deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-4536
Published: 2024-05-07
Description: In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, in the EDC Connector component ( https://github.com/eclipse-edc/Connector ), an attacker might obtain OAuth2 client secrets from the vault.

In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, we have identified a security vulnerability in the EDC Connector component ( https://github.com/eclipse-edc/Connector ) regarding the OAuth2-protected data sink feature. When using a custom, OAuth2-protected data sink, the OAuth2-specific data address properties are resolved by the provider data plane. Problematically, the consumer-provided clientSecretKey, which indicates the OAuth2 client secret to retrieve from a secrets vault, is resolved in the context of the provider's vault, not the consumer. This secret's value is then sent to the tokenUrl, also consumer-controlled, as part of an OAuth2 client credentials grant. The returned access token is then sent as a bearer token to the data sink URL.

This feature is now disabled entirely, because not all code paths necessary for a successful realization were fully implemented.


CVSS Score: 6.8 (MEDIUM)
CWE: CWE-201, CWE-522, CWE-522
References: https://github.com/eclipse-edc/Connector/commit/a4e6018d2c0457fba6f672fafa6c590513c45d1b; https://github.com/eclipse-edc/Connector/releases/tag/v0.6.3; https://gitlab.eclipse.org/security/cve-assignement/-/issues/22
CVE: CVE-2024-4586
Published: 2024-05-07
Description: A vulnerability has been found in DedeCMS 5.7 and classified as problematic. This vulnerability affects unknown code of the file /src/dede/shops_delivery.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263308. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/Hckwzh/cms/blob/main/17.md; https://vuldb.com/?ctiid.263308; https://vuldb.com/?id.263308
CVE: CVE-2024-4587
Published: 2024-05-07
Description: A vulnerability was found in DedeCMS 5.7 and classified as problematic. This issue affects some unknown processing of the file /src/dede/tpl.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263309 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/Hckwzh/cms/blob/main/18.md; https://vuldb.com/?ctiid.263309; https://vuldb.com/?id.263309
CVE: CVE-2024-4588
Published: 2024-05-07
Description: A vulnerability was found in DedeCMS 5.7. It has been classified as problematic. Affected is an unknown function of the file /src/dede/mytag_add.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-263310 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/Hckwzh/cms/blob/main/19.md; https://vuldb.com/?ctiid.263310; https://vuldb.com/?id.263310
CVE: CVE-2024-4589
Published: 2024-05-07
Description: A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /src/dede/mytag_edit.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263311. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/Hckwzh/cms/blob/main/20.md; https://vuldb.com/?ctiid.263311; https://vuldb.com/?id.263311
CVE: CVE-2023-46012
Published: 2024-05-07
Description: Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute arbitrary code via an HTTP request to the IGD UPnP.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/dest-3/CVE-2023-46012/tree/main; https://github.com/dest-3/CVE-2023-46012/tree/main
CVE: CVE-2024-28148
Published: 2024-05-07
Description: An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request.This issue affects Apache Superset: before 3.1.2.

Users are recommended to upgrade to version 3.1.2 or above, which fixes the issue.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://lists.apache.org/thread/n27wlbd05oc6bgjh28d5pxzsrrph8dgo; https://lists.apache.org/thread/n27wlbd05oc6bgjh28d5pxzsrrph8dgo
CVE: CVE-2024-29889
Published: 2024-05-07
Description: GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability in the saved searches feature to alter another user account data take control of it. This vulnerability is fixed in 10.0.15.
CVSS Score: 7.1 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/glpi-project/glpi/commit/0a6b28be4c0f848106c60b554c703ec2e178d6c7; https://github.com/glpi-project/glpi/security/advisories/GHSA-8xvf-v6vv-r75g; https://github.com/glpi-project/glpi/commit/0a6b28be4c0f848106c60b554c703ec2e178d6c7
CVE: CVE-2024-31456
Published: 2024-05-07
Description: GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability from map search. This vulnerability is fixed in 10.0.15.
