deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-24729
Published: 2022-03-16
Description: CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significant performance drop resulting in a browser tab freeze. A patch is available in version 4.18.0. There are currently no known workarounds.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-1333
References: https://ckeditor.com/cke4/release/CKEditor-4.18.0; https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-f6rf-9m92-x2hh; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VR76VBN5GW5QUBJFHVXRX36UZ6YTCMW6/
CVE: CVE-2022-23610
Published: 2022-03-16
Description: wire-server provides back end services for Wire, an open source messenger. In versions of wire-server prior to the 2022-01-27 release, it was possible to craft DSA Signatures to bypass SAML SSO and impersonate any Wire user with SAML credentials. In teams with SAML, but without SCIM, it was possible to create new accounts with fake SAML credentials. Under certain conditions that can be established by an attacker, an upstream library for parsing, rendering, signing, and validating SAML XML data was accepting public keys as trusted that were provided by the attacker in the signature. As a consequence, the attacker could login as any user in any Wire team with SAML SSO enabled. If SCIM was not enabled, the attacker could also create new users with new SAML NameIDs. In order to exploit this vulnerability, the attacker needs to know the SSO login code (distributed to all team members with SAML credentials and visible in the Team Management app), the SAML EntityID identifying the IdP (a URL not considered sensitive, but usually hard to guess, also visible in Team Management), and the SAML NameID of the user (usually an email address or a nick). The issue has been fixed in wire-server `2022-01-27` and is already deployed on all Wire managed services. On premise instances of wire-server need to be updated to `2022-01-27`, so that their backends are no longer affected. There are currently no known workarounds. More detailed information about how to reproduce the vulnerability and mitigation strategies is available in the GitHub Security Advisory.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-347
References: https://github.com/wireapp/wire-server/releases/tag/v2022-01-27; https://github.com/wireapp/wire-server/security/advisories/GHSA-9jg9-9g37-4424; https://github.com/wireapp/wire-server/releases/tag/v2022-01-27
CVE: CVE-2022-26293
Published: 2022-03-16
Description: Online Project Time Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the function save_employee at /ptms/classes/Users.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-26293; https://www.exploit-db.com/exploits/50682; https://www.nu11secur1ty.com/2022/03/cve-2022-26293.html
CVE: CVE-2022-26295
Published: 2022-03-16
Description: A stored cross-site scripting (XSS) vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/50683; https://www.exploit-db.com/exploits/50683
CVE: CVE-2021-42219
Published: 2022-03-17
Description: Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service (DoS) via sending an excessive amount of messages to a node. This is caused by missing memory in the component /ethash/algorithm.go.
CVSS Score: 7.5 (HIGH)
References: https://docs.google.com/document/d/1dYFSpNZPC0OV-n1mMqdc269u9yYU1XQy/edit?usp=sharing&ouid=[PII_REDACTED][PII_REDACTED]&rtpof=true&sd=true; https://docs.google.com/document/d/1dYFSpNZPC0OV-n1mMqdc269u9yYU1XQy/edit?usp=sharing&ouid=[PII_REDACTED][PII_REDACTED]&rtpof=true&sd=true
CVE: CVE-2022-26300
Published: 2022-03-17
Description: EOS v2.1.0 was discovered to contain a heap-buffer-overflow via the function txn_test_gen_plugin.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/EOSIO/eos/issues/10820; https://github.com/EOSIO/eos/issues/10820
CVE: CVE-2022-26534
Published: 2022-03-17
Description: FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via a malicious viewchange packet, will cause normal nodes to change view excessively and stop generating blocks.
CVSS Score: 7.5 (HIGH)
References: https://github.com/FISCO-BCOS/FISCO-BCOS/issues/2211; https://github.com/FISCO-BCOS/FISCO-BCOS/issues/2211
CVE: CVE-2022-25514
Published: 2022-03-17
Description: stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-120
References: https://github.com/nothings/stb/issues/1286; https://github.com/nothings/stb/issues/1286
CVE: CVE-2022-25515
Published: 2022-03-17
Description: stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/nothings/stb/issues/1286; https://github.com/nothings/stb/issues/1288; https://github.com/nothings/stb/issues/1286
CVE: CVE-2022-25516
Published: 2022-03-17
Description: stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/nothings/stb/issues/1286; https://github.com/nothings/stb/issues/1287; https://github.com/nothings/stb/issues/1286
CVE: CVE-2022-22273
Published: 2022-03-17
Description: Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware versions of Secure Mobile Access (SMA) 100 series products, specifically the SRA appliances running all 8.x, 9.0.0.5-19sv and earlier versions and Secure Mobile Access (SMA) 100 series products running older firmware 9.0.0.9-26sv and earlier versions
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0001; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0001
CVE: CVE-2022-24072
Published: 2022-03-17
Description: The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into the extension store web page via devtools.inspectedWindow, leading to extensions downloading and uploading when users open the developer tool.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-269
References: https://cve.naver.com/detail/cve-2022-24072; https://cve.naver.com/detail/cve-2022-24072
CVE: CVE-2022-24073
Published: 2022-03-17
Description: The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store.
