deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-31900
Published: 2021-05-11
Description: In JetBrains Code With Me bundled to the compatible IDE versions before 2021.1, a client could open a browser on a host.
CVSS Score: 5.3 (MEDIUM)
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31901
Published: 2021-05-11
Description: In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group.
CVSS Score: 7.5 (HIGH)
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31902
Published: 2021-05-11
Description: In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31903
Published: 2021-05-11
Description: In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31904
Published: 2021-05-11
Description: In JetBrains TeamCity before 2020.2.2, XSS was potentially possible on the test history page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31905
Published: 2021-05-11
Description: In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible.
CVSS Score: 7.5 (HIGH)
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31906
Published: 2021-05-11
Description: In JetBrains TeamCity before 2020.2.2, audit logs were not sufficient when an administrator uploaded a file.
CVSS Score: 2.7 (LOW)
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31907
Published: 2021-05-11
Description: In JetBrains TeamCity before 2020.2.2, permission checks for changing TeamCity plugins were implemented improperly.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31908
Published: 2021-05-11
Description: In JetBrains TeamCity before 2020.2.3, stored XSS was possible on several pages.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31909
Published: 2021-05-11
Description: In JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was possible.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-88
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-3315
Published: 2021-05-11
Description: In JetBrains TeamCity before 2020.2.2, stored XSS on a tests page was possible.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2020-35438
Published: 2021-05-11
Description: Cross Site Scripting (XSS) vulnerability in the kk Star Ratings plugin before 4.1.5.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kamalkhan/kk-star-ratings/blob/master/CHANGELOG.md; https://github.com/kamalkhan/kk-star-ratings/blob/master/CHANGELOG.md#415---2020-12-13; https://github.com/kamalkhan/kk-star-ratings/blob/master/CHANGELOG.md
CVE: CVE-2021-30482
Published: 2021-05-11
Description: In JetBrains UpSource before 2020.1.1883, application passwords were not revoked correctly
CVSS Score: 7.5 (HIGH)
CWE: CWE-281
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31897
Published: 2021-05-11
Description: In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects.
CVSS Score: 9.8 (CRITICAL)
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31898
Published: 2021-05-11
Description: In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31910
Published: 2021-05-11
Description: In JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31911
Published: 2021-05-11
Description: In JetBrains TeamCity before 2020.2.3, reflected XSS was possible on several pages.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31912
Published: 2021-05-11
Description: In JetBrains TeamCity before 2020.2.3, account takeover was potentially possible during a password reset.
CVSS Score: 8.8 (HIGH)
CWE: CWE-640
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31913
Published: 2021-05-11
Description: In JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during GitHub SSO token exchange.
CVSS Score: 7.5 (HIGH)
CWE: CWE-354
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31914
Published: 2021-05-11
Description: In JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was possible.
CVSS Score: 9.8 (CRITICAL)
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-31915
Published: 2021-05-11
Description: In JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was possible.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/; https://blog.jetbrains.com
CVE: CVE-2021-21990
Published: 2021-05-11
Description: VMware Workspace one UEM console (2102 prior to 21.2.0.8, 2101 prior to 21.1.0.14, 2011 prior to 20.11.0.27, 2010 prior to 20.10.0.16,2008 prior to 20.8.0.28, 2007 prior to 20.7.0.14,2006 prior to 20.6.0.19, 2005 prior to 20.5.0.46, 2004 prior to 20.4.0.21, 2003 prior to 20.3.0.23, 2001 prior to 20.1.0.32, 1912 prior to 19.12.0.24) contain a cross-site scripting vulnerability. VMware Workspace ONE UEM console does not validate incoming requests during device enrollment after leading to rendering of unsanitized input on the user device in response.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://herolab.usd.de/security-advisories/usd-2021-0008/; https://www.vmware.com/security/advisories/VMSA-2021-0008.html; https://herolab.usd.de/security-advisories/usd-2021-0008/
CVE: CVE-2021-32560
Published: 2021-05-11
Description: The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/OctoPrint/OctoPrint/releases/tag/1.6.0; https://octoprint.org/blog/2021/04/27/new-release-1.6.0/; https://www.brzozowski.io/web-applications/2021/05/11/the-insecure-story-of-octoprint.html
CVE: CVE-2021-32561
Published: 2021-05-11
Description: OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/OctoPrint/OctoPrint/releases/tag/1.6.0; https://octoprint.org/blog/2021/04/27/new-release-1.6.0/; https://www.brzozowski.io/web-applications/2021/05/11/the-insecure-story-of-octoprint.html
CVE: CVE-2020-20265
Published: 2021-05-11
Description: Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /ram/pckg/wireless/nova/bin/wireless process. An authenticated remote attacker can cause a Denial of Service due via a crafted packet.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2021/May/12; https://seclists.org/fulldisclosure/2021/May/11; http://seclists.org/fulldisclosure/2021/May/12
CVE: CVE-2020-20267
Published: 2021-05-11
Description: Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/resolver process. An authenticated remote attacker can cause a Denial of Service due to invalid memory access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2021/May/12; http://seclists.org/fulldisclosure/2021/May/12
CVE: CVE-2021-21648
Published: 2021-05-11
Description: Jenkins Credentials Plugin 2.3.18 and earlier does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2349; https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2349
CVE: CVE-2021-21649
Published: 2021-05-11
Description: Jenkins Dashboard View Plugin 2.15 and earlier does not escape URLs referenced in Image Dashboard Portlets, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2233; https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2233
CVE: CVE-2021-21650
Published: 2021-05-11
Description: Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP endpoints and API models, allowing attackers with Item/Read permission to obtain information about artifacts uploaded to S3, if the optional Run/Artifacts permission is enabled.
