deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-38695
Published: 2022-01-18
Description: SoftVibe SARABAN for INFOMA 1.1 is vulnerable to stored cross-site scripting (XSS) that allows users to store scripts in certain fields (e.g. subject, description) of the document form.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.infoma.net/index.php/saraban/; https://orangeo.tech/post/2021/12/24/First-CVEs.html; https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US
CVE: CVE-2021-38696
Published: 2022-01-18
Description: SoftVibe SARABAN for INFOMA 1.1 has Incorrect Access Control vulnerability, that allows attackers to access signature files on the application without any authentication.
CVSS Score: 7.5 (HIGH)
References: http://www.infoma.net/index.php/saraban/; https://orangeo.tech/post/2021/12/24/First-CVEs.html; https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US
CVE: CVE-2021-38697
Published: 2022-01-18
Description: SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.infoma.net/index.php/saraban/; https://orangeo.tech/post/2021/12/24/First-CVEs.html; https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US
CVE: CVE-2021-41550
Published: 2022-01-18
Description: Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://leostream.com/wp-content/uploads/2018/11/Leostream_release_notes.pdf; https://www.leostream.com/resource/leostream-connection-broker-9-0/; https://leostream.com/wp-content/uploads/2018/11/Leostream_release_notes.pdf
CVE: CVE-2021-41551
Published: 2022-01-18
Description: Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-59
References: https://leostream.com/wp-content/uploads/2018/11/Leostream_release_notes.pdf; https://www.leostream.com/resource/leostream-connection-broker-9-0/; https://leostream.com/wp-content/uploads/2018/11/Leostream_release_notes.pdf
CVE: CVE-2021-44217
Published: 2022-01-18
Description: In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://codechecker-demo.eastus.cloudapp.azure.com/; https://github.com/Ericsson/codechecker/pull/3549; https://github.com/Ericsson/codechecker/releases
CVE: CVE-2022-0260
Published: 2022-01-18
Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.7.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/3125d5f0c04cfb5835857ca9416f0bb143130a2f; https://huntr.dev/bounties/89e4ab60-21ec-4396-92ad-5b78d4c2897e; https://github.com/pimcore/pimcore/commit/3125d5f0c04cfb5835857ca9416f0bb143130a2f
CVE: CVE-2021-4146
Published: 2022-01-18
Description: Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-840
References: https://github.com/pimcore/pimcore/commit/7011922f7f0f97a82d8c378559b91fcdb34604a6; https://huntr.dev/bounties/47b37054-cafe-4f48-8b40-c86efc7fb760; https://github.com/pimcore/pimcore/commit/7011922f7f0f97a82d8c378559b91fcdb34604a6
CVE: CVE-2022-0261
Published: 2022-01-18
Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; http://seclists.org/fulldisclosure/2022/Oct/43
CVE: CVE-2022-0262
Published: 2022-01-18
Description: Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.7.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/6f36e841ce55f67e2e95253dd58f80659ef166c7; https://huntr.dev/bounties/b38a4e14-5dcb-4e49-9990-494dc2a8fa0d; https://github.com/pimcore/pimcore/commit/6f36e841ce55f67e2e95253dd58f80659ef166c7
CVE: CVE-2022-0263
Published: 2022-01-18
Description: Unrestricted Upload of File with Dangerous Type in Packagist pimcore/pimcore prior to 10.2.7.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: https://github.com/pimcore/pimcore/commit/35d1853baf64d6a1d90fd8803e52439da53a3911; https://huntr.dev/bounties/96506857-06bc-4c84-88b7-4f397715bcf6; https://github.com/pimcore/pimcore/commit/35d1853baf64d6a1d90fd8803e52439da53a3911
CVE: CVE-2022-23302
Published: 2022-01-18
Description: JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBindingName configuration causing JMSSink to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-4104. Note this issue only affects Log4j 1.x when specifically configured to use JMSSink, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: http://www.openwall.com/lists/oss-security/2022/01/18/3; https://lists.apache.org/thread/bsr3l5qz4g0myrjhy9h67bcxodpkwj4w; https://logging.apache.org/log4j/1.2/index.html
CVE: CVE-2022-23305
Published: 2022-01-18
Description: By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate the SQL by entering crafted strings into input fields or headers of an application that are logged allowing unintended SQL queries to be executed. Note this issue only affects Log4j 1.x when specifically configured to use the JDBCAppender, which is not the default. Beginning in version 2.0-beta8, the JDBCAppender was re-introduced with proper support for parameterized SQL queries and further customization over the columns written to in logs. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://www.openwall.com/lists/oss-security/2022/01/18/4; https://lists.apache.org/thread/pt6lh3pbsvxqlwlp4c5l798dv2hkc85y; https://logging.apache.org/log4j/1.2/index.html
CVE: CVE-2022-23307
Published: 2022-01-18
Description: CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://lists.apache.org/thread/rg4yyc89vs3dw6kpy3r92xop9loywyhh; https://logging.apache.org/log4j/1.2/index.html; https://www.oracle.com/security-alerts/cpuapr2022.html
CVE: CVE-2020-14107
Published: 2022-01-18
Description: A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=92; https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=92
CVE: CVE-2020-14110
Published: 2022-01-18
Description: AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive information and log in to the web background.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=40; https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=40
CVE: CVE-2021-29215
Published: 2022-01-18
Description: A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem component was discovered in version(s): Prior to Tez-0.8: mapr-tez-0.8[PII_REDACTED]00-1.noarch; prior to Tez-0.9: mapr-tez-0.9[PII_REDACTED]34-1.noarch; prior to Tez-0.9.2: mapr-tez-0.9.2.0[PII_REDACTED]43-1.noarch. HPE has provided software updates to resolve the vulnerability in the TEZ MapR ecosystem component in HPE Ezmeral Data Fabric.
