deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-52874
Published: 2024-05-21
Description: In the Linux kernel, the following vulnerability has been resolved:

x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro

In the TDX_HYPERCALL asm, after the TDCALL instruction returns from the
untrusted VMM, the registers that the TDX guest shares to the VMM need
to be cleared to avoid speculative execution of VMM-provided values.

RSI is specified in the bitmap of those registers, but it is missing
when zeroing out those registers in the current TDX_HYPERCALL.

It was there when it was originally added in commit 752d13305c78
("x86/tdx: Expand __tdx_hypercall() to handle more arguments"), but was
later removed in commit 1e70c680375a ("x86/tdx: Do not corrupt
frame-pointer in __tdx_hypercall()"), which was correct because %rsi is
later restored in the "pop %rsi".  However a later commit 7a3a401874be
("x86/tdx: Drop flags from __tdx_hypercall()") removed that "pop %rsi"
but forgot to add the "xor %rsi, %rsi" back.

Fix by adding it back.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/2191950d35d8f81620ea8d4e04d983f664fe3a8a; https://git.kernel.org/stable/c/5d092b66119d774853cc[PII_REDACTED]299048a662; https://git.kernel.org/stable/c/de4c5bacca4f50233f1f791bec9eeb4dee1b14cd
CVE: CVE-2023-52875
Published: 2024-05-21
Description: In the Linux kernel, the following vulnerability has been resolved:

clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data

Add the check for the return value of mtk_alloc_clk_data() in order to
avoid NULL pointer dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/001e5def774fa1a8f2b29567c0b0cd3e3a859a96; https://git.kernel.org/stable/c/0d6e24b422a2166a9297a8286ff2e6ab9a5e8cd3; https://git.kernel.org/stable/c/1953e62366da5460dc712e045f94fb0d8918999d
CVE: CVE-2023-52876
Published: 2024-05-21
Description: In the Linux kernel, the following vulnerability has been resolved:

clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data

Add the check for the return value of mtk_alloc_clk_data() in order to
avoid NULL pointer dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/0884393c63cc9a1772f7121a6645ba7bd76feeb9; https://git.kernel.org/stable/c/1639072f6260babd017556e9f236ca2ad589d1e7; https://git.kernel.org/stable/c/96e9544a0c4faca616b3f9f4034dcd83a14e7f22
CVE: CVE-2023-52877
Published: 2024-05-21
Description: In the Linux kernel, the following vulnerability has been resolved:

usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()

It is possible that typec_register_partner() returns ERR_PTR on failure.
When port->partner is an error, a NULL pointer dereference may occur as
shown below.

[91222.095236][  T319] typec port0: failed to register partner (-17)
...
[91225.061491][  T319] Unable to handle kernel NULL pointer dereference
at virtual address[PII_REDACTED]00039f
[91225.274642][  T319] pc : tcpm_pd_data_request+0x310/0x13fc
[91225.274646][  T319] lr : tcpm_pd_data_request+0x298/0x13fc
[91225.308067][  T319] Call trace:
[91225.308070][  T319]  tcpm_pd_data_request+0x310/0x13fc
[91225.308073][  T319]  tcpm_pd_rx_handler+0x100/0x9e8
[91225.355900][  T319]  kthread_worker_fn+0x178/0x58c
[91225.355902][  T319]  kthread+0x150/0x200
[91225.355905][  T319]  ret_from_fork+0x10/0x30

Add a check for port->partner to avoid dereferencing a NULL pointer.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/4987daf86c152ff882d51572d154ad12e4ff3a4b; https://git.kernel.org/stable/c/9ee038590d808a95d16adf92818dcd4752273c08; https://git.kernel.org/stable/c/b37a168c[PII_REDACTED]a0ca9626651b5a789e822b
CVE: CVE-2023-52878
Published: 2024-05-21
Description: In the Linux kernel, the following vulnerability has been resolved:

can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds

If the "struct can_priv::echoo_skb" is accessed out of bounds, this
would cause a kernel crash. Instead, issue a meaningful warning
message and return with an error.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://git.kernel.org/stable/c/0d30931f1fa0fb893fb7d5dc32b6b7edfb775be4; https://git.kernel.org/stable/c/53c468008a7c9ca3f5fc985951f35ec2acae85bc; https://git.kernel.org/stable/c/6411959c10fe917288cbb[PII_REDACTED]48560057
CVE: CVE-2023-52879
Published: 2024-05-21
Description: In the Linux kernel, the following vulnerability has been resolved:

tracing: Have trace_event_file have ref counters

The following can crash the kernel:

 # cd /sys/kernel/tracing
 # echo 'p:sched schedule' > kprobe_events
 # exec 5>>events/kprobes/sched/enable
 # > kprobe_events
 # exec 5>&-

The above commands:

 1. Change directory to the tracefs directory
 2. Create a kprobe event (doesn't matter what one)
 3. Open bash file descriptor 5 on the enable file of the kprobe event
 4. Delete the kprobe event (removes the files too)
 5. Close the bash file descriptor 5

The above causes a crash!