CVSS Score: 4.3 (MEDIUM)
References: https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2200; https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2200
CVE: CVE-2021-21651
Published: 2021-05-11
Description: Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obtain the list of configured profiles.
CVSS Score: 4.3 (MEDIUM)
References: https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2201; https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2201
CVE: CVE-2021-21652
Published: 2021-05-11
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2251%20%281%29; https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2251%20%281%29
CVE: CVE-2021-21653
Published: 2021-05-11
Description: Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not perform a permission check in an HTTP endpoint, allowing with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
References: https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2251%20%282%29; https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2251%20%282%29
CVE: CVE-2021-21654
Published: 2021-05-11
Description: Jenkins P4 Plugin 1.11.4 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified Perforce server using attacker-specified username and password.
CVSS Score: 4.3 (MEDIUM)
References: https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2327; https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2327
CVE: CVE-2021-21655
Published: 2021-05-11
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified Perforce server using attacker-specified username and password.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2327; https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2327
CVE: CVE-2021-21656
Published: 2021-05-11
Description: Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVSS Score: 7.1 (HIGH)
References: https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2335; https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2335
CVE: CVE-2021-27611
Published: 2021-05-11
Description: SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-94
References: https://launchpad.support.sap.com/#/notes/3046610; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655; https://launchpad.support.sap.com/#/notes/3046610
CVE: CVE-2021-27612
Published: 2021-05-11
Description: In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific malicious website which could contain malware or might lead to phishing attacks to steal credentials of the victim.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://launchpad.support.sap.com/#/notes/3023078; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655; https://launchpad.support.sap.com/#/notes/3023078
CVE: CVE-2021-27613
Published: 2021-05-11
Description: Under certain conditions, SAP Business One Chef cookbook, version - 9.2, 9.3, 10.0, used to install SAP Business One, allows an attacker to exploit an insecure temporary folder for incoming & outgoing payroll data and to access information which would otherwise be restricted, which could lead to Information Disclosure and highly impact system confidentiality, integrity and availability.
CVSS Score: 7.8 (HIGH)
References: https://launchpad.support.sap.com/#/notes/3049755; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655; https://launchpad.support.sap.com/#/notes/3049755
CVE: CVE-2021-27614
Published: 2021-05-11
Description: SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One on SAP HANA, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application thereby highly impacting the integrity and availability of the application.
CVSS Score: 7.1 (HIGH)
CWE: CWE-74
References: https://launchpad.support.sap.com/#/notes/3049661; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655; https://launchpad.support.sap.com/#/notes/3049661
CVE: CVE-2021-27616
Published: 2021-05-11
Description: Under certain conditions, SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One for SAP HANA, allows an attacker to exploit an insecure temporary backup path and to access information which would otherwise be restricted, resulting in Information Disclosure vulnerability highly impacting the confidentiality, integrity and availability of the application.
CVSS Score: 7.8 (HIGH)
References: https://launchpad.support.sap.com/#/notes/3049661; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655; https://launchpad.support.sap.com/#/notes/3049661
CVE: CVE-2021-27617
Published: 2021-05-11
Description: The Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document uploaded from local source. An attacker can craft a malicious XML which when uploaded and parsed by the application, could lead to Denial-of-service conditions due to consumption of a large amount of system memory, thus highly impacting system availability.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3012021; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655; https://launchpad.support.sap.com/#/notes/3012021
CVE: CVE-2021-27618
Published: 2021-05-11
Description: The Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not check the file type extension of the file uploaded from local source. An attacker could craft a malicious file and upload it to the application, which could lead to denial of service and impact the availability of the application.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-434
References: https://launchpad.support.sap.com/#/notes/3012021; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655; https://launchpad.support.sap.com/#/notes/3012021
CVE: CVE-2021-27619
Published: 2021-05-11
Description: SAP Commerce (Backoffice Search), versions - 1808, 1811, 1905, 2005, 2011, allows a low privileged user to search for attributes which are not supposed to be displayed to them. Although the search results are masked, the user can iteratively enter one character at a time to search and determine the masked attribute value thereby leading to information disclosure.
