deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-32551
Published: 2024-04-18
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Manager.This issue affects SP Project & Document Manager : from n/a through 4.71.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/vulnerability/sp-client-document-manager/wordpress-sp-project-document-manage-plugin-4-71-sql-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/sp-client-document-manager/wordpress-sp-project-document-manage-plugin-4-71-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2024-32552
Published: 2024-04-18
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tagbox Taggbox allows Stored XSS.This issue affects Taggbox: from n/a through 3.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/taggbox-widget/wordpress-tagbox-ugc-galleries-social-media-widgets-user-reviews-analytics-plugin-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/taggbox-widget/wordpress-tagbox-ugc-galleries-social-media-widgets-user-reviews-analytics-plugin-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-32553
Published: 2024-04-18
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in looks_awesome Superfly Menu superfly-menu.This issue affects Superfly Menu: from n/a through <= 5.0.25.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/superfly-menu/vulnerability/wordpress-superfly-menu-plugin-5-0-25-subscriber-site-wide-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/superfly-menu/wordpress-superfly-menu-plugin-5-0-25-subscriber-site-wide-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-32600
Published: 2024-04-18
Description: Deserialization of Untrusted Data vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a through 3.9.5.
CVSS Score: 8.3 (HIGH)
CWE: CWE-502
References: https://patchstack.com/database/vulnerability/master-slider/wordpress-master-slider-plugin-3-9-5-php-object-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/master-slider/wordpress-master-slider-plugin-3-9-5-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2024-32602
Published: 2024-04-18
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.3.1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/vulnerability/woocommerce-multilingual/wordpress-woocommerce-multilingual-multicurrency-plugin-5-3-3-1-sql-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woocommerce-multilingual/wordpress-woocommerce-multilingual-multicurrency-plugin-5-3-3-1-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2024-32686
Published: 2024-04-18
Description: Insertion of Sensitive Information into Log File vulnerability in Inisev Backup Migration.This issue affects Backup Migration: from n/a through 1.4.3.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532
References: https://patchstack.com/database/vulnerability/backup-backup/wordpress-backup-migration-plugin-1-4-3-sensitive-data-exposure-via-log-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/backup-backup/wordpress-backup-migration-plugin-1-4-3-sensitive-data-exposure-via-log-vulnerability?_s_id=cve
CVE: CVE-2024-32689
Published: 2024-04-18
Description: Missing Authorization vulnerability in GenialSouls WP Social Comments.This issue affects WP Social Comments: from n/a through 1.7.3.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/gs-facebook-comments/wordpress-wp-social-comments-plugin-1-7-3-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/gs-facebook-comments/wordpress-wp-social-comments-plugin-1-7-3-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-3948
Published: 2024-04-18
Description: A vulnerability was found in SourceCodester Home Clean Service System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file \admin\student.add.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-261440.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/xuanluansec/vul/issues/5; https://vuldb.com/?ctiid.261440; https://vuldb.com/?id.261440
CVE: CVE-2024-27306
Published: 2024-04-18
Description: aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. A XSS vulnerability exists on index pages for static file handling. This vulnerability is fixed in 3.9.4. We have always recommended using a reverse proxy server (e.g. nginx) for serving static files. Users following the recommendation are unaffected. Other users can disable `show_index` if unable to upgrade.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-80
References: https://github.com/aio-libs/aiohttp/commit/28335525d1eac015a7e[PII_REDACTED]cbb6ff19397; https://github.com/aio-libs/aiohttp/pull/8319; https://github.com/aio-libs/aiohttp/security/advisories/GHSA-7gpw-8wmc-pm8g
CVE: CVE-2024-28185
Published: 2024-04-18
Description: Judge0 is an open-source online code execution system. The application does not account for symlinks placed inside the sandbox directory, which can be leveraged by an attacker to write to arbitrary files and gain code execution outside of the sandbox. When executing a submission, Judge0 writes a `run_script` to the sandbox directory. The security issue is that an attacker can create a symbolic link (symlink) at the path `run_script` before this code is executed, resulting in the `f.write` writing to an arbitrary file on the unsandboxed system. An attacker can leverage this vulnerability to overwrite scripts on the system and gain code execution outside of the sandbox.