CVSS Score: 7.1 (HIGH)
CWE: CWE-648
References: https://cve.naver.com/detail/cve-2022-24073; https://cve.naver.com/detail/cve-2022-24073
CVE: CVE-2022-24074
Published: 2022-03-17
Description: Whale Bridge, a default extension in Whale browser before 3.12.129.18, allowed to receive any SendMessage request from the content script itself that could lead to controlling Whale Bridge if the rendering process compromises.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-668, CWE-668
References: https://cve.naver.com/detail/cve-2022-24074; https://cve.naver.com/detail/cve-2022-24074
CVE: CVE-2022-24075
Published: 2022-03-17
Description: Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files. When the HWP files were opened, the replaced script could read the files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-552, CWE-552
References: https://cve.naver.com/detail/cve-2022-24075; https://cve.naver.com/detail/cve-2022-24075
CVE: CVE-2021-45791
Published: 2022-03-17
Description: Slims8 Akasia 8.3.1 is affected by SQL injection in /admin/modules/bibliography/index.php, /admin/modules/membership/member_type.php, /admin/modules/system/user_group.php, and /admin/modules/membership/index.php through the dir parameter. It can be used by remotely authenticated librarian users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/slims/slims8_akasia/issues/200; https://github.com/slims/slims8_akasia/issues/200
CVE: CVE-2021-45792
Published: 2022-03-17
Description: Slims9 Bulian 9.4.2 is affected by Cross Site Scripting (XSS) in /admin/modules/system/custom_field.php.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/slims/slims9_bulian/issues/122; https://github.com/slims/slims9_bulian/issues/122
CVE: CVE-2022-1000
Published: 2022-03-17
Description: Path Traversal in GitHub repository prasathmani/tinyfilemanager prior to 2.4.7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://github.com/prasathmani/tinyfilemanager/commit/154947ef83efeb68fc2b921065392b6a7fc9c965; https://huntr.dev/bounties/5995a93f-0c4b-4f7d-aa59-a[PII_REDACTED]4; https://github.com/prasathmani/tinyfilemanager/commit/154947ef83efeb68fc2b921065392b6a7fc9c965
CVE: CVE-2021-23556
Published: 2022-03-17
Description: The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of execute_command and execute_command_by_uuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via the d-bus method. **Note:** Exploitation requires the user to have installed another malicious program that will be able to send dbus signals or run terminal commands.
CVSS Score: 6.4 (MEDIUM)
References: https://github.com/Guake/guake/issues/1796; https://github.com/Guake/guake/pull/2017; https://github.com/Guake/guake/pull/2017/commits/e3d671120bfe7ba28f50e256cc5e8a629781b888
CVE: CVE-2021-23632
Published: 2022-03-17
Description: All versions of package git are vulnerable to Remote Code Execution (RCE) due to missing sanitization in the Git.git method, which allows execution of OS commands rather than just git commands. Steps to Reproduce 1. Create a file named exploit.js with the following content: js var Git = require("git").Git; var repo = new Git("repo-test"); var user_input = "version; date"; repo.git(user_input, function(err, result) { console.log(result); }) 2. In the same directory as exploit.js, run npm install git. 3. Run exploit.js: node exploit.js. You should see the outputs of both the git version and date command-lines. Note that the repo-test Git repository does not need to be present to make this PoC work.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-78
References: https://snyk.io/vuln/SNYK-JS-GIT-1568518; https://snyk.io/vuln/SNYK-JS-GIT-1568518
CVE: CVE-2021-23771
Published: 2022-03-17
Description: This affects all versions of package notevil; all versions of package argencoders-notevil. It is vulnerable to Sandbox Escape leading to Prototype pollution. The package fails to restrict access to the main context, allowing an attacker to add or modify an object's prototype. **Note:** This vulnerability derives from an incomplete fix in [SNYK-JS-NOTEVIL-608878](https://security.snyk.io/vuln/SNYK-JS-NOTEVIL-608878).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-ARGENCODERSNOTEVIL-2388587; https://snyk.io/vuln/SNYK-JS-NOTEVIL-2385946; https://snyk.io/vuln/SNYK-JS-ARGENCODERSNOTEVIL-2388587
CVE: CVE-2021-44908
Published: 2022-03-17
Description: SailsJS Sails.js <=1.4.0 is vulnerable to Prototype Pollution via controller/load-action-modules.js, function loadActionModules().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/sailsJS%20PoC.zip; https://github.com/balderdashy/sails/blob/master/lib/app/private/controller/load-action-modules.js#L32; https://github.com/balderdashy/sails/issues/7209
CVE: CVE-2021-45793
Published: 2022-03-17
Description: Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/slims/slims9_bulian/issues/123; https://github.com/slims/slims9_bulian/issues/123
CVE: CVE-2021-45794
Published: 2022-03-17
Description: Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/slims/slims9_bulian/issues/124; https://github.com/slims/slims9_bulian/issues/124
CVE: CVE-2022-0748
Published: 2022-03-17
Description: The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-79
References: https://snyk.io/vuln/SNYK-JS-POSTLOADER-2403737; https://snyk.io/vuln/SNYK-JS-POSTLOADER-2403737
CVE: CVE-2022-0749
Published: 2022-03-17
Description: This affects all versions of package SinGooCMS.Utility. The socket client in the package can pass in the payload via the user-controllable input after it has been established, because this socket client transmission does not have the appropriate restrictions or type bindings for the BinaryFormatter.
