deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-14559
Published: 2020-11-23
Description: Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://bugzilla.tianocore.org/show_bug.cgi?id=2031; https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html; https://bugzilla.tianocore.org/show_bug.cgi?id=2031
CVE: CVE-2019-14562
Published: 2020-11-23
Description: Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://bugzilla.tianocore.org/show_bug.cgi?id=2215; https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html; https://bugzilla.tianocore.org/show_bug.cgi?id=2215
CVE: CVE-2019-20923
Published: 2020-11-23
Description: A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which throw unhandled Javascript exceptions containing types intended to be scoped to the Javascript engine's internals. This issue affects MongoDB Server v4.0 versions prior to 4.0.7.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-749
References: https://jira.mongodb.org/browse/SERVER-39481; https://jira.mongodb.org/browse/SERVER-39481
CVE: CVE-2019-20924
Published: 2020-11-23
Description: A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects MongoDB Server v4.2 versions prior to 4.2.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-394, CWE-754
References: https://jira.mongodb.org/browse/SERVER-44377; https://jira.mongodb.org/browse/SERVER-44377
CVE: CVE-2019-2392
Published: 2020-11-23
Description: A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prior to 4.0.20; v3.6 versions prior to 3.6.20.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://jira.mongodb.org/browse/SERVER-43699; https://jira.mongodb.org/browse/SERVER-43699
CVE: CVE-2019-2393
Published: 2020-11-23
Description: A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 and MongoDB Server v3.6 versions prior to 3.6.15.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://jira.mongodb.org/browse/SERVER-43350; https://jira.mongodb.org/browse/SERVER-43350
CVE: CVE-2020-1778
Published: 2020-11-23
Description: When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://otrs.com/release-notes/otrs-security-advisory-2020-16/; https://otrs.com/release-notes/otrs-security-advisory-2020-16/
CVE: CVE-2020-28421
Published: 2020-11-23
Description: CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) component that allows local attackers to elevate privileges.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/fulldisclosure/2020/Nov/41; https://support.broadcom.com/external/content/security-advisories/CA20201116-01-Security-Notice-for-CA-Unified-Infrastructure-Management/16565; http://seclists.org/fulldisclosure/2020/Nov/41
CVE: CVE-2020-7777
Published: 2020-11-23
Description: This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript code on the victim machine. In the module description and README file there is no mention about the risks of untrusted schema files, so I assume that this is applicable. In particular the required field of the schema is not properly sanitized. The resulting string that is build based on the schema definition is then passed to a Function.apply();, leading to an Arbitrary Code Execution.
CVSS Score: 7.2 (HIGH)
References: https://github.com/bugventure/jsen/blob/master/lib/jsen.js%23L875; https://snyk.io/vuln/SNYK-JS-JSEN-1014670; https://github.com/bugventure/jsen/blob/master/lib/jsen.js%23L875
CVE: CVE-2019-14563
Published: 2020-11-23
Description: Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-681, CWE-787
References: https://bugzilla.tianocore.org/show_bug.cgi?id=2001; https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html; https://bugzilla.tianocore.org/show_bug.cgi?id=2001
CVE: CVE-2019-14575
Published: 2020-11-23
Description: Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://bugzilla.tianocore.org/show_bug.cgi?id=1608; https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html; https://bugzilla.tianocore.org/show_bug.cgi?id=1608
CVE: CVE-2019-14586
Published: 2020-11-23
Description: Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via adjacent access.
CVSS Score: 8.0 (HIGH)
CWE: CWE-416
References: https://bugzilla.tianocore.org/show_bug.cgi?id=1995; https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html; https://bugzilla.tianocore.org/show_bug.cgi?id=1995
CVE: CVE-2019-14587
Published: 2020-11-23
Description: Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
References: https://bugzilla.tianocore.org/show_bug.cgi?id=1989; https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html; https://bugzilla.tianocore.org/show_bug.cgi?id=1989
CVE: CVE-2020-0569
Published: 2020-11-23
Description: Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-787
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00338.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00338.html
CVE: CVE-2020-12351
Published: 2020-11-23
Description: Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/162131/Linux-Kernel-5.4-BleedingTooth-Remote-Code-Execution.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00435.html?wapkw=CVE-2020-12351; http://packetstormsecurity.com/files/162131/Linux-Kernel-5.4-BleedingTooth-Remote-Code-Execution.html
CVE: CVE-2020-12352
Published: 2020-11-23
Description: Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-909
References: http://packetstormsecurity.com/files/161229/Kernel-Live-Patch-Security-Notice-LSN-0074-1.html; http://packetstormsecurity.com/files/162131/Linux-Kernel-5.4-BleedingTooth-Remote-Code-Execution.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00435.html?wapkw=CVE-2020-12351
CVE: CVE-2020-4771
Published: 2020-11-23
Description: IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attacker to obtain sensitive information, caused by improper authentication of a websocket endpoint. By using known tools to subscribe to the websocket event stream, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 188993.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/188993; https://www.ibm.com/support/pages/node/6369101; https://exchange.xforce.ibmcloud.com/vulnerabilities/188993
CVE: CVE-2020-4783
Published: 2020-11-23
Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 189214.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-862
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/189214; https://www.ibm.com/support/pages/node/6368601; https://exchange.xforce.ibmcloud.com/vulnerabilities/189214
CVE: CVE-2020-4854
Published: 2020-11-23
Description: IBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 190454.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/190454; https://www.ibm.com/support/pages/node/6367823; https://www.tenable.com/security/research/tra-2020-66
CVE: CVE-2020-6939
Published: 2020-11-23
Description: Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a malicious user to configure Site-Specific SAML settings and could lead to account takeover for users of that site. Tableau Server versions affected on both Windows and Linux are: 2018.2 through 2018.2.27, 2018.3 through 2018.3.24, 2019.1 through 2019.1.22, 2019.2 through 2019.2.18, 2019.3 through 2019.3.14, 2019.4 through 2019.4.13, 2020.1 through 2020.1.10, 2020.2 through 2020.2.7, and 2020.3 through 2020.3.2.
CVSS Score: 9.8 (CRITICAL)
References: https://help.salesforce.com/articleView?id=000355686&type=1&mode=1; https://help.salesforce.com/articleView?id=000355686&type=1&mode=1
CVE: CVE-2020-7928
Published: 2020-11-23
Description: A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and MongoDB Server v3.6 versions prior to 3.6.20.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-158
References: https://jira.mongodb.org/browse/SERVER-49404; https://jira.mongodb.org/browse/SERVER-49404
CVE: CVE-2018-20803
Published: 2020-11-23
Description: A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects MongoDB Server v4.0 versions prior to 4.0.5; MongoDB Server v3.6 versions prior to 3.6.10 and MongoDB Server v3.4 versions prior to 3.4.19.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://jira.mongodb.org/browse/SERVER-38070; https://jira.mongodb.org/browse/SERVER-38070
CVE: CVE-2020-26239
Published: 2020-11-23
Description: Scratch Addons is a WebExtension that supports both Chrome and Firefox. Scratch Addons before version 1.3.2 is vulnerable to DOM-based XSS. If the victim visited a specific website, the More Links addon of the Scratch Addons extension used incorrect regular expression which caused the HTML-escaped values to be unescaped, leading to XSS. Scratch Addons version 1.3.2 fixes the bug. The extension will be automatically updated by the browser. More Links addon can be disabled via the option of the extension.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://github.com/ScratchAddons/ScratchAddons/blob/a471893df403f86c[PII_REDACTED]175d4772a0690c/addons/more-links/userscript.js#L15; https://github.com/ScratchAddons/ScratchAddons/commit/b9a52d6532c8514254c7cc1d8e18710dbedc41ff; https://github.com/ScratchAddons/ScratchAddons/releases/tag/v1.3.2
CVE: CVE-2020-28864
Published: 2020-11-23
Description: Buffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or possibly have other unspecified impact via a long file name.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://winscp.net/forum/viewtopic.php?t=30085; https://winscp.net/tracker/1924; https://winscp.net/forum/viewtopic.php?t=30085
CVE: CVE-2020-28896
Published: 2020-11-23
Description: Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials being exposed on an unencrypted connection, or to a machine-in-the-middle.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287, CWE-755
References: https://github.com/neomutt/neomutt/commit/9c36717a3e2af1f2c1b[PII_REDACTED]ec8112b4b06; https://github.com/neomutt/neomutt/releases/tag/20201120; https://gitlab.com/muttmua/mutt/-/commit/04b06aaa3e0cc0022b9b01dbca2863756ebbf59a
CVE: CVE-2020-7927
Published: 2020-11-23
Description: Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key with Global Role privilege. This issue affects MongoDB Ops Manager v4.2 versions prior to and including 4.2.17, MongoDB Ops Manager v4.3 versions prior to and including 4.3.9 and MongoDB Ops Manager v4.4 versions prior to and including 4.4.2.
