deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-8088
Published: 2020-01-27
Description: panel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.
CVSS Score: 9.8 (CRITICAL)
References: https://xavibel.com/2020/01/22/usebb-forum-php-type-juggling-vulnerability/; https://xavibel.com/2020/01/22/usebb-forum-php-type-juggling-vulnerability/
CVE: CVE-2020-5218
Published: 2020-01-27
Description: Affected versions of Sylius give attackers the ability to switch channels via the _channel_code GET parameter in production environments. This was meant to be enabled only when kernel.debug is set to true. However, if no sylius_channel.debug is set explicitly in the configuration, the default value which is kernel.debug will be not resolved and cast to boolean, enabling this debug feature even if that parameter is set to false. Patch has been provided for Sylius 1.3.x and newer - 1.3.16, 1.4.12, 1.5.9, 1.6.5. Versions older than 1.3 are not covered by our security support anymore.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-444, CWE-444
References: https://github.com/FriendsOfPHP/security-advisories/blob/master/sylius/resource-bundle/CVE-2020-5220.yaml; https://github.com/Sylius/SyliusResourceBundle/security/advisories/GHSA-8vp7-j5cj-vvm2; https://github.com/FriendsOfPHP/security-advisories/blob/master/sylius/resource-bundle/CVE-2020-5220.yaml
CVE: CVE-2020-5220
Published: 2020-01-27
Description: Sylius ResourceBundle accepts and uses any serialisation groups to be passed via a HTTP header. This might lead to data exposure by using an unintended serialisation group - for example it could make Shop API use a more permissive group from Admin API. Anyone exposing an API with ResourceBundle's controller is affected. The vulnerable versions are: <1.3 || >=1.3.0 <=1.3.12 || >=1.4.0 <=1.4.5 || >=1.5.0 <=1.5.0 || >=1.6.0 <=1.6.2. The patch is provided for Sylius ResourceBundle 1.3.13, 1.4.6, 1.5.1 and 1.6.3, but not for any versions below 1.3.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-444, CWE-200
References: https://github.com/FriendsOfPHP/security-advisories/blob/master/sylius/resource-bundle/CVE-2020-5220.yaml; https://github.com/Sylius/SyliusResourceBundle/security/advisories/GHSA-8vp7-j5cj-vvm2; https://github.com/FriendsOfPHP/security-advisories/blob/master/sylius/resource-bundle/CVE-2020-5220.yaml
CVE: CVE-2012-6448
Published: 2020-01-27
Description: Cross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/38153; https://www.exploit-db.com/exploits/38153
CVE: CVE-2013-2267
Published: 2020-01-27
Description: PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/58845; https://exchange.xforce.ibmcloud.com/vulnerabilities/83229; http://www.securityfocus.com/bid/58845
CVE: CVE-2013-2474
Published: 2020-01-27
Description: Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/24906; http://www.securityfocus.com/bid/58753; https://exchange.xforce.ibmcloud.com/vulnerabilities/83062
CVE: CVE-2013-2499
Published: 2020-01-27
Description: SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'user_manager.php' via spoofing a cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2013/04/17/1; http://www.securityfocus.com/bid/59255; https://exchange.xforce.ibmcloud.com/vulnerabilities/83629
CVE: CVE-2013-2612
Published: 2020-01-27
Description: Command-injection vulnerability in Huawei E587 3G Mobile Hotspot 11.203.27 allows remote attackers to execute arbitrary shell commands with root privileges due to an error in the Web UI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/85782; https://www.securityfocus.com/bid/61167/info; https://exchange.xforce.ibmcloud.com/vulnerabilities/85782
CVE: CVE-2020-8090
Published: 2020-01-27
Description: The Username field in the Storage Service settings of A1 WLAN Box ADB VV2220v2 devices allows stored XSS (after a successful Administrator login).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://sku11army.blogspot.com/2020/01/a1-modem-wlan-box-adb-vv2220.html; https://sku11army.blogspot.com/2020/01/a1-modem-wlan-box-adb-vv2220.html
CVE: CVE-2020-8091
Published: 2020-01-27
Description: svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. This may be at a contrib/websvg/svg.swf pathname.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://typo3.org/security/advisory/typo3-psa-2019-003/; https://www.purplemet.com/blog/typo3-xss-vulnerability; https://typo3.org/security/advisory/typo3-psa-2019-003/
CVE: CVE-2019-13519
Published: 2020-01-27
Description: A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena Simulation Software to address the reported vulnerabilities.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://www.us-cert.gov/ics/advisories/icsa-19-213-05; https://www.zerodayinitiative.com/advisories/ZDI-19-802/; https://www.us-cert.gov/ics/advisories/icsa-19-213-05
CVE: CVE-2019-13521
Published: 2020-01-27
Description: A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena Simulation Software to address the reported vulnerabilities.
