deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-39733
Published: 2024-07-14
Description: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 stores user credentials in plain clear text which can be read by a local user.  IBM X-Force ID:  295972.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-256, CWE-522
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/295972; https://www.ibm.com/support/pages/node/7160185; https://exchange.xforce.ibmcloud.com/vulnerabilities/295972
CVE: CVE-2024-39734
Published: 2024-07-14
Description: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.  IBM X-Force ID:  296001.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-565, CWE-614
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/296001; https://www.ibm.com/support/pages/node/7160185; https://exchange.xforce.ibmcloud.com/vulnerabilities/296001
CVE: CVE-2024-6731
Published: 2024-07-14
Description: A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. This affects an unknown part of the file /Master.php?f=save_student. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://reports.kunull.net/CVEs/2024/CVE-2024-6731; https://vuldb.com/?ctiid.271449; https://vuldb.com/?id.271449
CVE: CVE-2024-6732
Published: 2024-07-14
Description: A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. This vulnerability affects unknown code of the file /sscdms/classes/Users.php?f=save. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://reports.kunull.net/CVEs/2024/CVE-2024-6732; https://vuldb.com/?ctiid.271450; https://vuldb.com/?id.271450
CVE: CVE-2024-6733
Published: 2024-07-14
Description: A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file templateedit.php. The manipulation of the argument id/title/msg leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-271454 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/jiaoyanshuai/cve/issues/1; https://vuldb.com/?ctiid.271454; https://vuldb.com/?id.271454
CVE: CVE-2024-6734
Published: 2024-07-15
Description: A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file templateadd.php. The manipulation of the argument title/msg leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271455.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/jiaoyanshuai/cve/issues/2; https://vuldb.com/?ctiid.271455; https://vuldb.com/?id.271455
CVE: CVE-2024-6735
Published: 2024-07-15
Description: A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file setgeneral.php. The manipulation of the argument sitename/email/mobile/sms/currency leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271456.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/xzyxiaohaha/cve/issues/1; https://vuldb.com/?ctiid.271456; https://vuldb.com/?id.271456
CVE: CVE-2024-6345
Published: 2024-07-15
Description: A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/pypa/setuptools/commit/88807c[PII_REDACTED]f654ea8c03427adc859321f0; https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5; https://github.com/pypa/setuptools/commit/88807c[PII_REDACTED]f654ea8c03427adc859321f0
CVE: CVE-2024-6736
Published: 2024-07-15
Description: A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown processing of the file view_employee.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-271457 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/ljllll123/cve/blob/main/sql.md; https://vuldb.com/?ctiid.271457; https://vuldb.com/?id.271457
CVE: CVE-2024-39728
Published: 2024-07-15
Description: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  295967.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/295967; https://www.ibm.com/support/pages/node/7160185; https://exchange.xforce.ibmcloud.com/vulnerabilities/295967
CVE: CVE-2024-39731
Published: 2024-07-15
Description: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.  IBM X-Force ID:  295970.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/295970; https://www.ibm.com/support/pages/node/7160185; https://exchange.xforce.ibmcloud.com/vulnerabilities/295970
CVE: CVE-2024-39736
Published: 2024-07-15
Description: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 296003.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-644, CWE-116
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/296003; https://www.ibm.com/support/pages/node/7160185; https://exchange.xforce.ibmcloud.com/vulnerabilities/296003
CVE: CVE-2024-39737
Published: 2024-07-15
Description: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be used in further attacks against the system.  IBM X-Force ID:  296004.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/296004; https://www.ibm.com/support/pages/node/7160185; https://exchange.xforce.ibmcloud.com/vulnerabilities/296004
CVE: CVE-2024-39739
Published: 2024-07-15
Description: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.  IBM X-Force ID:  296008.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/296008; https://www.ibm.com/support/pages/node/7160185; https://exchange.xforce.ibmcloud.com/vulnerabilities/296008
CVE: CVE-2024-39729
Published: 2024-07-15
Description: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow an authenticated user to obtain sensitive information from source code that could be used in further attacks against the system.  IBM X-Force ID:  295968.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-540
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/295968; https://www.ibm.com/support/pages/node/7160185; https://exchange.xforce.ibmcloud.com/vulnerabilities/295968
CVE: CVE-2024-39735
Published: 2024-07-15
Description: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  296002.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/296002; https://www.ibm.com/support/pages/node/7160185; https://exchange.xforce.ibmcloud.com/vulnerabilities/296002
CVE: CVE-2024-39740
Published: 2024-07-15
Description: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 displays version information in HTTP requests that could allow an attacker to gather information for future attacks against the system.  IBM X-Force ID:  296009.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-497
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/296009; https://www.ibm.com/support/pages/node/7160185; https://exchange.xforce.ibmcloud.com/vulnerabilities/296009
CVE: CVE-2024-39741
Published: 2024-07-15
Description: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.  IBM X-Force ID:  296010.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/296010; https://www.ibm.com/support/pages/node/7160185; https://exchange.xforce.ibmcloud.com/vulnerabilities/296010
CVE: CVE-2024-6737
Published: 2024-07-15