CVSS Score: 9.8 (CRITICAL)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbez04196en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbez04196en_us
CVE: CVE-2021-29632
Published: 2022-01-18
Description: In FreeBSD 13.0-STABLE before n[PII_REDACTED]de39c3dc, 12.2-STABLE before r370674, 13.0-RELEASE before p6, and 12.2-RELEASE before p12, certain conditions involving use of the highlight buffer while text is scrolling on the console, console data may overwrite data structures associated with the system console or other kernel memory.
CVSS Score: 7.5 (HIGH)
References: https://security.freebsd.org/advisories/FreeBSD-SA-22:01.vt.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.freebsd.org/advisories/FreeBSD-SA-22:01.vt.asc
CVE: CVE-2021-29872
Published: 2022-01-18
Description: IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 206228.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-116
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/206228; https://www.ibm.com/support/pages/node/6541294; https://exchange.xforce.ibmcloud.com/vulnerabilities/206228
CVE: CVE-2021-37864
Published: 2022-01-18
Description: Mattermost 6.1 and earlier fails to sufficiently validate permissions while viewing archived channels, which allows authenticated users to view contents of archived channels even when this is denied by system administrators by directly accessing the APIs.
CVSS Score: 2.6 (LOW)
CWE: CWE-284, CWE-863
References: https://mattermost.com/security-updates/; https://mattermost.com/security-updates/
CVE: CVE-2021-37865
Published: 2022-01-18
Description: Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://hackerone.com/reports/1428260; https://mattermost.com/security-updates/; https://hackerone.com/reports/1428260
CVE: CVE-2021-37866
Published: 2022-01-18
Description: Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allows an attacker to reuse old session token for authorization.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-613, CWE-613
References: https://mattermost.com/security-updates/; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-37866; https://mattermost.com/security-updates/
CVE: CVE-2021-37867
Published: 2022-01-18
Description: Mattermost Boards plugin v0.10.0 and earlier fails to protect email addresses of all users via one of the Boards APIs, which allows authenticated and unauthorized users to access this information resulting in sensitive & private information disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://mattermost.com/security-updates/; https://mattermost.com/security-updates/
CVE: CVE-2021-39892
Published: 2022-01-18
Description: In all versions of GitLab CE/EE since version 12.0, a lower privileged user can import users from projects that they don't have a maintainer role on and disclose email addresses of those users.
CVSS Score: 4.3 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39892.json; https://gitlab.com/gitlab-org/gitlab/-/issues/28440; https://hackerone.com/reports/542539
CVE: CVE-2021-39927
Published: 2022-01-18
Description: Server side request forgery protections in GitLab CE/EE versions between 8.4 and 14.4.4, between 14.5.0 and 14.5.2, and between 14.6.0 and 14.6.1 would fail to protect against attacks sending requests to localhost on port 80 or 443 if GitLab was configured to run on a port other than 80 or 443
CVSS Score: 3.5 (LOW)
CWE: CWE-918
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39927.json; https://gitlab.com/gitlab-org/gitlab/-/issues/340476; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39927.json
CVE: CVE-2021-39942
Published: 2022-01-18
Description: A denial of service vulnerability in GitLab CE/EE affecting all versions starting from 12.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows low-privileged users to bypass file size limits in the NPM package repository to potentially cause denial of service.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39942.json; https://gitlab.com/gitlab-org/gitlab/-/issues/297492; https://hackerone.com/reports/1071861
CVE: CVE-2021-39946
Published: 2022-01-18
Description: Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed an attacker to exploit XSS by abusing the generation of the HTML code related to emojis
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39946.json; https://gitlab.com/gitlab-org/gitlab/-/issues/345657; https://hackerone.com/reports/1398305
CVE: CVE-2021-41807
Published: 2022-01-18
Description: Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and therefore makes brute-forcing login accounts easier.
