deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-22934
Published: 2021-08-16
Description: A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Connect Secure device in a load-balanced configuration to perform a buffer overflow via a malicious crafted web request.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120, CWE-120
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC
CVE: CVE-2021-22935
Published: 2021-08-16
Description: A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77, CWE-77
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC
CVE: CVE-2021-22936
Published: 2021-08-16
Description: A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack against an authenticated administrator via an unsanitized web parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC
CVE: CVE-2021-22937
Published: 2021-08-16
Description: A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write via a maliciously crafted archive uploaded in the administrator web interface.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC
CVE: CVE-2021-22938
Published: 2021-08-16
Description: A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter in the administrator web console.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77, CWE-77
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC
CVE: CVE-2021-22939
Published: 2021-08-16
Description: If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://hackerone.com/reports/1278254; https://lists.debian.org/debian-lts-announce/2022/10/msg00006.html
CVE: CVE-2021-22940
Published: 2021-08-16
Description: Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://hackerone.com/reports/1238162; https://lists.debian.org/debian-lts-announce/2022/10/msg00006.html
CVE: CVE-2021-32822
Published: 2021-08-16
Description: The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options a file disclosure vulnerability may be triggered in downstream applications. For an example PoC see the referenced GHSL-2021-020.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-538, CWE-94
References: https://securitylab.github.com/advisories/GHSL-2021-020-pillarjs-hbs/; https://securitylab.github.com/advisories/GHSL-2021-020-pillarjs-hbs/
CVE: CVE-2021-32825
Published: 2021-08-16
Description: bblfshd is an open source self-hosted server for source code parsing. In bblfshd before commit 4265465b9b6fb5663c30ee[PII_REDACTED]2066aad4 there is a "zipslip" vulnerability. The unsafe handling of symbolic links in an unpacking routine may enable attackers to read and/or write to arbitrary locations outside the designated target folder. This issue may lead to arbitrary file write (with same permissions as the program running the unpack operation) if the attacker can control the archive file. Additionally, if the attacker has read access to the unpacked files, he may be able to read arbitrary system files the parent process has permissions to read. For more details including a PoC see the referenced GHSL-2020-258.
CVSS Score: 2.7 (LOW)
CWE: CWE-23, CWE-59
References: https://github.com/bblfsh/bblfshd/commit/4265465b9b6fb5663c30ee[PII_REDACTED]2066aad4; https://github.com/bblfsh/bblfshd/pull/341; https://securitylab.github.com/advisories/GHSL-2020-258-zipslip-bblfshd/
CVE: CVE-2021-34641
Published: 2021-08-16
Description: The SEOPress WordPress plugin is vulnerable to Stored Cross-Site-Scripting via the processPut function found in the ~/src/Actions/Api/TitleDescriptionMeta.php file which allows authenticated attackers to inject arbitrary web scripts, in versions 5.0.0 - 5.0.3.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-seopress/tags/5.0.4/src/Actions/Api/TitleDescriptionMeta.php#L78; https://www.wordfence.com/blog/2021/08/xss-vulnerability-patched-in-seopress-affects-100000-sites/; https://plugins.trac.wordpress.org/browser/wp-seopress/tags/5.0.4/src/Actions/Api/TitleDescriptionMeta.php#L78
CVE: CVE-2021-34642
Published: 2021-08-16
Description: The Smart Email Alerts WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the api_key in the ~/views/settings.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.10.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/smart-email-alerts/trunk/views/settings.php#L38; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34642; https://plugins.trac.wordpress.org/browser/smart-email-alerts/trunk/views/settings.php#L38
CVE: CVE-2021-34643
Published: 2021-08-16
Description: The Skaut bazar WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the ~/skaut-bazar.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.3.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/skaut-bazar/tags/1.3.2/skaut-bazar.php#L657; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34643; https://plugins.trac.wordpress.org/browser/skaut-bazar/tags/1.3.2/skaut-bazar.php#L657
CVE: CVE-2021-34644
Published: 2021-08-16
Description: The Multiplayer Games WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the ~/multiplayergames.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.7.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/multiplayer-plugin/trunk/multiplayergames.php#L662; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34644; https://plugins.trac.wordpress.org/browser/multiplayer-plugin/trunk/multiplayergames.php#L662
CVE: CVE-2021-34649
Published: 2021-08-16
Description: The Simple Behance Portfolio WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the `dark` parameter in the ~/titan-framework/iframe-font-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/simple-behace-portfolio/trunk/titan-framework/iframe-font-preview.php#L141; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34649; https://plugins.trac.wordpress.org/browser/simple-behace-portfolio/trunk/titan-framework/iframe-font-preview.php#L141
CVE: CVE-2021-34651
Published: 2021-08-16
Description: The Scribble Maps WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the map parameter in the ~/includes/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/scribble-maps/trunk/includes/admin.php#L233; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34651; https://plugins.trac.wordpress.org/browser/scribble-maps/trunk/includes/admin.php#L233
