deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-0185
Published: 2022-02-11
Description: A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.
CVSS Score: 8.4 (HIGH)
CWE: CWE-190, CWE-191
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=722d94847de2; https://github.com/Crusaders-of-Rust/CVE-2022-0185; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-0382
Published: 2022-02-11
Description: An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem, in the way a user sends a TIPC datagram to one or more destinations. This flaw allows a local user to read some kernel memory. This issue is limited to no more than 7 bytes, and the user cannot control what is read. This flaw affects the Linux kernel versions prior to 5.17-rc1.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-909, CWE-909
References: https://github.com/torvalds/linux/commit/d6d86830705f173fca6087a3e67ceaf68db80523; https://github.com/torvalds/linux/commit/d6d86830705f173fca6087a3e67ceaf68db80523
CVE: CVE-2022-0483
Published: 2022-02-11
Description: Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor (Windows) before build 53
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-732
References: https://security-advisory.acronis.com/advisories/SEC-3354; https://security-advisory.acronis.com/advisories/SEC-3354
CVE: CVE-2022-0561
Published: 2022-02-11
Description: Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://gitlab.com/freedesktop-sdk/mirrors/gitlab/libtiff/libtiff/-/commit/eecb0712f4c3a5b449f70c57988260a667ddbdef; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0561.json; https://gitlab.com/libtiff/libtiff/-/issues/362
CVE: CVE-2022-0562
Published: 2022-02-11
Description: Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://gitlab.com/gitlab-org/build/omnibus-mirror/libtiff/-/commit/561599c99f987dc32ae110370cfdd7df7975586b; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0562.json; https://gitlab.com/libtiff/libtiff/-/issues/362
CVE: CVE-2022-22291
Published: 2022-02-11
Description: Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-779
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE: CVE-2022-22292
Published: 2022-02-11
Description: Unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted applications to launch arbitrary activity.
CVSS Score: 7.1 (HIGH)
CWE: CWE-280
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE: CVE-2022-23425
Published: 2022-02-11
Description: Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE: CVE-2022-23426
Published: 2022-02-11
Description: A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to access files with system privilege.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-94
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE: CVE-2022-23427
Published: 2022-02-11
Description: PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission via implicit Intent.
CVSS Score: 3.9 (LOW)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE: CVE-2022-23428
Published: 2022-02-11
Description: An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.
CVSS Score: 8.4 (HIGH)
CWE: CWE-120, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE: CVE-2022-23429
Published: 2022-02-11
Description: An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE: CVE-2022-23431
Published: 2022-02-11
Description: An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE: CVE-2022-23432
Published: 2022-02-11
Description: An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE: CVE-2022-23433
Published: 2022-02-11
Description: Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10) allows attackers to register reminders or execute exporeted activities remotely.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE: CVE-2022-23434
Published: 2022-02-11
Description: A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and modifying the intent.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-94
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE: CVE-2022-23707
Published: 2022-02-11
Description: An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious javascript into the index pattern which could execute against other users
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://discuss.elastic.co/t/kibana-7-17-0-security-update/296215; https://discuss.elastic.co/t/kibana-7-17-0-security-update/296215
CVE: CVE-2022-23853
Published: 2022-02-11
Description: The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file that was just opened (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://apps.kde.org/kate/; https://kde.org/info/security/advisory-20220131-1.txt; https://security.gentoo.org/glsa/202401-21
CVE: CVE-2022-23994
Published: 2022-02-11
Description: An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission.
CVSS Score: 3.3 (LOW)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE: CVE-2022-23995
Published: 2022-02-11
Description: Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-284, CWE-276
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE: CVE-2022-23996
Published: 2022-02-11
Description: Unprotected component vulnerability in StTheaterModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to enable bedtime mode without a proper permission.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-284, CWE-276
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE: CVE-2022-23997
Published: 2022-02-11
Description: Unprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to disable theater mode without a proper permission.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE: CVE-2022-23998
Published: 2022-02-11
Description: Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R(11), 10.5.03.77 in Android Q(10) and 9.0.6.68 in Android P(9) allows untrusted applications to take a picture in screenlock status.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20, CWE-863
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE: CVE-2022-23999
Published: 2022-02-11
Description: PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent.
CVSS Score: 3.9 (LOW)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE: CVE-2022-24000
Published: 2022-02-11
Description: PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent.
CVSS Score: 3.9 (LOW)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE: CVE-2022-24001
Published: 2022-02-11
Description: Information disclosure vulnerability in Edge Panel prior to Android S(12) allows physical attackers to access screenshot in clipboard via Edge Panel.
CVSS Score: 3.8 (LOW)
CWE: CWE-200
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE: CVE-2022-24002
Published: 2022-02-11
Description: Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-285
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE: CVE-2022-24003
Published: 2022-02-11
Description: Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows attackers to access internal data of Bixby Vision via unprotected intent.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE: CVE-2022-24923
Published: 2022-02-11
Description: Improper access control vulnerability in Samsung SearchWidget prior to versions 2.3.00.6 in China models allows untrusted applications to load arbitrary URL and local files in webview.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE: CVE-2022-24924
Published: 2022-02-11
Description: An improper access control in LiveWallpaperService prior to versions 3.0.9.0 allows to create a specific named system directory without a proper permission.