CVSS Score: 7.7 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/glpi-project/glpi/commit/730c3db29a1edc32f9b9d1e2a940e90a0211ab26; https://github.com/glpi-project/glpi/security/advisories/GHSA-gcj4-2cp3-6h5j; https://github.com/glpi-project/glpi/commit/730c3db29a1edc32f9b9d1e2a940e90a0211ab26
CVE: CVE-2024-33434
Published: 2024-05-07
Description: An issue in tiagorlampert CHAOS v5.0.1 before 1b451cf62582295b7225caf5a7b506f0bad56f6b and 24c9e109b5be34df7b2bce8368eae669c481ed5e allows a remote attacker to execute arbitrary code via the unsafe concatenation of the `filename` argument into the `buildStr` string without any sanitization or filtering.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://gist.github.com/slimwang/d1ec6645ba9012a551ea[PII_REDACTED]96; https://github.com/tiagorlampert/CHAOS/pull/95; https://web.archive.org/web/[PII_REDACTED]1035/https://blog.chebuya.com/posts/remote-code-execution-on-chaos-rat-via-spoofed-agents/
CVE: CVE-2024-33780
Published: 2024-05-07
Description: MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::copyOut at /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/FudanMPL/Vulnerabilities-in-MPC-Framework/tree/main/MP-SPDZ/SEGV-SlientPprf-3; https://github.com/FudanMPL/Vulnerabilities-in-MPC-Framework/tree/main/MP-SPDZ/SEGV-SlientPprf-3
CVE: CVE-2024-33781
Published: 2024-05-07
Description: MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function octetStream::get_bytes in /Tools/octetStream.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/FudanMPL/Vulnerabilities-in-MPC-Framework/tree/main/MP-SPDZ/stack-buffer-overflow-octetStream; https://github.com/FudanMPL/Vulnerabilities-in-MPC-Framework/tree/main/MP-SPDZ/stack-buffer-overflow-octetStream
CVE: CVE-2024-33782
Published: 2024-05-07
Description: MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function OTExtensionWithMatrix::extend in /OT/OTExtensionWithMatrix.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/FudanMPL/Vulnerabilities-in-MPC-Framework/tree/main/MP-SPDZ/stack-buffer-overflow-OTExtensionWithMatrix; https://github.com/FudanMPL/Vulnerabilities-in-MPC-Framework/tree/main/MP-SPDZ/stack-buffer-overflow-OTExtensionWithMatrix
CVE: CVE-2024-33783
Published: 2024-05-07
Description: MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::expand in /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/FudanMPL/Vulnerabilities-in-MPC-Framework/tree/main/MP-SPDZ/SEGV-SlientPprf; https://github.com/FudanMPL/Vulnerabilities-in-MPC-Framework/tree/main/MP-SPDZ/SEGV-SlientPprf
CVE: CVE-2024-4590
Published: 2024-05-07
Description: A vulnerability was found in DedeCMS 5.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /src/dede/sys_info.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263312. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/Hckwzh/cms/blob/main/21.md; https://vuldb.com/?ctiid.263312; https://vuldb.com/?id.263312
CVE: CVE-2024-4591
Published: 2024-05-07
Description: A vulnerability classified as problematic has been found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/sys_group_add.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263313 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/Hckwzh/cms/blob/main/22.md; https://vuldb.com/?ctiid.263313; https://vuldb.com/?id.263313
CVE: CVE-2024-4592
Published: 2024-05-07
Description: A vulnerability classified as problematic was found in DedeCMS 5.7. This vulnerability affects unknown code of the file /src/dede/sys_group_edit.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-263314 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/Hckwzh/cms/blob/main/23.md; https://vuldb.com/?ctiid.263314; https://vuldb.com/?id.263314
CVE: CVE-2024-4593
Published: 2024-05-07
Description: A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7. This issue affects some unknown processing of the file /src/dede/sys_multiserv.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263315. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/Hckwzh/cms/blob/main/24.md; https://vuldb.com/?ctiid.263315; https://vuldb.com/?id.263315
CVE: CVE-2024-32369
Published: 2024-05-07
Description: SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the start and limit parameter in the mliWhiteList.php component.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89
References: https://cwe.mitre.org/data/definitions/89.html; https://github.com/chucrutis/CVE-2024-32369; https://cwe.mitre.org/data/definitions/89.html
CVE: CVE-2024-32370
Published: 2024-05-07
Description: An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-782
References: https://cwe.mitre.org/data/definitions/639.html; https://github.com/chucrutis/CVE-2024-32370; https://cwe.mitre.org/data/definitions/639.html
CVE: CVE-2024-32371
Published: 2024-05-07
Description: An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their privileges and gain administrative access by changing the type parameter from 1 to 0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://cwe.mitre.org/data/definitions/639.html; https://github.com/chucrutis/CVE-2024-32371; https://cwe.mitre.org/data/definitions/639.html
CVE: CVE-2024-32663
Published: 2024-05-07
Description: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, a small amount of HTTP/2 traffic can lead to Suricata using a large amount of memory. The issue has been addressed in Suricata 7.0.5 and 6.0.19. Workarounds include disabling the HTTP/2 parser and reducing `app-layer.protocols.http2.max-table-size` value (default is 65536).