CVE: CVE-2021-34652
Published: 2021-08-16
Description: The Media Usage WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the id parameter in the ~/mmu_admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.0.4.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/media-usage/trunk/mmu_admin.php#L91; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34652; https://plugins.trac.wordpress.org/browser/media-usage/trunk/mmu_admin.php#L91
CVE: CVE-2021-34653
Published: 2021-08-16
Description: The WP Fountain WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the ~/wp-fountain.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.5.9.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-fountain/trunk/wp-fountain.php#L123; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34653; https://plugins.trac.wordpress.org/browser/wp-fountain/trunk/wp-fountain.php#L123
CVE: CVE-2021-34654
Published: 2021-08-16
Description: The Custom Post Type Relations WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the cptr[name] parameter found in the ~/pages/admin-page.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/custom-post-type-relations/trunk/pages/admin-page.php#L60; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34654; https://plugins.trac.wordpress.org/browser/custom-post-type-relations/trunk/pages/admin-page.php#L60
CVE: CVE-2021-34655
Published: 2021-08-16
Description: The WP Songbook WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the url parameter found in the ~/inc/class.ajax.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.11.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-songbook/tags/2.0.11/inc/class.ajax.php#L21; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34655; https://plugins.trac.wordpress.org/browser/wp-songbook/tags/2.0.11/inc/class.ajax.php#L21
CVE: CVE-2021-34656
Published: 2021-08-16
Description: The 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the `vws_notice` function found in the ~/inc/requirements.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.2.7.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/webcam-2way-videochat/trunk/inc/requirements.php#L182; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34656; https://plugins.trac.wordpress.org/browser/webcam-2way-videochat/trunk/inc/requirements.php#L182
CVE: CVE-2021-34657
Published: 2021-08-16
Description: The 2TypoFR WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the text function found in the ~/vendor/Org_Heigl/Hyphenator/index.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.11.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/typofr/trunk/vendor/Org_Heigl/Hyphenator/index.php#L82; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34657; https://plugins.trac.wordpress.org/browser/typofr/trunk/vendor/Org_Heigl/Hyphenator/index.php#L82
CVE: CVE-2021-34658
Published: 2021-08-16
Description: The Simple Popup Newsletter WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the ~/simple-popup-newsletter.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.7.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/simple-popup-newsletter/trunk/simple-popup-newsletter.php#L319; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34658; https://plugins.trac.wordpress.org/browser/simple-popup-newsletter/trunk/simple-popup-newsletter.php#L319
CVE: CVE-2021-34659
Published: 2021-08-16
Description: The Plugmatter Pricing Table Lite WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the `email` parameter in the ~/license.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.32.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/plugmatter-pricing-table/trunk/license.php#L123; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34659; https://plugins.trac.wordpress.org/browser/plugmatter-pricing-table/trunk/license.php#L123
CVE: CVE-2021-34663
Published: 2021-08-16
Description: The jQuery Tagline Rotator WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the ~/jquery-tagline-rotator.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.1.5.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/jquery-tagline-rotator/trunk/jquery-tagline-rotator.php#L166; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34663; https://plugins.trac.wordpress.org/browser/jquery-tagline-rotator/trunk/jquery-tagline-rotator.php#L166
CVE: CVE-2021-34664
Published: 2021-08-16
Description: The Moova for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the lat parameter in the ~/Checkout/Checkout.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.5.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/moova-for-woocommerce/tags/3.5/Checkout/Checkout.php#L57; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34664; https://plugins.trac.wordpress.org/browser/moova-for-woocommerce/tags/3.5/Checkout/Checkout.php#L57
CVE: CVE-2021-34665
Published: 2021-08-16
Description: The WP SEO Tags WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the saq_txt_the_filter parameter in the ~/wp-seo-tags.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.2.7.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-seo-tags/trunk/wp-seo-tags.php#L378; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34665; https://plugins.trac.wordpress.org/browser/wp-seo-tags/trunk/wp-seo-tags.php#L378
CVE: CVE-2021-34666
Published: 2021-08-16
Description: The Add Sidebar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the add parameter in the ~/wp_sidebarMenu.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/sidebar-adder/tags/2.0.1/wp_sidebarMenu.php#L124; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34666; https://plugins.trac.wordpress.org/browser/sidebar-adder/tags/2.0.1/wp_sidebarMenu.php#L124
CVE: CVE-2021-34667
Published: 2021-08-16
Description: The Calendar_plugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of `$_SERVER['PHP_SELF']` in the ~/calendar.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/calendar-plugin/trunk/calendar.php#L86; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34667; https://plugins.trac.wordpress.org/browser/calendar-plugin/trunk/calendar.php#L86
