deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-1526
Published: 2025-03-14
Description: The DethemeKit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the De Product Display Widget (countdown feature) in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/dethemekit-for-elementor/trunk/assets/frontend/js/dethemekit-addons.js#L815; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3255121%40dethemekit-for-elementor&new=3255121%40dethemekit-for-elementor&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/6e01ae00-0d07-4e9a-928e-e10cf679df2e?source=cve
CVE: CVE-2024-8176
Published: 2025-03-14
Description: A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://access.redhat.com/errata/RHSA-2025:13681; https://access.redhat.com/errata/RHSA-2025:22033; https://access.redhat.com/errata/RHSA-2025:22034
CVE: CVE-2025-1507
Published: 2025-03-14
Description: The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_actions() function in all versions up to, and including, 3.2.1. This makes it possible for unauthenticated attackers to disable all features.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/changeset/3255511/googleanalytics/trunk/class/core/class-ga-controller-core.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/314b8638-15e7-461d-a705-3858fe6813e7?source=cve
CVE: CVE-2024-26006
Published: 2025-03-14
Description: An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and below, version 7.2.7 and below, version 7.0.13 and below and FortiProxy version 7.4.3 and below, version 7.2.9 and below, version 7.0.16 and below web SSL VPN UI may allow a remote unauthenticated attacker to perform a Cross-Site Scripting attack via a malicious samba server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79
References: https://fortiguard.fortinet.com/psirt/FG-IR-23-485
CVE: CVE-2024-12810
Published: 2025-03-14
Description: The JobCareer | Job Board Responsive WordPress Theme theme for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to, and including, 7.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files, generate backups, restore backups, update theme options, and reset theme options to default settings.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636; https://www.wordfence.com/threat-intel/vulnerabilities/id/24889552-0db6-44e6-9b12-f31b5e92a42e?source=cve
CVE: CVE-2024-13771
Published: 2025-03-14
Description: The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.4. This is due to a lack of user validation before changing a password. This makes it possible for unauthenticated attackers to change the password of arbitrary users, including administrators, if the attacker knows the username of the victim.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288, CWE-306
References: https://themeforest.net/item/civi-job-board-wordpress-theme/42770817; https://www.wordfence.com/threat-intel/vulnerabilities/id/5ab2c74d-b83b-40ea-951c-83aeb76a7515?source=cve
CVE: CVE-2024-13772
Published: 2025-03-14
Description: The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.6.1. This is due to a lack of password randomization and user validation through the fb_ajax_login_or_register and google_ajax_login_or_register actions. This makes it possible for unauthenticated attackers to login as any user as long as they have access to the email.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-288, CWE-306
References: https://themeforest.net/item/civi-job-board-wordpress-theme/42770817#item-description__changelogs; https://www.wordfence.com/threat-intel/vulnerabilities/id/bf04f458-7900-4dd3-84fb-169b74db97ab?source=cve
CVE: CVE-2024-13773
Published: 2025-03-14
Description: The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials. This makes it possible for unauthenticated attackers to extract sensitive data including LinkedIn client and secret keys.