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-770, CWE-770
References: https://github.com/OISF/suricata/commit/08d93f7c3762781b743f88f9fdc4389eb9c3eb64; https://github.com/OISF/suricata/commit/c0af92295e833d1db29b184d63cd3b829451d7fd; https://github.com/OISF/suricata/commit/d24b37a103c04bb2667e449e080ba4c8e56bb019
CVE: CVE-2024-32664
Published: 2024-05-07
Description: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, specially crafted traffic or datasets can cause a limited buffer overflow. This vulnerability is fixed in 7.0.5 and 6.0.19. Workarounds include not use rules with `base64_decode` keyword with `bytes` option with value 1, 2 or 5 and for 7.0.x, setting `app-layer.protocols.smtp.mime.body-md5` to false.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120, CWE-122, CWE-120
References: https://github.com/OISF/suricata/commit/311002baf288a225f62cf18a90c5fdd294447379; https://github.com/OISF/suricata/commit/d5ffecf11ad2c6fe89265e518f5d7443caf26ba4; https://github.com/OISF/suricata/security/advisories/GHSA-79vh-hpwq-3jh7
CVE: CVE-2024-32867
Published: 2024-05-07
Description: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, various problems in handling of fragmentation anomalies can lead to mis-detection of rules and policy. This vulnerability is fixed in 7.0.5 or 6.0.19.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-754, CWE-754
References: https://github.com/OISF/suricata/commit/1e110d0a71db46571040b937e17a4bc9f91d6de9; https://github.com/OISF/suricata/commit/2f39ba75f153ba9bdf8eedc2a839cc973dbaea66; https://github.com/OISF/suricata/commit/414f97c6695c5a2e1d378a36a6f50d[PII_REDACTED]
CVE: CVE-2024-33120
Published: 2024-05-07
Description: Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function. This vulnerability allows attackers to execute arbitrary code via a crafted JSP file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://roothub.com; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33120.txt; http://roothub.com
CVE: CVE-2024-33122
Published: 2024-05-07
Description: Roothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in the list() function.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33122.txt; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33122.txt
CVE: CVE-2024-33124
Published: 2024-05-07
Description: Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter in the parentNode() function..
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33124.txt; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33124.txt
CVE: CVE-2024-34084
Published: 2024-05-07
Description: Minder's `HandleGithubWebhook` is susceptible to a denial of service attack from an untrusted HTTP request. The vulnerability exists before the request has been validated, and as such the request is still untrusted at the point of failure. This allows an attacker with the ability to send requests to `HandleGithubWebhook` to crash the Minder controlplane and deny other users from using it. This vulnerability is fixed in 0.0.48.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/stacklok/minder/commit/3e5a527d2f1b[PII_REDACTED]61d1d519602c75bd0d; https://github.com/stacklok/minder/security/advisories/GHSA-9c5w-9q3f-3hv7; https://github.com/stacklok/minder/commit/3e5a527d2f1b[PII_REDACTED]61d1d519602c75bd0d
CVE: CVE-2024-34342
Published: 2024-05-07
Description: react-pdf displays PDFs in React apps. If PDF.js is used to load a malicious PDF, and PDF.js is configured with `isEvalSupported` set to `true` (which is the default value), unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain. This vulnerability is fixed in 7.7.3 and 8.0.2.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://github.com/mozilla/pdf.js/commit/85e64b5c16c9aaef738f421733c12911a441cec6; https://github.com/mozilla/pdf.js/pull/18015; https://github.com/mozilla/pdf.js/security/advisories/GHSA-wgrm-67xf-hhpq
CVE: CVE-2024-34523
Published: 2024-05-07
Description: AChecker 1.5 allows remote attackers to read the contents of arbitrary files via the download.php path parameter by using Unauthenticated Path Traversal. This occurs through readfile in PHP. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/inclusive-design/AChecker/blob/main/checker/download.php; https://github.com/piuppi/Proof-of-Concepts/blob/main/AChecker/CVE-2024-34523.md; https://github.com/inclusive-design/AChecker/blob/main/checker/download.php
CVE: CVE-2024-4594
Published: 2024-05-07
