deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-51682
Published: 2024-11-04
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Builder – WordPress Theme Builder for Elementor ht-builder allows Stored XSS.This issue affects HT Builder – WordPress Theme Builder for Elementor: from n/a through <= 1.3.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/ht-builder/vulnerability/wordpress-ht-builder-wordpress-theme-builder-for-elementor-plugin-1-3-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-51683
Published: 2024-11-04
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Custom post type templates for Elementor custom-post-type-templates-for-elementor allows Stored XSS.This issue affects Custom post type templates for Elementor: from n/a through <= 1.10.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/custom-post-type-templates-for-elementor/vulnerability/wordpress-custom-post-type-templates-for-elementor-plugin-1-10-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-51685
Published: 2024-11-04
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Michael Gangolf Accordion title for Elementor allows Stored XSS.This issue affects Accordion title for Elementor: from n/a through 1.2.1.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/accordion-title-for-elementor/wordpress-accordion-title-for-elementor-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-10764
Published: 2024-11-04
Description: A vulnerability classified as critical has been found in Codezips Online Institute Management System 1.0. This affects an unknown part of the file /pages/save_user.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-284, CWE-434, CWE-434
References: https://github.com/xiaobsss/CVE/issues/1; https://vuldb.com/?ctiid.282951; https://vuldb.com/?id.282951
CVE: CVE-2024-10765
Published: 2024-11-04
Description: A vulnerability classified as critical was found in Codezips Online Institute Management System up to 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument old_image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-284, CWE-434, CWE-434
References: https://github.com/hbuzs/CVE/issues/1; https://vuldb.com/?ctiid.282952; https://vuldb.com/?id.282952
CVE: CVE-2024-48809
Published: 2024-11-04
Description: An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box, specifically the DeleteWatcher function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://gist.github.com/bergen876/5a21f78e266c12aa2586beb2178443b0; https://github.com/onosproject/sdran-in-a-box/issues/206
CVE: CVE-2024-51136
Published: 2024-11-04
Description: An XML External Entity (XXE) vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611, CWE-91
References: https://github.com/openimaj/openimaj; https://github.com/openimaj/openimaj/issues/382; https://mvnrepository.com/artifact/org.openimaj.tools/WebTools
CVE: CVE-2024-10766
Published: 2024-11-04
Description: A vulnerability, which was classified as critical, has been found in Codezips Free Exam Hall Seating Management System 1.0. This issue affects some unknown processing of the file /pages/save_user.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher disclosure contains confusing vulnerability classes and file names.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-284, CWE-434, CWE-434
References: https://github.com/Charlotte008/cve/issues/3; https://vuldb.com/?ctiid.282953; https://vuldb.com/?id.282953
CVE: CVE-2024-34882
Published: 2024-11-04
Description: Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP account passwords to an arbitrary server via HTTP POST request.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-522, CWE-522
References: http://bitrix24.com; https://github.com/DrieVlad/BitrixVulns
CVE: CVE-2024-34883
Published: 2024-11-04
Description: Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators to read proxy-server accounts passwords via HTTP GET request.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-522, CWE-522
References: http://bitrix24.com; https://github.com/DrieVlad/BitrixVulns
CVE: CVE-2024-34887
Published: 2024-11-04
Description: Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators account passwords to an arbitrary server via HTTP POST request.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-522, CWE-522
References: http://bitrix24.com; https://github.com/DrieVlad/BitrixVulns
CVE: CVE-2024-48336
Published: 2024-11-04
Description: The install() function of ProviderInstaller.java in Magisk App before canary version 27007 does not verify the GMS app before loading it, which allows a local untrusted app with no additional privileges to silently execute arbitrary code in the Magisk app and escalate privileges to root via a crafted package, aka Bug #8279. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-829
References: https://github.com/canyie/MagiskEoP; https://github.com/topjohnwu/Magisk/commit/c2eb6039579b8a2fb1e11a753cea7662c07bec02
CVE: CVE-2024-51127
Published: 2024-11-04
Description: An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: http://hornetq.com; https://github.com/JAckLosingHeart/CWE-378/blob/main/CVE-2024-51127.md
CVE: CVE-2024-51326
Published: 2024-11-04
Description: SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in deletesubcategory.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/redtrib3/CVEs/tree/main/CVE-2024-51326%20-%20Union%20SQLi; https://projectworlds.in/
CVE: CVE-2024-51327
Published: 2024-11-04
Description: SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/redtrib3/CVEs/tree/main/CVE-2024-51327%20-%20SQLi%20Auth%20Bypass; https://projectworlds.in/
CVE: CVE-2024-51328
Published: 2024-11-04
Description: Cross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management System v1.0 allows remote attacker to inject arbitrary code via the t2 parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/redtrib3/CVEs/tree/main/CVE-2024-51328%20-%20Stored%20XSS%20; https://projectworlds.in/
CVE: CVE-2024-51329
Published: 2024-11-04
Description: A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://github.com/idrsdev/agile-board/tree/main; https://github.com/redtrib3/CVEs/tree/main/CVE-2024-51329%20-%20Host%20Header%20Injection
CVE: CVE-2024-10768
Published: 2024-11-04
Description: A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/two_tables.php. The manipulation of the argument scripts leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-74, CWE-79, CWE-707, CWE-79
References: https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(two_tables.php).md; https://phpgurukul.com/; https://vuldb.com/?ctiid.282988
CVE: CVE-2024-30616
Published: 2024-11-04
Description: Chamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile. Non-admin users can manipulate sensitive profiles information, posing a significant risk to data integrity.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://github.com/bahadoumi/Vulnerability-Research/tree/main/CVE-2024-30616; https://github.com/chamilo/chamilo-lms/commit/a1a1e4df70dc65ae4fc7857135f4d3ee185548e7
CVE: CVE-2024-30617
Published: 2024-11-04
Description: A Cross-Site Request Forgery (CSRF) vulnerability in Chamilo LMS 1.11.26 "/main/social/home.php," allows attackers to initiate a request that posts a fake post onto the user's social wall without their consent or knowledge.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://github.com/bahadoumi/Vulnerability-Research/tree/main/CVE-2024-30617; https://github.com/chamilo/chamilo-lms/commit/7a0e10cccc92eadae9403925f995b0a8d2d1305e
CVE: CVE-2024-30618
Published: 2024-11-04
Description: A Stored Cross-Site Scripting (XSS) Vulnerability in Chamilo LMS 1.11.26 allows a remote attacker to execute arbitrary JavaScript in a web browser by including a malicious payload in the 'content' parameter of 'group_topics.php'.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bahadoumi/Vulnerability-Research/tree/main/CVE-2024-30618; https://github.com/chamilo/chamilo-lms/commit/3b[PII_REDACTED]9ebfb170ace16ada9a7c8e9a6622
CVE: CVE-2024-30619
Published: 2024-11-04
Description: Chamilo LMS Version 1.11.26 is vulnerable to Incorrect Access Control. A non-authenticated attacker can request the number of messages and the number of online users via "/main/inc/ajax/message.ajax.php?a=get_count_message" AND "/main/inc/ajax/online.ajax.php?a=get_users_online."
CVSS Score: 7.5 (HIGH)
References: https://github.com/bahadoumi/Vulnerability-Research/tree/main/CVE-2024-30619; https://github.com/chamilo/chamilo-lms/commit/bef68ffe0552cd25b0ef760e582e1188f0f6bf4b
CVE: CVE-2024-34885
Published: 2024-11-04
Description: Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read SMTP accounts passwords via HTTP GET request.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-522
References: http://bitrix24.com; https://github.com/DrieVlad/BitrixVulns
CVE: CVE-2024-34891
Published: 2024-11-04
Description: Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-312
References: http://bitrix24.com; https://github.com/DrieVlad/BitrixVulns
CVE: CVE-2024-10791
Published: 2024-11-04
Description: A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /doctorAction.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting file and parameter names to be affected.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-707, CWE-89
References: https://github.com/3127434/CVE/issues/2; https://vuldb.com/?ctiid.282989; https://vuldb.com/?id.282989
CVE: CVE-2024-45086
Published: 2024-11-04
Description: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://www.ibm.com/support/pages/node/7174745
CVE: CVE-2024-45185
Published: 2024-11-04
Description: An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, Modem 5123, Modem 5300. There is an out-of-bounds write due to a heap overflow in the GPRS protocol.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-787
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-45185/
CVE: CVE-2024-48463
Published: 2024-11-04
Description: Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within the Markdown docs viewer.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-601
References: https://gist.github.com/opcod3r/ab69f36d52367df7ffac32a597dff31c; https://github.com/usebruno/bruno/pull/3122; https://github.com/usebruno/bruno/releases/tag/v1.29.1
CVE: CVE-2024-51744
Published: 2024-11-04
Description: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by `ParseWithClaims` return both error codes. If users only check for the `jwt.ErrTokenExpired ` using `error.Is`, they will ignore the embedded `jwt.ErrTokenSignatureInvalid` and thus potentially accept invalid tokens. A fix has been back-ported with the error handling logic from the `v5` branch to the `v4` branch. In this logic, the `ParseWithClaims` function will immediately return in "dangerous" situations (e.g., an invalid signature), limiting the combined errors only to situations where the signature is valid, but further validation failed (e.g., if the signature is valid, but is expired AND has the wrong audience). This fix is part of the 4.5.1 release. We are aware that this changes the behaviour of an established function and is not 100 % backwards compatible, so updating to 4.5.1 might break your code. In case you cannot update to 4.5.0, please make sure that you are properly checking for all errors ("dangerous" ones first), so that you are not running in the case detailed above.
CVSS Score: 3.1 (LOW)
CWE: CWE-755
References: https://github.com/golang-jwt/jwt/commit/7b1c1c00a171c6c79bbdb40e4ce7d197060c1c2c; https://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r
CVE: CVE-2024-10805
Published: 2024-11-04
Description: A vulnerability was found in code-projects University Event Management System 1.0. It has been classified as critical. This affects an unknown part of the file doedit.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions a confusing product name to be affected. Other parameters might be affected as well.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-707, CWE-89
References: https://code-projects.org/; https://github.com/yhcyhc981/cve/blob/main/sql16.md; https://vuldb.com/?ctiid.283029
CVE: CVE-2024-48050
Published: 2024-11-04
Description: In agentscope <=v0.0.4, the file agentscope\web\workstation\workflow_utils.py has the function is_callable_expression. Within this function, the line result = eval(s) poses a security risk as it can directly execute user-provided commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://gist.github.com/AfterSnows/0ad9d233a9d2a5b7e6e5273e2e23508d; https://rumbling-slice-eb0.notion.site/Unauthenticated-Remote-Code-Execution-via-The-use-of-eval-in-is_callable_expression-and-sanitize_nod-cd4ea6c576da4e0b965ef596855c298d
CVE: CVE-2024-48052
Published: 2024-11-04
Description: In gradio <=4.42.0, the gr.DownloadButton function has a hidden server-side request forgery (SSRF) vulnerability. The reason is that within the save_url_to_cache function, there are no restrictions on the URL, which allows access to local target resources. This can lead to the download of local resources and sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://gist.github.com/AfterSnows/45ffc23797f9127e00755376cc610e12; https://rumbling-slice-eb0.notion.site/FULL-SSRF-in-gr-DownloadButton-in-gradio-app-gradio-870b21e0908b48cbafd914719ac1a4e6?pvs=4
CVE: CVE-2024-48057
Published: 2024-11-04
Description: localai <=2.20.1 is vulnerable to Cross Site Scripting (XSS). When calling the delete model API and passing inappropriate parameters, it can cause a one-time storage XSS, which will trigger the payload when a user accesses the homepage.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://gist.github.com/AfterSnows/1bd7ee5a3a42dbb5f5ff67f7f9c8ccec; https://rumbling-slice-eb0.notion.site/LocalAI-deleted-model-with-storage-XSS-CSRF-vulnerability-in-mudler-localai-101e3cda9e8c80e0ac12fe418d5dd982?pvs=4
CVE: CVE-2024-48059
Published: 2024-11-04
Description: gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in WebSocket session transmission. An attacker can inject malicious content into a WebSocket message. When a victim accesses this session, the malicious JavaScript is executed in the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/AfterSnows/c5a4cb029fb9142be5c54e531a9a240e; https://rumbling-slice-eb0.notion.site/Stored-XSS-via-Chat-message-in-gaizhenbiao-chuanhuchatgpt-104e3cda9e8c80b4b611dfc491c488d8?pvs=4
CVE: CVE-2024-48061
Published: 2024-11-04
Description: langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the components run on the local machine rather than in a sandbox.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://gist.github.com/AfterSnows/1e[PII_REDACTED]2462923fd62dde2b5d61; https://rumbling-slice-eb0.notion.site/There-is-a-Remote-Code-Execution-RCE-vulnerability-in-the-repository-https-github-com-langflow-a-105e3cda9e8c800fac92f1b571bd40d8
CVE: CVE-2024-51500
Published: 2024-11-04
Description: Meshtastic firmware is a device firmware for the Meshtastic project. The Meshtastic firmware does not check for packets claiming to be from the special broadcast address (0xFFFFFFFF) which could result in unexpected behavior and potential for DDoS attacks on the network. A malicious actor could craft a packet to be from that address which would result in an amplification of this one message into every node on the network sending multiple messages. Such an attack could result in degraded network performance for all users as the available bandwidth is consumed. This issue has been addressed in release version 2.5.6. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-138, CWE-159
References: https://github.com/meshtastic/firmware/security/advisories/GHSA-xfmq-5j3j-vgv8
CVE: CVE-2024-51501
Published: 2024-11-04
Description: Refit is an automatic type-safe REST library for .NET Core, Xamarin and .NET The various header-related Refit attributes (Header, HeaderCollection and Authorize) are vulnerable to CRLF injection. The way HTTP headers are added to a request is via the `HttpHeaders.TryAddWithoutValidation` method. This method does not check for CRLF characters in the header value. This means that any headers added to a refit request are vulnerable to CRLF-injection. In general, CRLF-injection into a HTTP header (when using HTTP/1.1) means that one can inject additional HTTP headers or smuggle whole HTTP requests. If an application using the Refit library passes a user-controllable value through to a header, then that application becomes vulnerable to CRLF-injection. This is not necessarily a security issue for a command line application like the one above, but if such code were present in a web application then it becomes vulnerable to request splitting (as shown in the PoC) and thus Server Side Request Forgery. Strictly speaking this is a potential vulnerability in applications using Refit and not in Refit itself. This issue has been addressed in release versions 7.2.22 and 8.0.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CWE: CWE-93
References: https://github.com/reactiveui/refit/blob/258a771f44417c6e48e103ac921fe4786f3c2a1e/Refit/RequestBuilderImplementation.cs#L1328; https://github.com/reactiveui/refit/security/advisories/GHSA-3hxg-fxwm-8gf7
CVE: CVE-2024-51502
Published: 2024-11-04
Description: loona is an experimental, HTTP/1.1 and HTTP/2 implementation in Rust on top of io-uring. `loona-hpack` suffers from the same vulnerability as the original `hpack` as documented in issue #11. All users who try to decode untrusted input using the Decoder are vulnerable to this exploit. This issue has been addressed in release version 0.4.3. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CWE: CWE-755
References: https://github.com/bearcove/loona/commit/9a4028ec6484f50a320281271a41a5040ddb1ba8; https://github.com/bearcove/loona/security/advisories/GHSA-7vm6-qwh5-9x44; https://github.com/mlalic/hpack-rs/issues/11
CVE: CVE-2024-51734
Published: 2024-11-04
Description: Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data maintained by an `AccessControl.userfolder.UserFolder` which may prevent any privileged access. This problem has been fixed in version 7.2. Users are advised to upgrade. Users unable to upgrade may address the issue by adding `data__roles__ = ()` to `AccessControl.userfolder.UserFolder`.
CWE: CWE-284
References: https://github.com/zopefoundation/AccessControl/issues/159; https://github.com/zopefoundation/AccessControl/security/advisories/GHSA-g5vw-3h65-2q3v
CVE: CVE-2023-34443
Published: 2024-11-05
Description: Combodo iTop is a simple, web based IT Service Management tool. When displaying page Run queries Cross-site Scripting (XSS) are possible for scripts outside of script tags. This has been fixed in versions 2.7.9, 3.0.4, 3.1.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://github.com/Combodo/iTop/security/advisories/GHSA-9mx6-pwpp-j3xx; https://huntr.dev/bounties/c230d55d-1f0e-40c3-8c7e-20587d3e54da/?token=4d1195d5a50a9f0f7ae9fc24a2b0a3bd907427edaf7ee6ac1f8f31c11d8b7a5d2c204957125e63fd7cf3a87df6d5d12a35f9c7107ba5f33b5f668fa199a36932448b9bf186daa62cb32b[PII_REDACTED]eb68eeeba079b8864ab00358fd0dc65fa406d986525814a14951db2025e117f0098a1f270f5a5b2c935a65b00b5106e5511b61d501c4357654cb8ea76b
CVE: CVE-2023-34444
Published: 2024-11-05
Description: Combodo iTop is a simple, web based IT Service Management tool. When displaying pages/ajax.searchform.php XSS are possible for scripts outside of script tags. This issue has been fixed in versions 2.7.9, 3.0.4, 3.1.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://github.com/Combodo/iTop/security/advisories/GHSA-rwx9-rcxf-qrwv