CVSS Score: 7.5 (HIGH)
CWE: CWE-307, CWE-307
References: https://empower.m-files.com/security-advisories/CVE-2021-41807; https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-41807/; https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-41807/
CVE: CVE-2021-41808
Published: 2022-01-18
Description: In M-Files Server product with versions before 21.11.10775.0, enabling logging of Federated authentication to event log wrote sensitive information to log. Mitigating factors are logging is disabled by default.
CVSS Score: 2.0 (LOW)
CWE: CWE-532, CWE-532
References: https://empower.m-files.com/security-advisories/CVE-2021-41808; https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-41808/; https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-41808/
CVE: CVE-2021-41809
Published: 2022-01-18
Description: SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.
CVSS Score: 3.5 (LOW)
CWE: CWE-918, CWE-918
References: https://empower.m-files.com/security-advisories/CVE-2021-41809; https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-41809/; https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-41809/
CVE: CVE-2021-43353
Published: 2022-01-18
Description: The Crisp Live Chat WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the crisp_plugin_settings_page function found in the ~/crisp.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 0.31.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2643954%40crisp&new=2643954%40crisp&sfp_email=&sfph_mail=; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-43353; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2643954%40crisp&new=2643954%40crisp&sfp_email=&sfph_mail=
CVE: CVE-2021-4074
Published: 2022-01-18
Description: The WHMCS Bridge WordPress plugin is vulnerable to Stored Cross-Site Scripting via the cc_whmcs_bridge_url parameter found in the ~/whmcs-bridge/bridge_cp.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 6.1. Due to missing authorization checks on the cc_whmcs_bridge_add_admin function, low-level authenticated users such as subscribers can exploit this vulnerability.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-862, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2653041%40whmcs-bridge&new=2653041%40whmcs-bridge&sfp_email=&sfph_mail=; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-4074; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2653041%40whmcs-bridge&new=2653041%40whmcs-bridge&sfp_email=&sfph_mail=
CVE: CVE-2021-4083
Published: 2022-01-18
Description: A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416, CWE-362
References: https://bugzilla.redhat.com/show_bug.cgi?id=2029923; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=054aa8d439b9; https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html
CVE: CVE-2022-0090
Published: 2022-01-18
Description: An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab is configured in a way that it doesn't ignore replacement references with git sub-commands, allowing a malicious user to spoof the contents of their commits in the UI.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0090.json; https://gitlab.com/gitlab-org/gitaly/-/issues/3948; https://hackerone.com/reports/1415964
CVE: CVE-2022-0093
Published: 2022-01-18
Description: An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds.
CVSS Score: 3.5 (LOW)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0093.json; https://gitlab.com/gitlab-org/gitlab/-/issues/343247; https://hackerone.com/reports/1348738
CVE: CVE-2022-0124
Published: 2022-01-18
Description: An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. Gitlab's Slack integration is incorrectly validating user input and allows to craft malicious URLs that are sent to slack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-116
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0124.json; https://gitlab.com/gitlab-org/gitlab/-/issues/340176; https://hackerone.com/reports/1310778
CVE: CVE-2022-0125
Published: 2022-01-18
Description: An issue has been discovered in GitLab affecting all versions starting from 12.0 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was not verifying that a maintainer of a project had the right access to import members from a target project.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0125.json; https://gitlab.com/gitlab-org/gitlab/-/issues/345564; https://hackerone.com/reports/1356100
CVE: CVE-2022-0151
Published: 2022-01-18
Description: An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was not correctly handling requests to delete existing packages which could result in a Denial of Service under specific conditions.
CVSS Score: 6.5 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0151.json; https://gitlab.com/gitlab-org/gitlab/-/issues/348176; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0151.json
CVE: CVE-2022-0152
Published: 2022-01-18
Description: An issue has been discovered in GitLab affecting all versions starting from 13.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was vulnerable to unauthorized access to some particular fields through the GraphQL API.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0152.json; https://gitlab.com/gitlab-org/gitlab/-/issues/347467; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0152.json
CVE: CVE-2022-0154
Published: 2022-01-18
Description: An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was vulnerable to a Cross-Site Request Forgery attack that allows a malicious user to have their GitHub project imported on another GitLab user account.
CVSS Score: 7.5 (HIGH)
CWE: CWE-352
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0154.json; https://gitlab.com/gitlab-org/gitlab/-/issues/29580; https://hackerone.com/reports/605576
CVE: CVE-2022-0172
Published: 2022-01-18
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was possible to bypass the IP restriction for public projects through GraphQL allowing unauthorised users to read titles of issues, merge requests and milestones.
CVSS Score: 5.3 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0172.json; https://gitlab.com/gitlab-org/gitlab/-/issues/348411; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0172.json
CVE: CVE-2022-0210
Published: 2022-01-18
Description: The Random Banner WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the category parameter found in the ~/include/models/model.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 4.1.4. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-116
References: https://github.com/BigTiger2020/2022/blob/main/Random%20Banner%20Xss.md; https://plugins.trac.wordpress.org/browser/random-banner/tags/4.1.4/include/models/model.php#L132; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0210