deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-1404
Published: 2021-04-08
Description: A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a heap buffer over-read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-125
References: https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.html; https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.html
CVE: CVE-2021-1405
Published: 2021-04-08
Description: A vulnerability in the email parsing module in Clam AntiVirus (ClamAV) Software version 0.103.1 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper variable initialization that may result in an NULL pointer read. An attacker could exploit this vulnerability by sending a crafted email to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-909
References: https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.html; https://lists.debian.org/debian-lts-announce/2021/04/msg00012.html; https://security.gentoo.org/glsa/202104-07
CVE: CVE-2021-28685
Published: 2021-04-08
Description: AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to interact directly with physical memory (by calling one of several driver routines that map physical memory into the virtual address space of the calling process) and to interact with MSR registers. This could enable low-privileged users to achieve NT AUTHORITY\SYSTEM privileges via a DeviceIoControl.
CVSS Score: 7.8 (HIGH)
References: https://gist.github.com/DStraghkov/fba4994ac4bb3a6e2940b21743563df0; https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/; https://gist.github.com/DStraghkov/fba4994ac4bb3a6e2940b21743563df0
CVE: CVE-2021-28686
Published: 2021-04-08
Description: AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to trigger a stack-based buffer overflow. This could enable low-privileged users to achieve Denial of Service via a DeviceIoControl.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://gist.github.com/DStraghkov/fba4994ac4bb3a6e2940b21743563df0; https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/; https://gist.github.com/DStraghkov/fba4994ac4bb3a6e2940b21743563df0
CVE: CVE-2021-3012
Published: 2021-04-08
Description: A cross-site scripting (XSS) vulnerability in the Document Link of documents in ESRI Enterprise before 10.9 allows remote authenticated users to inject arbitrary JavaScript code via a malicious HTML attribute such as onerror (in the URL field of the Parameters tab).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.bssi.fr/cve-2021-3012-vulnerability-allowing-remote-html-javascript-code-injection-on-esri-arcgis-products/; https://blog.bssi.fr/cve-2021-3012-vulnerability-allowing-remote-html-javascript-code-injection-on-esri-arcgis-products/
CVE: CVE-2021-30111
Published: 2021-04-08
Description: A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description fields. An attack can inject a JavaScript code that will be stored in the page. If any visitor sees the events, then the payload will be executed.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://web-school.in; https://github.com/0xrayan/CVEs/issues/4; https://web-school.in/try-demo/
CVE: CVE-2021-30112
Published: 2021-04-08
Description: Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create a student_leave_application request through module/core/studentleaveapplication/create. The application fails to validate the CSRF token for a POST request using Guardian privilege.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://web-school.in; https://github.com/0xrayan/CVEs/issues/3; https://web-school.in/try-demo/
CVE: CVE-2021-30113
Published: 2021-04-08
Description: A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields. An attacker can inject a JavaScript code that will be stored in the page. If any visitor sees the event, then the payload will be executed and sends the victim's information to the attacker website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://web-school.in; https://github.com/0xrayan/CVEs/issues/1; https://web-school.in/try-demo/
CVE: CVE-2021-30114
Published: 2021-04-08
Description: Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create a voucher payment request through module/accounting/voucher/create. The application fails to validate the CSRF token for a POST request using admin privilege.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://web-school.in; https://github.com/0xrayan/CVEs/issues/2; https://web-school.in/try-demo/
CVE: CVE-2021-20480
Published: 2021-04-08
Description: IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 197502.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/197502; https://www.ibm.com/support/pages/node/6441063; https://exchange.xforce.ibmcloud.com/vulnerabilities/197502
CVE: CVE-2021-28924
Published: 2021-04-08
Description: Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/stolabs/issues-found-on-nagios-network-analyzer-2-4-2-50ec4ffb5e25; https://www.nagios.com/downloads/nagios-network-analyzer/change-log/; https://medium.com/stolabs/issues-found-on-nagios-network-analyzer-2-4-2-50ec4ffb5e25
CVE: CVE-2021-28925
Published: 2021-04-08
Description: SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the o[col] parameter to api/checks/read/.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://medium.com/stolabs/issues-found-on-nagios-network-analyzer-2-4-2-50ec4ffb5e25; https://www.nagios.com/downloads/nagios-network-analyzer/change-log/; https://medium.com/stolabs/issues-found-on-nagios-network-analyzer-2-4-2-50ec4ffb5e25
CVE: CVE-2021-30462
Published: 2021-04-08
Description: VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo configuration does not require a password to run /usr/local/vesta/bin scripts.