CVSS Score: 8.1 (HIGH)
CWE: CWE-648
References: https://www.mongodb.com/docs/ops-manager/current/release-notes/application/#onprem-server-4.4.3; https://www.mongodb.com/docs/ops-manager/current/release-notes/application/#onprem-server-4.4.3
CVE: CVE-2020-15246
Published: 2020-11-23
Description: October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version 1.0.421 and before version 1.0.469, an attacker can read local files on an October CMS server via a specially crafted request. Issue has been patched in Build 469 (v1.0.469) and v1.1.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863, CWE-22
References: https://github.com/octobercms/library/commit/80aab47f044a2660aa352450f55137598f362aa4; https://github.com/octobercms/october/security/advisories/GHSA-xwjr-6fj7-fc6h; https://github.com/octobercms/library/commit/80aab47f044a2660aa352450f55137598f362aa4
CVE: CVE-2020-15247
Published: 2020-11-23
Description: October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version 1.0.319 and before version 1.0.469, an authenticated backend user with the cms.manage_pages, cms.manage_layouts, or cms.manage_partials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to cms.enableSafeMode being enabled is able to write specific Twig code to escape the Twig sandbox and execute arbitrary PHP. This is not a problem for anyone that trusts their users with those permissions to normally write & manage PHP within the CMS by not having cms.enableSafeMode enabled, but would be a problem for anyone relying on cms.enableSafeMode to ensure that users with those permissions in production do not have access to write & execute arbitrary PHP. Issue has been patched in Build 469 (v1.0.469) and v1.1.0.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-862
References: https://github.com/octobercms/october/commit/4c650bb775ab849e48202a4923bac93bd74f9982; https://github.com/octobercms/october/security/advisories/GHSA-94vp-rmqv-5875; https://github.com/octobercms/october/commit/4c650bb775ab849e48202a4923bac93bd74f9982
CVE: CVE-2020-15248
Published: 2020-11-23
Description: October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version 1.0.319 and before version 1.0.470, backend users with the default "Publisher" system role have access to create & manage users where they can choose which role the new user has. This means that a user with "Publisher" access has the ability to escalate their access to "Developer" access. Issue has been patched in Build 470 (v1.0.470) & v1.1.1.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-863, CWE-269
References: https://github.com/octobercms/october/commit/78a37298a4ed4602b383522344a31e311402d829; https://github.com/octobercms/october/security/advisories/GHSA-rfjc-xrmf-5vvw; https://github.com/octobercms/october/commit/78a37298a4ed4602b383522344a31e311402d829
CVE: CVE-2020-15249
Published: 2020-11-23
Description: October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version 1.0.319 and before version 1.0.469, backend users with access to upload files were permitted to upload SVG files without any sanitization applied to the uploaded files. Since SVG files support being parsed as HTML by browsers, this means that they could theoretically upload Javascript that would be executed on a path under the website's domain (i.e. /storage/app/media/evil.svg), but they would have to convince their target to visit that location directly in the target's browser as the backend does not display SVGs inline anywhere, SVGs are only displayed as image resources in the backend and are thus unable to be executed. Issue has been patched in Build 469 (v1.0.469) & v1.1.0.