CVE: CVE-2021-37707
Published: 2021-08-16
Description: Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a vulnerability that allows manipulation of product reviews via API. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/shopware/platform/commit/912b96de3b839c6c5525c98cbb58f537c2d838be; https://github.com/shopware/platform/security/advisories/GHSA-9f8f-574q-8jmf; https://github.com/shopware/platform/commit/912b96de3b839c6c5525c98cbb58f537c2d838be
CVE: CVE-2021-38315
Published: 2021-08-16
Description: The SP Project & Document Manager WordPress plugin is vulnerable to attribute-based Reflected Cross-Site Scripting via the from and to parameters in the ~/functions.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.25.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/sp-client-document-manager/trunk/functions.php?rev=2566007#L1186; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-38315; https://plugins.trac.wordpress.org/browser/sp-client-document-manager/trunk/functions.php?rev=2566007#L1186
CVE: CVE-2021-21859
Published: 2021-08-16
Description: An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. The stri_box_read function is used when processing atoms using the 'stri' FOURCC code. An attacker can convince a user to open a video to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-680, CWE-190
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1298; https://www.debian.org/security/2021/dsa-4966; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1298
CVE: CVE-2021-21860
Published: 2021-08-16
Description: An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an improper memory allocation resulting in a heap-based buffer overflow that causes memory corruption. The FOURCC code, 'trik', is parsed by the function within the library. An attacker can convince a user to open a video to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-680, CWE-681
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1298; https://www.debian.org/security/2021/dsa-4966; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1298
CVE: CVE-2021-21861
Published: 2021-08-16
Description: An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. When processing the 'hdlr' FOURCC code, a specially crafted MPEG-4 input can cause an improper memory allocation resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-680, CWE-681
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1298; https://www.debian.org/security/2021/dsa-4966; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1298
CVE: CVE-2021-37708
Published: 2021-08-16
Description: Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a command injection vulnerability in mail agent settings. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://github.com/shopware/platform/commit/82d8d1995f6ce9054323b2c3522b1b3cf04853aa; https://github.com/shopware/platform/security/advisories/GHSA-xh55-2fqp-p775; https://github.com/shopware/platform/commit/82d8d1995f6ce9054323b2c3522b1b3cf04853aa
CVE: CVE-2021-38608
Published: 2021-08-16
Description: Incorrect Access Control in Tranquil WAPT Enterprise - before 1.8.2.7373 and before 2.0.0.9450 allows guest OS users to escalate privileges via WAPT Agent.
CVSS Score: 7.8 (HIGH)
References: https://www.tranquil.it/en/manage-it-equipment/discover-wapt/; https://www.wapt.fr/fr/doc/wapt-security-bulletin.html; https://www.tranquil.it/en/manage-it-equipment/discover-wapt/
CVE: CVE-2021-32826
Published: 2021-08-16
Description: Proxyee-Down is open source proxy software. An attacker being able to provide an extension script (eg: through a MiTM attack or by hosting a malicious extension) may be able to run arbitrary commands on the system running Proxyee-Down. For more details including a PoC see the referenced GHSL-2021-053. As of the writing of this CVE there is currently no patched version.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://securitylab.github.com/advisories/GHSL-2021-053-proxyee-down/; https://securitylab.github.com/advisories/GHSL-2021-053-proxyee-down/
CVE: CVE-2021-32827
Published: 2021-08-16
Description: MockServer is open source software which enables easy mocking of any system you integrate with via HTTP or HTTPS. An attacker that can trick a victim into visiting a malicious site while running MockServer locally, will be able to run arbitrary code on the MockServer machine. With an overly broad default CORS configuration MockServer allows any site to send cross-site requests. Additionally, MockServer allows you to create dynamic expectations using Javascript or Velocity templates. Both engines may allow an attacker to execute arbitrary code on-behalf of MockServer. By combining these two issues (Overly broad CORS configuration + Script injection), an attacker could serve a malicious page so that if a developer running MockServer visits it, they will get compromised. For more details including a PoC see the referenced GHSL-2021-059.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74, CWE-79
References: https://securitylab.github.com/advisories/GHSL-2021-059-mockserver/; https://www.oracle.com/security-alerts/cpujan2022.html; https://securitylab.github.com/advisories/GHSL-2021-059-mockserver/
CVE: CVE-2021-21568
Published: 2021-08-16
Description: Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an insufficient logging vulnerability. An authenticated user with ISI_PRIV_LOGIN_PAPI could make un-audited and un-trackable configuration changes to settings that their roles have privileges to change.
CVSS Score: 4.3 (MEDIUM)
References: https://www.dell.com/support/kbdoc/000190408; https://www.dell.com/support/kbdoc/000190408
CVE: CVE-2021-21592
Published: 2021-08-16
Description: Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x improperly handle an exceptional condition. A remote low privileged user could potentially exploit this vulnerability, leading to unauthorized information disclosure.
CVSS Score: 3.1 (LOW)
CWE: CWE-755
References: https://www.dell.com/support/kbdoc/000190408; https://www.dell.com/support/kbdoc/000190408