deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-6884
Published: 2024-08-08
Description: The Gutenberg Blocks with AI by Kadence WP  WordPress plugin before 3.2.39 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/1768de0c-e4ea-4c98-abf1-7ac805f214b8/
CVE: CVE-2024-7150
Published: 2024-08-08
Description: The Slider by 10Web – Responsive Image Slider plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.2.57 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://plugins.trac.wordpress.org/browser/slider-wd/tags/1.2.57/frontend/models/WDSModelSlider.php#L6; https://plugins.trac.wordpress.org/changeset/3131688/; https://wordpress.org/plugins/slider-wd/#developers
CVE: CVE-2024-7548
Published: 2024-08-08
Description: The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'order' parameter in all versions up to, and including, 4.2.6.9.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://plugins.svn.wordpress.org/learnpress/tags/4.2.6.9.3/inc/curds/class-lp-course-curd.php; https://plugins.trac.wordpress.org/browser/learnpress/trunk/inc/curds/class-lp-course-curd.php#L828; https://plugins.trac.wordpress.org/changeset/3132002/
CVE: CVE-2023-7265
Published: 2024-08-08
Description: Permission verification vulnerability in the lock screen module
Impact: Successful exploitation of this vulnerability may affect availability
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: https://consumer.huawei.com/en/support/bulletin/2024/8/
CVE: CVE-2024-22069
Published: 2024-08-08
Description: There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords.
CVSS Score: 7.1 (HIGH)
CWE: CWE-269
References: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1036424
CVE: CVE-2024-42030
Published: 2024-08-08
Description: Access permission verification vulnerability in the content sharing pop-up module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-701
References: https://consumer.huawei.com/en/support/bulletin/2024/8/
CVE: CVE-2024-42031
Published: 2024-08-08
Description: Access permission verification vulnerability in the Settings module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16
References: https://consumer.huawei.com/en/support/bulletin/2024/8/
CVE: CVE-2024-42032
Published: 2024-08-08
Description: Access permission verification vulnerability in the Contacts module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-285
References: https://consumer.huawei.com/en/support/bulletin/2024/8/
CVE: CVE-2024-42252
Published: 2024-08-08
Description: In the Linux kernel, the following vulnerability has been resolved:

closures: Change BUG_ON() to WARN_ON()

If a BUG_ON() can be hit in the wild, it shouldn't be a BUG_ON()

For reference, this has popped up once in the CI, and we'll need more
info to debug it:

03240 ------------[ cut here ]------------
03240 kernel BUG at lib/closure.c:21!
03240 kernel BUG at lib/closure.c:21!
03240 Internal error: Oops - BUG: 00000000f2000800 [#1] SMP
03240 Modules linked in:
03240 CPU: 15 PID: 40534 Comm: kworker/u80:1 Not tainted 6.10.0-rc4-ktest-ga56da69799bd #25570
03240 Hardware name: linux,dummy-virt (DT)
03240 Workqueue: btree_update btree_interior_update_work
03240 pstate: 00001005 (nzcv daif -PAN -UAO -TCO -DIT +SSBS BTYPE=--)
03240 pc : closure_put+0x224/0x2a0
03240 lr : closure_put+0x24/0x2a0
03240 sp : ffff0000d12071c0
03240 x29: ffff0000d12071c0 x28: dfff[PII_REDACTED]00 x27: ffff0000d[PII_REDACTED]0 x26: [PII_REDACTED] x25: [PII_REDACTED] x24: [PII_REDACTED]
03240 x23: ffff0000c1f20180 x22: [PII_REDACTED] x21: ffff0000c1f20168
03240 x20: [PII_REDACTED] x19: ffff0000c1f20140 x18: [PII_REDACTED]
03240 x17:[PII_REDACTED]003aa0 x16:[PII_REDACTED]003ad0 x15: 1fffe0001c[PII_REDACTED]0 x14:[PII_REDACTED]000a1e x13: [PII_REDACTED] x12: 1fffe000183e402d
03240 x11: ffff6000183e402d x10: dfff[PII_REDACTED]00 x9 : ffff6000183e402e
03240 x8 : [PII_REDACTED] x7 : 00009fffe7c1bfd3 x6 : ffff0000c1f2016b
03240 x5 : ffff0000c1f20168 x4 : ffff6000183e402e x3 : ffff[PII_REDACTED]54
03240 x2 : [PII_REDACTED] x1 : [PII_REDACTED] x0 : 00000000a8[PII_REDACTED]0 Call trace:
03240  closure_put+0x224/0x2a0
03240  bch2_check_for_deadlock+0x910/0x1028
03240  bch2_six_check_for_deadlock+0x1c/0x30
03240  six_lock_slowpath.isra.0+0x29c/0xed0
03240  six_lock_ip_waiter+0xa8/0xf8
03240  __bch2_btree_node_lock_write+0x14c/0x298
03240  bch2_trans_lock_write+0x6d4/0xb10
03240  __bch2_trans_commit+0x135c/0x5520
03240  btree_interior_update_work+0x1248/0x1c10
03240  process_scheduled_works+0x53c/0xd90
03240  worker_thread+0x370/0x8c8
03240  kthread+0x258/0x2e8
03240  ret_from_fork+0x10/0x20
03240 Code: aa1303e0 d63f0020 a94363f7 17ffff8c (d4210000)
03240 ---[ end trace [PII_REDACTED] ]---
03240 Kernel panic - not syncing: Oops - BUG: Fatal exception
03240 SMP: stopping secondary CPUs
03241 SMP: failed to stop secondary CPUs 13,15
03241 Kernel Offset: disabled
03241 CPU features: 0x00,00000003,80000008,4240500b
03241 Memory Limit: none
03241 ---[ end Kernel panic - not syncing: Oops - BUG: Fatal exception ]---
03246 ========= FAILED TIMEOUT copygc_torture_no_checksum in 7200s
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617
References: https://git.kernel.org/stable/c/339b84ab6b1d66900c27bd999271cb2ae40ce812; https://git.kernel.org/stable/c/5d85f2ab79d5918a66539ebf046c099f7448db8d; https://git.kernel.org/stable/c/c894a74756478bb7aec894bcc513add3d554c0cf
CVE: CVE-2024-42253
Published: 2024-08-08
Description: In the Linux kernel, the following vulnerability has been resolved:

gpio: pca953x: fix pca953x_irq_bus_sync_unlock race

Ensure that `i2c_lock' is held when setting interrupt latch and mask in
pca953x_irq_bus_sync_unlock() in order to avoid races.

The other (non-probe) call site pca953x_gpio_set_multiple() ensures the
lock is held before calling pca953x_write_regs().

The problem occurred when a request raced against irq_bus_sync_unlock()
approximately once per thousand reboots on an i.MX8MP based system.

 * Normal case

   0-0022: write register AI|3a {03,02,00,00,01} Input latch P0
   0-0022: write register AI|49 {fc,fd,ff,ff,fe} Interrupt mask P0
   0-0022: write register AI|08 {ff,00,00,00,00} Output P3
   0-0022: write register AI|12 {fc,00,00,00,00} Config P3

 * Race case

   0-0022: write register AI|08 {ff,00,00,00,00} Output P3
   0-0022: write register AI|08 {03,02,00,00,01} *** Wrong register ***
   0-0022: write register AI|12 {fc,00,00,00,00} Config P3
   0-0022: write register AI|49 {fc,fd,ff,ff,fe} Interrupt mask P0
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-667
References: https://git.kernel.org/stable/c/58a5c93bd1a6e[PII_REDACTED]80f07e57ffe05ec34; https://git.kernel.org/stable/c/bfc6444b57dc7186b6acc964705d7516cbaf3904; https://git.kernel.org/stable/c/de7cffa53149c7b48bd1bb29b02390c9f05b7f41
CVE: CVE-2024-42254
Published: 2024-08-08
Description: In the Linux kernel, the following vulnerability has been resolved:

io_uring: fix error pbuf checking

Syz reports a problem, which boils down to NULL vs IS_ERR inconsistent
error handling in io_alloc_pbuf_ring().