 BUG: kernel NULL pointer dereference, address: [PII_REDACTED]
 #PF: supervisor read access in kernel mode
 #PF: error_code(0x0000) - not-present page
 PGD 0 P4D 0
 Oops: 0000 [#1] PREEMPT SMP PTI
 CPU: 6 PID: 877 Comm: bash Not tainted 6.5.0-rc4-test-00008-g2c6b6b1029d4-dirty #186
 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
 RIP: 0010:tracing_release_file_tr+0xc/0x50

What happens here is that the kprobe event creates a trace_event_file
"file" descriptor that represents the file in tracefs to the event. It
maintains state of the event (is it enabled for the given instance?).
Opening the "enable" file gets a reference to the event "file" descriptor
via the open file descriptor. When the kprobe event is deleted, the file is
also deleted from the tracefs system which also frees the event "file"
descriptor.

But as the tracefs file is still opened by user space, it will not be
totally removed until the final dput() is called on it. But this is not
true with the event "file" descriptor that is already freed. If the user
does a write to or simply closes the file descriptor it will reference the
event "file" descriptor that was just freed, causing a use-after-free bug.

To solve this, add a ref count to the event "file" descriptor as well as a
new flag called "FREED". The "file" will not be freed until the last
reference is released. But the FREE flag will be set when the event is
removed to prevent any more modifications to that event from happening,
even if there's still a reference to the event "file" descriptor.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/2c9de867ca285c397cd71af703763fe416265706; https://git.kernel.org/stable/c/2fa74d29fc1899c237d51bf9a6e132ea5c488976; https://git.kernel.org/stable/c/9034c87d61be8cff989017740a91701ac8195a1d
CVE: CVE-2024-1721
Published: 2024-05-21
Description: Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR Passwordless: before 9.1.
CWE: CWE-347
References: https://www.hypr.com/trust-center/security-advisories; https://www.hypr.com/trust-center/security-advisories
CVE: CVE-2024-21902
Published: 2024-05-21
Description: An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network.

We have already fixed the vulnerability in the following version:
QTS 5.1.7.2770 build 20240520 and later
QuTS hero h5.1.7.2770 build 20240520 and later
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-200, CWE-732
References: https://www.qnap.com/en/security-advisory/qsa-24-23; https://www.qnap.com/en/security-advisory/qsa-24-23
CVE: CVE-2024-27127
Published: 2024-05-21
Description: A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute arbitrary code via a network.

We have already fixed the vulnerability in the following version:
QTS 5.1.7.2770 build 20240520 and later
QuTS hero h5.1.7.2770 build 20240520 and later
CVSS Score: 7.2 (HIGH)
CWE: CWE-415, CWE-415
References: https://www.qnap.com/en/security-advisory/qsa-24-23; https://www.qnap.com/en/security-advisory/qsa-24-23
CVE: CVE-2024-27128
Published: 2024-05-21
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network.

We have already fixed the vulnerability in the following version:
QTS 5.1.7.2770 build 20240520 and later
QuTS hero h5.1.7.2770 build 20240520 and later
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-120, CWE-121
References: https://www.qnap.com/en/security-advisory/qsa-24-23; https://www.qnap.com/en/security-advisory/qsa-24-23
CVE: CVE-2024-27129
Published: 2024-05-21
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network.

We have already fixed the vulnerability in the following version:
QTS 5.1.7.2770 build 20240520 and later
QuTS hero h5.1.7.2770 build 20240520 and later
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-120, CWE-121
References: https://www.qnap.com/en/security-advisory/qsa-24-23; https://www.qnap.com/en/security-advisory/qsa-24-23
CVE: CVE-2024-27130
Published: 2024-05-21
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network.

