HIGH)
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=24&locale=en; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=24&locale=en
CVE: CVE-2020-14102
Published: 2021-01-13
Description: There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=23&locale=en; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=23&locale=en
CVE: CVE-2020-1865
Published: 2021-01-13
Description: There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could send crafted PIM messages to the device, successful exploit could cause out of bounds read when the system does the certain operation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201230-02-cloudengine-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201230-02-cloudengine-en
CVE: CVE-2020-1866
Published: 2021-01-13
Description: There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions V500R001C30,V500R001C60SPC500,V500R005C00;S12700 versions V200R008C00;S2700 versions V200R008C00;S5700 versions V200R008C00;S6700 versions V200R008C00;S7700 versions V200R008C00;S9700 versions V200R008C00;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00;USG9500 versions V500R001C30SPC300,V500R001C30SPC600,V500R001C60SPC500,V500R005C00.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-09-eudemon-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-09-eudemon-en
CVE: CVE-2020-9209
Published: 2021-01-13
Description: There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located improperly. It does not apply the directory limitation. Attackers can exploit this vulnerability by crafting malicious file to launch privilege escalation. This can compromise normal service of affected products.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-862
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201230-01-pe-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201230-01-pe-en
CVE: CVE-2021-21006
Published: 2021-01-13
Description: Adobe Photoshop version 22.1 (and earlier) is affected by a heap buffer overflow vulnerability when handling a specially crafted font file. Successful exploitation could lead to arbitrary code execution. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 8.6 (HIGH)
CWE: CWE-122
References: https://helpx.adobe.com/security/products/photoshop/apsb21-01.html; https://helpx.adobe.com/security/products/photoshop/apsb21-01.html
CVE: CVE-2021-21007
Published: 2021-01-13
Description: Adobe Illustrator version 25.0 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.0 (HIGH)
CWE: CWE-427
References: https://helpx.adobe.com/security/products/illustrator/apsb21-02.html; https://helpx.adobe.com/security/products/illustrator/apsb21-02.html
CVE: CVE-2021-21008
Published: 2021-01-13
Description: Adobe Animate version 21.0 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.0 (HIGH)
CWE: CWE-427
References: https://helpx.adobe.com/security/products/animate/apsb21-03.html; https://helpx.adobe.com/security/products/animate/apsb21-03.html
CVE: CVE-2021-21009
Published: 2021-01-13
Description: Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier), 19.2.3 (and earlier) and 19.1.7 (and earlier) are affected by a server-side request forgery (SSRF) vulnerability. Successful exploitation could allow an attacker to use the Campaign instance to issue unauthorized requests to internal or external resources.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: https://helpx.adobe.com/security/products/campaign/apsb21-04.html; https://helpx.adobe.com/security/products/campaign/apsb21-04.html
CVE: CVE-2021-21010
Published: 2021-01-13
Description: InCopy version 15.1.1 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.0 (HIGH)
CWE: CWE-427
References: https://helpx.adobe.com/security/products/incopy/apsb21-05.html; https://helpx.adobe.com/security/products/incopy/apsb21-05.html
CVE: CVE-2021-21011
Published: 2021-01-13
Description: Adobe Captivate 2019 version 11.5.1.499 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with permissions to write to the file system could leverage this vulnerability to escalate privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-427, CWE-427
References: https://helpx.adobe.com/security/products/captivate/apsb21-06.html; https://helpx.adobe.com/security/products/captivate/apsb21-06.html
CVE: CVE-2021-21012
Published: 2021-01-13
Description: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the checkout module. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://helpx.adobe.com/security/products/magento/apsb21-08.html; https://helpx.adobe.com/security/products/magento/apsb21-08.html
CVE: CVE-2021-21013
Published: 2021-01-13
Description: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the customer API module. Successful exploitation could lead to sensitive information disclosure and update arbitrary information on another user's account.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863, CWE-639
References: https://helpx.adobe.com/security/products/magento/apsb21-08.html; https://helpx.adobe.com/security/products/magento/apsb21-08.html
CVE: CVE-2020-27263
Published: 2021-01-14
Description: KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-352-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-352-02
CVE: CVE-2020-27265
Published: 2021-01-14
Description: KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions are vulnerable to a stack-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and remotely execute code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-352-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-352-02
CVE: CVE-2020-27267
Published: 2021-01-14
Description: KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server v7.68.804 and v7.66, and Software Toolbox TOP Server all 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-416, CWE-787
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-352-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-352-02
CVE: CVE-2020-16119
Published: 2021-01-14
Description: Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccps_hc_tx_ccid object as a listener after being released. Fixed in Ubuntu Linux kernel 5.4.0-51.56, 5.3.0-68.63, 4.15.0-121.123, 4.4.0-193.224, 3.13.0.182.191 and 3.2.0-149.196.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/commit/?id=01872cb896c76cedeabe93a08456976ab55ad695; https://launchpad.net/bugs/1883840; https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html
CVE: CVE-2021-3138
Published: 2021-01-14
Description: In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms.
