deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-4056
Published: 2019-02-05
Description: An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially crafted username can cause an SQL injection, resulting in authentication bypass, which could give access to the TURN server administrator web portal. An attacker can log in via the external interface of the TURN server to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://lists.debian.org/debian-lts-announce/2019/02/msg00017.html; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0730; https://www.debian.org/security/2019/dsa-4373
CVE: CVE-2019-6591
Published: 2019-02-05
Description: On BIG-IP APM 14.0.0 to 14.0.0.4, 13.0.0 to 13.1.1.3 and 12.1.0 to 12.1.3.7, a reflected cross-site scripting (XSS) vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://support.f5.com/csp/article/K32840424; https://support.f5.com/csp/article/K32840424
CVE: CVE-2019-7412
Published: 2019-02-05
Description: The PS PHPCaptcha WP plugin before v1.2.0 for WordPress mishandles sanitization of input values.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://metamorfosec.com/Files/Advisories/METS-2019-003-Denial_of_Service_in_PS_PHPCaptcha_WP_before_v1.2.0.txt; https://wordpress.org/plugins/ps-phpcaptcha/#developers; https://metamorfosec.com/Files/Advisories/METS-2019-003-Denial_of_Service_in_PS_PHPCaptcha_WP_before_v1.2.0.txt
CVE: CVE-2019-7413
Published: 2019-02-05
Description: In the Parallax Scroll (aka adamrob-parallax-scroll) plugin before 2.1 for WordPress, includes/adamrob-parralax-shortcode.php allows XSS via the title text. ("parallax" has a spelling change within the PHP filename.)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://metamorfosec.com/Files/Advisories/METS-2019-004-A_XSS_Vulnerability_in_Parallax_Scroll_plugin_before_v2.1_for_WordPress.txt; https://plugins.trac.wordpress.org/changeset/2024194/; https://metamorfosec.com/Files/Advisories/METS-2019-004-A_XSS_Vulnerability_in_Parallax_Scroll_plugin_before_v2.1_for_WordPress.txt
CVE: CVE-2019-6535
Published: 2019-02-05
Description: Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash and disruption to USB communication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: http://www.securityfocus.com/bid/106771; https://www.cisa.gov/news-events/ics-advisories/icsa-19-029-02; http://www.securityfocus.com/bid/106771
CVE: CVE-2019-6590
Published: 2019-02-05
Description: On BIG-IP LTM 13.0.0 to 13.0.1 and 12.1.0 to 12.1.3.6, under certain conditions, the TMM may consume excessive resources when processing SSL Session ID Persistence traffic.
CVSS Score: 5.9 (MEDIUM)
References: http://www.securityfocus.com/bid/106942; https://support.f5.com/csp/article/K55101404; http://www.securityfocus.com/bid/106942
CVE: CVE-2018-20250
Published: 2019-02-05
Description: In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path.
CVSS Score: 7.8 (HIGH)
CWE: CWE-36, CWE-22
References: http://packetstormsecurity.com/files/152618/RARLAB-WinRAR-ACE-Format-Input-Validation-Remote-Code-Execution.html; http://www.rapid7.com/db/modules/exploit/windows/fileformat/winrar_ace; http://www.securityfocus.com/bid/106948
CVE: CVE-2018-20251
Published: 2019-02-05
Description: In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format. The UNACE module (UNACEV2.dll) creates files and folders as written in the filename field even when WinRAR validator noticed the traversal attempt and requestd to abort the extraction process. the operation is cancelled only after the folders and files were created but prior to them being written, therefore allowing the attacker to create empty files and folders everywhere in the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-693, CWE-22
References: http://www.securityfocus.com/bid/106948; https://research.checkpoint.com/extracting-code-execution-from-winrar/; https://www.win-rar.com/whatsnew.html
CVE: CVE-2018-20252
Published: 2019-02-05
Description: In WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability during parsing of crafted ACE and RAR archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://www.securityfocus.com/bid/106948; https://research.checkpoint.com/extracting-code-execution-from-winrar/; https://www.win-rar.com/whatsnew.html
CVE: CVE-2018-8791
Published: 2019-02-05
Description: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that results in an information leak.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html; http://www.securityfocus.com/bid/106938; https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
CVE: CVE-2018-8792
Published: 2019-02-05
Description: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html; http://www.securityfocus.com/bid/106938; https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
CVE: CVE-2018-8793
Published: 2019-02-05
Description: rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function cssp_read_tsrequest() that results in a memory corruption and probably even a remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html; http://www.securityfocus.com/bid/106938; https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
CVE: CVE-2018-8794
Published: 2019-02-05
Description: rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in function process_bitmap_updates() and results in a memory corruption and possibly even a remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-680, CWE-190, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html; http://www.securityfocus.com/bid/106938; https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
CVE: CVE-2018-8795
Published: 2019-02-05
Description: rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in function process_bitmap_updates() and results in a memory corruption and probably even a remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-680, CWE-190, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html; http://www.securityfocus.com/bid/106938; https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
CVE: CVE-2018-8796
Published: 2019-02-05
Description: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_bitmap_updates() that results in a Denial of Service (segfault).