CVSS Score: 7.3 (HIGH)
CWE: CWE-321, CWE-798
References: http://localhost:1337/wp-content/themes/civi/includes/class-init.php#L36; https://www.wordfence.com/threat-intel/vulnerabilities/id/e3[PII_REDACTED]-4fec-a7c6-b66ae47533cd?source=cve
CVE: CVE-2025-2232
Published: 2025-03-14
Description: The Realteo - Real Estate Plugin by Purethemes plugin for WordPress, used by the Findeo Theme, is vulnerable to authentication bypass in all versions up to, and including, 1.2.8. This is due to insufficient role restrictions in the 'do_register_user' function. This makes it possible for unauthenticated attackers to register an account with the Administrator role.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://docs.purethemes.net/findeo/knowledge-base/changelog-findeo/; https://www.wordfence.com/threat-intel/vulnerabilities/id/abe73ecd-1325-4d6d-8545-d27f6116ca43?source=cve
CVE: CVE-2025-26626
Published: 2025-03-14
Description: The GLPI Inventory Plugin handles various types of tasks for GLPI agents for the GLPI asset and IT management software package. Versions prior to 1.5.0 are vulnerable to reflective cross-site scripting, which may lead to executing javascript code. Version 1.5.0 fixes the issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/glpi-project/glpi-inventory-plugin/blob/1.5.0/CHANGELOG.md#150---2025-02-25; https://github.com/glpi-project/glpi-inventory-plugin/security/advisories/GHSA-8p38-r7vf-j6jx
CVE: CVE-2025-27593
Published: 2025-03-14
Description: The product can be used to distribute malicious code using SDD Device Drivers due to missing download verification checks, leading to code execution on target systems.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-494
References: https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF; https://github.security.telekom.com/2025/03/multiple-vulnerabilities-in-sick-dl100.html; https://sick.com/psirt
CVE: CVE-2025-27594
Published: 2025-03-14
Description: The device uses an unencrypted, proprietary protocol for communication. Through this protocol, configuration data is transmitted and device authentication is performed. An attacker can thereby intercept the authentication hash and use it to log into the device using a pass-the-hash attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF; https://github.security.telekom.com/2025/03/multiple-vulnerabilities-in-sick-dl100.html; https://sick.com/psirt
CVE: CVE-2025-27595
Published: 2025-03-14
Description: The device uses a weak hashing alghorithm to create the password hash. Hence, a matching password can be easily calculated by an attacker. This impacts the security and the integrity of the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-328
References: https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF; https://github.security.telekom.com/2025/03/multiple-vulnerabilities-in-sick-dl100.html; https://sick.com/psirt
CVE: CVE-2025-2000
Published: 2025-03-14
Description: A maliciously crafted QPY file can potential execute arbitrary-code embedded in the payload without privilege escalation when deserialising QPY formats < 13. A python process calling Qiskit 0.18.0 through 1.4.1's `qiskit.qpy.load()` function could potentially execute any arbitrary Python code embedded in the correct place in the binary file as part of specially constructed payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://www.ibm.com/support/pages/node/7185949
CVE: CVE-2025-2304
Published: 2025-03-14
Description: A Privilege Escalation through a Mass Assignment exists in Camaleon CMS

When a user wishes to change his password, the 'updated_ajax' method of the UsersController is called. The vulnerability stems from the use of the dangerous permit! method, which allows all parameters to pass through without any filtering.
CWE: CWE-915
References: https://github.com/owen2345/camaleon-cms; https://www.tenable.com/security/research/tra-2025-09
CVE: CVE-2025-29029
Published: 2025-03-14
Description: Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/WhereisDoujo/CVE/issues/2
CVE: CVE-2025-29030
Published: 2025-03-14
Description: Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/WhereisDoujo/CVE/issues/3
CVE: CVE-2025-29031
Published: 2025-03-14
Description: Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/WhereisDoujo/CVE/issues/5
CVE: CVE-2025-29032
Published: 2025-03-14
Description: Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-120
References: https://github.com/WhereisDoujo/CVE/issues/6
CVE: CVE-2025-29776
Published: 2025-03-14
Description: Azle is a WebAssembly runtime for TypeScript and JavaScript on ICP. Calling `setTimer` in Azle versions `0.27.0`, `0.28.0`, and `0.29.0` causes an immediate infinite loop of timers to be executed on the canister, each timer attempting to clean up the global state of the previous timer. The infinite loop will occur with any valid invocation of `setTimer`. The problem has been fixed as of Azle version `0.30.0`. As a workaround, if a canister is caught in this infinite loop after calling `setTimer`, the canister can be upgraded and the timers will all be cleared, thus ending the loop.
CWE: CWE-835
References: https://github.com/demergent-labs/azle/releases/tag/0.30.0; https://github.com/demergent-labs/azle/security/advisories/GHSA-xc76-5pf9-mx8m
CVE: CVE-2025-2268
Published: 2025-03-14
Description: The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Printing Protocol (IPP).
CVSS Score: 7.5 (HIGH)
CWE: CWE-241
References: https://support.hp.com/us-en/document/ish_12[PII_REDACTED]4176-16/hpsbpi04013
CVE: CVE-2023-52927
Published: 2025-03-14
Description: In the Linux kernel, the following vulnerability has been resolved:

netfilter: allow exp not to be removed in nf_ct_find_expectation

Currently nf_conntrack_in() calling nf_ct_find_expectation() will
remove the exp from the hash table. However, in some scenario, we
expect the exp not to be removed when the created ct will not be
confirmed, like in OVS and TC conntrack in the following patches.