CVSS Score: 7.4 (HIGH)
CWE: CWE-502
References: https://github.com/SinGooCMS/SinGooCMSUtility/blob/master/SinGooCMS.Utility/Net/SocketClient.cs; https://github.com/SinGooCMS/SinGooCMSUtility/issues/1; https://snyk.io/vuln/SNYK-DOTNET-SINGOOCMSUTILITY-2312979
CVE: CVE-2022-21221
Published: 2022-03-17
Description: The package github.com/valyala/fasthttp before 1.34.0 are vulnerable to Directory Traversal via the ServeFile function, due to improper sanitization. It is possible to be exploited by using a backslash %5c character in the path. **Note:** This security issue impacts Windows users only.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-22
References: https://github.com/valyala/fasthttp/commit/15262ecf3c602364639d465daba1e7f3604d00e8; https://github.com/valyala/fasthttp/commit/6b5bc7bb304975147b4af68df54ac214ed2554c1; https://github.com/valyala/fasthttp/issues/1226
CVE: CVE-2022-25296
Published: 2022-03-17
Description: The package bodymen from 0.0.0 are vulnerable to Prototype Pollution via the handler function which could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload. **Note:** This vulnerability derives from an incomplete fix to [CVE-2019-10792](https://security.snyk.io/vuln/SNYK-JS-BODYMEN-548897)
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-BODYMEN-2342623; https://snyk.io/vuln/SNYK-JS-BODYMEN-2342623
CVE: CVE-2022-25352
Published: 2022-03-17
Description: The package libnested before 1.5.2 are vulnerable to Prototype Pollution via the set function in index.js. **Note:** This vulnerability derives from an incomplete fix for [CVE-2020-28283](https://security.snyk.io/vuln/SNYK-JS-LIBNESTED-1054930)
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321
References: https://github.com/dominictarr/libnested/blob/master/index.js%23L22; https://github.com/dominictarr/libnested/commit/c1129865d75fbe52b5a4f755ad3110ca5420f2e1; https://snyk.io/vuln/SNYK-JS-LIBNESTED-2342117
CVE: CVE-2022-25354
Published: 2022-03-17
Description: The package set-in before 2.0.3 are vulnerable to Prototype Pollution via the setIn method, as it allows an attacker to merge object prototypes into it. **Note:** This vulnerability derives from an incomplete fix of [CVE-2020-28273](https://security.snyk.io/vuln/SNYK-JS-SETIN-1048049)
CVSS Score: 8.6 (HIGH)
CWE: CWE-1321
References: https://github.com/ahdinosaur/set-in/blob/dfc226d95cce8129de6708661e06e0c2c06f3490/index.js%23L5; https://github.com/ahdinosaur/set-in/commit/6bad255961d379e4b1f5fbc52ef9dc8420816f24; https://snyk.io/vuln/SNYK-JS-SETIN-2388571
CVE: CVE-2022-25760
Published: 2022-03-17
Description: All versions of package accesslog are vulnerable to Arbitrary Code Injection due to the usage of the Function constructor without input sanitization. If (attacker-controlled) user input is given to the format option of the package's exported constructor function, it is possible for an attacker to execute arbitrary JavaScript code on the host that this package is being run on.