CVSS Score: 7.5 (HIGH)
CWE: CWE-307
References: http://packetstormsecurity.com/files/162256/Discourse-2.7.0-2FA-Bypass.html; https://github.com/Mesh3l911/Disource; https://github.com/discourse/discourse/releases
CVE: CVE-2021-20617
Published: 2021-01-14
Description: Improper access control vulnerability in acmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier allows remote attackers to execute an arbitrary OS command, or gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
References: https://jvn.jp/en/jp/JVN35906450/index.html; https://www.acmailer.jp/info/de.cgi?id=101; https://jvn.jp/en/jp/JVN35906450/index.html
CVE: CVE-2021-20618
Published: 2021-01-14
Description: Privilege chaining vulnerability in acmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier allows remote attackers to bypass authentication and to gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://jvn.jp/en/jp/JVN35906450/index.html; https://www.acmailer.jp/info/de.cgi?id=101; https://jvn.jp/en/jp/JVN35906450/index.html
CVE: CVE-2020-28470
Published: 2021-01-14
Description: This affects the package @scullyio/scully before 1.0.9. The transfer state is serialised with the JSON.stringify() function and then written into the HTML page.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://github.com/scullyio/scully/pull/1182; https://snyk.io/vuln/SNYK-JS-SCULLYIOSCULLY-1055829; https://github.com/scullyio/scully/pull/1182
CVE: CVE-2021-23926
Published: 2021-01-14
Description: The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-776
References: https://issues.apache.org/jira/browse/XMLBEANS-517; https://lists.apache.org/thread.html/r2dc5588009dc9f0310b7382269f932cc96cae4c3901b747dda1a7fed%40%3Cjava-dev.axis.apache.org%3E; https://lists.apache.org/thread.html/rbb01d[PII_REDACTED]cd5f[PII_REDACTED]7532c64f1c818ea7e4120d40c1%40%3Cjava-dev.axis.apache.org%3E
CVE: CVE-2021-24122
Published: 2021-01-14
Description: When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to JSP source code disclosure in some configurations. The root cause was the unexpected behaviour of the JRE API File.getCanonicalPath() which in turn was caused by the inconsistent behaviour of the Windows API (FindFirstFileW) in some circumstances.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200, CWE-706
References: http://www.openwall.com/lists/oss-security/2021/01/14/1; https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52%40%3Cannounce.apache.org%3E; https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52%40%3Cannounce.tomcat.apache.org%3E
CVE: CVE-2020-26732
Published: 2021-01-14
Description: SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311, CWE-311
References: https://github.com/swzhouu/CVE-2020-26732; https://github.com/swzhouu/CVE-2020-26732
CVE: CVE-2020-26733
Published: 2021-01-14
Description: Cross Site Scripting (XSS) in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 allows authenticated attacker to inject their own script into the page via DDNS Configuration Section.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/swzhouu/CVE-2020-26733; https://github.com/swzhouu/CVE-2020-26733
CVE: CVE-2020-27368
Published: 2021-01-14
Description: Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20[PII_REDACTED] allows attacker to access /icons/ directories via GET Parameter.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-552
References: https://github.com/swzhouu/CVE-2020-27368; https://github.com/swzhouu/CVE-2020-27368
CVE: CVE-2020-29015
Published: 2021-01-14
Description: A blind SQL injection in the user interface of FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote attacker to execute arbitrary SQL queries or commands by sending a request with a crafted Authorization header containing a malicious SQL statement.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.fortiguard.com/psirt/FG-IR-20-124; https://www.fortiguard.com/psirt/FG-IR-20-124
CVE: CVE-2020-29016
Published: 2021-01-14
Description: A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an unauthenticated, remote attacker to overwrite the content of the stack and potentially execute arbitrary code by sending a crafted request with a large certname.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.fortiguard.com/psirt/FG-IR-20-125; https://www.fortiguard.com/psirt/FG-IR-20-125
CVE: CVE-2020-29017
Published: 2021-01-14
Description: An OS command injection vulnerability in FortiDeceptor 3.1.0, 3.0.1, 3.0.0 may allow a remote authenticated attacker to execute arbitrary commands on the system by exploiting a command injection vulnerability on the Customization page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.fortiguard.com/psirt/FG-IR-20-177; https://www.fortiguard.com/psirt/FG-IR-20-177
CVE: CVE-2020-29018
Published: 2021-01-14
Description: A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the content of memory and retrieve sensitive data via the redir parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-134
References: https://www.fortiguard.com/psirt/FG-IR-20-123; https://www.fortiguard.com/psirt/FG-IR-20-123
CVE: CVE-2020-29019
Published: 2021-01-14
Description: A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow a remote, unauthenticated attacker to crash the httpd daemon thread by sending a request with a crafted cookie header.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-787
References: https://www.fortiguard.com/psirt/FG-IR-20-126; https://www.fortiguard.com/psirt/FG-IR-20-126
CVE: CVE-2020-29587
Published: 2021-01-14
Description: SimplCommerce 1.0.0-rc uses the Bootbox.js library, which allows creation of programmatic dialog boxes using Bootstrap modals. The Bootbox.js library intentionally does not perform any sanitization of user input, which results in a DOM XSS, because it uses the jQuery .html() function to directly append the payload to a dialog.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/simplcommerce/SimplCommerce/issues/969; https://github.com/simplcommerce/SimplCommerce/issues/969