CVSS Score: 7.2 (HIGH)
CWE: CWE-306
References: https://ssd-disclosure.com/ssd-advisory-vestacp-lpe-vulnerabilities/; https://ssd-disclosure.com/ssd-advisory-vestacp-lpe-vulnerabilities/
CVE: CVE-2021-30463
Published: 2021-04-08
Description: VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for which they lack permissions. After reading the RKEY value from user.conf under the /usr/local/vesta/data/users/admin directory, the admin password can be changed via a /reset/?action=confirm&user=admin&code= URI. This occurs because chmod is used unsafely.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://ssd-disclosure.com/ssd-advisory-vestacp-lpe-vulnerabilities/; https://ssd-disclosure.com/ssd-advisory-vestacp-lpe-vulnerabilities/
CVE: CVE-2020-23426
Published: 2021-04-08
Description: zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify data for further attacks such as CSRF.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-352
References: https://github.com/Ling-Yizhou/zzcms-vuln/blob/master/Privilege%20Escalation/priviege%20escalation.md; https://github.com/Ling-Yizhou/zzcms-vuln/blob/master/Privilege%20Escalation/priviege%20escalation.md
CVE: CVE-2020-8626
Published: 2021-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2020-8627
Published: 2021-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2020-8628
Published: 2021-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2020-8629
Published: 2021-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2020-8630
Published: 2021-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2021-27522
Published: 2021-04-08
Description: Learnsite 1.2.5.0 contains a remote privilege escalation vulnerability in /Manager/index.aspx through the JudgIsAdmin() function. By modifying the initial letter of the key of a user cookie, the key of the administrator cookie can be obtained.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://github.com/WaterCountry/Learnsite/issues/1; https://github.com/WaterCountry/Learnsite/issues/1
CVE: CVE-2020-23539
Published: 2021-04-08
Description: An issue was discovered in Realtek rtl8723de BLE Stack <= 4.1 that allows remote attackers to cause a Denial of Service via the interval field to the CONNECT_REQ message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/pokerfacett/MY_REQUEST/blob/df73fe140655ea44542b03ac186e6c2b47e97540/Realtek%208723ds%20BLE%20SDK%20denial%20of%20service%20attack.md; https://github.com/pokerfacett/MY_REQUEST/blob/df73fe140655ea44542b03ac186e6c2b47e97540/Realtek%208723ds%20BLE%20SDK%20denial%20of%20service%20attack.md
CVE: CVE-2021-27945
Published: 2021-04-08
Description: The Squirro Insights Engine was affected by a Reflected Cross-Site Scripting (XSS) vulnerability affecting versions 2.0.0 up to and including 3.2.4. An attacker can use the vulnerability to inject malicious JavaScript code into the application, which will execute within the browser of any user who views the relevant application content. The attacker-supplied code can perform a wide variety of actions, such as stealing victims' session tokens or login credentials, performing arbitrary actions on their behalf, and logging their keystrokes.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://squirro.atlassian.net/wiki/spaces/DOC/pages/[PII_REDACTED]/CVE-2021-27945+-+Cross-Site+Scripting; https://squirro.atlassian.net/wiki/spaces/DOC/pages/[PII_REDACTED]/CVE-2021-27945+-+Cross-Site+Scripting
CVE: CVE-2020-14099
Published: 2021-04-08
Description: On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=25&locale=zh; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=25&locale=zh
CVE: CVE-2020-14104
Published: 2021-04-08
Description: A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=26&locale=zh; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=26&locale=zh
CVE: CVE-2021-22115
Published: 2021-04-08
Description: Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed. CAPI database logs service broker password in plain text whenever a job to clean up orphaned items is run by Cloud Controller.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: https://www.cloudfoundry.org/blog/cve-2021-22115-capi-logs-service-broker-credentials/; https://www.cloudfoundry.org/blog/cve-2021-22115-capi-logs-service-broker-credentials/
CVE: CVE-2021-22507
Published: 2021-04-08
Description: Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10. The vulnerability could allow remote attackers to bypass user authentication and get unauthorized access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://softwaresupport.softwaregrp.com/doc/KM03793283; https://softwaresupport.softwaregrp.com/doc/KM03793283
CVE: CVE-2021-3328
Published: 2021-04-08
Description: An issue was discovered in Aprelium Abyss Web Server X1 2.12.1 and 2.14. A crafted HTTP request can lead to an out-of-bounds read that crashes the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://jankopecky.net/index.php/2021/04/08/cve-2021-3328-abyss-web-server-remote-dos/; https://jankopecky.net/index.php/2021/04/08/cve-2021-3328-abyss-web-server-remote-dos/
CVE: CVE-2021-22312
Published: 2021-04-08
Description: There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product include some versions of IPS Module, NGFW Module, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-01-memoryleak-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-01-memoryleak-en
CVE: CVE-2021-3146
Published: 2021-04-08
Description: The Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows allows local users to gain privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://professional.dolby.com/siteassets/pdfs/dolby-dax2-security-advisory-2021-04-07.pdf; https://professional.dolby.com/siteassets/pdfs/dolby-dax2-security-advisory-2021-04-07.pdf
CVE: CVE-2020-14103
Published: 2021-04-08
Description: The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15.
