deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-44652
Published: 2025-11-17
Description: Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, user_lastname, and user_address parameters in user_register.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44652.md; https://www.kashipara.com/project/php/322/ecommerce-website-in-php-with-source-code-download
CVE: CVE-2024-46334
Published: 2025-11-17
Description: kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the formuser and formpassword parameters in /adminLogin.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-46334.md; https://www.kashipara.com/project/php/73/school-management-system-download-project-source-code-in-php
CVE: CVE-2024-46336
Published: 2025-11-17
Description: kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /client_user/feedback.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-46336.md; https://www.kashipara.com/project/php/73/school-management-system-download-project-source-code-in-php
CVE: CVE-2025-13193
Published: 2025-11-17
Description: A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it possible for unprivileged users to inspect the guest OS contents. This results in an information disclosure vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://access.redhat.com/security/cve/CVE-2025-13193; https://bugzilla.redhat.com/show_bug.cgi?id=2415409
CVE: CVE-2025-13290
Published: 2025-11-17
Description: A vulnerability has been found in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /saveorder.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/liaoliao-hla/cve/issues/1; https://vuldb.com/?ctiid.332631
CVE: CVE-2025-13291
Published: 2025-11-17
Description: A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirm_order.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/Fex212/CVE/issues/1; https://vuldb.com/?ctiid.332632; https://vuldb.com/?id.332632
CVE: CVE-2025-13319
Published: 2025-11-17
Description: An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with valid API tokens to inject SQL via crafted input.

The API is not enabled by default, and a valid API token is required to perform the attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-89
References: https://dom.nettec.no/security-advisories/DOM-25-001/
CVE: CVE-2025-58410
Published: 2025-11-17
Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only.

This is caused by improper handling of the memory protections for the buffer resource.
CVSS Score: 7.5 (HIGH)
CWE: CWE-280
References: https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE: CVE-2025-62519
Published: 2025-11-17
Description: phpMyFAQ is an open source FAQ web application. Prior to version 4.0.14, an authenticated SQL injection vulnerability in the main configuration update functionality of phpMyFAQ allows a privileged user with 'Configuration Edit' permissions to execute arbitrary SQL commands. Successful exploitation can lead to a full compromise of the database, including reading, modifying, or deleting all data, as well as potential remote code execution depending on the database configuration. This issue has been patched in version 4.0.14.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/thorsten/phpMyFAQ/compare/4.0.13...4.0.14; https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-fxm2-cmwj-qvx4
CVE: CVE-2025-63917
Published: 2025-11-17
Description: PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references. The application uses .NET's XmlDocument class without disabling external entity resolution, enabling attackers to: Read arbitrary files from the victim's filesystem, exfiltrate sensitive data via out-of-band (OOB) HTTP requests, perform SSRF attacks against internal network resources, or cause a denial of service via entity expansion attacks.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: https://github.com/cydtseng/Vulnerability-Research/blob/main/pdfpatcher/XXE-Importers.md; https://github.com/wmjordan/PDFPatcher; https://www.cnblogs.com/pdfpatcher
CVE: CVE-2025-63918
Published: 2025-11-17
Description: PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-22
References: https://github.com/cydtseng/Vulnerability-Research/blob/main/pdfpatcher/DirectoryTraversal-ImageExport.md; https://github.com/wmjordan/PDFPatcher; https://www.cnblogs.com/pdfpatcher
CVE: CVE-2024-44651
Published: 2025-11-17
Description: Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recover_email parameter in user_password_recover.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44651.md; https://www.kashipara.com/project/php/322/ecommerce-website-in-php-with-source-code-download
CVE: CVE-2024-44653
Published: 2025-11-17
Description: Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44653.md; https://www.kashipara.com/project/php/322/ecommerce-website-in-php-with-source-code-download
CVE: CVE-2024-44657
Published: 2025-11-17
Description: PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44657.md; https://phpgurukul.com/complaint-management-sytem
CVE: CVE-2025-13297
Published: 2025-11-17
Description: A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impacted element is an unknown function of the file /course/controller.php. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/f14g-orz/CVE/issues/3; https://itsourcecode.com/; https://vuldb.com/?ctiid.332637
CVE: CVE-2025-34322
Published: 2025-11-17
Description: Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature. When this feature is configured, certain user-controlled settings—including model selection and connection parameters—are read from the global configuration and concatenated into a shell command that is executed via shell_exec() without proper input handling or command-line argument sanitation. An authenticated user with access to the 'Global Settings' page can supply crafted values in these fields to inject additional shell commands, resulting in arbitrary command execution as the 'www-data' user and compromise of the Log Server host.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://theyhack.me/Rooting-Nagios-Log-Server/; https://www.nagios.com/changelog/nagios-log-server/nagios-log-server-2026r1-0-1/; https://www.nagios.com/products/security/#log-server
CVE: CVE-2025-34323
Published: 2025-11-17
Description: Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo misconfiguration and group-writable application directories. The 'www-data' user is a member of the 'nagios' group, which has write access to '/usr/local/nagioslogserver/scripts', while several scripts in this directory are owned by root and may be executed via sudo without a password. A local attacker running as 'www-data' can move one of these root-owned scripts to a backup name and create a replacement script with attacker-controlled content at the original path, then invoke it with sudo. This allows arbitrary commands to be executed with root privileges, providing full compromise of the underlying operating system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://theyhack.me/Rooting-Nagios-Log-Server/; https://www.nagios.com/changelog/nagios-log-server/nagios-log-server-2026r1-0-1/; https://www.nagios.com/products/security/#log-server
CVE: CVE-2025-55055
Published: 2025-11-17
Description: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE: CVE-2025-55056
Published: 2025-11-17
Description: Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE: CVE-2025-55057
Published: 2025-11-17
Description: Multiple CWE-352 Cross-Site Request Forgery (CSRF)
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-352
References: https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE: CVE-2025-55058
Published: 2025-11-17
Description: CWE-20 Improper Input Validation
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-20
References: https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE: CVE-2025-55059
Published: 2025-11-17
Description: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE: CVE-2025-58407
Published: 2025-11-17
Description: Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine.