KASAN: null-ptr-deref in range [0x[PII_REDACTED]000000-0x[PII_REDACTED]000007]
RIP: 0010:__io_remove_buffers+0xac/0x700 io_uring/kbuf.c:341
Call Trace:
 <TASK>
 io_put_bl io_uring/kbuf.c:378 [inline]
 io_destroy_buffers+0x14e/0x490 io_uring/kbuf.c:392
 io_ring_ctx_free+0xa00/0x1070 io_uring/io_uring.c:2613
 io_ring_exit_work+0x80f/0x8a0 io_uring/io_uring.c:2844
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
 worker_thread+0x86d/0xd40 kernel/workqueue.c:3390
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/68d19af95a353f5e2b021602180b65b303eba99d; https://git.kernel.org/stable/c/78aefac7efdffddf7889405b7c08e6e0f030fa35; https://git.kernel.org/stable/c/bcc87d978b834c298bbdd9c52454c5d0a946e97e
CVE: CVE-2024-42255
Published: 2024-08-08
Description: In the Linux kernel, the following vulnerability has been resolved:

tpm: Use auth only after NULL check in tpm_buf_check_hmac_response()

Dereference auth after NULL check in tpm_buf_check_hmac_response().
Otherwise, unless tpm2_sessions_init() was called, a call can cause NULL
dereference, when TCG_TPM2_HMAC is enabled.

[jarkko: adjusted the commit message.]
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/7dc357d343f134bf59815ff6098b93503ec8a23b; https://git.kernel.org/stable/c/b9afbb9a0c734197c59c[PII_REDACTED]1044bf1562
CVE: CVE-2024-42256
Published: 2024-08-08
Description: In the Linux kernel, the following vulnerability has been resolved:

cifs: Fix server re-repick on subrequest retry

When a subrequest is marked for needing retry, netfs will call
cifs_prepare_write() which will make cifs repick the server for the op
before renegotiating credits; it then calls cifs_issue_write() which
invokes smb2_async_writev() - which re-repicks the server.

If a different server is then selected, this causes the increment of
server->in_flight to happen against one record and the decrement to happen
against another, leading to misaccounting.

Fix this by just removing the repick code in smb2_async_writev().  As this
is only called from netfslib-driven code, cifs_prepare_write() should
always have been called first, and so server should never be NULL and the
preparatory step is repeated in the event that we do a retry.

The problem manifests as a warning looking something like:

 WARNING: CPU: 4 PID: 72896 at fs/smb/client/smb2ops.c:97 smb2_add_credits+0x3f0/0x9e0 [cifs]
 ...
 RIP: 0010:smb2_add_credits+0x3f0/0x9e0 [cifs]
 ...
  smb2_writev_callback+0x334/0x560 [cifs]
  cifs_demultiplex_thread+0x77a/0x11b0 [cifs]
  kthread+0x187/0x1d0
  ret_from_fork+0x34/0x60
  ret_from_fork_asm+0x1a/0x30

Which may be triggered by a number of different xfstests running against an
Azure server in multichannel mode.  generic/249 seems the most repeatable,
but generic/215, generic/249 and generic/308 may also show it.
CVSS Score: 9.8 (CRITICAL)
References: https://git.kernel.org/stable/c/b1d0a566769b6fb3795b5289fc1daf9e0638d97a; https://git.kernel.org/stable/c/de40579b903883274fe203865f29d66b168b7236
CVE: CVE-2024-42257
Published: 2024-08-08
Description: In the Linux kernel, the following vulnerability has been resolved:

ext4: use memtostr_pad() for s_volume_name

As with the other strings in struct ext4_super_block, s_volume_name is
not NUL terminated. The other strings were marked in commit 072ebb3bffe6
("ext4: add nonstring annotations to ext4.h"). Using strscpy() isn't
the right replacement for strncpy(); it should use memtostr_pad()
instead.
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/4378be89ddb7de88d984b67ecfd6191686c42817; https://git.kernel.org/stable/c/be27cd64461c45a6088a91a04eba5cd44e1767ef
CVE: CVE-2024-42033
Published: 2024-08-08
Description: Access control vulnerability in the security verification module
mpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-284
References: https://consumer.huawei.com/en/support/bulletin/2024/8/
CVE: CVE-2024-42034
Published: 2024-08-08
Description: LaunchAnywhere vulnerability in the account module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-840
References: https://https://consumer.huawei.com/en/support/bulletin/2024/8/
CVE: CVE-2024-42035
Published: 2024-08-08
Description: Permission control vulnerability in the App Multiplier module
Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality.
CVSS Score: 8.4 (HIGH)
CWE: CWE-862
References: https://consumer.huawei.com/en/support/bulletin/2024/8/
CVE: CVE-2024-42036
Published: 2024-08-08
Description: Access permission verification vulnerability in the Notepad module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 2.5 (LOW)
CWE: CWE-285
References: https://consumer.huawei.com/en/support/bulletin/2024/8/
CVE: CVE-2024-42037
Published: 2024-08-08
Description: Vulnerability of uncaught exceptions in the Graphics module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-248
References: https://https://consumer.huawei.com/en/support/bulletin/2024/8/
CVE: CVE-2024-42038
Published: 2024-08-08
Description: Vulnerability of PIN enhancement failures in the screen lock module
Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://consumer.huawei.com/en/support/bulletin/2024/8/
CVE: CVE-2024-4210
Published: 2024-08-08
Description: A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 12.6 before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. It is possible for an attacker to cause a denial of service using crafted adoc files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://gitlab.com/gitlab-org/gitlab/-/issues/458245; https://hackerone.com/reports/2431562
CVE: CVE-2024-4784
Published: 2024-08-08
Description: An issue was discovered in GitLab EE starting from version 16.7 before 17.0.6, version 17.1 before 17.1.4 and 17.2 before 17.2.2 that allowed bypassing the password re-entry requirement to approve a policy.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-305, CWE-287
References: https://gitlab.com/gitlab-org/gitlab/-/issues/461248; https://hackerone.com/reports/2486223
CVE: CVE-2024-6329
Published: 2024-08-08
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2, which causes the web interface to fail to render the diff correctly when the path is encoded.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-116, CWE-116
References: https://gitlab.com/gitlab-org/gitlab/-/issues/468937; https://hackerone.com/reports/2542483
CVE: CVE-2024-2800
Published: 2024-08-08
Description: ReDoS flaw in RefMatcher when matching branch names using wildcards in GitLab EE/CE affecting all versions from 11.3 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allows denial of service via Regex backtracking.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://gitlab.com/gitlab-org/gitlab/-/issues/451293; https://hackerone.com/reports/2416332
CVE: CVE-2024-3035
Published: 2024-08-08
Description: A permission check vulnerability in GitLab CE/EE affecting all versions starting from 8.12 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2  allowed for LFS tokens to read and write to the user owned repositories.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://gitlab.com/gitlab-org/gitlab/-/issues/452297; https://hackerone.com/reports/2424715
CVE: CVE-2024-3114
Published: 2024-08-08
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 11.10 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2, with the processing logic for parsing invalid commits can lead to a regular expression DoS attack on the server.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://gitlab.com/gitlab-org/gitlab/-/issues/452547; https://hackerone.com/reports/2416630
CVE: CVE-2024-3958
Published: 2024-08-08
Description: An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. An issue was found that allows someone  to abuse a discrepancy between the Web application display and the git command line interface to social engineer victims into cloning non-trusted code.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-94, CWE-94
References: https://gitlab.com/gitlab-org/gitlab/-/issues/456988; https://hackerone.com/reports/2437784
CVE: CVE-2024-4207
Published: 2024-08-08
Description: A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 prior 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2. When viewing an XML file in a repository in raw mode, it can be made to render as HTML if viewed under specific circumstances.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gitlab.com/gitlab-org/gitlab/-/issues/458236; https://hackerone.com/reports/2473917
CVE: CVE-2024-5423
Published: 2024-08-08
Description: Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2 which allowed an attacker to cause resource exhaustion via banzai pipeline.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://gitlab.com/gitlab-org/gitlab/-/issues/463807; https://hackerone.com/reports/2518563
CVE: CVE-2024-7554
Published: 2024-08-08
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9 before 17.0.6, all versions starting from 17.1 before 17.1.4, all versions starting from 17.2 before 17.2.2. Under certain conditions, access tokens may have been logged when an API request was made in a specific manner.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: https://gitlab.com/gitlab-org/gitlab/-/issues/471555
CVE: CVE-2024-7610
Published: 2024-08-08
Description: A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 15.9 before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. It is possible for an attacker to cause catastrophic backtracking while parsing results from Elasticsearch.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400
References: https://gitlab.com/gitlab-org/gitlab/-/issues/468917
CVE: CVE-2024-3659
Published: 2024-08-08
Description: Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints.
In order to exploit this vulnerability, one has to have access to the administrative portal of the router.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-77, CWE-77
References: https://cert.pl/en/posts/2024/08/CVE-2024-3659; https://cert.pl/posts/2024/08/CVE-2024-3659
CVE: CVE-2024-7348
Published: 2024-08-08
Description: Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. Versions before PostgreSQL 16.4, 15.8, 14.13, 13.16, and 12.20 are affected.
CVSS Score: 8.8 (HIGH)
CWE: CWE-367, CWE-367
References: https://www.postgresql.org/support/security/CVE-2024-7348/; http://www.openwall.com/lists/oss-security/2024/08/11/1; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-41942
Published: 2024-08-08
Description: JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to versions 4.1.6 and 5.1.0, if a user is granted the `admin:users` scope, they may escalate their own privileges by making themselves a full admin user. The impact is relatively small in that `admin:users` is already an extremely privileged scope only granted to trusted users.
In effect, `admin:users` is equivalent to `admin=True`, which is not intended. Note that the change here only prevents escalation to the built-in JupyterHub admin role that has unrestricted permissions. It does not prevent users with e.g. `groups` permissions from granting themselves or other users permissions via group membership, which is intentional. Versions 4.1.6 and 5.1.0 fix this issue.
CVSS Score: 7.2 (HIGH)
CWE: CWE-274
References: https://github.com/jupyterhub/jupyterhub/commit/99e2720b0fc626cbeeca3c6337f917fdacfaa428; https://github.com/jupyterhub/jupyterhub/commit/ff2db557a85b6980f90c3158634bf924063ab8ba; https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-9x4q-3gxw-849f
CVE: CVE-2024-42354
Published: 2024-08-08
Description: Shopware is an open commerce platform. The store-API works with regular entities and not expose all fields for the public API; fields need to be marked as ApiAware in the EntityDefinition. So only ApiAware fields of the EntityDefinition will be encoded to the final JSON. Prior to versions 6.6.5.1 and 6.5.8.13, the processing of the Criteria did not considered ManyToMany associations and so they were not considered properly and the protections didn't get used. This issue cannot be reproduced with the default entities by Shopware, but can be triggered with extensions. Update to Shopware 6.6.5.1 or 6.5.8.13 to receive a patch. For older versions of 6.2, 6.3,  and 6.4, corresponding security measures are also available via a plugin.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/shopware/core/commit/a784aa1cec0624e36e0ee4d41aeebaed40e0442f; https://github.com/shopware/core/commit/d35ee2eda5c995faeb08b3dad127eab65c64e2a2; https://github.com/shopware/shopware/commit/8504ba7e56e53add6a1d5b9d45015e3d899cd0ac
CVE: CVE-2024-42355
Published: 2024-08-08
Description: Shopware, an open ecommerce platform, has a new Twig Tag `sw_silent_feature_call` which silences deprecation messages while triggered in this tag. Prior to versions 6.6.5.1 and 6.5.8.13, it accepts as parameter a string the feature flag name to silence, but this parameter is not escaped properly and allows execution of code. Update to Shopware 6.6.5.1 or 6.5.8.13 to receive a patch. For older versions of 6.2, 6.3,  and 6.4, corresponding security measures are also available via a plugin.
CVSS Score: 8.3 (HIGH)
CWE: CWE-1336, CWE-94
References: https://github.com/shopware/core/commit/a784aa1cec0624e36e0ee4d41aeebaed40e0442f; https://github.com/shopware/core/commit/d35ee2eda5c995faeb08b3dad127eab65c64e2a2; https://github.com/shopware/shopware/commit/445c6763cc093fbd651e0efaa4150deae4ae60da