deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-36008
Published: 2024-05-20
Description: In the Linux kernel, the following vulnerability has been resolved:

ipv4: check for NULL idev in ip_route_use_hint()

syzbot was able to trigger a NULL deref in fib_validate_source()
in an old tree [1].

It appears the bug exists in latest trees.

All calls to __in_dev_get_rcu() must be checked for a NULL result.

[1]
general protection fault, probably for non-canonical address 0xdffffc[PII_REDACTED]: 0000 [#1] SMP KASAN
KASAN: null-ptr-deref in range [0x[PII_REDACTED]000000-0x[PII_REDACTED]000007]
CPU: 2 PID: 3257 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
 RIP: 0010:fib_validate_source+0xbf/0x15a0 net/ipv4/fib_frontend.c:425
Code: 18 f2 f2 f2 f2 42 c7 44 20 23 f3 f3 f3 f3 48 89 44 24 78 42 c6 44 20 27 f3 e8 5d 88 48 fc 4c 89 e8 48 c1 e8 03 48 89 44 24 18 <42> 80 3c 20 00 74 08 4c 89 ef e8 d2 15 98 fc 48 89 5c 24 10 41 bf
RSP: 0018:ffffc900015fee40 EFLAGS: 00010246
RAX: [PII_REDACTED] RBX: ffff88800f7a4000 RCX: ffff88800f4f90c0
RDX: [PII_REDACTED] RSI:[PII_REDACTED]001eac RDI: ffff8880160c64c0
RBP: ffffc900015ff060 R08: [PII_REDACTED] R09: ffff88800f7a4000
R10: [PII_REDACTED] R11: ffff88800f4f90c0 R12: dffffc[PII_REDACTED]
R13: [PII_REDACTED] R14: [PII_REDACTED] R15: ffff88800f7a4000
FS:  00007f938acfe6c0(0000) GS:ffff888058c00000(0000) knlGS:[PII_REDACTED]
CS:  0010 DS: 0000 ES: 0000 CR0: [PII_REDACTED]
CR2: 00007f938acddd58 CR3:[PII_REDACTED]48e000 CR4:[PII_REDACTED]352ef0
DR0: [PII_REDACTED] DR1: [PII_REDACTED] DR2: [PII_REDACTED]
DR3: [PII_REDACTED] DR6: 00000000fffe0ff0 DR7: [PII_REDACTED]
Call Trace:
  ip_route_use_hint+0x410/0x9b0 net/ipv4/route.c:2231
  ip_rcv_finish_core+0x2c4/0x1a30 net/ipv4/ip_input.c:327
  ip_list_rcv_finish net/ipv4/ip_input.c:612 [inline]
  ip_sublist_rcv+0x3ed/0xe50 net/ipv4/ip_input.c:638
  ip_list_rcv+0x422/0x470 net/ipv4/ip_input.c:673
  __netif_receive_skb_list_ptype net/core/dev.c:5572 [inline]
  __netif_receive_skb_list_core+0x6b1/0x890 net/core/dev.c:5620
  __netif_receive_skb_list net/core/dev.c:5672 [inline]
  netif_receive_skb_list_internal+0x9f9/0xdc0 net/core/dev.c:5764
  netif_receive_skb_list+0x55/0x3e0 net/core/dev.c:5816
  xdp_recv_frames net/bpf/test_run.c:257 [inline]
  xdp_test_run_batch net/bpf/test_run.c:335 [inline]
  bpf_test_run_xdp_live+0x1818/0x1d00 net/bpf/test_run.c:363
  bpf_prog_test_run_xdp+0x81f/0x1170 net/bpf/test_run.c:1376
  bpf_prog_test_run+0x349/0x3c0 kernel/bpf/syscall.c:3736
  __sys_bpf+0x45c/0x710 kernel/bpf/syscall.c:5115
  __do_sys_bpf kernel/bpf/syscall.c:5201 [inline]
  __se_sys_bpf kernel/bpf/syscall.c:5199 [inline]
  __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:5199
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/03b5a9b2b526862b21bcc31976e393a6e63785d1; https://git.kernel.org/stable/c/58a4c9b1e5a3e53c9148e80b90e1e43897ce77d1; https://git.kernel.org/stable/c/7a25bfd12733a8f38f8ca47c581f876c3d481ac0
CVE: CVE-2024-5137
Published: 2024-05-20
Description: A vulnerability classified as problematic was found in PHPGurukul Directory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php of the component Searchbar. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265213 was assigned to this vulnerability.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://github.com/BurakSevben/CVEs/blob/main/Directory%20Management%20System/Directory%20Management%20System%20-%20Cross-Site-Scripting%20-%202.md; https://vuldb.com/?ctiid.265213; https://vuldb.com/?id.265213
CVE: CVE-2024-4323
Published: 2024-05-20
Description: A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04; https://tenable.com/security/research/tra-2024-17; https://github.com/fluent/fluent-bit/commit/9311b43a258352797af40749ab31a63c32acfd04
CVE: CVE-2023-49330
Published: 2024-05-20
Description: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data.