CVSS Score: 7.8 (HIGH)
CWE: CWE-357
References: https://www.us-cert.gov/ics/advisories/icsa-19-213-05; https://www.zerodayinitiative.com/advisories/ZDI-19-799/; https://www.us-cert.gov/ics/advisories/icsa-19-213-05
CVE: CVE-2019-20440
Published: 2020-01-28
Description: An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the update API documentation feature of the API Publisher.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2019-20440-wso2.html; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0646; https://github.com/cybersecurityworks/Disclosed/issues/24
CVE: CVE-2019-20441
Published: 2020-01-28
Description: An issue was discovered in WSO2 API Manager 2.6.0. A potential Stored Cross-Site Scripting (XSS) vulnerability has been identified in the 'implement phase' of the API Publisher.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2019-20441-wso2.html; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0647; https://github.com/cybersecurityworks/Disclosed/issues/23
CVE: CVE-2019-20442
Published: 2020-01-28
Description: An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. A potential stored Cross-Site Scripting (XSS) vulnerability in roleToAuthorize has been identified in the registry UI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2019-20442-wso2.html; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0636; https://github.com/cybersecurityworks/Disclosed/issues/25
CVE: CVE-2019-20443
Published: 2020-01-28
Description: An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. A potential stored Cross-Site Scripting (XSS) vulnerability in mediaType has been identified in the registry UI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2019-20443-wso2.html; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0636; https://github.com/cybersecurityworks/Disclosed/issues/26
CVE: CVE-2019-7131
Published: 2020-01-28
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]4 and earlier, 2[PII_REDACTED]4 and earlier, 2[PII_REDACTED]0 and earlier version, and 2[PII_REDACTED]1 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-843
References: https://helpx.adobe.com/security/products/acrobat/apsb19-02.html; https://helpx.adobe.com/security/products/acrobat/apsb19-02.html
CVE: CVE-2019-8257
Published: 2020-01-28
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]5 and earlier, 2[PII_REDACTED]5 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]7 and earlier, and 2[PII_REDACTED]8 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-41.html; https://helpx.adobe.com/security/products/acrobat/apsb19-41.html
CVE: CVE-2019-10770
Published: 2020-01-28
Description: All versions of io.ratpack:ratpack-core from 0.9.10 inclusive and before 1.7.6 are vulnerable to Cross-site Scripting (XSS). This affects the development mode error handler when an exception message contains untrusted data. Note the production mode error handler is not vulnerable - so for this to be utilized in production it would require users to not disable development mode.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://snyk.io/vuln/SNYK-JAVA-IORATPACK-534882; https://snyk.io/vuln/SNYK-JAVA-IORATPACK-534882
CVE: CVE-2019-10779
Published: 2020-01-28
Description: All versions of stroom:stroom-app before 5.5.12 and all versions of the 6.0.0 branch before 6.0.25 are affected by Cross-site Scripting. An attacker website is able to load the Stroom UI into a hidden iframe. Using that iframe, the attacker site can issue commands to the Stroom UI via an XSS vulnerability to take full control of the Stroom UI on behalf of the logged-in user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://snyk.io/vuln/SNYK-JAVA-STROOM-541182; https://snyk.io/vuln/SNYK-JAVA-STROOM-541182
CVE: CVE-2019-17651
Published: 2020-01-28
Description: An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious JavaScript code into the description field of a Device Maintenance schedule.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/psirt/FG-IR-19-197; https://fortiguard.com/psirt/FG-IR-19-197
CVE: CVE-2019-20434
Published: 2020-01-28
Description: An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Datasource creation page of the Management Console.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2019-20434-wso2.html; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0616; https://github.com/cybersecurityworks/Disclosed/issues/17