This patch allows exp not to be removed by setting IPS_CONFIRMED
in the status of the tmpl.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/3fa58a6fbd1e9e5682d09cdafb08fba004cb12ec; https://git.kernel.org/stable/c/4914109a8e1e494c6aa9852f9e84ec77a5fc643f; https://seadragnol.github.io/posts/CVE-2023-52927/
CVE: CVE-2024-40590
Published: 2025-03-14
Description: An improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version 7.2.4 and below, version 7.0.8 and below, version 6.0.15 and below when connecting to a FortiManager device, a FortiAnalyzer device, or an SMTP server may allow an unauthenticated attacker in a Man-in-the-Middle position to intercept on and tamper with the encrypted communication channel established between the FortiPortal and those endpoints.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-295
References: https://fortiguard.fortinet.com/psirt/FG-IR-22-155
CVE: CVE-2024-45638
Published: 2025-03-14
Description: IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-256
References: https://www.ibm.com/support/pages/node/7185938
CVE: CVE-2024-45643
Published: 2025-03-14
Description: IBM Security QRadar 3.12 EDR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive credential information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: https://www.ibm.com/support/pages/node/7185938
CVE: CVE-2024-46662
Published: 2025-03-14
Description: A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to escalation of privilege via specifically crafted packets
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-222
CVE: CVE-2024-47573
Published: 2025-03-14
Description: An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, version 7.0.6 and below may allow an authenticated attacker with at least Read/Write permission on system maintenance to install a corrupted firmware image.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-354
References: https://fortiguard.fortinet.com/psirt/FG-IR-23-461
CVE: CVE-2022-29059
Published: 2025-03-14
Description: An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiWeb version 7.0.1 and below, 6.4.2 and below, 6.3.20 and below, 6.2.7 and below may allow a privileged attacker to execute SQL commands over the log database via specifically crafted strings parameters.
CVSS Score: 2.7 (LOW)
CWE: CWE-89
References: https://fortiguard.com/psirt/FG-IR-22-140
CVE: CVE-2023-33300
Published: 2025-03-14
Description: A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker a limited, unauthorized file access via specifically crafted request in inter-server  communication port.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-77
References: https://fortiguard.com/psirt/FG-IR-23-096
CVE: CVE-2023-45588
Published: 2025-03-14
Description: An external control of file name or path vulnerability [CWE-73] in  FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a local attacker to execute arbitrary code or commands via writing a malicious configuration file in /tmp before starting the installation process.
CVSS Score: 8.2 (HIGH)
CWE: CWE-73
References: https://fortiguard.com/psirt/FG-IR-23-345
CVE: CVE-2023-48785
Published: 2025-03-14
Description: An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel between the FortiOS device, an inventory, and FortiNAC-F.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-295
References: https://fortiguard.com/psirt/FG-IR-23-288
CVE: CVE-2024-40585
Published: 2025-03-14
Description: An insertion of sensitive information into log file vulnerabilities [CWE-532] in FortiManager version 7.4.0, version 7.2.3 and below, version 7.0.8 and below, version 6.4.12 and below, version 6.2.11 and below and FortiAnalyzer version 7.4.0, version 7.2.3 and below, version 7.0.8 and below, version 6.4.12 and below, version 6.2.11 and below eventlog may allow any low privileged user with access to event log section to retrieve certificate private key and encrypted password logged as system log.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-311
CVE: CVE-2025-25871
Published: 2025-03-14
Description: An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function
CVSS Score: 8.0 (HIGH)
CWE: CWE-281
References: https://openpanel.com/docs/changelog/0.3.5/#%EF%B8%8F-security-fixes; https://packetstorm.news/files/id/189621
CVE: CVE-2025-25872
Published: 2025-03-14
Description: An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-269
References: https://openpanel.com/docs/changelog/0.3.5/#%EF%B8%8F-security-fixes; https://packetstorm.news/files/id/189583
CVE: CVE-2025-25873
Published: 2025-03-14
Description: Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-352
References: https://openpanel.com/docs/; https://packetstorm.news/files/id/189597
CVE: CVE-2024-55594
Published: 2025-03-14