CVSS Score: 7.4 (HIGH)
CWE: CWE-367
References: https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE: CVE-2025-64342
Published: 2025-11-17
Description: ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. When the ESP32 is in advertising mode, if it receives a connection request containing an invalid Access Address (AA) of 0x00000000 or 0xFFFFFFFF, advertising may stop unexpectedly. In this case, the controller may incorrectly report a connection event to the host, which can cause the application layer to assume that the device has successfully established a connection. This issue has been fixed in versions 5.5.2, 5.4.3, 5.3.5, 5.2.6, and 5.1.7. At time of publication versions 5.5.2, 5.3.5, and 5.1.7 have not been released but are fixed respectively in commits 3b95b50, e3d7042, and 75967b5.
CWE: CWE-754
References: https://github.com/espressif/esp-idf/commit/309f031dd6b04de30c926a256508c65b0df95dfa; https://github.com/espressif/esp-idf/commit/3b95b50703cd3301a370cffaa1cc299b1941fe2a; https://github.com/espressif/esp-idf/commit/75967b578563ea7876dc215251cbb6d64bc9d768
CVE: CVE-2025-64756
Published: 2025-11-17
Description: Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c <command> <patterns> are used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to trigger command injection and achieve arbitrary code execution under the user or CI account privileges. This issue has been patched in versions 10.5.0 and 11.1.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78
References: https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f; https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146; https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2
CVE: CVE-2025-64758
Published: 2025-11-17
Description: @dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Since version 4.12.0, Dependency-Track users with the SYSTEM_CONFIGURATION permission can configure a "welcome message", which is HTML that is to be rendered on the login page for branding purposes. When rendering the welcome message, Dependency-Track versions before 4.13.6 did not properly sanitize the HTML, allowing arbitrary JavaScript to be executed. Users with the SYSTEM_CONFIGURATION permission (i.e., administrators), can exploit this weakness to execute arbitrary JavaScript for users browsing to the login page. The issue has been fixed in version 4.13.6.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/DependencyTrack/frontend/commit/8fd757be612eaf4f35eadbe4c334204d7bd711be; https://github.com/DependencyTrack/frontend/pull/1378; https://github.com/DependencyTrack/frontend/pull/986
CVE: CVE-2024-44654
Published: 2025-11-17
Description: PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44654.md; https://phpgurukul.com/complaint-management-sytem
CVE: CVE-2024-44655
Published: 2025-11-17
Description: PHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) via the search parameter in user-search.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44655.md; https://phpgurukul.com/complaint-management-sytem
CVE: CVE-2024-44658
Published: 2025-11-17
Description: PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44658.md; https://phpgurukul.com/complaint-management-sytem
CVE: CVE-2024-44660
Published: 2025-11-17
Description: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44660.md; https://phpgurukul.com/shopping-portal-free-download/
CVE: CVE-2024-44662
Published: 2025-11-17
Description: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44662.md; https://phpgurukul.com/shopping-portal-free-download/
CVE: CVE-2024-44663
Published: 2025-11-17
Description: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44663.md; https://phpgurukul.com/shopping-portal-free-download/
CVE: CVE-2024-46335
Published: 2025-11-17
Description: PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting (XSS) via the fromdate and todate parameters in between-date-userreport.php.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-46335.md; https://phpgurukul.com/complaint-management-sytem
CVE: CVE-2025-13216
Published: 2025-11-17
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-63292
Published: 2025-11-17
Description: Freebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révolution r1–r3 (firmware = 4.7.x), Freebox Mini 4K (firmware = 4.7.x), and Freebox One (firmware = 4.7.x) were discovered to expose subscribers' IMSI identifiers in plaintext during the initial phase of EAP-SIM authentication over the `FreeWifi_secure` network. During the EAP-Response/Identity exchange, the subscriber's full Network Access Identifier (NAI), which embeds the raw IMSI, is transmitted without encryption, tunneling, or pseudonymization. An attacker located within Wi-Fi range (~100 meters) can passively capture these frames without requiring user interaction or elevated privileges. The disclosed IMSI enables device tracking, subscriber correlation, and long-term monitoring of user presence near any broadcasting Freebox device. The vendor acknowledged the vulnerability, and the `FreeWifi_secure` service is planned for full deactivation by 1 October 2025.
