deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: MyBB Group MyBB contains a Incorrect Access Control vulnerability in Private forums that can result in Users can view posts from private forums without having the password. This attack appear to be exploitable via Subscribe to a forum through IDOR. This vulnerability appears to have been fixed in 1.8.15.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269
References: http://www.batterystapl.es/2018/03/local-file-inclusion-and-reading.html; https://blog.mybb.com/2018/03/15/mybb-1-8-15-released-security-maintenance-release/; http://www.batterystapl.es/2018/03/local-file-inclusion-and-reading.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: Redirection version 2.7.3 contains a ACE via file inclusion vulnerability in Pass-through mode that can result in allows admins to execute any PHP file in the filesystem. This attack appear to be exploitable via Attacker must be have access to an admin account on the target site. This vulnerability appears to have been fixed in 2.8.
CVSS Score: 7.2 (HIGH)
CWE: CWE-601
References: https://advisories.dxw.com/advisories/ace-file-inclusion-redirection/; https://advisories.dxw.com/advisories/ace-file-inclusion-redirection/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: Tooltipy (tooltips for WP) version 5 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page that can result in could allow anybody to duplicate posts. This attack appear to be exploitable via Admin must follow a link. This vulnerability appears to have been fixed in 5.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://advisories.dxw.com/advisories/csrf-in-tooltipy/; https://advisories.dxw.com/advisories/csrf-in-tooltipy/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: Metronet Tag Manager version 1.2.7 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page /wp-admin/options-general.php?page=metronet-tag-manager that can result in allows anybody to do almost anything an admin can. This attack appear to be exploitable via Logged in user must follow a link. This vulnerability appears to have been fixed in 1.2.9.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://advisories.dxw.com/advisories/csrf-metronet-tag-manager/; https://advisories.dxw.com/advisories/csrf-metronet-tag-manager/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: WP User Groups version 2.0.0 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page that can result in allows anybody to modify user groups and types. This attack appear to be exploitable via Admin must click on link. This vulnerability appears to have been fixed in 2.1.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://advisories.dxw.com/advisories/csrf-wp-user-groups/; https://advisories.dxw.com/advisories/csrf-wp-user-groups/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting (XSS) vulnerability in Settings screen that can result in allows unauthorised users to do almost anything an admin can. This attack appear to be exploitable via Admin must visit logs page. This vulnerability appears to have been fixed in 3.2.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://advisories.dxw.com/advisories/stored-xss-wp-ulike/; https://advisories.dxw.com/advisories/stored-xss-wp-ulike/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: Redirection version 2.7.1 contains a Serialisation vulnerability possibly allowing ACE vulnerability in Settings page AJAX that can result in could allow admin to execute arbitrary code in some circumstances. This attack appear to be exploitable via Attacker must have access to admin account. This vulnerability appears to have been fixed in 2.8.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://advisories.dxw.com/advisories/unserialization-redirection/; https://advisories.dxw.com/advisories/unserialization-redirection/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: WP Image Zoom version 1.23 contains a Incorrect Access Control vulnerability in AJAX settings that can result in allows anybody to cause denial of service. This attack appear to be exploitable via Can be triggered intentionally (or unintentionally via CSRF) by any logged in user. This vulnerability appears to have been fixed in 1.24.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: https://advisories.dxw.com/advisories/wp-image-zoom-dos/; https://advisories.dxw.com/advisories/wp-image-zoom-dos/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: WP ULike version 2.8.1, 3.1 contains a Incorrect Access Control vulnerability in AJAX that can result in allows anybody to delete any row in certain tables. This attack appear to be exploitable via Attacker must make AJAX request. This vulnerability appears to have been fixed in 3.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://advisories.dxw.com/advisories/wp-ulike-delete-rows/; https://advisories.dxw.com/advisories/wp-ulike-delete-rows/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: Tooltipy Tooltipy (tooltips for WP) version 5 contains a Cross Site Scripting (XSS) vulnerability in Glossary shortcode that can result in could allow anybody to do almost anything an admin can. This attack appear to be exploitable via Admin must follow a link. This vulnerability appears to have been fixed in 5.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://advisories.dxw.com/advisories/xss-in-tooltipy/; https://advisories.dxw.com/advisories/xss-in-tooltipy/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: LimeSurvey version 3.0.0-beta.3+17110 contains a Cross Site Scripting (XSS) vulnerability in Boxes that can result in JS code execution against LimeSurvey admins. This vulnerability appears to have been fixed in 3.6.x.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://bugs.limesurvey.org/view.php?id=13560; https://bugs.limesurvey.org/view.php?id=13560
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery (CSRF) vulnerability in Boxes that can result in CSRF admins to delete boxes. This vulnerability appears to have been fixed in 3.6.x.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://bugs.limesurvey.org/plugin.php?page=Source/view&id=26925; https://bugs.limesurvey.org/view.php?id=13562; https://bugs.limesurvey.org/plugin.php?page=Source/view&id=26925
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: ventrian News-Articles version NewsArticles.00.09.11 contains a XML External Entity (XXE) vulnerability in News-Articles/API/MetaWebLog/Handler.ashx.vb that can result in Attacker can read any file in the server or use smbrelay attack to access to server..
