deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-24948
Published: 2022-01-10
Description: The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery parameter of the tp_get_dl_post_info_ajax AJAX action, which could allow unauthenticated users to retrieve sensitive information, such as private and draft posts
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-74
References: https://roadmap.theplusaddons.com/updates; https://wpscan.com/vulnerability/2b67005a-476e-4772-b15c-3191911a50b0; https://roadmap.theplusaddons.com/updates
CVE: CVE-2021-24949
Published: 2022-01-10
Description: The "WP Search Filters" widget of The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not sanitise and escape the option parameter before using it in a SQL statement, which could lead to SQL injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://roadmap.theplusaddons.com/updates; https://wpscan.com/vulnerability/9d7f8ba8-a5d5-4ec3-a48f-5cd4b115e8d5; https://roadmap.theplusaddons.com/updates
CVE: CVE-2021-25032
Published: 2022-01-10
Description: The PublishPress Capabilities WordPress plugin before 2.3.1, PublishPress Capabilities Pro WordPress plugin before 2.3.1 does not have authorisation and CSRF checks when updating the plugin's settings via the init hook, and does not ensure that the options to be updated belong to the plugin. As a result, unauthenticated attackers could update arbitrary blog options, such as the default role and make any new registered user with an administrator role.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-352, CWE-862, CWE-352, CWE-862
References: https://plugins.trac.wordpress.org/changeset/2640161; https://wpscan.com/vulnerability/2f0f1a32-0c7a-48e6-8617-e0b2dcf62727; https://plugins.trac.wordpress.org/changeset/2640161
CVE: CVE-2021-25043
Published: 2022-01-10
Description: The WOOCS WordPress plugin before 1.3.7.3 does not sanitise and escape the custom_prices parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2640621/woocommerce-currency-switcher; https://wpscan.com/vulnerability/8601bd21-becf-4809-8c11-d053d1121eae; https://plugins.trac.wordpress.org/changeset/2640621/woocommerce-currency-switcher
CVE: CVE-2021-25047
Published: 2022-01-10
Description: The 10Web Social Photo Feed WordPress plugin before 1.4.29 was affected by a reflected Cross-Site Scripting (XSS) vulnerability in the wdi_apply_changes admin page, allowing an attacker to perform such attack against any logged in users
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d33241cc-17b6-491a-b836-dd[PII_REDACTED]; https://wpscan.com/vulnerability/d33241cc-17b6-491a-b836-dd[PII_REDACTED]
CVE: CVE-2021-25051
Published: 2022-01-10
Description: The Modal Window WordPress plugin before 5.2.2 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/changeset/2641645/modal-window; https://wpscan.com/vulnerability/566ff8dc-f820-412b-b2d3-fa789bce528e; https://plugins.trac.wordpress.org/changeset/2641645/modal-window
CVE: CVE-2021-25052
Published: 2022-01-10
Description: The Button Generator WordPress plugin before 2.3.3 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset/2641639/button-generation; https://wpscan.com/vulnerability/a01844a0-0c43-4d96-b738-57fe5bfbd67a; https://plugins.trac.wordpress.org/changeset/2641639/button-generation
CVE: CVE-2021-25053
Published: 2022-01-10
Description: The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset/2641650/wp-coder; https://wpscan.com/vulnerability/a5448599-64de-43b0-b04d-c6492366eab1; https://plugins.trac.wordpress.org/changeset/2641650/wp-coder
CVE: CVE-2021-25054
Published: 2022-01-10
Description: The WPcalc WordPress plugin through 2.1 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/200969eb-e2a4-4200-82d7-0c313de089af; https://wpscan.com/vulnerability/200969eb-e2a4-4200-82d7-0c313de089af
CVE: CVE-2021-43297
Published: 2022-01-10
Description: A deserialization vulnerability existed in dubbo hessian-lite 3.2.11 and its earlier versions, which could lead to malicious code execution. Most Dubbo users use Hessian2 as the default serialization/deserialization protocol, during Hessian catch unexpected exceptions, Hessian will log out some imformation for users, which may cause remote command execution. This issue affects Apache Dubbo Apache Dubbo 2.6.x versions prior to 2.6.12; Apache Dubbo 2.7.x versions prior to 2.7.15; Apache Dubbo 3.0.x versions prior to 3.0.5.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://lists.apache.org/thread/1mszxrvp90y01xob56yp002939c7hlww; https://lists.apache.org/thread/1mszxrvp90y01xob56yp002939c7hlww
CVE: CVE-2021-43949
Published: 2022-01-10
Description: Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view private objects via a Broken Access Control vulnerability in the Custom Fields feature. The affected versions are before version 4.21.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://jira.atlassian.com/browse/JSDSERVER-10982; https://jira.atlassian.com/browse/JSDSERVER-10982
CVE: CVE-2021-43951
Published: 2022-01-10
Description: Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view object import configuration details via an Information Disclosure vulnerability in the Create Object type mapping feature. The affected versions are before version 4.21.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://jira.atlassian.com/browse/JSDSERVER-10984; https://jira.atlassian.com/browse/JSDSERVER-10984
CVE: CVE-2021-44458
Published: 2022-01-10
Description: Linux users running Lens 5.2.6 and earlier could be compromised by visiting a malicious website. The malicious website could make websocket connections from the victim's browser to Lens and so operate the local terminal feature. This would allow the attacker to execute arbitrary commands as the Lens user.