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html; http://www.securityfocus.com/bid/106938; https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
CVE: CVE-2018-8797
Published: 2019-02-05
Description: rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function process_plane() that results in a memory corruption and probably even a remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html; http://www.securityfocus.com/bid/106938; https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
CVE: CVE-2018-8798
Published: 2019-02-05
Description: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() that results in an information leak.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html; http://www.securityfocus.com/bid/106938; https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
CVE: CVE-2018-8799
Published: 2019-02-05
Description: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order() that results in a Denial of Service (segfault).
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html; http://www.securityfocus.com/bid/106938; https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
CVE: CVE-2018-8800
Published: 2019-02-05
Description: rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function ui_clip_handle_data() that results in a memory corruption and probably even a remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html; http://www.securityfocus.com/bid/106938; https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
CVE: CVE-2018-18500
Published: 2019-02-05
Description: A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html; http://www.securityfocus.com/bid/106781; https://access.redhat.com/errata/RHSA-2019:0218
CVE: CVE-2018-18501
Published: 2019-02-05
Description: Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html; http://www.securityfocus.com/bid/106781; https://access.redhat.com/errata/RHSA-2019:0218
CVE: CVE-2018-18502
Published: 2019-02-05
Description: Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 65.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/106773; https://usn.ubuntu.com/3874-1/; https://www.mozilla.org/security/advisories/mfsa2019-01/
CVE: CVE-2018-18503
Published: 2019-02-05
Description: When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some situations. This vulnerability affects Firefox < 65.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/106773; https://usn.ubuntu.com/3874-1/; https://www.mozilla.org/security/advisories/mfsa2019-01/
CVE: CVE-2018-18504
Published: 2019-02-05
Description: A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during graphic operations. This results is a potentially exploitable crash and the possibility of reading from the memory of the freed buffers. This vulnerability affects Firefox < 65.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://www.securityfocus.com/bid/106773; https://usn.ubuntu.com/3874-1/; https://www.mozilla.org/security/advisories/mfsa2019-01/
CVE: CVE-2018-18505
Published: 2019-02-05
Description: An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the authentication not being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-287
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html; http://www.securityfocus.com/bid/106781; https://access.redhat.com/errata/RHSA-2019:0218
CVE: CVE-2018-18506
Published: 2019-02-05
Description: When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.
CVSS Score: 5.9 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00043.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00023.html
CVE: CVE-2019-6519
Published: 2019-02-05
Description: WebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a possible authentication bypass allowing an attacker to upload malicious data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/106722; https://ics-cert.us-cert.gov/advisories/ICSA-19-024-01; http://www.securityfocus.com/bid/106722
CVE: CVE-2019-6521
Published: 2019-02-05
Description: WebAccess/SCADA, Version 8.3. Specially crafted requests could allow a possible authentication bypass that could allow an attacker to obtain and manipulate sensitive information.
