deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-27544
Published: 2021-04-15
Description: Cross Site Scripting (XSS) in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "sername" parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/BigTiger2020/Beauty-Parlour-Management-System; https://packetstormsecurity.com/files/161468/Beauty-Parlour-Management-System-1.0-Cross-Site-Scripting.html; https://github.com/BigTiger2020/Beauty-Parlour-Management-System
CVE: CVE-2021-27545
Published: 2021-04-15
Description: SQL Injection in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to obtain sensitive database information by injecting SQL commands into the "sername" parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/BigTiger2020/Beauty-Parlour-Management-System; https://packetstormsecurity.com/files/161468/Beauty-Parlour-Management-System-1.0-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/49580
CVE: CVE-2021-0488
Published: 2021-04-15
Description: In pb_write of pb_encode.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-178754781
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2021-04-01; https://source.android.com/security/bulletin/pixel/2021-04-01
CVE: CVE-2020-27237
Published: 2021-04-15
Description: An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the The nomenclature parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207
CVE: CVE-2020-27238
Published: 2021-04-15
Description: An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207
CVE: CVE-2020-27239
Published: 2021-04-15
Description: An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The assetStatus parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207
CVE: CVE-2020-28592
Published: 2021-04-15
Description: A heap-based buffer overflow vulnerability exists in the configuration server functionality of the Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to remote code execution. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1216; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1216
CVE: CVE-2020-28593
Published: 2021-04-15
Description: A unauthenticated backdoor exists in the configuration server functionality of Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-912
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1217; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1217
CVE: CVE-2021-21087
Published: 2021-04-15
Description: Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/coldfusion/apsb21-16.html; https://helpx.adobe.com/security/products/coldfusion/apsb21-16.html
CVE: CVE-2021-21091
Published: 2021-04-15
Description: Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb21-23.html; https://www.zerodayinitiative.com/advisories/ZDI-21-413/; https://helpx.adobe.com/security/products/bridge/apsb21-23.html
CVE: CVE-2021-21092
Published: 2021-04-15
Description: Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb21-23.html; https://www.zerodayinitiative.com/advisories/ZDI-21-415/; https://helpx.adobe.com/security/products/bridge/apsb21-23.html
CVE: CVE-2021-21093
Published: 2021-04-15
Description: Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb21-23.html; https://www.zerodayinitiative.com/advisories/ZDI-21-414/; https://helpx.adobe.com/security/products/bridge/apsb21-23.html
CVE: CVE-2021-21094
Published: 2021-04-15
Description: Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb21-23.html; https://www.zerodayinitiative.com/advisories/ZDI-21-416/; https://helpx.adobe.com/security/products/bridge/apsb21-23.html
CVE: CVE-2021-21095
Published: 2021-04-15
Description: Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb21-23.html; https://www.zerodayinitiative.com/advisories/ZDI-21-418/; https://helpx.adobe.com/security/products/bridge/apsb21-23.html
CVE: CVE-2021-21096
Published: 2021-04-15
Description: Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Improper Authorization vulnerability in the Genuine Software Service. A low-privileged attacker could leverage this vulnerability to achieve application denial-of-service in the context of the current user. Exploitation of this issue does not require user interaction.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-285
References: https://helpx.adobe.com/security/products/bridge/apsb21-23.html; https://helpx.adobe.com/security/products/bridge/apsb21-23.html
CVE: CVE-2021-21100
Published: 2021-04-15
Description: Adobe Digital Editions version 4.5.11.187245 (and earlier) is affected by a Privilege Escalation vulnerability during installation. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary file system write in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-379
References: https://helpx.adobe.com/security/products/Digital-Editions/apsb21-26.html; https://helpx.adobe.com/security/products/Digital-Editions/apsb21-26.html
CVE: CVE-2021-27672
Published: 2021-04-15
Description: SQL Injection in the "admin_boxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID" parameter when creating a new HTML component.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://deadsh0t.medium.com/blind-error-based-authenticated-sql-injection-on-zenario-8-8-52729-cms-d4705534df38; https://deadsh0t.medium.com/blind-error-based-authenticated-sql-injection-on-zenario-8-8-52729-cms-d4705534df38
CVE: CVE-2021-27673
Published: 2021-04-15
Description: Cross Site Scripting (XSS) in the "admin_boxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "cID" parameter when creating a new HTML component.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/163083/Zenario-CMS-8.8.52729-SQL-Injection.html; https://deadsh0t.medium.com/blind-error-based-authenticated-sql-injection-on-zenario-8-8-52729-cms-d4705534df38; http://packetstormsecurity.com/files/163083/Zenario-CMS-8.8.52729-SQL-Injection.html
CVE: CVE-2021-28242
Published: 2021-04-15
Description: SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cf_name" parameter when creating a new filter under the "Collections" tab.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/162489/b2evolution-7-2-2-SQL-Injection.html; https://deadsh0t.medium.com/authenticated-boolean-based-blind-error-based-sql-injection-b752225f0644; https://github.com/b2evolution/b2evolution/issues/109
CVE: CVE-2021-28548
Published: 2021-04-15
Description: Adobe Photoshop versions 21.2.6 (and earlier) and 22.3 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://helpx.adobe.com/security/products/photoshop/apsb21-28.html; https://helpx.adobe.com/security/products/photoshop/apsb21-28.html
CVE: CVE-2021-28549
Published: 2021-04-15
Description: Adobe Photoshop versions 21.2.6 (and earlier) and 22.3 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://helpx.adobe.com/security/products/photoshop/apsb21-28.html; https://helpx.adobe.com/security/products/photoshop/apsb21-28.html
CVE: CVE-2021-30209
Published: 2021-04-15
Description: Textpattern V4.8.4 contains an arbitrary file upload vulnerability where a plug-in can be loaded in the background without any security verification, which may lead to obtaining system permissions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434
References: https://github.com/textpattern/textpattern/issues/1655; https://github.com/textpattern/textpattern/issues/1655
CVE: CVE-2021-3487
Published: 2021-04-15
Description: Rejected reason: Non Security Issue. See the binutils security policy for more details, https://sourceware.org/cgit/binutils-gdb/tree/binutils/SECURITY.txt
CVE: CVE-2021-20288
Published: 2021-04-15
Description: An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize other_keys, allowing key reuse. An attacker who can request a global_id can exploit the ability of any user to request a global_id previously associated with another user, as ceph does not force the reuse of old keys to generate new ones. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287, CWE-287
References: https://bugzilla.redhat.com/show_bug.cgi?id=1938031; https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/362CEPPYF3YMJZBEJQUT3KDE2EHYYIYQ/
CVE: CVE-2021-31229
Published: 2021-04-15
Description: An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd() performs incorrect memory handling while parsing crafted XML files, which leads to an out-of-bounds write of a one byte constant.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html; https://sourceforge.net/p/ezxml/bugs/26/; https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html
CVE: CVE-2021-27112
Published: 2021-04-15
Description: LightCMS v1.3.5 contains a remote code execution vulnerability in /app/Http/Controllers/Admin/NEditorController.php during the downloading of external images.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/eddy8/LightCMS/issues/19; https://github.com/eddy8/LightCMS/issues/19
CVE: CVE-2021-29448
Published: 2021-04-15
Description: Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. The Stored XSS exists in the Pi-hole Admin portal, which can be exploited by the malicious actor with the network access to DNS server. See the referenced GitHub security advisory for patch details.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-cwwf-93p7-73j9; https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-cwwf-93p7-73j9
CVE: CVE-2021-30138
Published: 2021-04-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-3243
Published: 2021-04-15
Description: Wfilter ICF 5.0.117 contains a cross-site scripting (XSS) vulnerability. An attacker in the same LAN can craft a packet with a malicious User-Agent header to inject a payload in its logs, where an attacker can take over the system by through its plugin-running function.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://drivertom.blogspot.com/2021/01/wfilter-icf-0day-rce.html; https://drivertom.blogspot.com/2021/01/wfilter-icf-0day-rce.html
CVE: CVE-2021-26582
Published: 2021-04-15
Description: A security vulnerability in HPE IceWall SSO Domain Gateway Option (Dgfw) module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04086en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04086en_us
CVE: CVE-2021-29433
Published: 2021-04-15
Description: Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. A patch for the vulnerability is in version 2.3.0. No workarounds are known to exist.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-400
References: https://github.com/matrix-org/sydent/commit/3175fd358ebc2c310eab7a3dbf296ce2bd54c1da; https://github.com/matrix-org/sydent/security/advisories/GHSA-pw4v-gr34-2553; https://github.com/matrix-org/sydent/commit/3175fd358ebc2c310eab7a3dbf296ce2bd54c1da
CVE: CVE-2020-28898
Published: 2021-04-15
Description: In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://resourcexpress.atlassian.net/wiki/spaces/RSG/pages/[PII_REDACTED]/v2021.2+-+March+2021; https://resourcexpress.atlassian.net/wiki/spaces/RSG/pages/[PII_REDACTED]/v2021.2+-+March+2021
CVE: CVE-2021-28055
Published: 2021-04-15
Description: An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. The anti-CSRF token generation is predictable, which might allow CSRF attacks that add an admin user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-330
References: https://github.com/centreon/centreon/pull/9612; https://github.com/centreon/centreon/pull/9612
CVE: CVE-2021-31402
Published: 2021-04-15
Description: The dio package 4.0.0 for Dart allows CRLF injection if the attacker controls the HTTP method string, a different vulnerability than CVE-2020-35669.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://github.com/flutterchina/dio/issues/1130; https://github.com/flutterchina/dio/issues/1130
CVE: CVE-2021-30245
Published: 2021-04-15
Description: The project received a report that all versions of Apache OpenOffice through 4.1.8 can open non-http(s) hyperlinks. The problem has existed since about 2006 and the issue is also in 4.1.9. If the link is specifically crafted this could lead to untrusted code execution. It is always best practice to be careful opening documents from unknown and unverified sources. The mitigation in Apache OpenOffice 4.1.10 (unreleased) assures that a security warning is displayed giving the user the option of continuing to open the hyperlink.