CVSS Score: 8.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html; https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE: CVE-2024-27312
Published: 2024-05-20
Description: Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. 
Note: This vulnerability affects only the PAM360 6600 version. No other versions are applicable to this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863, CWE-863
References: https://www.manageengine.com/privileged-access-management/advisory/cve-2024-27312.html; https://www.manageengine.com/privileged-access-management/advisory/cve-2024-27312.html
CVE: CVE-2024-4287
Published: 2024-05-20
Description: In mintplex-labs/anything-llm, a vulnerability exists due to improper input validation in the workspace update process. Specifically, the application fails to validate or format JSON data sent in an HTTP POST request to `/api/workspace/:workspace-slug/update`, allowing it to be executed as part of a database query without restrictions. This flaw enables users with a manager role to craft a request that includes nested write operations, effectively allowing them to create new Administrator accounts.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://github.com/mintplex-labs/anything-llm/commit/94b58249a37a21b1c08deaa2d1edfdecbb6deb18; https://huntr.com/bounties/34491fb7-5133-4e80-8[PII_REDACTED]0bbdb; https://github.com/mintplex-labs/anything-llm/commit/94b58249a37a21b1c08deaa2d1edfdecbb6deb18
CVE: CVE-2024-2835
Published: 2024-05-20
Description: A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://portal.microfocus.com/s/article/KM000029773; https://portal.microfocus.com/s/article/KM000029773
CVE: CVE-2024-34952
Published: 2024-05-20
Description: taurusxin ncmdump v1.3.2 was discovered to contain a segmentation violation via the NeteaseCrypt::FixMetadata() function at /src/ncmcrypt.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted .ncm file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-476
References: https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_FixMetadata/dos_FixMetadata.assets/debug-coredump.png; https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_FixMetadata/dos_FixMetadata.md; https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_FixMetadata/poc/I1DWE0~U
CVE: CVE-2024-34953
Published: 2024-05-20
Description: An issue in taurusxin ncmdump v1.3.2 allows attackers to cause a Denial of Service (DoS) via memory exhaustion by supplying a crafted .ncm file
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_mmExhausted/dos_mmExhausted.assets/image[PII_REDACTED]1831080.png; https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_mmExhausted/dos_mmExhausted.md; https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_mmExhausted/poc/I7K9QM~F
CVE: CVE-2024-3482
Published: 2024-05-20
Description: A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://portal.microfocus.com/s/article/KM000029773; https://portal.microfocus.com/s/article/KM000029773
CVE: CVE-2024-4151
Published: 2024-05-20
Description: An Improper Access Control vulnerability exists in lunary-ai/lunary version 1.2.2, where users can view and update any prompts in any projects due to insufficient access control checks in the handling of PATCH and GET requests for template versions. This vulnerability allows unauthorized users to manipulate or access sensitive project data, potentially leading to data integrity and confidentiality issues.
CVSS Score: 8.1 (HIGH)
CWE: CWE-639, CWE-639
References: https://github.com/lunary-ai/lunary/commit/ddfd497afd017a6946c582a1a806687fdac888bf; https://huntr.com/bounties/4acfef85-dedf-43bd-8438-0d8aaa4ffa01; https://huntr.com/bounties/4acfef85-dedf-43bd-8438-0d8aaa4ffa01
CVE: CVE-2024-0401
Published: 2024-05-20
Description: ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS ExpertWiFi, ASUS RT-AX55, ASUS RT-AX58U, ASUS RT-AC67U, ASUS RT-AC68R, ASUS RT-AC68U, ASUS RT-AX86, ASUS RT-AC86U, ASUS RT-AX88U, and ASUS RT-AX3000.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://vulncheck.com/advisories/asus-ovpn-rce; https://vulncheck.com/advisories/asus-ovpn-rce
CVE: CVE-2024-24294
Published: 2024-05-20
Description: A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via the _utils.setDeepProperty function of engine.min.js.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://gist.github.com/mestrtee/d1eb6e1f7c6dd60d8838c3e56cab634d; https://gist.github.com/mestrtee/d1eb6e1f7c6dd60d8838c3e56cab634d
CVE: CVE-2024-34947
Published: 2024-05-20
Description: Quanxun Huiju Network Technology (Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build[PII_REDACTED]55 was discovered to be vulnerable to an ICMP redirect attack.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-941
References: https://gist.github.com/wuyuhang422/56f1e03fad8b91a3c979093f53cbbe7a; https://gist.github.com/wuyuhang422/56f1e03fad8b91a3c979093f53cbbe7a
CVE: CVE-2024-34948
Published: 2024-05-20
Description: An issue in Quanxun Huiju Network Technology(Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build[PII_REDACTED]55 allows attackers to cause a Denial of Service (DoS) when attempting to make TCP connections.
