deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-27772
Published: 2020-12-04
Description: A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned int`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS Score: 3.3 (LOW)
CWE: CWE-190, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1898291; https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE: CVE-2020-27773
Published: 2020-12-04
Description: A flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` or division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS Score: 3.3 (LOW)
CWE: CWE-369, CWE-369
References: https://bugzilla.redhat.com/show_bug.cgi?id=1898295; https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE: CVE-2020-28950
Published: 2020-12-04
Description: The installer of Kaspersky Anti-Ransomware Tool (KART) prior to KART 4.0 Patch C was vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges during installation process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720; https://exchange.xforce.ibmcloud.com/vulnerabilities/192653; https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720
CVE: CVE-2020-29572
Published: 2020-12-06
Description: app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/0bfc0bf38a7758b27c5c446fec5e3b905e5a54ab; https://github.com/MISP/MISP/commit/0bfc0bf38a7758b27c5c446fec5e3b905e5a54ab
CVE: CVE-2020-29573
Published: 2020-12-06
Description: sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern, as seen when passing a \x00\x04\x00\x00\x00\x00\x00\x00\x00\x04 value to sprintf. NOTE: the issue does not affect glibc by default in 2016 or later (i.e., 2.23 or later) because of commits made in 2015 for inlining of C99 math functions through use of GCC built-ins. In other words, the reference to 2.23 is intentional despite the mention of "Fixed for glibc 2.33" in the 26649 reference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://security.gentoo.org/glsa/202101-20; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://sourceware.org/bugzilla/show_bug.cgi?id=26649
CVE: CVE-2020-28727
Published: 2020-12-07
Description: Cross-site scripting (XSS) exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seeddms.com; https://sourceforge.net/p/seeddms/code/ci/32b03b1e5880e2f38cecf4ac7743f8f62f33043f/; https://sourceforge.net/projects/seeddms/files/
CVE: CVE-2020-5798
Published: 2020-12-07
Description: inSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain privileges of a root user from a lower privileged user due to improper integrity checks and directory permissions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-354
References: https://www.tenable.com/security/research/tra-2020-67; https://www.tenable.com/security/research/tra-2020-67%2Chttps://docs.druva.com/001_inSync_Cloud/Cloud/010_Release_Details/010_inSync_Cloud_Updates; https://www.tenable.com/security/research/tra-2020-67
CVE: CVE-2020-5799
Published: 2020-12-07
Description: The Eat Spray Love mobile app for both iOS and Android contains a backdoor account that, when modified, allowed privileged access to restricted functionality and to other users' data.
CVSS Score: 9.8 (CRITICAL)
References: https://www.tenable.com/security/research/tra-2020-65; https://www.tenable.com/security/research/tra-2020-65
CVE: CVE-2020-5800
Published: 2020-12-07
Description: The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-669
References: https://www.tenable.com/security/research/tra-2020-65; https://www.tenable.com/security/research/tra-2020-65
CVE: CVE-2020-9247
Published: 2020-12-07
Description: There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200729-03-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200729-03-smartphone-en
CVE: CVE-2020-27151
Published: 2020-12-07
Description: An issue was discovered in Kata Containers through 1.11.3 and 2.x through 2.0-rc1. The runtime will execute binaries given using annotations without any kind of validation. Someone who is granted access rights to a cluster will be able to have kata-runtime execute arbitrary binaries as root on the worker nodes.
CVSS Score: 8.8 (HIGH)
References: https://bugs.launchpad.net/katacontainers.io/+bug/1878234; https://github.com/kata-containers/kata-containers/releases/tag/2.0.0; https://github.com/kata-containers/runtime/releases/tag/1.11.5
CVE: CVE-2020-26122
Published: 2020-12-07
Description: Inspur NF5266M5 through 3.21.2 and other server M5 devices allow remote code execution via administrator privileges. The Baseboard Management Controller (BMC) program of INSPUR server is weak in checking the firmware and lacks the signature verification mechanism, the attacker who obtains the administrator's rights can control the BMC by inserting malicious code into the firmware program and bypassing the current verification mechanism to upgrade the BMC.