CVSS Score: 10.0 (CRITICAL)
CWE: CWE-59, CWE-61
References: https://github.com/judge0/judge0/blob/v1.13.0/app/jobs/isolate_job.rb#L197-L201; https://github.com/judge0/judge0/commit/846d[PII_REDACTED]bb299b7a35fd3b2afb107992fc; https://github.com/judge0/judge0/security/advisories/GHSA-h9g2-45c8-89cf
CVE: CVE-2024-28189
Published: 2024-04-18
Description: Judge0 is an open-source online code execution system. The application uses the UNIX chown command on an untrusted file within the sandbox. An attacker can abuse this by creating a symbolic link (symlink) to a file outside the sandbox, allowing the attacker to run chown on arbitrary files outside of the sandbox. This vulnerability is not impactful on it's own, but it can be used to bypass the patch for CVE-2024-28185 and obtain a complete sandbox escape. This vulnerability is fixed in 1.13.1.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-59, CWE-61
References: https://github.com/judge0/judge0/blob/v1.13.0/app/jobs/isolate_job.rb#L232; https://github.com/judge0/judge0/commit/f3b8547b3b67863e4ea0ded3adcb963add56addd; https://github.com/judge0/judge0/security/advisories/GHSA-3xpw-36v7-2cmg
CVE: CVE-2024-29021
Published: 2024-04-18
Description: Judge0 is an open-source online code execution system. The default configuration of Judge0 leaves the service vulnerable to a sandbox escape via Server Side Request Forgery (SSRF). This allows an attacker with sufficient access to the Judge0 API to obtain unsandboxed code execution as root on the target machine. This vulnerability is fixed in 1.13.1.

CVSS Score: 9.0 (CRITICAL)
CWE: CWE-918, CWE-1393
References: https://github.com/judge0/judge0/blob/ad66f77b131dbbebf2b9ff8083dca9a68680b3e5/app/jobs/isolate_job.rb#L203-L230; https://github.com/judge0/judge0/security/advisories/GHSA-q7vg-26pg-v5hr; https://github.com/judge0/judge0/blob/ad66f77b131dbbebf2b9ff8083dca9a68680b3e5/app/jobs/isolate_job.rb#L203-L230
CVE: CVE-2024-2796
Published: 2024-04-18
Description: A server-side request forgery (SSRF) was discovered in the Akana API Platform in versions prior to and including 2022.1.3. Reported by Jakob Antonsson.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-918
References: https://portal.perforce.com/s/detail/a91PA000001STuXYAW; https://portal.perforce.com/s/detail/a91PA000001STuXYAW
CVE: CVE-2024-30257
Published: 2024-04-18
Description: 1Panel is an open source Linux server operation and maintenance management panel. The password verification in the source code uses the != symbol instead hmac.Equal. This may lead to a timing attack vulnerability. This vulnerability is fixed in 1.10.3-lts.
CVSS Score: 3.9 (LOW)
CWE: CWE-203, CWE-203
References: https://github.com/1Panel-dev/1Panel/blob/dev/backend/app/service/auth.go#L81C5-L81C26; https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-6m9h-2pr2-9j8f; https://github.com/1Panel-dev/1Panel/blob/dev/backend/app/service/auth.go#L81C5-L81C26
CVE: CVE-2024-30564
Published: 2024-04-18
Description: An issue inandrei-tatar nora-firebase-common between v.1.0.41 and v.1.12.2 allows a remote attacker to execute arbitrary code via a crafted script to the updateState parameter of the updateStateInternal method.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://gist.github.com/mestrtee/5dc2c948c2057f98d3de0a9790903c6c; https://github.com/andrei-tatar/nora-firebase-common/commit/bf30b75d51be04f6c1f884561a223226c890f01b; https://gist.github.com/mestrtee/5dc2c948c2057f98d3de0a9790903c6c
CVE: CVE-2024-32466
Published: 2024-04-18
Description: Tolgee is an open-source localization platform. For the `/v2/projects/translations` and `/v2/projects/{projectId}/translations` endpoints, translation data was returned even when API key was missing `translation.view` scope. However, it was impossible to fetch the data when user was missing this scope. So this is only relevant for API keys generated by users permitted to `translation.view`. This vulnerability is fixed in v3.57.2

CVSS Score: 2.7 (LOW)
CWE: CWE-862
References: https://github.com/tolgee/tolgee-platform/commit/f71213925d6f80019f841db0ead9baa7488c1821; https://github.com/tolgee/tolgee-platform/security/advisories/GHSA-r95p-fqqv-fppc; https://github.com/tolgee/tolgee-platform/commit/f71213925d6f80019f841db0ead9baa7488c1821
CVE: CVE-2024-32470
Published: 2024-04-18
Description: Tolgee is an open-source localization platform. When API key created by admin user is used it bypasses the permission check at all. This error was introduced in v3.57.2 and immediately fixed in v3.57.4. 
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://github.com/tolgee/tolgee-platform/commit/a0d861028d931f8a54387770eaf3a75031b81234; https://github.com/tolgee/tolgee-platform/security/advisories/GHSA-pm57-hcm8-38gw; https://github.com/tolgee/tolgee-platform/security/advisories/GHSA-r95p-fqqv-fppc
CVE: CVE-2024-32475
Published: 2024-04-18
Description: Envoy is a cloud-native, open source edge and service proxy. When an upstream TLS cluster is used with `auto_sni` enabled, a request containing a `host`/`:authority` header longer than 255 characters triggers an abnormal termination of Envoy process. Envoy does not gracefully handle an error when setting SNI for outbound TLS connection. The error can occur when Envoy attempts to use the `host`/`:authority` header value longer than 255 characters as SNI for outbound TLS connection. SNI length is limited to 255 characters per the standard. Envoy always expects this operation to succeed and abnormally aborts the process when it fails. This vulnerability is fixed in 1.30.1, 1.29.4, 1.28.3, and 1.27.5.