CVSS Score: 5.5 (MEDIUM)
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=27&locale=zh; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=27&locale=zh
CVE: CVE-2020-14106
Published: 2021-04-08
Description: The application in the mobile phone can unauthorized access to the list of running processes in the mobile phone, Xiaomi Mobile Phone MIUI < 2021.01.26.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=29&locale=zh; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=29&locale=zh
CVE: CVE-2021-29154
Published: 2021-04-08
Description: BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: http://packetstormsecurity.com/files/162434/Kernel-Live-Patch-Security-Notice-LSN-0076-1.html; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=26f55a59dc65ff77cd1c4b37991e26497fc68049; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e4d4d456436bfb2fe412ee2cd489f7658449b098
CVE: CVE-2020-6590
Published: 2021-04-08
Description: Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611, CWE-611
References: https://help.forcepoint.com/security/CVE/CVE-2020-6590.html; https://help.forcepoint.com/security/CVE/CVE-2020-6590.html
CVE: CVE-2021-22510
Published: 2021-04-08
Description: Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects all version 6.7 and earlier versions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2175; https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2175
CVE: CVE-2021-22511
Published: 2021-04-08
Description: Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow unconditionally disabling of SSL/TLS certificates.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2176; https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2176
CVE: CVE-2021-22512
Published: 2021-04-08
Description: Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow form validation without permission checks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2132; https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2132
CVE: CVE-2021-22513
Published: 2021-04-08
Description: Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow access without permission checks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2132; https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2132
CVE: CVE-2021-3413
Published: 2021-04-08
Description: A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=1930352; https://bugzilla.redhat.com/show_bug.cgi?id=1930352
CVE: CVE-2021-3448
Published: 2021-04-08
Description: A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-358
References: https://bugzilla.redhat.com/show_bug.cgi?id=1939368; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVTJUOFFFHINLKWAOC2ZSC5MOPD4SJ24/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHG7GWSQWKF7JXIMLOGJBKZWBB4VIAJ7/
CVE: CVE-2021-3482
Published: 2021-04-08
Description: A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1946314; https://lists.debian.org/debian-lts-announce/2021/08/msg00028.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ/
CVE: CVE-2020-36287
Published: 2021-04-09
Description: The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to obtain gadget related settings via a missing permissions check.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863, CWE-862
References: https://jira.atlassian.com/browse/JRASERVER-72258; https://jira.atlassian.com/browse/JRASERVER-72258
CVE: CVE-2021-30152
Published: 2021-04-09
Description: An issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When using the MediaWiki API to "protect" a page, a user is currently able to protect to a higher level than they currently have permissions for.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269
References: https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html; https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/
CVE: CVE-2021-30155
Published: 2021-04-09
Description: An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. ContentModelChange does not check if a user has correct permissions to create and set the content model of a nonexistent page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html; https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/
CVE: CVE-2021-30156
Published: 2021-04-09
Description: An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Special:Contributions can leak that a "hidden" user exists.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/; https://phabricator.wikimedia.org/T276306
CVE: CVE-2021-30159
Published: 2021-04-09
Description: An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Users can bypass intended restrictions on deleting pages in certain "fast double move" situations. MovePage::isValidMoveTarget() uses FOR UPDATE, but it's only called if Title::getArticleID() returns non-zero with no special flags. Next, MovePage::moveToInternal() will delete the page if getArticleID(READ_LATEST) is non-zero. Therefore, if the page is missing in the replica DB, isValidMove() will return true, and then moveToInternal() will unconditionally delete the page if it can be found in the master.
CVSS Score: 4.3 (MEDIUM)
References: https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html; https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/