deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-8520
Published: 2025-08-04
Description: A vulnerability classified as critical was found in givanz Vvveb up to 1.0.5. This vulnerability affects unknown code of the file /vadmin123/?module=editor/editor of the component Drag-and-Drop Editor. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.6 is able to address this issue. The patch is identified as f684f3e374d04db715730fc4796e102f5ebcacb2. It is recommended to upgrade the affected component.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-918
References: https://github.com/givanz/Vvveb/commit/f684f3e374d04db715730fc4796e102f5ebcacb2; https://github.com/givanz/Vvveb/releases/tag/1.0.6; https://hkohi.ca/vulnerability/9
CVE: CVE-2025-21120
Published: 2025-08-04
Description: Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the Server-Side vulnerability in Security. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
CVSS Score: 8.3 (HIGH)
CWE: CWE-650
References: https://www.dell.com/support/kbdoc/en-us/000347698/dsa-2025-271-security-update-for-dell-avamar-and-dell-avamar-virtual-edition-multiple-vulnerabilities
CVE: CVE-2025-26476
Published: 2025-08-04
Description: Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0, contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.
CVSS Score: 8.4 (HIGH)
CWE: CWE-321, CWE-798
References: https://www.dell.com/support/kbdoc/en-us/000339134/dsa-2025-154-security-update-for-dell-ecs-and-objectscale-use-of-hard-coded-ssh-cryptographic-key-vulnerability
CVE: CVE-2025-38741
Published: 2025-08-04
Description: Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-321, CWE-798
References: https://www.dell.com/support/kbdoc/en-us/000340083/dsa-2025-275-security-update-for-dell-enterprise-sonic-distribution-vulnerabilities
CVE: CVE-2025-52239
Published: 2025-08-04
Description: An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://shenzhen.com; http://zkeacms.com; https://github.com/CTRLCCT/BoolSpideer/blob/main/cve2.md
CVE: CVE-2025-53394
Published: 2025-08-04
Description: Paramount Macrium Reflect through 2025-06-26 allows attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx or .mrbax backup file and a renamed executable placed in the same directory. When a user with administrative privileges opens the crafted backup file and proceeds to mount it, Reflect launches the renamed executable (e.g., explorer.exe), which is under attacker control. This occurs because of insufficient validation of companion files referenced during backup mounting.
CVSS Score: 7.7 (HIGH)
CWE: CWE-427
References: https://macrium.com; https://www.macrium.com/blog/macrium-security-advisory-cve-2025-53394-cve-2025-53395
CVE: CVE-2025-53395
Published: 2025-08-04
Description: Paramount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx backup file and a malicious VSSSvr.dll located in the same directory. When a user with administrative privileges mounts a backup by opening the .mrimgx file, Reflect loads the attacker's VSSSvr.dll after the mount completes. This occurs because of untrusted DLL search path behavior in ReflectMonitor.exe.
CVSS Score: 7.7 (HIGH)
CWE: CWE-427
References: https://macrium.com; https://www.macrium.com/blog/macrium-security-advisory-cve-2025-53394-cve-2025-53395
CVE: CVE-2025-8521
Published: 2025-08-04
Description: A vulnerability, which was classified as problematic, has been found in givanz Vvveb up to 1.0.5. This issue affects some unknown processing of the file /vadmin123/index.php?module=settings/post-types of the component Add Type Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.6 is able to address this issue. The patch is named b53c7161da606f512b7efcb392d6ffc708688d49/605a70f8729e4d44ebe272671cb1e43e3d6ae014. It is recommended to upgrade the affected component.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/givanz/Vvveb/commit/b53c7161da606f512b7efcb392d6ffc708688d49; https://github.com/givanz/Vvveb/releases/tag/1.0.6; https://hkohi.ca/vulnerability/11
CVE: CVE-2025-8522
Published: 2025-08-04
Description: A vulnerability, which was classified as critical, was found in givanz Vvvebjs up to 2.0.4. Affected is an unknown function of the file /save.php of the component node.js. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: https://github.com/givanz/VvvebJs/issues/409; https://github.com/givanz/VvvebJs/issues/409#issue[PII_REDACTED]; https://vuldb.com/?ctiid.318648
CVE: CVE-2025-50340
Published: 2025-08-04
Description: An Insecure Direct Object Reference (IDOR) vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated user is authorized to use the specified sender identity, resulting in unauthorized message delivery as another user. This can lead to impersonation, phishing, or unauthorized communication within the system. NOTE: this is disputed by the Supplier because the only effective way to prevent this sender spoofing is on the SMTP server, not within a client such as SOGo.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1110604; https://github.com/millad7/SOGo_web_mail-vulnerability-CVE-2025-50340; https://www.mail-archive.com/users%40sogo.nu/msg34098.html
CVE: CVE-2025-55014
Published: 2025-08-04
Description: The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the dict.youdao.com and dict.cn servers via cleartext HTTP.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-402
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1110370; https://lists.debian.org/debian-user/2025/08/msg00076.html; https://packages.debian.org/trixie/stardict
CVE: CVE-2025-8523
Published: 2025-08-04
Description: A vulnerability has been found in RiderLike Fruit Crush-Brain App 1.0 on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.fruitcrush.fun. The manipulation leads to improper export of android application components. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-926
References: https://github.com/KMov-g/androidapps/blob/main/com.fruitcrush.fun.md; https://vuldb.com/?ctiid.318649; https://vuldb.com/?id.318649
CVE: CVE-2025-8524
Published: 2025-08-04
Description: A vulnerability was found in Boquan DotWallet App 2.15.2 on Android and classified as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.boquanhash.dotwallet. The manipulation leads to improper export of android application components. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-926
References: https://github.com/KMov-g/androidapps/blob/main/com.boquanhash.dotwallet.md; https://vuldb.com/?ctiid.318650; https://vuldb.com/?id.318650
CVE: CVE-2025-50341
Published: 2025-08-04
Description: A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the _domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://axelor.com; https://github.com/millad7/Axelor-vulnerability-CVE-2025-50341
CVE: CVE-2025-50754
Published: 2025-08-04
Description: Unisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerability in the "Report" functionality. A malicious script submitted by an attacker is rendered in the admin panel when viewed by an administrator. This allows attackers to hijack the admin session and, by leveraging the template editor, upload and execute a PHP web shell on the server, leading to full remote code execution.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://github.com/furk4nyildiz/CVE-2025-50754-PoC; https://github.com/furk4nyildiz/CVE-2025-50754-PoC
CVE: CVE-2025-51387
Published: 2025-08-04
Description: The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. Specifically, the following insecure settings were observed: RunAsNode is enabled and EnableNodeCliInspectArguments is not disabled. These configurations allow the application to be executed in Node.js mode, enabling attackers to pass arguments that result in arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/r3ggi/electroniz3r; https://packetstorm.news/files/id/207677; https://www.electronjs.org/blog/statement-run-as-node-cves#mitigation
CVE: CVE-2025-51726
Published: 2025-08-04
Description: CyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision attacks. This allows a malicious actor to craft a fake installer with a forged SHA-1 certificate that may still be accepted by Windows signature verification mechanisms, particularly on systems without strict SmartScreen or trust policy enforcement. Additionally, the installer lacks High Entropy Address Space Layout Randomization (ASLR), as confirmed by BinSkim (BA2015 rule) and repeated WinDbg analysis. The binary consistently loads into predictable memory ranges, increasing the success rate of memory corruption exploits. These two misconfigurations, when combined, significantly lower the bar for successful supply-chain style attacks or privilege escalation through fake installers.
CVSS Score: 8.4 (HIGH)
CWE: CWE-327
References: https://github.com/meisterlos/CVE; https://github.com/meisterlos/CVE-2025-51726
CVE: CVE-2025-8525
Published: 2025-08-04
Description: A vulnerability was found in Exrick xboot up to 3.3.4. It has been classified as problematic. This affects an unknown part of the component Spring Boot Admin/Spring Actuator. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://github.com/Exrick/xboot/issues/72; https://github.com/Exrick/xboot/issues/72#issue[PII_REDACTED]; https://vuldb.com/?ctiid.318651
CVE: CVE-2025-8526
Published: 2025-08-04
Description: A vulnerability was found in Exrick xboot up to 3.3.4. It has been declared as critical. This vulnerability affects the function Upload of the file xboot-fast/src/main/java/cn/exrick/xboot/modules/base/controller/common/UploadController.java. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://github.com/Exrick/xboot/issues/71; https://github.com/Exrick/xboot/issues/71#issue[PII_REDACTED]; https://vuldb.com/?ctiid.318652
CVE: CVE-2025-4599
Published: 2025-08-04
Description: The fragment preview functionality in Liferay Portal 7.4.3.61 through 7.4.3.132, and Liferay DXP 2024.Q4.1 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.13 and 7.4 update 61 through update 92 was found to be vulnerable to postMessage-based XSS because it allows a remote non-authenticated attacker to inject JavaScript into the fragment portlet URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-4599
CVE: CVE-2025-4604
Published: 2025-08-04
Description: The vulnerable code can bypass the Captcha check in Liferay Portal 7.4.3.80 through 7.4.3.132, and Liferay DXP 2024.Q1.1 through 2024.Q1.19, 2024.Q2.0 through 2024.Q2.13, 2024.Q3.0 through 2024.Q3.13, 2024.Q4.0 through 2024.Q4.7, 2025.Q1.0 through 2025.Q1.15 and 7.4 update 80 through update 92 and then attackers can run scripts in the Gogo shell
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-4604
CVE: CVE-2025-54554
Published: 2025-08-04
Description: tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that reveal sensitive information about the underlying SQL queries and database structure.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://github.com/Aman-Parmar/CVE-2025-54554; https://ticrypt.com/docs/ticrypt-backend/audit/rest
CVE: CVE-2025-7844
Published: 2025-08-04
Description: Exporting a TPM based RSA key larger than 2048 bits from the TPM could overrun a stack buffer if the default `MAX_RSA_KEY_BITS=2048` is used. If your TPM 2.0 module supports RSA key sizes larger than 2048 bit and your applications supports creating or importing an RSA private or public key larger than 2048 bits and your application calls `wolfTPM2_RsaKey_TpmToWolf` on that key, then a stack buffer could be overrun. If the `MAX_RSA_KEY_BITS` build-time macro is set correctly (RSA bits match what TPM hardware is capable of) for the hardware target, then a stack overrun is not possible.
CWE: CWE-121
References: https://github.com/wolfSSL/wolfTPM/pull/427
CVE: CVE-2025-8527
Published: 2025-08-04
Description: A vulnerability was found in Exrick xboot up to 3.3.4. It has been rated as critical. This issue affects some unknown processing of the file xboot-fast/src/main/java/cn/exrick/xboot/modules/base/controller/common/SecurityController.java of the component Swagger. The manipulation of the argument loginUrl leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/Exrick/xboot/issues/70; https://github.com/Exrick/xboot/issues/70#issue[PII_REDACTED]; https://vuldb.com/?ctiid.318653
CVE: CVE-2025-8528
Published: 2025-08-04
Description: A vulnerability classified as problematic has been found in Exrick xboot up to 3.3.4. Affected is an unknown function of the file /xboot/permission/getMenuList. The manipulation leads to cleartext storage of sensitive information in a cookie. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.7 (LOW)
CWE: CWE-312, CWE-315
References: https://github.com/Exrick/xboot/issues/69; https://github.com/Exrick/xboot/issues/69#issue[PII_REDACTED]; https://vuldb.com/?ctiid.318654
CVE: CVE-2025-27211
Published: 2025-08-04
Description: An Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.10.4 and earlier) could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-77
References: https://community.ui.com/releases/Security-Advisory-Bulletin-050-050/f82b1701-58a1-4b7d-9e20-82d50e3e1961
CVE: CVE-2025-27212
Published: 2025-08-04
Description: An Improper Input Validation in certain UniFi Access devices could allow a Command Injection by a malicious actor with access to UniFi Access management network.

 

Affected Products:
UniFi Access Reader Pro (Version 2.14.21 and earlier)
UniFi Access G2 Reader Pro (Version 1.10.32 and earlier)
UniFi Access G3 Reader Pro (Version 1.10.30 and earlier)
UniFi Access Intercom (Version 1.7.28 and earlier)
UniFi Access G3 Intercom (Version 1.7.29 and earlier)
UniFi Access Intercom Viewer (Version 1.3.20 and earlier)

 

Mitigation:
Update UniFi Access Reader Pro Version 2.15.9 or later
Update UniFi Access G2 Reader Pro Version 1.11.23 or later
Update UniFi Access G3 Reader Pro Version 1.11.22 or later
Update UniFi Access Intercom Version 1.8.22 or later
Update UniFi Access G3 Intercom Version 1.8.22 or later
Update UniFi Access Intercom Viewer Version 1.4.39 or later
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-77
References: https://community.ui.com/releases/Security-Advisory-Bulletin-051-051/583fa6e1-3d85-42ec-a453-651d1653c9b3
CVE: CVE-2025-46093
Published: 2025-08-04
Description: LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as root by leveraging the Actionscript feature and the sudoers configuration.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-732
References: https://docs.liquidfiles.com/release_notes/version_4-1-x.html; https://gist.github.com/nikolai0x/f61a8bfcdaa244e0c46931d74d10c4ea; https://projectblack.io/blog/liquidfiles-vulnerability-authenticated-rce/
CVE: CVE-2025-46094
Published: 2025-08-04
Description: LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.