CVSS Score: 8.8 (HIGH)
CWE: CWE-610
References: https://lists.apache.org/thread.html/r7c01173f763b0c4212ada0e6ab283984d6e058d72258efce85c006ab%40%3Cannounce.apache.org%3E; https://lists.apache.org/thread.html/r87ff11512e[PII_REDACTED]e6b725e[PII_REDACTED]4ea8453b811fb3ee735%40%3Cdev.openoffice.apache.org%3E; https://lists.apache.org/thread.html/r87ff11512e[PII_REDACTED]e6b725e[PII_REDACTED]4ea8453b811fb3ee735%40%3Cusers.openoffice.apache.org%3E
CVE: CVE-2021-29430
Published: 2021-04-15
Description: Sydent is a reference Matrix identity server. Sydent does not limit the size of requests it receives from HTTP clients. A malicious user could send an HTTP request with a very large body, leading to memory exhaustion and denial of service. Sydent also does not limit response size for requests it makes to remote Matrix homeservers. A malicious homeserver could return a very large response, again leading to memory exhaustion and denial of service. This affects any server which accepts registration requests from untrusted clients. This issue has been patched by releases 89071a1, 0523511, f56eee3. As a workaround request sizes can be limited in an HTTP reverse-proxy. There are no known workarounds for the problem with overlarge responses.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-400, CWE-770
References: https://github.com/matrix-org/sydent/commit/0523511d2fb40f2738f8a8549868f44b96e5dab7; https://github.com/matrix-org/sydent/commit/89071a1a754c69a50deac89e6bb74002d4cda19d; https://github.com/matrix-org/sydent/commit/f56eee315b6c44fdd9f6aa785cc2ec744a594428
CVE: CVE-2021-29431
Published: 2021-04-15
Description: Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP address blacklisting. It is not possible to exfiltrate data or control request headers, but it might be possible to use the attack to perform an internal port enumeration. This issue has been addressed in in 9e57334, 8936925, 3d531ed, 0f00412. A potential workaround would be to use a firewall to ensure that Sydent cannot reach internal HTTP resources.
CVSS Score: 7.7 (HIGH)
CWE: CWE-20, CWE-918
References: https://github.com/matrix-org/sydent/commit/0f00412017f25619bc36c264b29ea96808bf310a; https://github.com/matrix-org/sydent/commit/3d531ed50d2fd41ac387f36d44d3fb2c62dd22d3; https://github.com/matrix-org/sydent/commit/8936925f561b0c352c2fa922d5097d7245aad00a
CVE: CVE-2021-29432
Published: 2021-04-15
Description: Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send out arbitrary emails from the Sydent email address. This could be used to construct plausible phishing emails, for example. This issue has been fixed in 4469d1d.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/matrix-org/sydent/commit/4469d1d42b2b1612b70638224c07e19623039c42; https://github.com/matrix-org/sydent/releases/tag/v2.3.0; https://github.com/matrix-org/sydent/security/advisories/GHSA-mh74-4m5g-fcjx
CVE: CVE-2021-29447
Published: 2021-04-15
Description: Wordpress is an open source CMS. A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leading to XXE attacks. This requires WordPress installation to be using PHP 8. Access to internal files is possible in a successful XXE attack. This has been patched in WordPress version 5.7.1, along with the older affected versions via a minor release. We strongly recommend you keep auto-updates enabled.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611, CWE-611
References: http://packetstormsecurity.com/files/163148/XML-External-Entity-Via-MP3-File-Upload-On-WordPress.html; http://packetstormsecurity.com/files/164198/WordPress-5.7-Media-Library-XML-Injection.html; https://blog.sonarsource.com/wordpress-xxe-security-vulnerability/
CVE: CVE-2021-21405
Published: 2021-04-15
Description: Lotus is an Implementation of the Filecoin protocol written in Go. BLS signature validation in lotus uses blst library method VerifyCompressed. This method accepts signatures in 2 forms: "serialized", and "compressed", meaning that BLS signatures can be provided as either of 2 unique byte arrays. Lotus block validation functions perform a uniqueness check on provided blocks. Two blocks are considered distinct if the CIDs of their blockheader do not match. The CID method for blockheader includes the BlockSig of the block. The result of these issues is that it would be possible to punish miners for valid blocks, as there are two different valid block CIDs available for each block, even though this must be unique. By switching from the go based `blst` bindings over to the bindings in `filecoin-ffi`, the code paths now ensure that all signatures are compressed by size and the way they are deserialized. This happened in https://github.com/filecoin-project/lotus/pull/5393.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-347
References: https://gist.github.com/wadeAlexC/2490d522e81a796af9efcad1686e6754; https://github.com/filecoin-project/lotus/pull/5393; https://github.com/filecoin-project/lotus/security/advisories/GHSA-4g52-pqcj-phvh