CVSS Score: 2.8 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/octobercms/library/commit/80aab47f044a2660aa352450f55137598f362aa4; https://github.com/octobercms/october/security/advisories/GHSA-fx3v-553x-3c4q; https://github.com/octobercms/library/commit/80aab47f044a2660aa352450f55137598f362aa4
CVE: CVE-2020-28927
Published: 2020-11-23
Description: There is a Stored XSS in Magicpin v2.1 in the User Registration section. Each time an admin visits the manage user section from the admin panel, the XSS triggers and the attacker can able to steal the cookie according to the crafted payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://akshayj0111.medium.com/cve-2020-28927-6f64c25239bb; https://magicpin.in; https://akshayj0111.medium.com/cve-2020-28927-6f64c25239bb
CVE: CVE-2018-16719
Published: 2020-11-23
Description: In Jingyun Antivirus v2.4.2.39, the driver file (hookbody.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00221482.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/bsauce/poc/tree/master/jingyun_antivirus_00221482; https://www.cnvd.org.cn/flaw/show/CNVD-2018-19268; https://github.com/bsauce/poc/tree/master/jingyun_antivirus_00221482
CVE: CVE-2018-16720
Published: 2020-11-23
Description: In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x1236001c, a related issue to CVE-2018-16304.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/bsauce/poc/tree/master/jingyun_antivirus_1236001c; https://www.cnvd.org.cn/flaw/show/CNVD-2018-19267; https://github.com/bsauce/poc/tree/master/jingyun_antivirus_1236001c
CVE: CVE-2018-16721
Published: 2020-11-23
Description: In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x12360090, a related issue to CVE-2018-16306.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/bsauce/poc/tree/master/jingyun_antivirus_12360090; https://www.cnvd.org.cn/flaw/show/CNVD-2018-19266; https://github.com/bsauce/poc/tree/master/jingyun_antivirus_12360090
CVE: CVE-2018-16722
Published: 2020-11-23
Description: In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x12360094, a related issue to CVE-2018-16305.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/bsauce/poc/tree/master/jingyun_antivirus_12360094; https://www.cnvd.org.cn/flaw/show/CNVD-2018-19265; https://github.com/bsauce/poc/tree/master/jingyun_antivirus_12360094
CVE: CVE-2018-16723
Published: 2020-11-23
Description: In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x12364020.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/bsauce/poc/tree/master/jingyun_antivirus_12364020; https://www.cnvd.org.cn/flaw/show/CNVD-2018-19264; https://github.com/bsauce/poc/tree/master/jingyun_antivirus_12364020
CVE: CVE-2020-15436
Published: 2020-11-23
Description: Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416
References: https://lkml.org/lkml/2020/6/7/379; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://lkml.org/lkml/2020/6/7/379
CVE: CVE-2020-15437
Published: 2020-11-23
Description: The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:serial8250_isa_init_ports() that allows local users to cause a denial of service by using the p->serial_in pointer which uninitialized.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-476
References: https://lkml.org/lkml/2020/7/21/80; https://lkml.org/lkml/2020/7/21/80
CVE: CVE-2020-24227
Published: 2020-11-23
Description: Playground Sessions v2.5.582 (and earlier) for Windows, stores the user credentials in plain text allowing anyone with access to UserProfiles.sol to extract the email and password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://github.com/nathunandwani/CVE-2020-24227; https://github.com/nathunandwani/CVE-2020-24227
CVE: CVE-2020-26227
Published: 2020-11-23
Description: TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.23 and 10.4.10 the system extension Fluid (typo3/cms-fluid) of the TYPO3 core is vulnerable to cross-site scripting passing user-controlled data as argument to Fluid view helpers. Update to TYPO3 versions 9.5.23 or 10.4.10 that fix the problem described.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-vqqx-jw6p-q3rf; https://typo3.org/security/advisory/typo3-core-sa-2020-010; https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-vqqx-jw6p-q3rf
CVE: CVE-2020-26228
Published: 2020-11-23
Description: TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.23 and 10.4.10 user session identifiers were stored in cleartext - without processing with additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance SQL injection in any other component of the system. Update to TYPO3 versions 9.5.23 or 10.4.10 that fix the problem described.
CVSS Score: 8.1 (HIGH)
CWE: CWE-312
References: https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-954j-f27r-cj52; https://typo3.org/security/advisory/typo3-core-sa-2020-011; https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-954j-f27r-cj52