CVSS Score: 7.2 (HIGH)
CWE: CWE-347
References: https://en.inspur.com/en/2487134/index.html; https://en.inspur.com/en/security_bulletins/security_advisory2/2543921/index.html; https://en.inspur.com/en/2487134/index.html
CVE: CVE-2020-26513
Published: 2020-12-07
Description: An issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The ReqIF XML data, used by the codebeamer ALM application to import projects, is parsed by insecurely configured software components, which can be abused for XML External Entity Attacks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611
References: https://compass-security.com/fileadmin/Research/Advisories/2020-09_CSNC-2020-008_Intland_codeBeamer_ALM_XXE.txt; https://intland.com/codebeamer/application-lifecycle-management/; https://compass-security.com/fileadmin/Research/Advisories/2020-09_CSNC-2020-008_Intland_codeBeamer_ALM_XXE.txt
CVE: CVE-2020-29595
Published: 2020-12-07
Description: PlugIns\IDE_ACDStd.apl in ACDSee Photo Studio Studio Professional 2021 14.0 Build 1705 has a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x[PII_REDACTED]0031aa.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/secluck/pentest/blob/main/000078.md; https://github.com/secluck/pentest/blob/main/000078.md
CVE: CVE-2020-13945
Published: 2020-12-07
Description: In Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules. Eventually, the default token is allowed to access APISIX management data. This affects versions 1.2, 1.3, 1.4, 1.5.
CVSS Score: 6.5 (MEDIUM)
References: http://packetstormsecurity.com/files/166228/Apache-APISIX-Remote-Code-Execution.html; https://lists.apache.org/thread.html/r792feb29964067a4108f53e8579a1e9bd1c8b5b9bc95618c814faf2f%40%3Cdev.apisix.apache.org%3E; http://packetstormsecurity.com/files/166228/Apache-APISIX-Remote-Code-Execution.html
CVE: CVE-2020-17521
Published: 2020-12-07
Description: Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Users not using the extension methods mentioned in the advisory are not affected, but may wish to read the advisory for further details. Versions Affected: 2.0 to 2.4.20, 2.5.0 to 2.5.13, 3.0.0 to 3.0.6, and 4.0.0-alpha-1. Fixed in versions 2.4.21, 2.5.14, 3.0.7, 4.0.0-alpha-2.
CVSS Score: 5.5 (MEDIUM)
References: https://groovy-lang.org/security.html#CVE-2020-17521; https://lists.apache.org/thread.html/r4b2f13c302eec98838ff[PII_REDACTED]fb9b75bc1038016ba00ebf6c08%40%3Cdev.atlas.apache.org%3E; https://lists.apache.org/thread.html/ra9dab34bf8625511f23692ad0fcee2725f782e9aad6c5cdff6cf4465%40%3Cnotifications.groovy.apache.org%3E
CVE: CVE-2020-29597
Published: 2020-12-07
Description: IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability. This vulnerability allows unauthenticated attackers to upload files into the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/160784/Incom-CMS-2.0-File-Upload.html; https://github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2020-12-07-incom-insecure-up.md; https://m4dm0e.github.io/2020/12/07/incom-insecure-up.html
CVE: CVE-2020-29599
Published: 2020-12-07
Description: ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-91
References: https://github.com/ImageMagick/ImageMagick/discussions/2851; https://insert-script.blogspot.com/2020/11/imagemagick-shell-injection-via-pdf.html; https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html
CVE: CVE-2020-29600
Published: 2020-12-07
Description: In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2[PII_REDACTED].
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891469; https://github.com/eldy/awstats/issues/90; https://lists.debian.org/debian-lts-announce/2020/12/msg00035.html
CVE: CVE-2020-27641
Published: 2020-12-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-29136. Reason: This candidate is a reservation duplicate of CVE-2020-29136. Notes: All CVE users should reference CVE-2020-29136 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-28935
Published: 2020-12-07
Description: NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink attack. When writing the PID file, Unbound and NSD create the file if it is not there, or open an existing file for writing. In case the file was already present, they would follow symlinks if the file happened to be a symlink instead of a regular file. An additional chown of the file would then take place after it was written, making the user Unbound/NSD is supposed to run as the new owner of the file. If an attacker has local access to the user Unbound/NSD runs as, she could create a symlink in place of the PID file pointing to a file that she would like to erase. If then Unbound/NSD is killed and the PID file is not cleared, upon restarting with root privileges, Unbound/NSD will rewrite any file pointed at by the symlink. This is a local vulnerability that could create a Denial of Service of the system Unbound/NSD is running on. It requires an attacker having access to the limited permission user Unbound/NSD runs as and point through the symlink to a critical file on the system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://lists.debian.org/debian-lts-announce/2021/02/msg00017.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00024.html; https://security.gentoo.org/glsa/202101-38
CVE: CVE-2020-8563
Published: 2020-12-07
Description: In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects < v1.19.3.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://github.com/kubernetes/kubernetes/issues/95621; https://groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8564
Published: 2020-12-07
Description: In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects < v1.19.3, < v1.18.10, < v1.17.13.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://github.com/kubernetes/kubernetes/issues/95622; https://groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8565
Published: 2020-12-07
Description: In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. This affects <= v1.19.3, <= v1.18.10, <= v1.17.13, < v1.20.0-alpha2.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://github.com/kubernetes/kubernetes/issues/95623; https://groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ; https://github.com/kubernetes/kubernetes/issues/95623
CVE: CVE-2020-8566
Published: 2020-12-07
Description: In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during provisioning of Ceph RBD persistent claims. This affects < v1.19.3, < v1.18.10, < v1.17.13.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://github.com/kubernetes/kubernetes/issues/95624; https://groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-25628
Published: 2020-12-08
Description: The filter in the tag manager required extra sanitizing to prevent a reflected XSS risk. This affects 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. Fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-69340; https://moodle.org/mod/forum/discuss.php?d=410840; http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-69340
CVE: CVE-2020-25629
Published: 2020-12-08
Description: A vulnerability was found in Moodle where users with "Log in as" capability in a course context (typically, course managers) may gain access to some site administration capabilities by "logging in as" a System manager. This affects 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. This is fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284, CWE-862
References: https://moodle.org/mod/forum/discuss.php?d=410841; https://moodle.org/mod/forum/discuss.php?d=410841
CVE: CVE-2020-25630
Published: 2020-12-08
Description: A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, which could lead to a denial of service risk. This affects versions 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. Fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://moodle.org/mod/forum/discuss.php?d=410842; https://moodle.org/mod/forum/discuss.php?d=410842
CVE: CVE-2020-25631
Published: 2020-12-08
Description: A vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8.4 and 3.7 to 3.7.7 where it was possible to include JavaScript in a book's chapter title, which was not escaped on the "Add new chapter" page. This is fixed in 3.9.2, 3.8.5 and 3.7.8.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://moodle.org/mod/forum/discuss.php?d=410843; https://moodle.org/mod/forum/discuss.php?d=410843
CVE: CVE-2020-25677
Published: 2020-12-08
Description: A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312
References: https://bugzilla.redhat.com/show_bug.cgi?id=1892108; https://bugzilla.redhat.com/show_bug.cgi?id=1892108
CVE: CVE-2020-25692
Published: 2020-12-08
Description: A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=1894567; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://bugzilla.redhat.com/show_bug.cgi?id=1894567
CVE: CVE-2020-27818
Published: 2020-12-08
Description: A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a temporary denial of service, posing a low risk to application availability.
CVSS Score: 3.3 (LOW)
CWE: CWE-120, CWE-125
References: https://bodhi.fedoraproject.org/updates/FEDORA-2020-04d5e1ce26; https://bodhi.fedoraproject.org/updates/FEDORA-2020-23432b7b72; https://bodhi.fedoraproject.org/updates/FEDORA-2020-27b168926a
CVE: CVE-2020-27822
Published: 2020-12-08
Description: A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-401
References: https://bugzilla.redhat.com/show_bug.cgi?id=1904060; https://bugzilla.redhat.com/show_bug.cgi?id=1904060
CVE: CVE-2020-26253
Published: 2020-12-08
Description: Kirby is a CMS. In Kirby CMS (getkirby/cms) before version 3.3.6, and Kirby Panel before version 2.5.14 there is a vulnerability in which the admin panel may be accessed if hosted on a .dev domain. In order to protect new installations on public servers that don't have an admin account for the Panel yet, we block account registration there by default. This is a security feature, which we implemented years ago in Kirby 2. It helps to avoid that you forget registering your first admin account on a public server. In this case – without our security block – someone else might theoretically be able to find your site, find out it's running on Kirby, find the Panel and then register the account first. It's an unlikely situation, but it's still a certain risk. To be able to register the first Panel account on a public server, you have to enforce the installer via a config setting. This helps to push all users to the best practice of registering your first Panel account on your local machine and upload it together with the rest of the site. This installation block implementation in Kirby versions before 3.3.6 still assumed that .dev domains are local domains, which is no longer true. In the meantime, those domains became publicly available. This means that our installation block is no longer working as expected if you use a .dev domain for your Kirby site. Additionally the local installation check may also fail if your site is behind a reverse proxy. You are only affected if you use a .dev domain or your site is behind a reverse proxy and you have not yet registered your first Panel account on the public server and someone finds your site and tries to login at `yourdomain.dev/panel` before you register your first account. You are not affected if you have already created one or multiple Panel accounts (no matter if on a .dev domain or behind a reverse proxy). The problem has been patched in Kirby 3.3.6. Please upgrade to this or a later version to fix the vulnerability.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-346, CWE-346
References: https://github.com/getkirby-v2/panel/commit/7f9ac1876bacb89fd8f142f5e561a02ebb725baa; https://github.com/getkirby/kirby/releases/tag/3.3.6; https://github.com/getkirby/kirby/security/advisories/GHSA-2ccx-2gf3-8xvv
CVE: CVE-2020-17531
Published: 2020-12-08
Description: A Java Serialization vulnerability was found in Apache Tapestry 4. Apache Tapestry 4 will attempt to deserialize the "sp" parameter even before invoking the page's validate method, leading to deserialization without authentication. Apache Tapestry 4 reached end of life in 2008 and no update to address this issue will be released. Apache Tapestry 5 versions are not vulnerable to this issue. Users of Apache Tapestry 4 should upgrade to the latest Apache Tapestry 5 version.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: http://www.openwall.com/lists/oss-security/2022/12/02/1; https://lists.apache.org/thread.html/r700a6aa234dbff0555d4187bdc8274d7e4c0afbf35b9a3457f09ee76%40%3Cusers.tapestry.apache.org%3E; https://lists.apache.org/thread.html/r700a6aa234dbff0555d4187bdc8274d7e4c0afbf35b9a3457f09ee76%40%3Cusers.tapestry.apache.org%3E
CVE: CVE-2020-25889
Published: 2020-12-08
Description: Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/160397/Online-Bus-Booking-System-Project-Using-PHP-MySQL-1.0-SQL-Injection.html; http://seclists.org/fulldisclosure/2020/Dec/4; https://seclists.org/fulldisclosure/2020/Dec/4
CVE: CVE-2020-29539
Published: 2020-12-08
Description: A Cross-Site Scripting (XSS) issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote authenticated user run JavaScript from a malicious site.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://grave-rose.medium.com/two-systran-vulnerabilities-and-their-exploits-8bc83ba29e14; https://www.systransoft.com/translation-products/systran-pure-neural-server/; https://grave-rose.medium.com/two-systran-vulnerabilities-and-their-exploits-8bc83ba29e14