CVSS Score: 6.5 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/3039818; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655; https://launchpad.support.sap.com/#/notes/3039818
CVE: CVE-2021-29471
Published: 2021-05-11
Description: Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.33.2 "Push rules" can specify conditions under which they will match, including `event_match`, which matches event content against a pattern including wildcards. Certain patterns can cause very poor performance in the matching engine, leading to a denial-of-service when processing moderate length events. The issue is patched in version 1.33.2. A potential workaround might be to prevent users from making custom push rules, by blocking such requests at a reverse-proxy.
CVSS Score: 3.7 (LOW)
CWE: CWE-400, CWE-331
References: https://github.com/matrix-org/synapse/commit/03318a766cac9f8b053db2214d9c332a977d226c; https://github.com/matrix-org/synapse/releases/tag/v1.33.2; https://github.com/matrix-org/synapse/security/advisories/GHSA-x345-32rc-8h85
CVE: CVE-2021-31537
Published: 2021-05-11
Description: SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php (affected parameters are config, version, win, db, pwd, and user) and /rewe/prod/web/rewe_go_check.php (version and all other parameters).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2021/May/20; https://sec-consult.com/vulnerability-lab/advisory/reflected-xss-sis-infromatik-rewe-go-cve-2021-31537/; https://sisinformatik.com/rewe-go/
CVE: CVE-2020-4535
Published: 2021-05-11
Description: IBM OpenPages GRC Platform 8.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182906.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/182906; https://www.ibm.com/support/pages/node/6451243; https://exchange.xforce.ibmcloud.com/vulnerabilities/182906
CVE: CVE-2020-4536
Published: 2021-05-11
Description: IBM OpenPages GRC Platform 8.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 182907.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/182907; https://www.ibm.com/support/pages/node/6451239; https://exchange.xforce.ibmcloud.com/vulnerabilities/182907
CVE: CVE-2021-29508
Published: 2021-05-11
Description: Due to how Wire handles type information in its serialization format, malicious payloads can be passed to a deserializer. e.g. using a surrogate on the sender end, an attacker can pass information about a different type for the receiving end. And by doing so allowing the serializer to create any type on the deserializing end. This is the same issue that exists for .NET BinaryFormatter https://docs.microsoft.com/en-us/visualstudio/code-quality/ca2300?view=vs-2019. This also applies to the fork of Wire.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-502
References: https://github.com/AsynkronIT/Wire/security/advisories/GHSA-hpw7-3vq3-mmv6; https://www.nuget.org/packages/Wire/; https://github.com/AsynkronIT/Wire/security/advisories/GHSA-hpw7-3vq3-mmv6
CVE: CVE-2021-29509
Published: 2021-05-11
Description: Puma is a concurrent HTTP 1.1 server for Ruby/Rack applications. The fix for CVE-2019-16770 was incomplete. The original fix only protected existing connections that had already been accepted from having their requests starved by greedy persistent-connections saturating all threads in the same process. However, new connections may still be starved by greedy persistent-connections saturating all threads in all processes in the cluster. A `puma` server which received more concurrent `keep-alive` connections than the server had threads in its threadpool would service only a subset of connections, denying service to the unserved connections. This problem has been fixed in `puma` 4.3.8 and 5.3.1. Setting `queue_requests false` also fixes the issue. This is not advised when using `puma` without a reverse proxy, such as `nginx` or `apache`, because you will open yourself to slow client attacks (e.g. slowloris). The fix is very small and a git patch is available for those using unsupported versions of Puma.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-667
References: https://gist.github.com/nateberkopec/4b3ea5676c0d70cbb37c82d54be25837; https://github.com/puma/puma/security/advisories/GHSA-q28m-8xjw-8vr5; https://github.com/puma/puma/security/policy
CVE: CVE-2021-32573
Published: 2021-05-11
Description: The express-cart package through 1.1.10 for Node.js allows Reflected XSS (for an admin) via a user input field for product options. NOTE: the vendor states that this "would rely on an admin hacking his/her own website.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://hackerone.com/reports/395944; https://hackerone.com/reports/395944
CVE: CVE-2020-18964
Published: 2021-05-11
Description: Cross Site Request Forgery (CSRF) Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/saysky/ForestBlog/issues/20; https://github.com/saysky/ForestBlog/issues/20