CVSS Score: 8.3 (HIGH)
CWE: CWE-287, CWE-346
References: https://github.com/Mirantis/security/blob/main/advisories/0001.md; https://github.com/Mirantis/security/blob/main/advisories/0001.md
CVE: CVE-2022-0156
Published: 2022-01-10
Description: vim is vulnerable to Use After Free
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: http://seclists.org/fulldisclosure/2022/Jul/13; http://seclists.org/fulldisclosure/2022/Mar/29; http://www.openwall.com/lists/oss-security/2022/01/15/1
CVE: CVE-2022-0157
Published: 2022-01-10
Description: phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/phoronix-test-suite/phoronix-test-suite/commit/56fd0a3b69fb33c1c90a6017ed735889aaa59486; https://huntr.dev/bounties/2c0fe81b-0977-4e1e-b5d8-7646c9a7ebbd; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/57V2CSFU5MKWKL6RJUKMXSD4PCRFTMMQ/
CVE: CVE-2022-0158
Published: 2022-01-10
Description: vim is vulnerable to Heap-based Buffer Overflow
CVSS Score: 3.3 (LOW)
CWE: CWE-122, CWE-787
References: http://seclists.org/fulldisclosure/2022/Jul/13; http://seclists.org/fulldisclosure/2022/Mar/29; http://www.openwall.com/lists/oss-security/2022/01/15/1
CVE: CVE-2022-22114
Published: 2022-01-10
Description: In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting (XSS). The “search term" search functionality is not sufficiently sanitized while displaying the results of the search, which can be leveraged to inject arbitrary scripts. These scripts are executed in a victim’s browser when they enter the crafted URL. In the worst case, the victim who inadvertently triggers the attack is a highly privileged administrator. The injected scripts can extract the Session ID, which can lead to full Account Takeover of the administrator, by an unauthenticated attacker.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://github.com/sismics/docs/commit/[PII_REDACTED]d6892dc58ab8c572e73639ca82d80c; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-22114; https://github.com/sismics/docs/commit/[PII_REDACTED]d6892dc58ab8c572e73639ca82d80c
CVE: CVE-2022-22115
Published: 2022-01-10
Description: In Teedy, versions v1.5 through v1.9 are vulnerable to Stored Cross-Site Scripting (XSS) in the name of a created Tag. Since the Tag name is not being sanitized properly in the edit tag page, a low privileged attacker can store malicious scripts in the name of the Tag. In the worst case, the victim who inadvertently triggers the attack is a highly privileged administrator. The injected scripts can extract the Session ID, which can lead to full Account Takeover of the administrator, and privileges escalation.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://github.com/sismics/docs/commit/[PII_REDACTED]d6892dc58ab8c572e73639ca82d80c; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-22115; https://github.com/sismics/docs/commit/[PII_REDACTED]d6892dc58ab8c572e73639ca82d80c
CVE: CVE-2022-22116
Published: 2022-01-10
Description: In Directus, versions 9.0.0-alpha.4 through 9.4.1 are vulnerable to stored Cross-Site Scripting (XSS) vulnerability via SVG file upload in media upload functionality. A low privileged attacker can inject arbitrary javascript code which will be executed in a victim’s browser when they open the image URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/directus/directus/commit/ec86d5412d45136915d9b622b4a890dd26932b10; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-22116; https://github.com/directus/directus/commit/ec86d5412d45136915d9b622b4a890dd26932b10
CVE: CVE-2022-22117
Published: 2022-01-10
Description: In Directus, versions 9.0.0-alpha.4 through 9.4.1 allow unrestricted file upload of .html files in the media upload functionality, which leads to Cross-Site Scripting vulnerability. A low privileged attacker can upload a crafted HTML file as a profile avatar, and when an admin or another user opens it, the XSS payload gets triggered.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/directus/directus/commit/ec86d5412d45136915d9b622b4a890dd26932b10; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-22117; https://github.com/directus/directus/commit/ec86d5412d45136915d9b622b4a890dd26932b10
CVE: CVE-2022-22120
Published: 2022-01-10
Description: In NocoDB, versions 0.9 to 0.83.8 are vulnerable to Observable Discrepancy in the password-reset feature. When requesting a password reset for a given email address, the application displays an error message when the email isn't registered within the system. This allows attackers to enumerate the registered users' email addresses.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://github.com/nocodb/nocodb/commit/f46e89b0; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-22120; https://github.com/nocodb/nocodb/commit/f46e89b0
CVE: CVE-2022-22121
Published: 2022-01-10
Description: In NocoDB, versions 0.81.0 through 0.83.8 are affected by CSV Injection vulnerability (Formula Injection). A low privileged attacker can create a new table to inject payloads in the table rows. When an administrator accesses the User Management endpoint and exports the data as a CSV file and opens it, the payload gets executed.
CVSS Score: 8.0 (HIGH)
CWE: CWE-1236
References: https://github.com/nocodb/nocodb/commit/079e3abe; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-22121; https://github.com/nocodb/nocodb/commit/079e3abe
CVE: CVE-2020-28679
Published: 2022-01-10
Description: A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated attackers to execute a SQL injection via a crafted request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.manageengine.com/products/applications_manager/issues.html#v14550; https://www.manageengine.com/products/applications_manager/issues.html#v14550
CVE: CVE-2022-0174
Published: 2022-01-10
Description: Improper Validation of Specified Quantity in Input vulnerability in dolibarr dolibarr/dolibarr.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1284, CWE-1284
References: https://github.com/dolibarr/dolibarr/commit/d892160f4f130385a3ce520f66cb8cf2eb8c5c32; https://huntr.dev/bounties/ed3ed4ce-3968-433c-a350-351c8f8b60db; https://github.com/dolibarr/dolibarr/commit/d892160f4f130385a3ce520f66cb8cf2eb8c5c32
CVE: CVE-2021-21408
Published: 2022-01-10
Description: Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.43 and 4.0.3, template authors could run restricted static php methods. Users should upgrade to version 3.1.43 or 4.0.3 to receive a patch.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://github.com/smarty-php/smarty/commit/19ae410bf56007a5ef24441cdc6414619cfaf664; https://github.com/smarty-php/smarty/releases/tag/v3.1.43; https://github.com/smarty-php/smarty/releases/tag/v4.0.3
CVE: CVE-2021-29454
Published: 2022-01-10
Description: Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.42 and 4.0.2, template authors could run arbitrary PHP code by crafting a malicious math string. If a math string was passed through as user provided data to the math function, external users could run arbitrary PHP code by crafting a malicious math string. Users should upgrade to version 3.1.42 or 4.0.2 to receive a patch.
CVSS Score: 8.1 (HIGH)
CWE: CWE-74, CWE-74
References: https://github.com/smarty-php/smarty/commit/215d81a9fa3cd63d82fb3ab56ecaf97cf1e7db71; https://github.com/smarty-php/smarty/releases/tag/v3.1.42; https://github.com/smarty-php/smarty/releases/tag/v4.0.2
CVE: CVE-2022-0155
Published: 2022-01-10
Description: follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-359
References: https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf; https://github.com/follow-redirects/follow-redirects/commit/8b347cbcef7c7b72a6e9be20f5710c17d6163c22; https://huntr.dev/bounties/fc524e4b-ebb6-427d-ab67-a[PII_REDACTED]6
CVE: CVE-2022-21666
Published: 2022-01-10
Description: Useful Simple Open-Source CMS (USOC) is a content management system (CMS) for programmers. Versions prior to Pb2.4Bfx3 allowed Sql injection in usersearch.php only for users with administrative privileges. Users should replace the file `admin/pages/useredit.php` with a newer version. USOC version Pb2.4Bfx3 contains a fixed version of `admin/pages/useredit.php`.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Aaron-Junker/USOC/commit/c331d26aaab41a7e9e8c1c1a990132dca9d01e10; https://github.com/Aaron-Junker/USOC/releases/tag/Pb2.4Bfx3; https://github.com/Aaron-Junker/USOC/security/advisories/GHSA-557p-hhpc-4wrx
CVE: CVE-2022-21668
Published: 2022-01-10
Description: pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior to version 2022.1.8, a flaw in pipenv's parsing of requirements files allows an attacker to insert a specially crafted string inside a comment anywhere within a requirements.txt file, which will cause victims who use pipenv to install the requirements file to download dependencies from a package index server controlled by the attacker. By embedding malicious code in packages served from their malicious index server, the attacker can trigger arbitrary remote code execution (RCE) on the victims' systems. If an attacker is able to hide a malicious `--index-url` option in a requirements file that a victim installs with pipenv, the attacker can embed arbitrary malicious code in packages served from their malicious index server that will be executed on the victim's host during installation (remote code execution/RCE). When pip installs from a source distribution, any code in the setup.py is executed by the install process. This issue is patched in version 2022.1.8. The GitHub Security Advisory contains more information about this vulnerability.
