deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-15961
Published: 2020-01-15
Description: A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to inefficient MIME parsing routines that result in extremely long scan times of specially formatted email files. An attacker could exploit this vulnerability by sending a crafted email file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to scan the crafted email file indefinitely, resulting in a denial of service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-400
References: https://bugzilla.clamav.net/show_bug.cgi?id=12380; https://lists.debian.org/debian-lts-announce/2020/02/msg00016.html; https://quickview.cloudapps.cisco.com/quickview/bug/CSCvr56010
CVE: CVE-2019-18244
Published: 2020-01-15
Description: In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts are customized during installation or upgrade of PI Vision. The update fixes a previously reported issue.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE: CVE-2019-18271
Published: 2020-01-15
Description: OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administration site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.us-cert.gov/ics/advisories/icsa-20-014-06; https://www.us-cert.gov/ics/advisories/icsa-20-014-06
CVE: CVE-2019-18273
Published: 2020-01-15
Description: OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is vulnerable to cross-site scripting, which may allow invalid input to be introduced.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.us-cert.gov/ics/advisories/icsa-20-014-06; https://www.us-cert.gov/ics/advisories/icsa-20-014-06
CVE: CVE-2019-18275
Published: 2020-01-15
Description: OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing analysis data reference attributes.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://www.us-cert.gov/ics/advisories/icsa-20-014-06; https://www.us-cert.gov/ics/advisories/icsa-20-014-06
CVE: CVE-2020-1929
Published: 2020-01-15
Description: The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally which disables trust checking for any code running in the same JVM.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://lists.apache.org/thread.html/rdd0e85b71bf0274471b40fa1396d77f7b2d1165eaea4becbdc69aa04%40%3Cuser.beam.apache.org%3E; https://lists.apache.org/thread.html/rdd0e85b71bf0274471b40fa1396d77f7b2d1165eaea4becbdc69aa04%40%3Cuser.beam.apache.org%3E
CVE: CVE-2020-3941
Published: 2020-01-15
Description: The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine where Tools is installed. This vulnerability is not present in VMware Tools 11.x.y since the affected functionality is not present in VMware Tools 11.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://www.vmware.com/security/advisories/VMSA-2020-0002.html; https://www.vmware.com/security/advisories/VMSA-2020-0002.html
CVE: CVE-2009-3724
Published: 2020-01-15
Description: python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://snyk.io/vuln/SNYK-PYTHON-PYRAD-40000; https://www.openwall.com/lists/oss-security/2009/10/29/5; https://snyk.io/vuln/SNYK-PYTHON-PYRAD-40000
CVE: CVE-2009-5025
Published: 2020-01-15
Description: A backdoor (aka BMSA-2009-07) was found in PyForum v1.0.3 where an attacker who knows a valid user email could force a password reset on behalf of that user.
CVSS Score: 7.5 (HIGH)
CWE: CWE-640
References: https://packetstormsecurity.com/files/cve/CVE-2009-5025; https://seclists.org/fulldisclosure/2009/Nov/353; https://www.openwall.com/lists/oss-security/2011/07/26/7
CVE: CVE-2009-5068
Published: 2020-01-15
Description: There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is shared by several "co-admins" that are not trusted beyond the SMF deployment. This vulnerability allows them to read arbitrary files on the filesystem and therefore gain new privileges by reading the settings.php with the database passwords.
CVSS Score: 7.2 (HIGH)
CWE: CWE-312
References: http://www.openwall.com/lists/oss-security/2013/02/01/4; http://www.openwall.com/lists/oss-security/2013/02/01/4
CVE: CVE-2019-15010
Published: 2020-01-15
Description: Bitbucket Server and Bitbucket Data Center versions starting from version 3.0.0 before version 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version 6.2.0 before 6.2.7, from version 6.3.0 before 6.3.6, from version 6.4.0 before 6.4.4, from version 6.5.0 before 6.5.3, from version 6.6.0 before 6.6.3, from version 6.7.0 before 6.7.3, from version 6.8.0 before 6.8.2, and from version 6.9.0 before 6.9.1 had a Remote Code Execution vulnerability via certain user input fields. A remote attacker with user level permissions can exploit this vulnerability to run arbitrary commands on the victim's systems. Using a specially crafted payload as user input, the attacker can execute arbitrary commands on the victim's Bitbucket Server or Bitbucket Data Center instance.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://jira.atlassian.com/browse/BSERV-12098; https://jira.atlassian.com/browse/BSERV-12098
CVE: CVE-2019-15012
Published: 2020-01-15
Description: Bitbucket Server and Bitbucket Data Center from version 4.13. before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version 6.2.0 before 6.2.7, from version 6.3.0 before 6.3.6, from version 6.4.0 before 6.4.4, from version 6.5.0 before 6.5.3, from version 6.6.0 before 6.6.3, from version 6.7.0 before 6.7.3, from version 6.8.0 before 6.8.2, from version 6.9.0 before 6.9.1 had a Remote Code Execution vulnerability via the edit-file request. A remote attacker with write permission on a repository can write to any arbitrary file to the victims Bitbucket Server or Bitbucket Data Center instance using the edit-file endpoint, if the user has Bitbucket Server or Bitbucket Data Center running, and has the permission to write the file at that destination. In some cases, this can result in execution of arbitrary code by the victims Bitbucket Server or Bitbucket Data Center instance.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://jira.atlassian.com/browse/BSERV-12100; https://jira.atlassian.com/browse/BSERV-12100
CVE: CVE-2019-20097
Published: 2020-01-15
Description: Bitbucket Server and Bitbucket Data Center versions starting from 1.0.0 before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version 6.2.0 before 6.2.7, from version 6.3.0 before 6.3.6, from version 6.4.0 before 6.4.4, from version 6.5.0 before 6.5.3, from version 6.6.0 before 6.6.3, from version 6.7.0 before 6.7.3, from version 6.8.0 before 6.8.2, from version 6.9.0 before 6.9.1 had a Remote Code Execution vulnerability via the post-receive hook. A remote attacker with permission to clone and push files to a repository on the victim's Bitbucket Server or Bitbucket Data Center instance, can exploit this vulnerability to execute arbitrary commands on the Bitbucket Server or Bitbucket Data Center systems, using a file with specially crafted content.
CVSS Score: 8.8 (HIGH)
References: https://jira.atlassian.com/browse/BSERV-12099; https://jira.atlassian.com/browse/BSERV-12099
CVE: CVE-2019-19854
Published: 2020-01-15
Description: An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. It does not use CSRF Tokens to mitigate against CSRF; it uses the Origin header (which must match the request origin). This is problematic in conjunction with XSS: one can escalate privileges from User level to Administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://websec.nl/news.php; https://websec.nl/news.php
CVE: CVE-2019-19855
Published: 2020-01-15
Description: An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/list_user allows stored XSS via the auth_type parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/SerpicoProject/Serpico/commit/270f05ca6e51c87bb0867abb0511b61bf2aae182; https://websec.nl/news.php; https://github.com/SerpicoProject/Serpico/commit/270f05ca6e51c87bb0867abb0511b61bf2aae182
CVE: CVE-2019-19856
Published: 2020-01-15
Description: An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The User Type on the admin/list_user page allows stored XSS via the type parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/SerpicoProject/Serpico/commit/270f05ca6e51c87bb0867abb0511b61bf2aae182; https://websec.nl/news.php; https://github.com/SerpicoProject/Serpico/commit/270f05ca6e51c87bb0867abb0511b61bf2aae182
CVE: CVE-2019-19857
Published: 2020-01-15
Description: An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. An admin can change their password without providing the current password, by using interfaces outside the Change Password screen. Thus, requiring the admin to enter an Old Password value on the Change Password screen does not enhance security. This is problematic in conjunction with XSS.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://websec.nl/news.php; https://websec.nl/news.php
CVE: CVE-2019-19858
Published: 2020-01-15
Description: An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/add_user/UID allows stored XSS via the author parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/SerpicoProject/Serpico/commit/270f05ca6e51c87bb0867abb0511b61bf2aae182; https://websec.nl/news.php; https://github.com/SerpicoProject/Serpico/commit/270f05ca6e51c87bb0867abb0511b61bf2aae182
CVE: CVE-2019-19859
Published: 2020-01-15
Description: An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The Add Collaborator allows unlimited data via the author parameter, even if the data does not match anything in the database.
CVSS Score: 5.3 (MEDIUM)
References: https://www.websec.nl/news.php; https://www.websec.nl/news.php
CVE: CVE-2020-7044
Published: 2020-01-16
Description: In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using >= and <= to resolve off-by-one errors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-193
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16324; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f90a3720b73ca[PII_REDACTED]6e2a478c4f70ca03
CVE: CVE-2020-7045
Published: 2020-01-16
Description: In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16258; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=01f261de41f4dd3233ef578e5c0ffb9c25c7d14d; https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html
CVE: CVE-2020-7105
Published: 2020-01-16
Description: async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/redis/hiredis/issues/747; https://lists.debian.org/debian-lts-announce/2020/01/msg00028.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/76ZDGWBV3YEEQ2YC65ZJEQLKQFVFBZHX/
CVE: CVE-2020-7106
Published: 2020-01-16
Description: Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as demonstrated by the description parameter in data_sources.php (a raw string from the database that is displayed by $header to trigger the XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html
CVE: CVE-2020-7107
Published: 2020-01-16
Description: The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display_FAQ to Shortcodes/DisplayFAQs.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2222959/ultimate-faqs/tags/1.8.30/Shortcodes/DisplayFAQs.php; https://wordpress.org/plugins/ultimate-faqs/#developers; https://wpvulndb.com/vulnerabilities/10006
CVE: CVE-2020-7108
Published: 2020-01-16
Description: The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/156275/LearnDash-WordPress-LMS-3.1.2-Cross-Site-Scripting.html; https://learndash.releasenotes.io/release/uCskc-version-312; https://wpvulndb.com/vulnerabilities/10026
CVE: CVE-2019-20327
Published: 2020-01-16
Description: Insecure permissions in cwrapper_perl in Centreon Infrastructure Monitoring Software through 19.10 allow local attackers to gain privileges. (cwrapper_perl is a setuid executable allowing execution of Perl scripts with root privileges.)
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://gist.github.com/Diefunction/9237f46b8659a65ab08de8ec9c258139; https://www.centreon.com/en/; https://gist.github.com/Diefunction/9237f46b8659a65ab08de8ec9c258139
CVE: CVE-2019-10934
Published: 2020-01-16
Description: A vulnerability has been identified in TIA Portal V14 (All versions), TIA Portal V15 (All versions < V15.1 Update 7), TIA Portal V16 (All versions < V16 Update 6), TIA Portal V17 (All versions < V17 Update 4). Changing the contents of a configuration file could allow an attacker to execute arbitrary code with SYSTEM privileges. The security vulnerability could be exploited by an attacker with a valid account and limited access rights on the system. No user interaction is required. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://cert-portal.siemens.com/productcert/pdf/ssa-629512.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-629512.pdf
CVE: CVE-2019-10940
Published: 2020-01-16
Description: A vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1). Incorrect session validation could allow an attacker with a valid session, with low privileges, to perform firmware updates and other administrative operations on connected devices. The security vulnerability could be exploited by an attacker with network access to the affected system. An attacker must have access to a low privileged account in order to exploit the vulnerability. An attacker could use the vulnerability to compromise confidentiality, integrity, and availability of the affected system and underlying components. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-266, CWE-269
References: https://cert-portal.siemens.com/productcert/pdf/ssa-880233.pdf; https://www.us-cert.gov/ics/advisories/icsa-20-014-02; https://cert-portal.siemens.com/productcert/pdf/ssa-880233.pdf
CVE: CVE-2019-13939
Published: 2020-01-16
Description: A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions < V2.8.2), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), APOGEE PXC Modular (BACnet) (All versions < V3.5.3), APOGEE PXC Modular (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC00-U (All versions >= V2.3x and < V6.00.327), Desigo PXC001-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC100-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC12-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC128-U (All versions >= V2.3x and < V6.00.327), Desigo PXC200-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC22-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC22.1-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC36.1-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC50-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC64-U (All versions >= V2.3x and < V6.00.327), Desigo PXM20-E (All versions >= V2.3 < V6.0.327), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus Source Code (All versions), SIMOTICS CONNECT 400 (All versions < V0.3.0.330), TALON TC Compact (BACnet) (All versions < V3.5.3), TALON TC Modular (BACnet) (All versions < V3.5.3). By sending specially crafted DHCP packets to a device where the DHCP client is enabled, an attacker could change the IP address of the device to an invalid value.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: https://cert-portal.siemens.com/productcert/html/ssa-162506.html; https://cert-portal.siemens.com/productcert/html/ssa-434032.html; https://cert-portal.siemens.com/productcert/pdf/ssa-162506.pdf
CVE: CVE-2019-18282
Published: 2020-01-16
Description: The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash (instead of siphash) is used. The hashrnd value remains the same starting from boot time, and can be inferred by an attacker. This affects net/core/flow_dissector.c and related code.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-330
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.10; https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=55667441c84fa5e0911a0aac44fb059c15ba6da2; https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE: CVE-2019-19278
Published: 2020-01-16
Description: A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-.... MLFB 6SR5...-.....-.... With option A30 (HMIs 12 inches or larger) (All versions), SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR325.-.....-.... (High Availability) (All versions). The affected device contains a vulnerability that could allow an unauthenticated attacker to restore the affected device to a point where predefined application and operating system protection mechanisms are not in place. Successful exploitation requires physical access to the system, but no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentialiy, integrity and availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-693, CWE-362
References: https://cert-portal.siemens.com/productcert/pdf/ssa-242353.pdf; https://www.us-cert.gov/ics/advisories/icsa-20-014-04; https://cert-portal.siemens.com/productcert/pdf/ssa-242353.pdf
CVE: CVE-2010-3048
Published: 2020-01-16
Description: Cisco Unified Personal Communicator 7.0 (1.13056) does not free allocated memory for received data and does not perform validation if memory allocation is successful, causing a remote denial of service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.fuzzmyapp.com/advisories/FMA-2010-002/FMA-2010-002-EN.xml; http://www.fuzzmyapp.com/advisories/FMA-2010-002/FMA-2010-002-EN.xml
CVE: CVE-2019-12423
Published: 2020-01-16
Description: Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local keystore (JKS/PKCS12) by specifing the path of the keystore and the alias of the keystore entry. This case is not vulnerable. However it is also possible to obtain the keys from a JWK keystore file, by setting the configuration parameter "rs.security.keystore.type" to "jwk". For this case all keys are returned in this file "as is", including all private key and secret key credentials. This is an obvious security risk if the user has configured the signature keystore file with private or secret key credentials. From CXF 3.3.5 and 3.2.12, it is mandatory to specify an alias corresponding to the id of the key in the JWK file, and only this key is returned. In addition, any private key information is omitted by default. "oct" keys, which contain secret keys, are not returned at all.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: http://cxf.apache.org/security-advisories.data/CVE-2019-12423.txt.asc?version=1&modificationDate=[PII_REDACTED]00&api=v2; https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E; https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E
CVE: CVE-2019-13524
Published: 2020-01-16
Description: GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versions(End of Life) may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service condition. An operator must reboot the CPU module after removing battery or energy pack to recover from halt-mode.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.us-cert.gov/ics/advisories/icsa-20-014-01; https://www.us-cert.gov/ics/advisories/icsa-20-014-01
CVE: CVE-2019-17573
Published: 2020-01-16
Description: By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack, which allows a malicious actor to inject javascript into the web page. Please note that the attack exploits a feature which is not typically not present in modern browsers, who remove dot segments before sending the request. However, Mobile applications may be vulnerable.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://cxf.apache.org/security-advisories.data/CVE-2019-17573.txt.asc?version=1&modificationDate=[PII_REDACTED]00&api=v2; http://www.openwall.com/lists/oss-security/2020/11/12/2; https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E