We have already fixed the vulnerability in the following version:
QTS 5.1.7.2770 build 20240520 and later
QuTS hero h5.1.7.2770 build 20240520 and later
CVSS Score: 7.2 (HIGH)
CWE: CWE-120, CWE-121
References: https://www.qnap.com/en/security-advisory/qsa-24-23; https://www.qnap.com/en/security-advisory/qsa-24-23
CVE: CVE-2024-31840
Published: 2024-05-21
Description: An issue was discovered in Italtel Embrace 1.6.4. The web application inserts cleartext passwords in the HTML source code. An authenticated user is able to edit the configuration of the email server. Once the user access the edit function, the web application fills the edit form with the current credentials for the email account, including the cleartext password.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312, CWE-319, CWE-312, CWE-319
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2024-31844
Published: 2024-05-21
Description: An issue was discovered in Italtel Embrace 1.6.4. The server does not properly handle application errors. In some cases, this leads to a disclosure of information about the server. An unauthenticated user is able craft specific requests in order to make the application generate an error. Inside an error message, some information about the server is revealed, such as the absolute path of the source code of the application. This kind of information can help an attacker to perform other attacks against the system. This can be exploited without authentication.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2024-31845
Published: 2024-05-21
Description: An issue was discovered in Italtel Embrace 1.6.4. The product does not neutralize or incorrectly neutralizes output that is written to logs. The web application writes logs using a GET query string parameter. This parameter can be modified by an attacker, so that every action he performs is attributed to a different user. This can be exploited without authentication.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-117
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2024-31847
Published: 2024-05-21
Description: An issue was discovered in Italtel Embrace 1.6.4. A stored cross-site scripting (XSS) vulnerability allows authenticated and unauthenticated remote attackers to inject arbitrary web script or HTML into a GET parameter. This reflects/stores the user input without sanitization.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2024-36039
Published: 2024-05-21
Description: PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/PyMySQL/PyMySQL/releases/tag/v1.1.1; https://lists.debian.org/debian-lts-announce/2024/05/msg00017.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/23VXBV34GFRICCVYZ6KFMSSWY5UEXCF5/
CVE: CVE-2024-36052
Published: 2024-05-21
Description: RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences, a different issue than CVE-2024-33899.
CVSS Score: 7.5 (HIGH)
CWE: CWE-150
References: https://sdushantha.medium.com/ansi-escape-injection-vulnerability-in-winrar-a2cbfac4b983; https://www.rarlab.com/rarnew.htm; https://sdushantha.medium.com/ansi-escape-injection-vulnerability-in-winrar-a2cbfac4b983
CVE: CVE-2024-22273
Published: 2024-05-21
Description: The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125, CWE-787, CWE-125, CWE-787
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308
CVE: CVE-2024-22274
Published: 2024-05-21
Description: The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308
CVE: CVE-2024-22275
Published: 2024-05-21
Description: The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308
CVE: CVE-2024-31757
Published: 2024-05-21
Description: An issue in TeraByte Unlimited Image for Windows v.3.64.0.0 and before and fixed in v.4.0.0.0 allows a local attacker to escalate privileges via the TBOFLHelper64.sys and TBOFLHelper.sys component.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://www.terabyteunlimited.com/image-for-windows/; https://www.terabyteunlimited.com/image-for-windows/
CVE: CVE-2024-34240
Published: 2024-05-21
Description: QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in arbitrary code execution in admin functions related to adding or updating records.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://grumpz.net/cve-2024-34240-latest-stored-xss-0day-vulnerability-unveiled; https://grumpz.net/cve-2024-34240-latest-stored-xss-0day-vulnerability-unveiled
CVE: CVE-2024-35056
Published: 2024-05-21
Description: NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the query_packets and insert functions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/advisories/GHSA-gpgj-xrgw-8mx2; https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze; https://github.com/advisories/GHSA-gpgj-xrgw-8mx2
CVE: CVE-2024-35057
Published: 2024-05-21
Description: An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://github.com/advisories/GHSA-jf28-v5f6-cvpr; https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze; https://github.com/advisories/GHSA-jf28-v5f6-cvpr
CVE: CVE-2024-35058
Published: 2024-05-21
Description: An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://github.com/advisories/GHSA-4gxj-5mmr-7pxq; https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze; https://github.com/advisories/GHSA-4gxj-5mmr-7pxq
CVE: CVE-2024-4154
Published: 2024-05-21