CVSS Score: 8.0 (HIGH)
CWE: CWE-20, CWE-77, CWE-78, CWE-427, CWE-791
References: https://github.com/pypa/pipenv/commit/439782a8ae36c4762c88e43d5f0d8e563371b46f; https://github.com/pypa/pipenv/releases/tag/v2022.1.8; https://github.com/pypa/pipenv/security/advisories/GHSA-qc9x-gjcv-465w
CVE: CVE-2022-21670
Published: 2022-01-10
Description: markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds aside from upgrading.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-1333
References: https://github.com/markdown-it/markdown-it/commit/ffc49ab46b5b751cd2be0aabb146f2ef84986101; https://github.com/markdown-it/markdown-it/security/advisories/GHSA-6vfc-qv3f-vr6c; https://github.com/markdown-it/markdown-it/commit/ffc49ab46b5b751cd2be0aabb146f2ef84986101
CVE: CVE-2022-21672
Published: 2022-01-10
Description: make-ca is a utility to deliver and manage a complete PKI configuration for workstations and servers. Starting with version 0.9 and prior to version 1.10, make-ca misinterprets Mozilla certdata.txt and treats explicitly untrusted certificates like trusted ones, causing those explicitly untrusted certificates trusted by the system. The explicitly untrusted certificates were used by some CAs already hacked. Hostile attackers may perform a MIM attack exploiting them. Everyone using the affected versions of make-ca should upgrade to make-ca-1.10, and run `make-ca -f -g` as the `root` user to regenerate the trusted store immediately. As a workaround, users may delete the untrusted certificates from /etc/pki/tls and /etc/ssl/certs manually (or by a script), but this is not recommended because the manual changes will be overwritten next time running make-ca to update the trusted anchor.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-115
References: https://github.com/lfs-book/make-ca/issues/19; https://github.com/lfs-book/make-ca/pull/20; https://github.com/lfs-book/make-ca/security/advisories/GHSA-m5qh-728v-4xrx
CVE: CVE-2020-25427
Published: 2022-01-10
Description: A Null pointer dereference vulnerability exits in MP4Box - GPAC version 0.8.0-rev177-g51a8ef874-master via the gf_isom_get_track_id function, which causes a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/8e585e623b1d666b4ef736ed609264639cb27701; https://github.com/gpac/gpac/issues/1406; https://github.com/gpac/gpac/commit/8e585e623b1d666b4ef736ed609264639cb27701
CVE: CVE-2021-35452
Published: 2022-01-10
Description: An Incorrect Access Control vulnerability exists in libde265 v1.0.8 due to a SEGV in slice.cc.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/strukturag/libde265/issues/298; https://lists.debian.org/debian-lts-announce/2022/12/msg00027.html; https://www.debian.org/security/2023/dsa-5346
CVE: CVE-2021-36408
Published: 2022-01-10
Description: An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/strukturag/libde265/issues/299; https://lists.debian.org/debian-lts-announce/2022/12/msg00027.html; https://www.debian.org/security/2023/dsa-5346
CVE: CVE-2021-36409
Published: 2022-01-10
Description: There is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding file, which allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file or possibly have unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-617
References: https://github.com/strukturag/libde265/issues/300; https://lists.debian.org/debian-lts-announce/2022/12/msg00027.html; https://www.debian.org/security/2023/dsa-5346
CVE: CVE-2021-36410
Published: 2022-01-10
Description: A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when running program dec265.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/strukturag/libde265/issues/301; https://lists.debian.org/debian-lts-announce/2022/12/msg00027.html; https://www.debian.org/security/2023/dsa-5346
CVE: CVE-2021-36411
Published: 2022-01-10
Description: An issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a READ memory access in function derive_boundaryStrength of deblock.cc has occurred. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/strukturag/libde265/issues/302; https://lists.debian.org/debian-lts-announce/2022/12/msg00027.html; https://www.debian.org/security/2023/dsa-5346
CVE: CVE-2021-36412
Published: 2022-01-10
Description: A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/gpac/gpac/issues/1838; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/1838
CVE: CVE-2021-36414
Published: 2022-01-10
Description: A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/gpac/gpac/issues/1840; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/1840
CVE: CVE-2022-0144
Published: 2022-01-11
Description: shelljs is vulnerable to Improper Privilege Management
CVSS Score: 7.1 (HIGH)
CWE: CWE-269
References: https://github.com/shelljs/shelljs/commit/d919d22dd6de385edaa9d90313075a77f74b338c; https://huntr.dev/bounties/50996581-c08e-4eed-a90e-c0bac082679c; https://github.com/shelljs/shelljs/commit/d919d22dd6de385edaa9d90313075a77f74b338c
CVE: CVE-2021-37195
Published: 2022-01-11
Description: A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS accepts arbitrary code as attachment to tasks. This could allow an attacker to inject malicious code that is executed when loading the attachment.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-995338.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-995338.pdf