CVSS Score: 7.5 (HIGH)
References: https://gist.github.com/wuyuhang422/8de771b0b4538eb6fa23cf[PII_REDACTED]; https://gist.github.com/wuyuhang422/8de771b0b4538eb6fa23cf[PII_REDACTED]
CVE: CVE-2023-49331
Published: 2024-05-20
Description: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option.
CVSS Score: 8.3 (HIGH)
CWE: CWE-89
References: https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html; https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE: CVE-2023-49332
Published: 2024-05-20
Description: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.
CVSS Score: 8.3 (HIGH)
CWE: CWE-89
References: https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html; https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE: CVE-2023-49333
Published: 2024-05-20
Description: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature.
CVSS Score: 8.3 (HIGH)
CWE: CWE-89
References: https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html; https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE: CVE-2023-49334
Published: 2024-05-20
Description: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report.
CVSS Score: 8.3 (HIGH)
CWE: CWE-89
References: https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html; https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE: CVE-2023-49335
Published: 2024-05-20
Description: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details.
CVSS Score: 8.3 (HIGH)
CWE: CWE-89
References: https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html; https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE: CVE-2024-24293
Published: 2024-05-20
Description: A Prototype Pollution issue in MiguelCastillo @bit/loader v.10.0.3 allows an attacker to execute arbitrary code via the M function e argument in index.js.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1321
References: https://gist.github.com/tariqhawis/986fb1c9da6be526fb2656ba8d194b7f; https://gist.github.com/tariqhawis/986fb1c9da6be526fb2656ba8d194b7f
CVE: CVE-2024-29651
Published: 2024-05-20
Description: A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle()`, `parse()`, `resolve()`, `dereference() functions.
CVSS Score: 8.1 (HIGH)
CWE: CWE-1321
References: https://gist.github.com/tariqhawis/5db76b38112bba756615b688c32409ad; https://gist.github.com/tariqhawis/5db76b38112bba756615b688c32409ad
CVE: CVE-2024-31714
Published: 2024-05-20
Description: Buffer Overflow vulnerability in Waxlab wax v.0.9-3 and before allows an attacker to cause a denial of service via the Lua library component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/lakemoon602/vuln/blob/main/wax.md; https://github.com/lakemoon602/vuln/blob/main/wax.md
CVE: CVE-2024-34193
Published: 2024-05-20
Description: smanga 3.2.7 does not filter the file parameter at the PHP/get file flow.php interface, resulting in a path traversal vulnerability that can cause arbitrary file reading.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/vulreport3r/cve-reports/blob/main/Smanga_has_an_arbitrary_file_read_vulnerability/report.md; https://github.com/vulreport3r/cve-reports/blob/main/Smanga_has_an_arbitrary_file_read_vulnerability/report.md
CVE: CVE-2024-34949
Published: 2024-05-20
Description: SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList function, exploited at the /admin/order/lists.html endpoint.
CVSS Score: 8.2 (HIGH)
CWE: CWE-89
References: https://charm-august-88a.notion.site/CVE-2024-34949-SQL-injection-vulnerability-in-Likeshop-2-5-7-6139a82f9ab7423c9ef7c95950f68301; https://charm-august-88a.notion.site/CVE-2024-34949-SQL-injection-vulnerability-in-Likeshop-2-5-7-6139a82f9ab7423c9ef7c95950f68301
CVE: CVE-2024-35571
Published: 2024-05-20
Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formSetIptv-cebf9202122a4582ae86c5253b3f6da3?pvs=4; https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formSetIptv-cebf9202122a4582ae86c5253b3f6da3?pvs=4
CVE: CVE-2024-35576
Published: 2024-05-20
Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-121
References: https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formSetIptv-cebf9202122a4582ae86c5253b3f6da3?pvs=4; https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formSetIptv-cebf9202122a4582ae86c5253b3f6da3?pvs=4
CVE: CVE-2024-35578
Published: 2024-05-20
Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv.
CVSS Score: 8.0 (HIGH)
CWE: CWE-121
References: https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formSetIptv-cebf9202122a4582ae86c5253b3f6da3?pvs=4; https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formSetIptv-cebf9202122a4582ae86c5253b3f6da3?pvs=4
CVE: CVE-2024-35579
Published: 2024-05-20
Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv.
CVSS Score: 7.7 (HIGH)
CWE: CWE-121
References: https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formSetIptv-cebf9202122a4582ae86c5253b3f6da3?pvs=4; https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formSetIptv-cebf9202122a4582ae86c5253b3f6da3?pvs=4
CVE: CVE-2024-35580
Published: 2024-05-20
Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formSetIptv-cebf9202122a4582ae86c5253b3f6da3?pvs=4; https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formSetIptv-cebf9202122a4582ae86c5253b3f6da3?pvs=4
CVE: CVE-2024-29000
Published: 2024-05-20
Description: The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability.  
CVSS Score: 7.9 (HIGH)
CWE: CWE-79
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1-1_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-29000; https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1-1_release_notes.htm
CVE: CVE-2024-33900
Published: 2024-05-20
Description: KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-316
References: https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838; https://github.com/keepassxreboot/keepassxc/issues/10784; https://keepassxc.org/blog/
CVE: CVE-2024-33901
Published: 2024-05-20
Description: Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-316
References: https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838; https://github.com/keepassxreboot/keepassxc/issues/10784; https://keepassxc.org/blog/
CVE: CVE-2024-35191
Published: 2024-05-20
Description: Formie is a Craft CMS plugin for creating forms. Prior to 2.1.6, users with access to a form's settings can include malicious Twig code into fields that support Twig. These might be the Submission Title or the Success Message. This code will then be executed upon creating a submission, or rendering the text.  This has been fixed in Formie 2.1.6.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-1336
References: https://github.com/verbb/formie/commit/90296edf7e707f117e760aa57e70dbd43a854420; https://github.com/verbb/formie/security/advisories/GHSA-v45m-hxqp-fwf5; https://github.com/verbb/formie/commit/90296edf7e707f117e760aa57e70dbd43a854420
CVE: CVE-2024-35192
Published: 2024-05-20
Description: Trivy is a security scanner. Prior to 0.51.2, if a malicious actor is able to trigger Trivy to scan container images from a crafted malicious registry, it could result in the leakage of credentials for legitimate registries such as AWS Elastic Container Registry (ECR), Google Cloud Artifact/Container Registry, or Azure Container Registry (ACR). These tokens can then be used to push/pull images from those registries to which the identity/user running Trivy has access. Systems are not affected if the default credential provider chain is unable to obtain valid credentials. This vulnerability only applies when scanning container images directly from a registry. This vulnerability is fixed in 0.51.2.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: https://github.com/aquasecurity/trivy/commit/e7f14f729de259551203f313e57d2d9d3aa2ff87; https://github.com/aquasecurity/trivy/security/advisories/GHSA-xcq4-m2r3-cmrj; https://github.com/aquasecurity/trivy/commit/e7f14f729de259551203f313e57d2d9d3aa2ff87
CVE: CVE-2024-35194
Published: 2024-05-20
Description: Minder is a software supply chain security platform. Prior to version 0.0.50, Minder engine is susceptible to a denial of service from memory exhaustion that can be triggered from maliciously created templates. Minder engine uses templating to generate strings for various use cases such as URLs, messages for pull requests, descriptions for advisories. In some cases can the user control both the template and the params for it, and in a subset of these cases, Minder reads the generated template entirely into memory. When Minders templating meets both of these conditions, an attacker is able to generate large enough templates that Minder will exhaust memory and crash. This vulnerability is fixed in 0.0.50.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://github.com/stacklok/minder/commit/fe321d345b4f738de6a06b13207addc72b59f892; https://github.com/stacklok/minder/security/advisories/GHSA-crgc-2583-rw27; https://github.com/stacklok/minder/commit/fe321d345b4f738de6a06b13207addc72b59f892
CVE: CVE-2024-35195
Published: 2024-05-20
Description: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-670
References: https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac; https://github.com/psf/requests/pull/6655; https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56
CVE: CVE-2024-34710
Published: 2024-05-20
Description: Wiki.js is al wiki app built on Node.js. Client side template injection was discovered, that could allow an attacker to inject malicious JavaScript into the content section of pages that would execute once a victim loads the page that contains the payload. This was possible through the injection of a invalid HTML tag with a template injection payload on the next line. This vulnerability is fixed in 2.5.303.

CVSS Score: 7.1 (HIGH)
CWE: CWE-1336
References: https://github.com/requarks/wiki/commit/1238d614e1599fefadd4614ee4b5797a087f50ac; https://github.com/requarks/wiki/security/advisories/GHSA-xjcj-p2qv-q3rf; https://github.com/requarks/wiki/commit/1238d614e1599fefadd4614ee4b5797a087f50ac
CVE: CVE-2024-4985
Published: 2024-05-20
Description: An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sign-on authentication with the optional encrypted assertions feature. This vulnerability allowed an attacker to forge a SAML response to provision and/or gain access to a user with site administrator privileges. Exploitation of this vulnerability would allow unauthorized access to the instance without requiring prior authentication. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.13.0 and was fixed in versions 3.9.15, 3.10.12, 3.11.10 and 3.12.4. This vulnerability was reported via the GitHub Bug Bounty program.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-303
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.12; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.10; https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.4