Description: An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker to execute unauthorized code or commands via HTTP/S crafted requests.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-228
References: https://fortiguard.fortinet.com/psirt/FG-IR-23-115
CVE: CVE-2025-1888
Published: 2025-03-14
Description: The Leica Web Viewer within the Aperio Eslide Manager Application is vulnerable to reflected cross-site scripting (XSS). An authenticated user can access the slides within a project and injecting malicious JavaScript into the "memo" field. The memo field has a hover over action that will display a Microsoft Tool Tip which a user can use to quickly view the memo associated with the slide and execute the JavaScript.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://blog.blacklanternsecurity.com/p/cve-2025-1888reflected-xss-in-aperio
CVE: CVE-2025-26215
Published: 2025-03-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2025-26216
Published: 2025-03-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2025-27606
Published: 2025-03-14
Description: Element Android is an Android Matrix Client provided by Element. Element Android up to version 1.6.32 can, under certain circumstances, fail to logout the user if they input the wrong PIN more than the configured amount of times. An attacker with physical access to a device can exploit this to guess the PIN. Version 1.6.34 solves the issue.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-488
References: https://github.com/element-hq/element-android/commit/53bd78b05de375c6e6b0b5aa794a56b4ba95984c; https://github.com/element-hq/element-android/commit/87d7fcdc8036a4db4da8c403f87c73a64a546304; https://github.com/element-hq/element-android/security/advisories/GHSA-632v-9pm3-m8ch
CVE: CVE-2025-29384
Published: 2025-03-14
Description: In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/shuqi233/loophole/blob/main/Tenda%20AC9/AdvSetMacMtuWan1.md
CVE: CVE-2025-29385
Published: 2025-03-14
Description: In Tenda AC9 v1.0 V15.03.05.14_multi, the cloneType parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/shuqi233/loophole/blob/main/Tenda%20AC9/AdvSetMacMtuWan3.md
CVE: CVE-2025-29386
Published: 2025-03-14
Description: In Tenda AC9 v1.0 V15.03.05.14_multi, the mac parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/shuqi233/loophole/blob/main/Tenda%20AC9/AdvSetMacMtuWan4.md
CVE: CVE-2025-29387
Published: 2025-03-14
Description: In Tenda AC9 v1.0 V15.03.05.14_multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787, CWE-121
References: https://github.com/shuqi233/loophole/blob/main/Tenda%20AC9/AdvSetMacMtuWan2.md
CVE: CVE-2025-29774
Published: 2025-03-14
Description: xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1, and 2.1.6 to bypass authentication or authorization mechanisms in systems that rely on xml-crypto for verifying signed XML documents. The vulnerability allows an attacker to modify a valid signed XML message in a way that still passes signature verification checks. For example, it could be used to alter critical identity or access control attributes, enabling an attacker with a valid account to escalate privileges or impersonate another user. Users of versions 6.0.0 and prior should upgrade to version 6.0.1 to receive a fix. Those who are still using v2.x or v3.x should upgrade to patched versions 2.1.6 or 3.2.1, respectively.
CWE: CWE-347
References: https://github.com/node-saml/xml-crypto/commit/28f92218ecbb8dcbd238afa4efbbd50302aa9aed; https://github.com/node-saml/xml-crypto/commit/886dc63a8b4bb5ae1db9f41c7854b171eb83aa98; https://github.com/node-saml/xml-crypto/commit/8ac6118ee7978b46aa56b82cbcaa5fca58c93a07
CVE: CVE-2024-12019
Published: 2025-03-14
Description: The API used to interact with documents in the application contains a flaw that allows an authenticated attacker to read the contents of files on the underlying operating system. An account with ‘read’ and ‘download’ privileges on at least one existing document in the application is required to exploit the vulnerability. Exploitation of this vulnerability would allow an attacker to read the contents of any file available within the privileges of the system user running the application.
CWE: CWE-23
References: https://www.blackduck.com/blog/cyrc-advisory-logicaldoc.html
CVE: CVE-2024-12020
Published: 2025-03-14
Description: There is a reflected cross-site scripting (XSS) within JSP files used to control application appearance. An unauthenticated attacker could deceive a user into clicking a crafted link to trigger the vulnerability. Stealing the session cookie is not possible due to cookie security flags, however the XSS may be used to induce a victim to perform on-site requests without their knowledge.

This vulnerability only affects LogicalDOC Enterprise.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.blackduck.com/blog/cyrc-advisory-logicaldoc.html