CVSS Score: 2.2 (LOW)
CWE: CWE-284
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE: CVE-2022-24925
Published: 2022-02-11
Description: Improper input validation vulnerability in SettingsProvider prior to Android S(12) allows privileged attackers to trigger a permanent denial of service attack on a victim's devices.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE: CVE-2022-24926
Published: 2022-02-11
Description: Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.15-6 allows privileged attackers to trigger a XSS on a victim's devices.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-20, CWE-79
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE: CVE-2022-24927
Published: 2022-02-11
Description: Improper privilege management vulnerability in Samsung Video Player prior to version 7.3.15.30 allows attackers to execute video files without permission.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE: CVE-2020-26728
Published: 2022-02-11
Description: A vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42_multi and Tenda AC9 V1.0 V15.03.05.19(6318)_CN which allows for remote code execution via shell metacharacters in the guestuser field to the __fastcall function with a POST request.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/Lyc-heng/Router/blob/main/Tenda/rce1.md; https://github.com/Lyc-heng/routers/blob/a80b30bccfc9b76f3a4868ff28ad5ce2e0fca180/routers/rce1.md; https://github.com/Lyc-heng/routers/blob/main/routers/rce1.md
CVE: CVE-2022-22766
Published: 2022-02-11
Description: Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.
CVSS Score: 7.0 (HIGH)
CWE: CWE-798, CWE-798
References: https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentials; https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-01; https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentials
CVE: CVE-2021-20001
Published: 2022-02-11
Description: It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/public_html), which could result in privilege escalation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://lists.debian.org/debian-lts-announce/2022/02/msg00012.html; https://lists.debian.org/debian-security-announce/2022/msg00039.html; https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/4d39a5888d[PII_REDACTED]8f8c035f8d17cfe34e5
CVE: CVE-2021-23555
Published: 2022-02-11
Description: The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of arbitrary code on the host machine.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/patriksimek/vm2/commit/532120d5cdec7da8225fc6242e154ebabc63fe4d; https://snyk.io/vuln/SNYK-JS-VM2-2309905; https://github.com/patriksimek/vm2/commit/532120d5cdec7da8225fc6242e154ebabc63fe4d
CVE: CVE-2022-24975
Published: 2022-02-11
Description: The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the "GitBleed" issue. This could present a security risk if information-disclosure auditing processes rely on a clone operation without the --mirror option. Note: This has been disputed by multiple 3rd parties who believe this is an intended feature of the git binary and does not pose a security risk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: https://github.com/git/git/blob/2dc94da3744bfbbf145eca587a0f5ff480cc5867/Documentation/git-clone.txt#L185-L191; https://lore.kernel.org/git/xmqq4k14qe9g.fsf%40gitster.g/; https://www.aquasec.com/blog/undetected-hard-code-secrets-expose-corporations/
CVE: CVE-2021-46361
Published: 2022-02-11
Description: An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary code via a crafted FreeMarker payload.
CVSS Score: 9.8 (CRITICAL)
References: https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.12.html#_security_advisory; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-46361-FreeMarker%20Bypass-Magnolia%20CMS; https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.12.html#_security_advisory
CVE: CVE-2021-46362
Published: 2022-02-11
Description: A Server-Side Template Injection (SSTI) vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.3 and below allows attackers to execute arbitrary code via a crafted payload entered into the fullname parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#_security_advisory; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-46362-Unauthenticated%20SSTI-Magnolia%20CMS; https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#_security_advisory
CVE: CVE-2021-46363
Published: 2022-02-11
Description: An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported files with Microsoft Excel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1236
References: https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#_security_advisory; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-46363-Formula%20Injection-Magnolia%20CMS; https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#_security_advisory
CVE: CVE-2021-46364
Published: 2022-02-11
Description: A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#_security_advisory; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-46364-YAML%20Deserialization-Magnolia%20CMS; https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#_security_advisory
CVE: CVE-2021-46365
Published: 2022-02-11
Description: An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-611
References: https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#_security_advisory; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-46365-Unsafe%20XML%20Parsing-Magnolia%20CMS; https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#_security_advisory
CVE: CVE-2021-46366
Published: 2022-02-11
Description: An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-601
References: https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#_security_advisory; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-46366-CSRF%2BOpen%20Redirect-Magnolia%20CMS; https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#_security_advisory
CVE: CVE-2022-23633
Published: 2022-02-11
Description: Action Pack is a framework for handling and responding to web requests. Under certain circumstances response bodies will not be closed. In the event a response is *not* notified of a `close`, `ActionDispatch::Executor` will not know to reset thread local state for the next request. This can lead to data being leaked to subsequent requests.This has been fixed in Rails 7.0.2.1, 6.1.4.5, 6.0.4.5, and 5.2.6.1. Upgrading is highly recommended, but to work around this problem a middleware described in GHSA-wh98-p28r-vrc9 can be used.
CVSS Score: 7.4 (HIGH)
CWE: CWE-200, CWE-212
References: http://www.openwall.com/lists/oss-security/2022/02/11/5; https://github.com/rails/rails/commit/f9a2ad03943d5c2ba54e1d45f155442b519c75da; https://github.com/rails/rails/security/advisories/GHSA-wh98-p28r-vrc9
CVE: CVE-2022-23634
Published: 2022-02-11
Description: Puma is a Ruby/Rack web server built for parallelism. Prior to `puma` version `5.6.2`, `puma` may not always call `close` on the response body. Rails, prior to version `7.0.2.2`, depended on the response body being closed in order for its `CurrentAttributes` implementation to work correctly. The combination of these two behaviors (Puma not closing the body + Rails' Executor implementation) causes information leakage. This problem is fixed in Puma versions 5.6.2 and 4.3.11. This problem is fixed in Rails versions 7.02.2, 6.1.4.6, 6.0.4.6, and 5.2.6.2. Upgrading to a patched Rails _or_ Puma version fixes the vulnerability.
CVSS Score: 8.0 (HIGH)
CWE: CWE-200, CWE-404
References: https://github.com/advisories/GHSA-rmj8-8hhh-gv5h; https://github.com/advisories/GHSA-wh98-p28r-vrc9; https://github.com/puma/puma/commit/b70f451fe8abc0cff192c065d549778452e155bb