CVSS Score: 8.6 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/106722; https://ics-cert.us-cert.gov/advisories/ICSA-19-024-01; http://www.securityfocus.com/bid/106722
CVE: CVE-2019-6523
Published: 2019-02-05
Description: WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/106722; https://ics-cert.us-cert.gov/advisories/ICSA-19-024-01; http://www.securityfocus.com/bid/106722
CVE: CVE-2018-18333
Published: 2019-02-05
Description: A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL and escalate privileges on vulnerable installations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://esupport.trendmicro.com/en-us/home/pages/technical-support/1121932.aspx; https://gaissecurity.com/yazi/discovery-of-dll-hijack-on-trend-micro-antivirusplus-cve-2018-18333; https://kaganisildak.com/2019/01/17/discovery-of-dll-hijack-on-trend-micro-antivirus-cve-2018-18333/
CVE: CVE-2018-18334
Published: 2019-02-05
Description: A vulnerability in the Private Browser of Trend Micro Dr. Safety for Android (Consumer) versions below 3.0.1478 could allow an remote attacker to bypass the Same Origin Policy (SOP) and obtain sensitive information via crafted JavaScript code on vulnerable installations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://esupport.trendmicro.com/en-us/home/pages/technical-support/1121933.aspx; https://esupport.trendmicro.com/en-us/home/pages/technical-support/1121933.aspx
CVE: CVE-2018-3989
Published: 2019-02-05
Description: An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400).A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to trigger this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-908
References: http://www.securityfocus.com/bid/107005; https://cert-portal.siemens.com/productcert/pdf/ssa-760124.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-844562.pdf
CVE: CVE-2018-3990
Published: 2019-02-05
Description: An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400). A specially crafted IRP request can cause a buffer overflow, resulting in kernel memory corruption and, potentially, privilege escalation. An attacker can send an IRP request to trigger this vulnerability.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107005; https://cert-portal.siemens.com/productcert/pdf/ssa-760124.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-844562.pdf
CVE: CVE-2018-3991
Published: 2019-02-05
Description: An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigger this vulnerability.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/107005; https://cert-portal.siemens.com/productcert/pdf/ssa-760124.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-844562.pdf
CVE: CVE-2019-6504
Published: 2019-02-06
Description: Insufficient output sanitization in the Automic Web Interface (AWI), in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially conduct persistent cross site scripting (XSS) attacks via a crafted object.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106755; https://communities.ca.com/community/product-vulnerability-response/blog/2019/01/24/ca20190124-01-security-notice-for-ca-automic-workload-automation; https://marc.info/?l=bugtraq&m=[PII_REDACTED]0510&w=2
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-06
Description: A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.
CVSS Score: 8.8 (HIGH)
References: http://packetstormsecurity.com/files/166778/Jenkins-Remote-Code-Execution.html; https://access.redhat.com/errata/RHSA-2019:0739; https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1292
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-06
Description: A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.0 and earlier in src/main/java/hudson/plugins/groovy/StringScriptSource.java that allows attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1293; https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1293
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-06
Description: A cross-site request forgery vulnerability exists in Jenkins Warnings Plugin 5.0.0 and earlier in src/main/java/hudson/plugins/warnings/GroovyParser.java that allows attackers to execute arbitrary code via a form validation HTTP endpoint.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1295%20%281%29; https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1295%20%281%29
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-06
Description: A cross-site request forgery vulnerability exists in Jenkins Warnings Next Generation Plugin 2.1.1 and earlier in src/main/java/io/jenkins/plugins/analysis/warnings/groovy/GroovyParser.java that allows attackers to execute arbitrary code via a form validation HTTP endpoint.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1295%20%282%29; https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1295%20%282%29
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-06
Description: An improper certificate validation vulnerability exists in Jenkins Active Directory Plugin 2.10 and earlier in src/main/java/hudson/plugins/active_directory/ActiveDirectoryDomain.java, src/main/java/hudson/plugins/active_directory/ActiveDirectorySecurityRealm.java, src/main/java/hudson/plugins/active_directory/ActiveDirectoryUnixAuthenticationProvider.java that allows attackers to impersonate the Active Directory server Jenkins connects to for authentication if Jenkins is configured to use StartTLS.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: https://jenkins.io/security/advisory/2019-01-28/#SECURITY-859; https://jenkins.io/security/advisory/2019-01-28/#SECURITY-859
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-06
Description: A cross-site request forgery vulnerability exists in Jenkins Git Plugin 3.9.1 and earlier in src/main/java/hudson/plugins/git/GitTagAction.java that allows attackers to create a Git tag in a workspace and attach corresponding metadata to a build record.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://access.redhat.com/errata/RHBA-2019:0326; https://access.redhat.com/errata/RHBA-2019:0327; https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1095
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-06
Description: An information exposure and denial of service vulnerability exists in Jenkins Token Macro Plugin 2.5 and earlier in src/main/java/org/jenkinsci/plugins/tokenmacro/Parser.java, src/main/java/org/jenkinsci/plugins/tokenmacro/TokenMacro.java, src/main/java/org/jenkinsci/plugins/tokenmacro/impl/AbstractChangesSinceMacro.java, src/main/java/org/jenkinsci/plugins/tokenmacro/impl/ChangesSinceLastBuildMacro.java, src/main/java/org/jenkinsci/plugins/tokenmacro/impl/ProjectUrlMacro.java that allows attackers with the ability to control token macro input (such as SCM changelogs) to define recursive input that results in unexpected macro evaluation.
CVSS Score: 8.1 (HIGH)
CWE: CWE-674
References: https://access.redhat.com/errata/RHBA-2019:0326; https://access.redhat.com/errata/RHBA-2019:0327; https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1102