Description: In lunary-ai/lunary version 1.2.2, an incorrect synchronization vulnerability allows unprivileged users to rename projects they do not have access to. Specifically, an unprivileged user can send a PATCH request to the project's endpoint with a new name for a project, despite not having the necessary permissions or being assigned to the project. This issue allows for unauthorized modification of project names, potentially leading to confusion or unauthorized access to project resources.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://github.com/lunary-ai/lunary/commit/c43b6c62035f32ca455f66d5fd22ba661648cde7; https://huntr.com/bounties/e56509af-f7af-4e1e-a04b-9cb53545f30f; https://huntr.com/bounties/e56509af-f7af-4e1e-a04b-9cb53545f30f
CVE: CVE-2024-25724
Published: 2024-05-21
Description: In RTI Connext Professional 5.3.1 through 6.1.0 before 6.1.1, a buffer overflow in XML parsing from Routing Service, Recording Service, Queuing Service, and Cloud Discovery Service allows attackers to execute code with the affected service's privileges, compromise the service's integrity, leak sensitive information, or crash the service. These attacks could be done via a remote malicious RTPS message; a compromised call with malicious parameters to the RTI_RoutingService_new, rti::recording::Service, RTI_QueuingService_new, or RTI_CDS_Service_new public APIs; or a compromised local file system containing a malicious XML file.
CVSS Score: 7.3 (HIGH)
CWE: CWE-120
References: https://community.rti.com/static/documentation/connext-dds/current/doc/vulnerabilities/index.html#cve-2024-25724; https://community.rti.com/static/documentation/connext-dds/current/doc/vulnerabilities/index.html#cve-2024-25724
CVE: CVE-2024-31989
Published: 2024-05-21
Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. It has been discovered that an unprivileged pod in a different namespace on the same cluster could connect to the Redis server on port 6379. Despite having installed the latest version of the VPC CNI plugin on the EKS cluster, it requires manual enablement through configuration to enforce network policies. This raises concerns that many clients might unknowingly have open access to their Redis servers. This vulnerability could lead to Privilege Escalation to the level of cluster controller, or to information leakage, affecting anyone who does not have strict access controls on their Redis instance. This issue has been patched in version(s) 2.8.19, 2.9.15 and 2.10.10.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-327, CWE-327
References: https://github.com/argoproj/argo-cd/commit/2de0ceade243039c120c28374016c04ff9590d1d; https://github.com/argoproj/argo-cd/commit/35a7d6c7fa1534aceba763d6a68697f36c12e678; https://github.com/argoproj/argo-cd/commit/4e2fe302c3352a0012ecbe7f03476b0e07f7fc6c
CVE: CVE-2024-33525
Published: 2024-05-21
Description: A Stored Cross-site Scripting (XSS) vulnerability in the "Import of organizational units and title of organizational unit" feature in ILIAS 7.20 to 7.29 and ILIAS 8.4 to 8.10 as well as ILIAS 9.0 allows remote authenticated attackers with administrative privileges to inject arbitrary web script or HTML via XML file upload.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&cmd=layout&ref_id=1719&obj_id=159938; https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&cmd=layout&ref_id=1719&obj_id=170029; https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&cmd=layout&ref_id=1719&obj_id=170040
CVE: CVE-2024-35059
Published: 2024-05-21
Description: An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://github.com/advisories/GHSA-jqff-8g2v-642h; https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze; https://github.com/advisories/GHSA-jqff-8g2v-642h
CVE: CVE-2024-35060
Published: 2024-05-21
Description: An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://github.com/advisories/GHSA-45q4-h8rr-hgx2; https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze; https://github.com/advisories/GHSA-45q4-h8rr-hgx2
CVE: CVE-2024-35061
Published: 2024-05-21
Description: NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-311
References: https://github.com/advisories/GHSA-jqff-8g2v-642h; https://github.com/advisories/GHSA-qv6x-53jj-vw59; https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze
CVE: CVE-2024-31756
Published: 2024-05-21
Description: An issue in MarvinTest Solutions Hardware Access Driver v.5.0.3.0 and before and fixed in v.5.0.4.0 allows a local attacker to escalate privileges via the Hw65.sys component.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://northwave-cybersecurity.com/vulnerability-notice-hardware-access-driver-marvintest-solutions; https://northwave-cybersecurity.com/vulnerability-notice-hardware-access-driver-marvintest-solutions
CVE: CVE-2024-34274
Published: 2024-05-21
Description: OpenBD[PII_REDACTED]3917-6cbe797 is vulnerable to Deserialization of Untrusted Data. The cookies bdglobals and bdclient_spot of the OpenBD software uses serialized data, which can be used to execute arbitrary code on the system. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 3.9 (LOW)
CWE: CWE-502
References: https://github.com/OpenBD/openbd-core/issues/89; https://github.com/OpenBD/openbd-core/issues/89
CVE: CVE-2024-35220
Published: 2024-05-21
Description: @fastify/session is a session plugin for fastify. Requires the @fastify/cookie plugin. When restoring the cookie from the session store, the `expires` field is overriden if the `maxAge` field was set.
This means a cookie is never correctly detected as expired and thus expired sessions are not destroyed. This vulnerability has been patched 10.8.0.
CVSS Score: 7.4 (HIGH)
CWE: CWE-613
References: https://github.com/fastify/session/commit/0495ce5b534c4550f25228821db[PII_REDACTED]f2f; https://github.com/fastify/session/issues/251; https://github.com/fastify/session/security/advisories/GHSA-pj27-2xvp-4qxg