Description: The access control in the Electronic Official Document Management System from 2100 TECHNOLOGY  is not properly implemented, allowing remote attackers with regular privileges to access the account settings functionality and create an administrator account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://www.twcert.org.tw/en/cp-139-7924-85606-2.html; https://www.twcert.org.tw/tw/cp-132-7923-46df3-1.html; https://www.twcert.org.tw/en/cp-139-7924-85606-2.html
CVE: CVE-2024-6738
Published: 2024-07-15
Description: The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modifying the URL.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://www.twcert.org.tw/en/cp-139-7926-f7914-2.html; https://www.twcert.org.tw/tw/cp-132-7925-97e1c-1.html; https://www.twcert.org.tw/en/cp-139-7926-f7914-2.html
CVE: CVE-2024-6739
Published: 2024-07-15
Description: The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session cookie via XSS.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1004, CWE-732
References: https://www.openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf; https://www.twcert.org.tw/en/cp-139-7928-04e8a-2.html; https://www.twcert.org.tw/tw/cp-132-7927-03837-1.html
CVE: CVE-2024-21513
Published: 2024-07-15
Description: Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' on all values. An attacker can exploit this vulnerability and execute arbitrary python code if they can control the input prompt and the server is configured with VectorSQLDatabaseChain.**Notes:**Impact on the Confidentiality, Integrity and Availability of the vulnerable component:Confidentiality: Code execution happens within the impacted component, in this case langchain-experimental, so all resources are necessarily accessible.Integrity: There is nothing protected by the impacted component inherently. Although anything returned from the component counts as 'information' for which the trustworthiness can be compromised.Availability: The loss of availability isn't caused by the attack itself, but it happens as a result during the attacker's post-exploitation steps.Impact on the Confidentiality, Integrity and Availability of the subsequent system:As a legitimate low-privileged user of the package (PR:L) the attacker does not have more access to data owned by the package as a result of this vulnerability than they did with normal usage (e.g. can query the DB). The unintended action that one can perform by breaking out of the app environment and exfiltrating files, making remote connections etc. happens during the post exploitation phase in the subsequent system - in this case, the OS.AT:P: An attacker needs to be able to influence the input prompt, whilst the server is configured with the VectorSQLDatabaseChain plugin.
CVSS Score: 8.5 (HIGH)
CWE: CWE-94, CWE-94
References: https://github.com/langchain-ai/langchain/blob/672907bbbb7c38bf19787b78e4ffd7c8a9026fe4/libs/experimental/langchain_experimental/sql/vector_sql.py%23L81; https://github.com/langchain-ai/langchain/commit/7b13292e3544b2f5f2bfb8a27a062ea2b0c34561; https://security.snyk.io/vuln/SNYK-PYTHON-LANGCHAINEXPERIMENTAL-7278171
CVE: CVE-2024-5630
Published: 2024-07-15
Description: The Insert or Embed Articulate Content into WordPress plugin before 4[PII_REDACTED] does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/538c875f-4c20-4be0-8098-5bddb7aecff4/; https://wpscan.com/vulnerability/538c875f-4c20-4be0-8098-5bddb7aecff4/
CVE: CVE-2024-6072
Published: 2024-07-15
Description: The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/1d8a344b-37e9-41e8-9de0-c67b7ca8e21b/; https://wpscan.com/vulnerability/1d8a344b-37e9-41e8-9de0-c67b7ca8e21b/
CVE: CVE-2024-6073
Published: 2024-07-15
Description: The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f04994bc-9eef-46de-995b-8598f7a749c4/; https://wpscan.com/vulnerability/f04994bc-9eef-46de-995b-8598f7a749c4/
CVE: CVE-2024-6074
Published: 2024-07-15
Description: The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e518af46-cb8e-43ff-a7c1-5300b36d9113/; https://wpscan.com/vulnerability/e518af46-cb8e-43ff-a7c1-5300b36d9113/
CVE: CVE-2024-6075
Published: 2024-07-15
Description: The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/b0e2658a-b075-48b6-a9d9-e141194117fc/; https://wpscan.com/vulnerability/b0e2658a-b075-48b6-a9d9-e141194117fc/
CVE: CVE-2024-6076
Published: 2024-07-15
Description: The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8369a2d8-1780-40c3-90ff-a826b9e9afd4/; https://wpscan.com/vulnerability/8369a2d8-1780-40c3-90ff-a826b9e9afd4/
CVE: CVE-2024-6289
Published: 2024-07-15
Description: The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://wpscan.com/vulnerability/fd6d0362-df1d-4416-b8b5-6e5d0ce84793/; https://wpscan.com/vulnerability/fd6d0362-df1d-4416-b8b5-6e5d0ce84793/
CVE: CVE-2024-6742
Published: 2024-07-15
Description: AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regular privileges to inject JavaScript and perform Reflected Cross-site scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.twcert.org.tw/en/cp-139-7931-608eb-2.html; https://www.twcert.org.tw/tw/cp-132-7930-e0368-1.html; https://www.twcert.org.tw/en/cp-139-7931-608eb-2.html
CVE: CVE-2024-6743
Published: 2024-07-15
Description: AguardNet's Space Management System does not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.twcert.org.tw/en/cp-139-7933-9a38d-2.html; https://www.twcert.org.tw/tw/cp-132-7932-a6d4d-1.html; https://www.twcert.org.tw/en/cp-139-7933-9a38d-2.html
CVE: CVE-2024-6744
Published: 2024-07-15
Description: The SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input, leading to a Buffer Overflow vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the remote server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://www.twcert.org.tw/en/cp-139-7937-acbb5-2.html; https://www.twcert.org.tw/tw/cp-132-7936-f6381-1.html; https://www.twcert.org.tw/en/cp-139-7937-acbb5-2.html
CVE: CVE-2023-41916
Published: 2024-07-15
Description: 
In Apache Linkis =1.4.0, due to the lack of effective filtering
of parameters, an attacker configuring malicious Mysql JDBC parameters in the DataSource Manager Module will trigger arbitrary file reading. Therefore, the parameters in the Mysql JDBC URL should be blacklisted. This attack requires the attacker to obtain an authorized account from Linkis before it can be carried out. Versions of Apache Linkis = 1.4.0 will be affected. 
We recommend users upgrade the version of Linkis to version 1.5.0.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-552
References: https://lists.apache.org/thread/dxkpwyoxy1jpdwlpqp15zvo0jxn4v729; http://www.openwall.com/lists/oss-security/2024/07/13/4; https://lists.apache.org/thread/dxkpwyoxy1jpdwlpqp15zvo0jxn4v729
CVE: CVE-2023-46801
Published: 2024-07-15
Description: 
In Apache Linkis <= 1.5.0, data source management module, when adding Mysql data source, exists remote code execution vulnerability for java version < 1.8.0_241. The deserialization vulnerability exploited through jrmp can inject malicious files into the server and execute them. 