Description: A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. Affected is an unknown function of the file /src/dede/sys_safe.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263316. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/Hckwzh/cms/blob/main/25.md; https://vuldb.com/?ctiid.263316; https://vuldb.com/?id.263316
CVE: CVE-2024-4595
Published: 2024-05-07
Description: A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is the function locate of the file function.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263317 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/gatsby2003/Semcms/blob/main/semcms0-sqlinjection.md; https://vuldb.com/?ctiid.263317; https://vuldb.com/?id.263317
CVE: CVE-2024-33139
Published: 2024-05-07
Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findpage function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33139.txt; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33139.txt
CVE: CVE-2024-33144
Published: 2024-05-07
Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findApplyedTasksPage function in BpmTaskMapper.xml.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33144.txt; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33144.txt
CVE: CVE-2024-33146
Published: 2024-05-07
Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the export function.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33146.txt; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33146.txt
CVE: CVE-2024-33748
Published: 2024-05-07
Description: Cross-site scripting (XSS) vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Fr1ezy/Fr1ezy-ms-basic_XSS; https://mvnrepository.com/artifact/net.mingsoft/ms-basic; https://github.com/Fr1ezy/Fr1ezy-ms-basic_XSS
CVE: CVE-2024-33856
Published: 2024-05-07
Description: An issue was discovered in Logpoint before 7.4.0. An attacker can enumerate a valid list of usernames by observing the response time at the Forgot Password endpoint.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204
References: https://servicedesk.logpoint.com/hc/en-us/articles/[PII_REDACTED]253-Username-enumeration-using-the-forget-password-endpoint; https://servicedesk.logpoint.com/hc/en-us/categories/200832975-Knowledge-Center; https://servicedesk.logpoint.com/hc/en-us/articles/[PII_REDACTED]253-Username-enumeration-using-the-forget-password-endpoint
CVE: CVE-2024-33857
Published: 2024-05-07
Description: An issue was discovered in Logpoint before 7.4.0. Due to a lack of input validation on URLs in threat intelligence, an attacker with low-level access to the system can trigger Server Side Request Forgery.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-918
References: https://servicedesk.logpoint.com/hc/en-us/articles/[PII_REDACTED]093-Server-Side-Request-Forgery-SSRF-on-Threat-Intelligence; https://servicedesk.logpoint.com/hc/en-us/categories/200832975-Knowledge-Center; https://servicedesk.logpoint.com/hc/en-us/articles/[PII_REDACTED]093-Server-Side-Request-Forgery-SSRF-on-Threat-Intelligence
CVE: CVE-2024-33858
Published: 2024-05-07
Description: An issue was discovered in Logpoint before 7.4.0. A path injection vulnerability is seen while adding a CSV enrichment source. The source_name parameter could be changed to an absolute path; this will write the CSV file to that path inside the /tmp directory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-91
References: https://servicedesk.logpoint.com/hc/en-us/articles/[PII_REDACTED]725-Path-Injection-on-Enrichment-Sources-leading-to-arbitrary-file-write-in-tmp-folder; https://www.logpoint.com/; https://servicedesk.logpoint.com/hc/en-us/articles/[PII_REDACTED]725-Path-Injection-on-Enrichment-Sources-leading-to-arbitrary-file-write-in-tmp-folder
CVE: CVE-2024-34341
Published: 2024-05-07
Description: Trix is a rich text editor. The Trix editor, versions prior to 2.1.1, is vulnerable to arbitrary code execution when copying and pasting content from the web or other documents with markup into the editor. The vulnerability stems from improper sanitization of pasted content, allowing an attacker to embed malicious scripts which are executed within the context of the application. Users should upgrade to Trix editor version 2.1.1 or later, which incorporates proper sanitization of input from copied content.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/basecamp/trix/commit/1a5c68a14d48421fc368e30026f4a7918028b7ad; https://github.com/basecamp/trix/commit/841ff19b53f349915100bca8fcb488214ff93554; https://github.com/basecamp/trix/pull/1147