CVE: CVE-2019-20435
Published: 2020-01-28
Description: An issue was discovered in WSO2 API Manager 2.6.0. A reflected XSS attack could be performed in the inline API documentation editor page of the API Publisher by sending an HTTP GET request with a harmful docName request parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2019-20435-wso2.html; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0633; https://github.com/cybersecurityworks/Disclosed/issues/18
CVE: CVE-2019-20436
Published: 2020-01-28
Description: An issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. If there is a claim dialect configured with an XSS payload in the dialect URI, and a user picks up this dialect's URI and adds it as the service provider claim dialect while configuring the service provider, that payload gets executed. The attacker also needs to have privileges to log in to the management console, and to add and configure claim dialects.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2019-20436-wso2.html; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0634; https://github.com/cybersecurityworks/Disclosed/issues/19
CVE: CVE-2019-20437
Published: 2020-01-28
Description: An issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. When a custom claim dialect with an XSS payload is configured in the identity provider basic claim configuration, that payload gets executed, if a user picks up that dialect's URI as the provisioning claim in the advanced claim configuration of the same Identity Provider. The attacker also needs to have privileges to log in to the management console, and to add and update identity provider configurations.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2019-20437-wso2.html; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0635; https://github.com/cybersecurityworks/Disclosed/issues/20
CVE: CVE-2019-20438
Published: 2020-01-28
Description: An issue was discovered in WSO2 API Manager 2.6.0. A potential stored Cross-Site Scripting (XSS) vulnerability has been identified in the inline API documentation editor page of the API Publisher.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2019-20438-wso2.html; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0645; https://github.com/cybersecurityworks/Disclosed/issues/22
CVE: CVE-2019-20439
Published: 2020-01-28
Description: An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in defining a scope in the "manage the API" page of the API Publisher.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2019-20439-wso2.html; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0644; https://github.com/cybersecurityworks/Disclosed/issues/21
CVE: CVE-2020-0548
Published: 2020-01-28
Description: Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00016.html; https://lists.debian.org/debian-lts-announce/2020/06/msg00019.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DT2VKDMQ3I37NBNJ256A2EXR7OJHXXKZ/
CVE: CVE-2020-0549
Published: 2020-01-28
Description: Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00016.html; https://kc.mcafee.com/corporate/index?page=content&id=SB10318; https://lists.debian.org/debian-lts-announce/2020/06/msg00019.html
CVE: CVE-2020-1928
Published: 2020-01-28
Description: An information disclosure vulnerability was found in Apache NiFi 1.10.0. The sensitive parameter parser would log parsed values for debugging purposes. This would expose literal values entered in a sensitive property when no parameter was present.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532
References: https://lists.apache.org/thread.html/r17aaa3a05b5b7fe9075613dd0c681efa60a4f8c8fbad152c61371b6e%40%3Cusers.tomcat.apache.org%3E; https://lists.apache.org/thread.html/r38a5b7943b9a62ecb853acc22ef08ff586a7b3c66e08f949f0396ab1%40%3Cusers.tomcat.apache.org%3E; https://lists.apache.org/thread.html/rd50baccd1bbb96c2327d5a8caa25a49692b3d68d96915bd1cfbb9f8b%40%3Cusers.tomcat.apache.org%3E
CVE: CVE-2020-1932
Published: 2020-01-28
Description: An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1. Authenticated Apache Superset users are able to retrieve other users' information, including hashed passwords, by accessing an unused and undocumented API endpoint on Apache Superset.