This attack requires the attacker to obtain an authorized account from Linkis before it can be carried out.  We recommend that users upgrade the java version to >= 1.8.0_241. Or users upgrade Linkis to version 1.6.0.


CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://lists.apache.org/thread/0dnzh64xy1n7qo3rgo2loz9zn7m9xgdx; http://www.openwall.com/lists/oss-security/2024/07/13/6; https://lists.apache.org/thread/0dnzh64xy1n7qo3rgo2loz9zn7m9xgdx
CVE: CVE-2023-49566
Published: 2024-07-15
Description: 
In Apache Linkis <=1.5.0, due to the lack of effective filtering
of parameters, an attacker configuring malicious 

db2

 parameters in the DataSource Manager Module will result in jndi injection. Therefore, the parameters in the DB2 URL should be blacklisted. 

This attack requires the attacker to obtain an authorized account from Linkis before it can be carried out.

 Versions of Apache Linkis 

<=1.5.0

 will be affected.
We recommend users upgrade the version of Linkis to version 1.6.0.

CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://lists.apache.org/thread/t68yy52lmv7pxgrxnq6rw7rwvk9tb1xj; http://www.openwall.com/lists/oss-security/2024/07/13/5; https://lists.apache.org/thread/t68yy52lmv7pxgrxnq6rw7rwvk9tb1xj
CVE: CVE-2024-23794
Published: 2024-07-15
Description: An incorrect privilege assignment vulnerability in the inline editing functionality of OTRS can lead to privilege escalation. This flaw allows an agent with read-only permissions to gain full access to a ticket. This issue arises in very rare instances when an admin has previously enabled the setting 'RequiredLock' of 'AgentFrontend::Ticket::InlineEditing::Property###Watch' in the system configuration.This issue affects OTRS: 

  *  8.0.X
  *  2023.X
  *  from 2024.X through 2024.4.x


CVSS Score: 5.2 (MEDIUM)
CWE: CWE-266
References: https://otrs.com/release-notes/otrs-security-advisory-2024-06/; https://otrs.com/release-notes/otrs-security-advisory-2024-06/
CVE: CVE-2024-6540
Published: 2024-07-15
Description: Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has been disabled by the administrator.
This issue affects OTRS: 8.0.X, 2023.X, from 2024.X through 2024.4.x


CVSS Score: 5.7 (MEDIUM)
CWE: CWE-790
References: https://otrs.com/release-notes/otrs-security-advisory-2024-07/; https://otrs.com/release-notes/otrs-security-advisory-2024-07/
CVE: CVE-2024-6740
Published: 2024-07-15
Description: Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to inject JavaScript code within the attachment and perform Stored Cross-site scripting attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf; https://www.twcert.org.tw/en/cp-139-7939-3423f-2.html; https://www.twcert.org.tw/tw/cp-132-7938-d9c97-1.html
CVE: CVE-2024-32945
Published: 2024-07-15
Description: Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific  macro definitions.
CVSS Score: 2.6 (LOW)
CWE: CWE-909, CWE-909
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2024-39767
Published: 2024-07-15
Description: Mattermost Mobile Apps versions <=2.16.0 fail to validate that the push notifications received for a server actually came from this serve that which allows a malicious server to send push notifications with another server’s diagnostic ID or server URL and have them show up in mobile apps as that server’s push notifications.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates