deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-49662
Published: 2024-10-29
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webgensis Simple Load More simple-load-more allows Reflected XSS.This issue affects Simple Load More: from n/a through <= 1.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/simple-load-more/vulnerability/wordpress-simple-load-more-plugin-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-49663
Published: 2024-10-29
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in elenkadark uCAT – Next Story ucat-next-story allows Reflected XSS.This issue affects uCAT – Next Story: from n/a through <= 2.0.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/ucat-next-story/vulnerability/wordpress-ucat-next-story-plugin-2-0-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-49664
Published: 2024-10-29
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in chatplusjp chatplusjp chatplusjp allows Reflected XSS.This issue affects chatplusjp: from n/a through <= 1.02.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/chatplusjp/vulnerability/wordpress-chatplusjp-plugin-1-02-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-49665
Published: 2024-10-29
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Web Bricks Web Bricks Addons for Elementor allows Stored XSS.This issue affects Web Bricks Addons for Elementor: from n/a through 1.1.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/webbricks-addons/wordpress-web-bricks-addons-for-elementor-plugin-1-1-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-49667
Published: 2024-10-29
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Asaduzzaman Abir Local Business Addons For Elementor map-addons-for-elementor-waze-map allows Stored XSS.This issue affects Local Business Addons For Elementor: from n/a through <= 1.1.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/map-addons-for-elementor-waze-map/vulnerability/wordpress-local-business-addons-for-elementor-plugin-1-1-5-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-10458
Published: 2024-10-29
Description: A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Thunderbird < 128.4, and Thunderbird < 132.
CVSS Score: 7.5 (HIGH)
CWE: CWE-281
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1921733; https://www.mozilla.org/security/advisories/mfsa2024-55/; https://www.mozilla.org/security/advisories/mfsa2024-56/
CVE: CVE-2024-10459
Published: 2024-10-29
Description: An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Thunderbird < 128.4, and Thunderbird < 132.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1919087; https://www.mozilla.org/security/advisories/mfsa2024-55/; https://www.mozilla.org/security/advisories/mfsa2024-56/
CVE: CVE-2024-10460
Published: 2024-10-29
Description: The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-346
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1912537; https://www.mozilla.org/security/advisories/mfsa2024-55/; https://www.mozilla.org/security/advisories/mfsa2024-56/
CVE: CVE-2024-10461
Published: 2024-10-29
Description: In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1914521; https://www.mozilla.org/security/advisories/mfsa2024-55/; https://www.mozilla.org/security/advisories/mfsa2024-56/
CVE: CVE-2024-10462
Published: 2024-10-29
Description: Truncation of a long URL could have allowed origin spoofing in a permission prompt. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290, CWE-290
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1920423; https://www.mozilla.org/security/advisories/mfsa2024-55/; https://www.mozilla.org/security/advisories/mfsa2024-56/
CVE: CVE-2024-10463
Published: 2024-10-29
Description: Video frames could have been leaked between origins in some situations. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Thunderbird < 128.4, and Thunderbird < 132.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1920800; https://www.mozilla.org/security/advisories/mfsa2024-55/; https://www.mozilla.org/security/advisories/mfsa2024-56/
CVE: CVE-2024-10464
Published: 2024-10-29
Description: Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser. This was addressed by introducing rate-limiting to this API. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1913000; https://www.mozilla.org/security/advisories/mfsa2024-55/; https://www.mozilla.org/security/advisories/mfsa2024-56/
CVE: CVE-2024-10465
Published: 2024-10-29
Description: A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290, CWE-290
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1918853; https://www.mozilla.org/security/advisories/mfsa2024-55/; https://www.mozilla.org/security/advisories/mfsa2024-56/
CVE: CVE-2024-10466
Published: 2024-10-29
Description: By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to become unresponsive. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1924154; https://www.mozilla.org/security/advisories/mfsa2024-55/; https://www.mozilla.org/security/advisories/mfsa2024-56/
CVE: CVE-2024-10467
Published: 2024-10-29
Description: Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-120, CWE-125
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1829029%2C1888538%2C1900394%2C1904059%2C1917742%2C1919809%2C1923706; https://www.mozilla.org/security/advisories/mfsa2024-55/; https://www.mozilla.org/security/advisories/mfsa2024-56/
CVE: CVE-2024-10468
Published: 2024-10-29
Description: Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash. This vulnerability affects Firefox < 132 and Thunderbird < 132.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-362, CWE-770
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1914982; https://www.mozilla.org/security/advisories/mfsa2024-55/; https://www.mozilla.org/security/advisories/mfsa2024-59/
CVE: CVE-2024-10474
Published: 2024-10-29
Description: Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL safety checks This vulnerability affects Focus for iOS < 132.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1863832; https://www.mozilla.org/security/advisories/mfsa2024-60/
CVE: CVE-2024-41153
Published: 2024-10-29
Description: Command injection vulnerability in the Edge Computing UI for the
TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the
web UI can execute commands on the device with root privileges,
far more extensive than what the write privilege intends.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-77
References: https://publisher.hitachienergy.com/preview?DocumentID=8DBD000147&LanguageCode=en&DocumentPartId=&Action=launch
CVE: CVE-2024-41156
Published: 2024-10-29
Description: Profile files from TRO600 series radios are extracted in plain-text
and encrypted file formats. Profile files provide potential attackers
valuable configuration information about the Tropos network. Profiles
can only be exported by authenticated users with higher privilege of write access.
CVSS Score: 2.7 (LOW)
CWE: CWE-212, CWE-212
References: https://publisher.hitachienergy.com/preview?DocumentID=8DBD000147&LanguageCode=en&DocumentPartId=&Action=launch
CVE: CVE-2024-49635
Published: 2024-10-29
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in manjurul.cis Banner Slider banner-slider allows Reflected XSS.This issue affects Banner Slider: from n/a through <= 2.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/banner-slider/vulnerability/wordpress-banner-slider-plugin-2-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-49636
Published: 2024-10-29
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woracal Agile Video Player Lite agile-video-player allows Reflected XSS.This issue affects Agile Video Player Lite: from n/a through <= 1.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/agile-video-player/vulnerability/wordpress-agile-video-player-lite-plugin-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-49637
Published: 2024-10-29
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Foxskav Bet WC 2018 Russia bet-wc-2018-russia allows Reflected XSS.This issue affects Bet WC 2018 Russia: from n/a through <= 2.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/bet-wc-2018-russia/vulnerability/wordpress-bet-wc-2018-russia-plugin-2-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-49638
Published: 2024-10-29
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ventureharbour Risk Warning Bar risk-warning-bar allows Reflected XSS.This issue affects Risk Warning Bar: from n/a through <= 1.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/risk-warning-bar/vulnerability/wordpress-risk-warning-bar-plugin-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-49639
Published: 2024-10-29
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Edward Stoever Monitor.chat monitor-chat allows Reflected XSS.This issue affects Monitor.chat: from n/a through <= 1.1.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/monitor-chat/vulnerability/wordpress-monitor-chat-plugin-1-1-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-49640
Published: 2024-10-29
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AmaderCode Lab ACL Floating Cart for WooCommerce acl-floating-cart-for-woocommerce allows Reflected XSS.This issue affects ACL Floating Cart for WooCommerce: from n/a through <= 0.9.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/acl-floating-cart-for-woocommerce/vulnerability/wordpress-acl-floating-cart-for-woocommerce-plugin-0-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-49641
Published: 2024-10-29
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tidaweb Tida URL Screenshot tida-url-screenshot allows Reflected XSS.This issue affects Tida URL Screenshot: from n/a through <= 1.0.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/tida-url-screenshot/vulnerability/wordpress-tida-url-screenshot-plugin-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-49643
Published: 2024-10-29
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fifthsegment Whitelist fifthsegment-whitelist allows Reflected XSS.This issue affects Whitelist: from n/a through <= 3.5.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/fifthsegment-whitelist/vulnerability/wordpress-whitelist-plugin-3-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-49645
Published: 2024-10-29
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ilias Gomatos Affiliate Platform smdp-affiliate-platform allows Reflected XSS.This issue affects Affiliate Platform: from n/a through <= 1.4.8.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/smdp-affiliate-platform/vulnerability/wordpress-affiliate-platform-plugin-1-4-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-51180
Published: 2024-10-29
Description: A Reflected Cross Site Scripting (XSS) vulnerability was found in /ifscfinder/index.php in PHPGurukul IFSC Code Finder Project v1.0, which allows remote attackers to execute arbitrary code via the "searchifsccode" parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/IFSC%20Code%20Finder/IFSC%20Code%20Finder%20do.pdf
CVE: CVE-2024-51181
Published: 2024-10-29
Description: A Reflected Cross Site Scripting (XSS) vulnerability was found in /ifscfinder/admin/profile.php in PHPGurukul IFSC Code Finder Project v1.0, which allows remote attackers to execute arbitrary code via " searchifsccode" parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/IFSC%20Code%20Finder/IFSC%20Code%20Finder%20Admin.pdf
CVE: CVE-2024-5823
Published: 2024-10-29
Description: A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior or security settings. Additionally, tampering with these configuration files can result in a denial of service (DoS) condition, disrupting normal system operation.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-73, CWE-610
References: https://github.com/gaizhenbiao/chuanhuchatgpt/commit/720c23d755a4a955dcb0a54e8c200a2247a27f8b; https://huntr.com/bounties/ca361701-7d68-4df6-8da0-caad4b85b9ae
CVE: CVE-2024-5982
Published: 2024-10-29
Description: A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability arises from unsanitized input handling in multiple features, including user upload, directory creation, and template loading. Specifically, the load_chat_history function in modules/models/base_model.py allows arbitrary file uploads, potentially leading to remote code execution (RCE). The get_history_names function in utils.py permits arbitrary directory creation. Additionally, the load_template function in utils.py can be exploited to leak the first column of CSV files. These issues stem from improper sanitization of user inputs concatenated with directory paths using os.path.join.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/gaizhenbiao/chuanhuchatgpt/commit/952fc8c3cbacead858311747cddd4bedcb4721d7; https://huntr.com/bounties/5d5c5356-e893-44d1-b5ca-642aa05d96bb
CVE: CVE-2024-6581
Published: 2024-10-29
Description: A vulnerability in the discussion image upload function of the Lollms application, version v9.9, allows for the uploading of SVG files. Due to incomplete filtering in the sanitize_svg function, this can lead to cross-site scripting (XSS) vulnerabilities, which in turn pose a risk of remote code execution. The sanitize_svg function only removes script elements and 'on*' event attributes, but does not account for other potential vectors for XSS within SVG files. This vulnerability can be exploited when authorized users access a malicious URL containing the crafted SVG file.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://github.com/parisneo/lollms/commit/328b960a0de2097e13654ac752253e9541521ddd; https://huntr.com/bounties/ad68ecd6-44e2-449b-8e7e-f2b71b1b43c7
CVE: CVE-2024-6673
Published: 2024-10-29
Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in the `install_comfyui` endpoint of the `lollms_comfyui.py` file in the parisneo/lollms-webui repository, versions v9.9 to the latest. The endpoint uses the GET method without requiring a client ID, allowing an attacker to trick a victim into installing ComfyUI. If the victim's device does not have sufficient capacity, this can result in a crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/parisneo/lollms-webui/commit/c1bb1ad19752aa7541675b398495eaf98fd589f1; https://huntr.com/bounties/a38f9a7d-b357-427d-adac-f9654d8c0e3c
CVE: CVE-2024-6674
Published: 2024-10-29
Description: A CORS misconfiguration in parisneo/lollms-webui prior to version 10 allows attackers to steal sensitive information such as logs, browser sessions, and settings containing private API keys from other services. This vulnerability can also enable attackers to perform actions on behalf of a user, such as deleting a project or sending a message. The issue impacts the confidentiality and integrity of the information.
CVSS Score: 7.1 (HIGH)
CWE: CWE-346
References: https://github.com/parisneo/lollms-webui/commit/c1bb1ad19752aa7541675b398495eaf98fd589f1; https://huntr.com/bounties/e688f71b-a3a4-4f6d-b48a-837073fa6908
CVE: CVE-2024-6868
Published: 2024-10-29
Description: mudler/LocalAI version 2.17.1 allows for arbitrary file write due to improper handling of automatic archive extraction. When model configurations specify additional files as archives (e.g., .tar), these archives are automatically extracted after downloading. This behavior can be exploited to perform a 'tarslip' attack, allowing files to be written to arbitrary locations on the server, bypassing checks that normally restrict files to the models directory. This vulnerability can lead to remote code execution (RCE) by overwriting backend assets used by the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-59
References: https://github.com/mudler/localai/commit/a181dd0ebc5d3092fc50f61674d552604fe8ef9c; https://huntr.com/bounties/752d2376-2d9a-4e17-b462-3c267f9dd229
CVE: CVE-2024-7010
Published: 2024-10-29
Description: mudler/localai version 2.17.1 is vulnerable to a Timing Attack. This type of side-channel attack allows an attacker to compromise the cryptosystem by analyzing the time taken to execute cryptographic algorithms. Specifically, in the context of password handling, an attacker can determine valid login credentials based on the server's response time, potentially leading to unauthorized access.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-208, CWE-203
References: https://github.com/mudler/localai/commit/db1159b6511e8fa09e594f9db0fec6ab4e142468; https://huntr.com/bounties/e286ed00-6383-47de-b5bc-9b9fad67c362
CVE: CVE-2024-7042
Published: 2024-10-29
Description: A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leading to SQL injection. This vulnerability permits unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/langchain-ai/langchainjs/commit/615b9d9ab30a2d23a2f95fb8d7acfdf4b41ad7a6; https://huntr.com/bounties/b612defb-1104-4fff-9fef-001ab07c7b2d
CVE: CVE-2024-7472
Published: 2024-10-29
Description: lunary-ai/lunary v1.2.26 contains an email injection vulnerability in the Send email verification API (/v1/users/send-verification) and Sign up API (/auth/signup). An unauthenticated attacker can inject data into outgoing emails by bypassing the extractFirstName function using a different whitespace character (e.g., \xa0). This vulnerability can be exploited to conduct phishing attacks, damage the application's brand, cause legal and compliance issues, and result in financial impact due to unauthorized email usage.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-93, CWE-74
References: https://github.com/lunary-ai/lunary/commit/a39837d7c49936a0c435d241f37ca2ea7904d2cd; https://huntr.com/bounties/dc1feec6-1efb-4538-9b56-ab25deb80948
CVE: CVE-2024-7473
Published: 2024-10-29
Description: An IDOR vulnerability exists in the 'Evaluations' function of the 'umgws datasets' section in lunary-ai/lunary versions 1.3.2. This vulnerability allows an authenticated user to update other users' prompts by manipulating the 'id' parameter in the request. The issue is fixed in version 1.4.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://github.com/lunary-ai/lunary/commit/88b55b01fcbab0fbbc5b8032a38d0345af98ecfa; https://huntr.com/bounties/afecd927-b5f6-44ba-9147-5c45091beda5
CVE: CVE-2024-7474
Published: 2024-10-29
Description: In version 1.3.2 of lunary-ai/lunary, an Insecure Direct Object Reference (IDOR) vulnerability exists. A user can view or delete external users by manipulating the 'id' parameter in the request URL. The application does not perform adequate checks on the 'id' parameter, allowing unauthorized access to external user data.
CVSS Score: 8.1 (HIGH)
CWE: CWE-639, CWE-639
References: https://github.com/lunary-ai/lunary/commit/8f563c77d8614a72980113f530c7a9ec15a5f8d5; https://huntr.com/bounties/95d8b993-3347-4ef5-a2b3-1f57219b7871
CVE: CVE-2024-7475
Published: 2024-10-29
Description: An improper access control vulnerability in lunary-ai/lunary version 1.3.2 allows an attacker to update the SAML configuration without authorization. This vulnerability can lead to manipulation of authentication processes, fraudulent login requests, and theft of user information. Appropriate access controls should be implemented to ensure that the SAML configuration can only be updated by authorized users.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-862
References: https://github.com/lunary-ai/lunary/commit/8f563c77d8614a72980113f530c7a9ec15a5f8d5; https://huntr.com/bounties/78c824f7-3b6d-443d-bb76-0f8031c6c126