CVSS Score: 7.1 (HIGH)
CWE: CWE-94
References: https://github.com/carlos8f/node-accesslog/blob/master/lib/compile.js%23L6; https://snyk.io/vuln/SNYK-JS-ACCESSLOG-2312099; https://github.com/carlos8f/node-accesslog/blob/master/lib/compile.js%23L6
CVE: CVE-2021-44259
Published: 2022-03-17
Description: A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/zer0yu/CVE_Request/blob/master/WAVLINK/WAVLINK_AC1200_unauthorized_access_vulnerability_second.md; https://github.com/zer0yu/CVE_Request/blob/master/WAVLINK/WAVLINK_AC1200_unauthorized_access_vulnerability_second.md
CVE: CVE-2021-44260
Published: 2022-03-17
Description: A vulnerability is in the 'live_mfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/zer0yu/CVE_Request/blob/master/WAVLINK/WAVLINK_AC1200_unauthorized_access_vulnerability_first.md; https://github.com/zer0yu/CVE_Request/blob/master/WAVLINK/WAVLINK_AC1200_unauthorized_access_vulnerability_first.md
CVE: CVE-2021-44261
Published: 2022-03-17
Description: A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes firmware version information for the device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_W104_unauthorized_access_vulnerability_first.md; https://www.netgear.com/about/security/; https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_W104_unauthorized_access_vulnerability_first.md
CVE: CVE-2021-44262
Published: 2022-03-17
Description: A vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information for the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_W104_unauthorized_access_vulnerability_second.md; https://www.netgear.com/about/security/; https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_W104_unauthorized_access_vulnerability_second.md
CVE: CVE-2022-24761
Published: 2022-03-17
Description: Waitress is a Web Server Gateway Interface server for Python 2 and 3. When using Waitress versions 2.1.0 and prior behind a proxy that does not properly validate the incoming HTTP request matches the RFC7230 standard, Waitress and the frontend proxy may disagree on where one request starts and where it ends. This would allow requests to be smuggled via the front-end proxy to waitress and later behavior. There are two classes of vulnerability that may lead to request smuggling that are addressed by this advisory: The use of Python's `int()` to parse strings into integers, leading to `+10` to be parsed as `10`, or `0x01` to be parsed as `1`, where as the standard specifies that the string should contain only digits or hex digits; and Waitress does not support chunk extensions, however it was discarding them without validating that they did not contain illegal characters. This vulnerability has been patched in Waitress 2.1.1. A workaround is available. When deploying a proxy in front of waitress, turning on any and all functionality to make sure that the request matches the RFC7230 standard. Certain proxy servers may not have this functionality though and users are encouraged to upgrade to the latest version of waitress instead.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444, CWE-444
References: https://github.com/Pylons/waitress/commit/9e0b8c801e4d505c2ffc91b891af4ba48af715e0; https://github.com/Pylons/waitress/releases/tag/v2.1.1; https://github.com/Pylons/waitress/security/advisories/GHSA-4f7p-27jc-3c36
CVE: CVE-2020-15591
Published: 2022-03-17
Description: fexsrv in F*EX (aka Frams' Fast File EXchange) before fex-20160919_2 allows eval injection (for unauthenticated remote code execution).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://cwe.mitre.org/data/definitions/95.html; https://fex.rus.uni-stuttgart.de; https://secfault-security.com/advisories/cve2020-15591.html
CVE: CVE-2021-44906
Published: 2022-03-17
Description: Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zip; https://github.com/substack/minimist/blob/master/index.js#L69; https://github.com/substack/minimist/issues/164
CVE: CVE-2022-26526
Published: 2022-03-17
Description: Anaconda Anaconda3 (Anaconda Distribution) through 2021.11.0.0 and Miniconda3 through 4.11.0.0 can create a world-writable directory under %PROGRAMDATA% and place that directory into the system PATH environment variable. Thus, for example, local users can gain privileges by placing a Trojan horse file into that directory. (This problem can only happen in a non-default installation. The person who installs the product must specify that it is being installed for all users. Also, the person who installs the product must specify that the system PATH should be changed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://docs.conda.io/en/latest/miniconda.html; https://github.com/continuumio/anaconda-issues/issues; https://improsec.com/tech-blog/privilege-escalation-vulnerability-in-anaconda3-and-miniconda3
CVE: CVE-2022-24759
Published: 2022-03-17
Description: `@chainsafe/libp2p-noise` contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. `@chainsafe/libp2p-noise` before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and get those peers banned. Users should upgrade to version 4.1.2 or 5.0.3 to receive a patch. There are currently no known workarounds.
CVSS Score: 8.1 (HIGH)
CWE: CWE-347
References: https://github.com/ChainSafe/js-libp2p-noise/pull/130; https://github.com/ChainSafe/js-libp2p-noise/releases/tag/v5.0.3; https://github.com/ChainSafe/js-libp2p-noise/security/advisories/GHSA-j3ff-xp6c-6gcc
CVE: CVE-2022-25364
Published: 2022-03-17
Description: In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymous write access. If this was not manually changed, a malicious actor with network access to the build cache could potentially populate it with manipulated entries that execute malicious code as part of a build. As of 2021.4.2, the built-in build cache is inaccessible-by-default, requiring explicit configuration of its access-control settings before it can be used. (Remote build cache nodes are unaffected as they are inaccessible-by-default.)
CVSS Score: 8.1 (HIGH)
CWE: CWE-276
References: https://security.gradle.com; https://security.gradle.com/advisory/2022-02; https://security.gradle.com