CVSS Score: 6.5 (MEDIUM)
References: https://lists.apache.org/thread.html/r4e5323c3bc[PII_REDACTED]11a6ff53ac6d990b2c7eb52941a1a13ce227%40%3Cdev.superset.apache.org%3E; https://lists.apache.org/thread.html/r4e5323c3bc[PII_REDACTED]11a6ff53ac6d990b2c7eb52941a1a13ce227%40%3Cdev.superset.apache.org%3E
CVE: CVE-2020-1933
Published: 2020-01-28
Description: A XSS vulnerability was found in Apache NiFi 1.0.0 to 1.10.0. Malicious scripts could be injected to the UI through action by an unaware authenticated user in Firefox. Did not appear to occur in other browsers.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://nifi.apache.org/security.html#CVE-2020-1933; https://nifi.apache.org/security.html#CVE-2020-1933
CVE: CVE-2019-15578
Published: 2020-01-28
Description: An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). The path of a private project, that used to be public, would be disclosed in the unsubscribe email link of issues and merge requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/; https://hackerone.com/reports/650574; https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/
CVE: CVE-2019-15579
Published: 2020-01-28
Description: An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) where the assignee(s) of a confidential issue in a private project would be disclosed to a guest via milestones.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/; https://hackerone.com/reports/635516; https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/
CVE: CVE-2019-15581
Published: 2020-01-28
Description: An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a project owner or maintainer to see the members of any private group via merge request approval rules.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/; https://hackerone.com/reports/518995; https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/
CVE: CVE-2019-15582
Published: 2020-01-28
Description: An IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a maintainer to add any private group to a protected environment.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/; https://hackerone.com/reports/566216; https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/
CVE: CVE-2019-15583
Published: 2020-01-28
Description: An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). When an issue was moved to a public project from a private one, the associated private labels and the private project namespace would be disclosed through the GitLab API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-200
References: https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/; https://hackerone.com/reports/643854; https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/
CVE: CVE-2019-15585
Published: 2020-01-28
Description: Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) in the GitLab SAML integration had a validation issue that permitted an attacker to takeover another user's account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/; https://hackerone.com/reports/471323; https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/
CVE: CVE-2019-15586
Published: 2020-01-28
Description: A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/; https://hackerone.com/reports/645043; https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/
CVE: CVE-2019-15590
Published: 2020-01-28
Description: An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edition (EE) where private merge requests and issues would be disclosed with the Group Search feature provided by Elasticsearch integration
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://about.gitlab.com/releases/2019/10/07/security-release-gitlab-12-dot-3-dot-5-released/; https://hackerone.com/reports/701144; https://about.gitlab.com/releases/2019/10/07/security-release-gitlab-12-dot-3-dot-5-released/
CVE: CVE-2019-15607
Published: 2020-01-28
Description: A stored XSS vulnerability is present within node-red (version: <= 0.20.7) npm package, which is a visual tool for wiring the Internet of Things. This issue will allow the attacker to steal session cookies, deface web applications, etc.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/681986; https://hackerone.com/reports/681986
CVE: CVE-2019-5462
Published: 2020-01-28
Description: A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has changed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-613
References: https://about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/58312; https://hackerone.com/reports/495282
CVE: CVE-2019-5464
Published: 2020-01-28
Description: A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is utilized.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-918
References: https://about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/63959; https://hackerone.com/reports/632101
CVE: CVE-2019-5465
Published: 2020-01-28
Description: An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly created issue ID.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/62070; https://hackerone.com/reports/584534
CVE: CVE-2019-5466
Published: 2020-01-28
Description: An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/59809; https://hackerone.com/reports/507113