CVSS Score: 3.8 (LOW)
CWE: CWE-24
References: https://docs.liquidfiles.com/release_notes/version_4-1-x.html; https://projectblack.io/blog/liquidfiles-vulnerability-authenticated-rce/; https://projectblack.io/blog/liquidfiles-vulnerability-authenticated-rce/
CVE: CVE-2025-8529
Published: 2025-08-04
Description: A vulnerability classified as critical was found in cloudfavorites favorites-web up to 1.3.0. Affected by this vulnerability is the function getCollectLogoUrl of the file app/src/main/java/com/favorites/web/CollectController.java. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/cloudfavorites/favorites-web/issues/134; https://github.com/cloudfavorites/favorites-web/issues/134#issue[PII_REDACTED]; https://vuldb.com/?ctiid.318655
CVE: CVE-2025-8530
Published: 2025-08-04
Description: A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file eladmin-system\src\main\resources\config\application-prod.yml of the component Druid. The manipulation of the argument login-username/login-password leads to use of default credentials. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1392, CWE-798
References: https://github.com/elunez/eladmin/issues/883; https://github.com/elunez/eladmin/issues/883#issue[PII_REDACTED]; https://vuldb.com/?ctiid.318656
CVE: CVE-2025-54797
Published: 2025-08-05
Description: Rejected reason: This CVE is a duplicate of CVE-2025-52464.
CVE: CVE-2025-8534
Published: 2025-08-05
Description: A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PS_Lvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 6ba36f159fd396ad11bf6b[PII_REDACTED]736ecc8b. It is recommended to apply a patch to fix this issue. One of the maintainers explains, that "[t]his error only occurs if DEFER_STRILE_LOAD (defer-strile-load:BOOL=ON) or TIFFOpen( .. "rD") option is used."
CVSS Score: 2.5 (LOW)
CWE: CWE-404, CWE-476
References: http://www.libtiff.org/; https://drive.google.com/file/d/15JPA3kLYiYD-nRNJ8y8HmnYjhv9NE7k6/view?usp=drive_link; https://gitlab.com/libtiff/libtiff/-/commit/6ba36f159fd396ad11bf6b[PII_REDACTED]736ecc8b
CVE: CVE-2025-52892
Published: 2025-08-05
Description: EspoCRM is a web application with a frontend designed as a single-page application and a REST API backend written in PHP. In versions 9.1.6 and below, if a user loads Espo in the browser with double slashes (e.g https://domain//#Admin) and the webserver does not strip the double slash, it can cause a corrupted Slim router's cache. This will make the instance unusable until there is a completed rebuild. This is fixed in version 9.1.7.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-444
References: https://github.com/espocrm/espocrm/commit/929611f317ce8892ea75873b0ab3094c0c510ff3; https://github.com/espocrm/espocrm/security/advisories/GHSA-26x2-6wch-j8pf
CVE: CVE-2025-53544
Published: 2025-08-05
Description: Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. In versions below 0.97.0, a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login password without triggering rate limiting. Trilium is a single-user app without a username requirement, and brute-force protection bypass makes exploitation much more feasible. Multiple features provided by Trilium (e.g. MFA, share notes, custom request handler) indicate that Trilium can be exposed to the internet. This is fixed in version 0.97.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-307
References: https://github.com/TriliumNext/Trilium/pull/6243/commits/04c8f8a1234e8c9f4a87da[PII_REDACTED]7b21223; https://github.com/TriliumNext/Trilium/releases/tag/v0.97.0; https://github.com/TriliumNext/Trilium/security/advisories/GHSA-hw5p-ff75-327r
CVE: CVE-2025-54119
Published: 2025-08-05
Description: ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. In versions 5.22.9 and below, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a sqlite3 database and calls the metaColumns(), metaForeignKeys() or metaIndexes() methods with a crafted table name. This is fixed in version 5.22.10. To workaround this issue, only pass controlled data to metaColumns(), metaForeignKeys() and metaIndexes() method's $table parameter.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-89
References: https://github.com/ADOdb/ADOdb/commit/5b8bd52cdcffefb4ecded1b399c98cfa516afe03; https://github.com/ADOdb/ADOdb/issues/1083; https://github.com/ADOdb/ADOdb/security/advisories/GHSA-vf2r-cxg9-p7rf
CVE: CVE-2025-54130
Published: 2025-08-05
Description: Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions less than 1.3.9. If the file is a dotfile, editing it requires approval but creating a new one doesn't. Hence, if sensitive editor files, such as the .vscode/settings.json file don't already exist in the workspace, an attacker can chain a indirect prompt injection vulnerability to hijack the context to write to the settings file and trigger RCE on the victim without user approval. This is fixed in version 1.3.9.
CVSS Score: 7.5 (HIGH)
CWE: CWE-285
References: https://github.com/cursor/cursor/security/advisories/GHSA-vqv7-vq92-x87f