CVSS Score: 7.5 (HIGH)
CWE: CWE-253, CWE-617
References: https://github.com/envoyproxy/envoy/commit/b47fc6648d7c2dfe0093a601d44cb704b7bad382; https://github.com/envoyproxy/envoy/security/advisories/GHSA-3mh5-6q8v-25wj; https://github.com/envoyproxy/envoy/commit/b47fc6648d7c2dfe0093a601d44cb704b7bad382
CVE: CVE-2024-32325
Published: 2024-04-18
Description: TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the ssid parameter in the setWiFiExtenderConfig function.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/XSS_ssid/README.md; https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/144.html; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/XSS_ssid/README.md
CVE: CVE-2024-32326
Published: 2024-04-18
Description: TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the key parameter in the setWiFiExtenderConfig function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/XSS_key/README.md; https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/144.html; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/XSS_key/README.md
CVE: CVE-2024-32327
Published: 2024-04-18
Description: TOTOLINK N300RT V2.1.8-B20[PII_REDACTED] contains a Store Cross-site scripting (XSS) vulnerability in Port Forwarding under the Firewall Page.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/N300RT/XSS_5_Port_Forwarding/README.md; https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/154.html; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/N300RT/XSS_5_Port_Forwarding/README.md
CVE: CVE-2024-32332
Published: 2024-04-18
Description: TOTOLINK N300RT V2.1.8-B20[PII_REDACTED] contains a Store Cross-site scripting (XSS) vulnerability in WDS Settings under the Wireless Page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/N300RT/XSS_1_WDS_Settings/README.md; https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/154.html; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/N300RT/XSS_1_WDS_Settings/README.md
CVE: CVE-2024-32333
Published: 2024-04-18
Description: TOTOLINK N300RT V2.1.8-B20[PII_REDACTED] contains a Store Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/N300RT/XSS_3_MAC_Filtering/README.md; https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/154.html; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/N300RT/XSS_3_MAC_Filtering/README.md
CVE: CVE-2024-32334
Published: 2024-04-18
Description: TOTOLINK N300RT V2.1.8-B20[PII_REDACTED] contains a Store Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/N300RT/XSS_4_IP_Port_Filtering/README.md; https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/154.html; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/N300RT/XSS_4_IP_Port_Filtering/README.md
CVE: CVE-2024-32335
Published: 2024-04-18
Description: TOTOLINK N300RT V2.1.8-B20[PII_REDACTED] contains a Store Cross-site scripting (XSS) vulnerability in Access Control under the Wireless Page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/N300RT/XSS_2_Access_Control/README.md; https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/154.html; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/N300RT/XSS_2_Access_Control/README.md
CVE: CVE-2024-24910
Published: 2024-04-18
Description: A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identity Agent for Windows Terminal Server. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system.
CVSS Score: 7.3 (HIGH)
CWE: CWE-732
References: https://support.checkpoint.com/results/sk/sk182219; https://support.checkpoint.com/results/sk/sk182219
CVE: CVE-2024-32462
Published: 2024-04-18
Description: Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could execute arbitrary code outside its sandbox. Normally, the `--command` argument of `flatpak run` expects to be given a command to run in the specified Flatpak app, optionally along with some arguments. However it is possible to instead pass `bwrap` arguments to `--command=`, such as `--bind`. It's possible to pass an arbitrary `commandline` to the portal interface `org.freedesktop.portal.Background.RequestBackground` from within a Flatpak app. When this is converted into a `--command` and arguments, it achieves the same effect of passing arguments directly to `bwrap`, and thus can be used for a sandbox escape. The solution is to pass the `--` argument to `bwrap`, which makes it stop processing options. This has been supported since bubblewrap 0.3.0. All supported versions of Flatpak require at least that version of bubblewrap. xdg-desktop-portal version 1.18.4 will mitigate this vulnerability by only allowing Flatpak apps to create .desktop files for commands that do not start with --. The vulnerability is patched in 1.15.8, 1.10.9, 1.12.9, and 1.14.6.
CVSS Score: 8.4 (HIGH)
CWE: CWE-88
References: http://www.openwall.com/lists/oss-security/2024/04/18/5; https://github.com/flatpak/flatpak/commit/72016e3fce8fcbeab707daf4f1a02b931fcc004d; https://github.com/flatpak/flatpak/commit/81abe2a37d363f5099c3d0bdcd0caad6efc5bf97
CVE: CVE-2023-3758
Published: 2024-04-18
Description: A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.
CVSS Score: 7.1 (HIGH)
CWE: CWE-362, CWE-362
References: https://access.redhat.com/errata/RHSA-2024:1919; https://access.redhat.com/errata/RHSA-2024:1920; https://access.redhat.com/errata/RHSA-2024:1921
CVE: CVE-2024-23557
Published: 2024-04-18
Description: HCL Connections contains a user enumeration vulnerability. Certain actions could allow an attacker to determine if the user is valid or not, leading to a possible brute force attack.

CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0112488; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0112488
CVE: CVE-2024-29986
Published: 2024-04-18
Description: Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-359
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29986; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29986
CVE: CVE-2024-29987
Published: 2024-04-18
Description: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-359, CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29987; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29987
CVE: CVE-2024-20380
Published: 2024-04-18
Description: A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
The vulnerability is due to an issue in the C to Rust foreign function interface. An attacker could exploit this vulnerability by submitting a crafted file containing HTML content to be scanned by ClamAV on an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
CVSS Score: 7.5 (HIGH)
CWE: CWE-475
References: https://blog.clamav.net/2024/04/clamav-131-123-106-patch-versions.html; https://blog.clamav.net/2024/04/clamav-131-123-106-patch-versions.html
CVE: CVE-2024-32474
Published: 2024-04-18
Description: Sentry is an error tracking and performance monitoring platform. Prior to 24.4.1, when authenticating as a superuser to Sentry with a username and password, the password is leaked as cleartext in logs under the _event_: `auth-index.validate_superuser`. An attacker with access to the log data could use these leaked credentials to login to the Sentry system as superuser. Self-hosted users on affected versions should upgrade to 24.4.1 or later. Users can configure the logging level to exclude logs of the `INFO` level and only generate logs for levels at `WARNING` or more.
CVSS Score: 7.3 (HIGH)
CWE: CWE-117, CWE-312
References: https://github.com/getsentry/sentry/commit/d5b34568d9f1c41362ccb62141532a0a2169512f; https://github.com/getsentry/sentry/pull/66393; https://github.com/getsentry/sentry/pull/69148
CVE: CVE-2024-32477
Published: 2024-04-18
Description: Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. By using ANSI escape sequences and a race between `libc::tcflush(0, libc::TCIFLUSH)` and reading standard input, it's possible to manipulate the permission prompt and force it to allow an unsafe action regardless of the user input. Some ANSI escape sequences act as a info request to the master terminal emulator and the terminal emulator sends back the reply in the PTY channel. standard streams also use this channel to send and get data. For example the `\033[6n` sequence requests the current cursor position. These sequences allow us to append data to the standard input of Deno. This vulnerability allows an attacker to bypass Deno permission policy.  This vulnerability is fixed in 1.42.2.

CVSS Score: 7.7 (HIGH)
CWE: CWE-78, CWE-362
References: https://github.com/denoland/deno/security/advisories/GHSA-95cj-3hr2-7j5j; https://github.com/denoland/deno/security/advisories/GHSA-95cj-3hr2-7j5j
CVE: CVE-2024-30107
Published: 2024-04-18
Description: HCL Connections contains a broken access control vulnerability that may expose sensitive information to unauthorized users in certain scenarios.

CVSS Score: 3.5 (LOW)
CWE: CWE-284
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0112489; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0112489
CVE: CVE-2024-30920
Published: 2024-04-18
Description: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component.
CVSS Score: 7.4 (HIGH)
CWE: CWE-79
References: https://chocapikk.com/posts/2024/derbynet-vulnerabilities/; http://seclists.org/fulldisclosure/2024/Apr/6; https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE: CVE-2024-30921
Published: 2024-04-18
Description: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the photo.php component.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://chocapikk.com/posts/2024/derbynet-vulnerabilities/; http://seclists.org/fulldisclosure/2024/Apr/7; https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE: CVE-2024-30922
Published: 2024-04-18
Description: SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://chocapikk.com/posts/2024/derbynet-vulnerabilities/; http://seclists.org/fulldisclosure/2024/Apr/8; https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE: CVE-2024-30923
Published: 2024-04-18
Description: SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://chocapikk.com/posts/2024/derbynet-vulnerabilities/; http://seclists.org/fulldisclosure/2024/Apr/9; https://chocapikk.com/posts/2024/derbynet-vulnerabilities/