CVSS Score: 3.5 (LOW)
CWE: CWE-319
References: https://7h30th3r0n3.fr/the-vulnerability-that-killed-freewifi_secure/; https://gist.github.com/7h30th3r0n3/1a0fadb19f1528e3d3f6bad9f680c3b0#file-cve-2025-63292-frebox-imsi-md
CVE: CVE-2024-44659
Published: 2025-11-17
Description: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44659.md; https://phpgurukul.com/shopping-portal-free-download/
CVE: CVE-2024-44661
Published: 2025-11-17
Description: PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44661.md; https://phpgurukul.com/shopping-portal-free-download/
CVE: CVE-2024-44664
Published: 2025-11-17
Description: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44664.md; https://phpgurukul.com/shopping-portal-free-download/
CVE: CVE-2025-13298
Published: 2025-11-17
Description: A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. This affects an unknown function of the file /enrollment/controller.php. Performing a manipulation results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/f14g-orz/CVE/issues/4; https://itsourcecode.com/; https://vuldb.com/?ctiid.332638
CVE: CVE-2025-13299
Published: 2025-11-17
Description: A flaw has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. This impacts an unknown function of the file /user/controller.php. Executing a manipulation can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/f14g-orz/CVE/issues/5; https://itsourcecode.com/; https://vuldb.com/?ctiid.332639
CVE: CVE-2025-36299
Published: 2025-11-17
Description: IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further attacks against the system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-540
References: https://www.ibm.com/support/pages/node/7251265
CVE: CVE-2025-36357
Published: 2025-11-17
Description: IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing absolute path sequences to view, read, or write arbitrary files on the system.
CVSS Score: 8.0 (HIGH)
CWE: CWE-36
References: https://www.ibm.com/support/pages/node/7251265
CVE: CVE-2025-13300
Published: 2025-11-17
Description: A vulnerability has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected is an unknown function of the file /settings/controller.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/f14g-orz/CVE/issues/6; https://itsourcecode.com/; https://vuldb.com/?ctiid.332640
CVE: CVE-2025-13301
Published: 2025-11-17
Description: A vulnerability was found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /subject/controller.php. The manipulation results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/f14g-orz/CVE/issues/7; https://itsourcecode.com/; https://vuldb.com/?ctiid.332641
CVE: CVE-2025-36118
Published: 2025-11-17
Description: IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-244
References: https://www.ibm.com/support/pages/node/7250954
CVE: CVE-2025-13302
Published: 2025-11-17
Description: A vulnerability was identified in code-projects Courier Management System 1.0. This affects an unknown part of the file /add-new-officer.php. Such manipulation of the argument ManagerName leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/labi1106/cve/issues/1; https://vuldb.com/?ctiid.332643
CVE: CVE-2025-13303
Published: 2025-11-17
Description: A vulnerability was determined in code-projects Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /search-edit.php. This manipulation of the argument Consignment causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/labi1106/cve/issues/2; https://vuldb.com/?ctiid.332642
CVE: CVE-2025-64766
Published: 2025-11-17
Description: NixOS's Onlyoffice is a software suite that offers online and offline tools for document editing, collaboration, and management. In versions from 22.11 to before 25.05 and versions before Unstable 25.11, a hard-coded secret was used in the NixOS module for the OnlyOffice document server to protect its file cache. An attacker with knowledge of an existing revision ID could use this secret to obtain a document. In practice, an arbitrary revision ID should be hard to obtain. The primary impact is likely the access to known documents from users with expired access. This issue was resolved in NixOS unstable version 25.11 and version 25.05.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-798
References: https://github.com/NixOS/nixpkgs/commit/8e74d05e3de4ee5ad320cd585a7e0f12a4730869; https://github.com/NixOS/nixpkgs/commit/cec38dec00df26a901eb8b424d53bbb3bcc72eec; https://github.com/NixOS/nixpkgs/pull/462100