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://drive.google.com/drive/folders/1P7djpYX8VQ0oplhOCMFNdKQByCcw2ncU?usp=sharing; https://drive.google.com/drive/folders/1P7djpYX8VQ0oplhOCMFNdKQByCcw2ncU?usp=sharing
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, which would allow for cross-site scripting (XSS) attacks. In this form of attack, a malicious person can create a URL which, when opened by a Galaxy user or administrator, would allow the malicious user to execute arbitrary Javascript. that can result in Arbitrary JavaScript code execution. This attack appear to be exploitable via The victim must interact with component on page witch contains injected JavaScript code.. This vulnerability appears to have been fixed in v14.10.1, v15.01.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://galaxyproject.org/archive/dev-news-briefs/2015-01-13/#security; https://galaxyproject.org/archive/dev-news-briefs/2015-01-13/#security
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Busybox wget that can result in heap buffer overflow. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in after commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://git.busybox.net/busybox/commit/?id=8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e; https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html; https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/aaugustin/websockets/pull/407; https://github.com/aaugustin/websockets/pull/407
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session function for RedisStorage (see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttp_session/redis_storage.py#L42) that can result in Session Hijacking. This attack appear to be exploitable via Any method that allows setting session cookies (?session=<>, or meta tags or script tags with Set-Cookie).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-384
References: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttp_session/redis_storage.py#L60; https://github.com/aio-libs/aiohttp-session/issues/272; https://github.com/aio-libs/aiohttp-session/blob/master/aiohttp_session/redis_storage.py#L60
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: ARM mbedTLS version 2.7.0 and earlier contains a Ciphersuite Allows Incorrectly Signed Certificates vulnerability in mbedtls_ssl_get_verify_result() that can result in ECDSA-signed certificates are accepted, when only RSA-signed ones should be.. This attack appear to be exploitable via Peers negotiate a TLS-ECDH-RSA-* ciphersuite. Any of the peers can then provide an ECDSA-signed certificate, when only an RSA-signed one should be accepted..
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://github.com/ARMmbed/mbedtls/issues/1561; https://github.com/ARMmbed/mbedtls/issues/1561
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: BigTree-CMS contains a Cross Site Scripting (XSS) vulnerability in /users/create that can result in The low-privileged users can use this vulnerability to attack high-privileged(Developer) users.. This attack appear to be exploitable via no. This vulnerability appears to have been fixed in after commit b652cfdc14d0670c81ac4401ad5a04376745c279.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bigtreecms/BigTree-CMS/issues/328; https://github.com/bigtreecms/BigTree-CMS/issues/328
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attack appear to be exploitable via The victim must open a todo.txt with at least one specially crafted line..
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://github.com/bram85/topydo/blob/master/topydo/lib/ListFormat.py#L292; https://github.com/bram85/topydo/issues/240; https://github.com/bram85/topydo/blob/master/topydo/lib/ListFormat.py#L292
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: miniSphere version 5.2.9 and earlier contains a Integer Overflow vulnerability in layer_resize() function in map_engine.c that can result in remote denial of service. This attack appear to be exploitable via the victim must load a specially-crafted map which calls SetLayerSize in its entry script. This vulnerability appears to have been fixed in 5.0.3, 5.1.5, 5.2.10 and later.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/fatcerberus/minisphere/commit/252c1ca184cb38e1acb917aa0e451c5f08519996; https://github.com/fatcerberus/minisphere/pull/268; https://github.com/fatcerberus/minisphere/commit/252c1ca184cb38e1acb917aa0e451c5f08519996
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Specially crafted GET request variable containing serialised PHP object. This vulnerability appears to have been fixed in after commit 097eae0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://0dd.zone/2018/05/31/OpenPSA-Object-Injection/; https://github.com/flack/openpsa/issues/191; https://0dd.zone/2018/05/31/OpenPSA-Object-Injection/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: Openpsa contains a XML Injection vulnerability in RSS file upload feature that can result in Remote denial of service. This attack appear to be exploitable via Specially crafted XML file. This vulnerability appears to have been fixed in after commit 4974a26.
CVSS Score: 7.5 (HIGH)
CWE: CWE-91
References: https://0dd.zone/2018/05/31/OpenPSA-Object-Injection/; https://github.com/flack/openpsa/issues/192; https://0dd.zone/2018/05/31/OpenPSA-Object-Injection/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: Froxlor version <= 0.9.39.5 contains a PHP Object Injection vulnerability in Domain name form that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Passing malicious PHP objection in $_POST['ssl_ipandport']. This vulnerability appears to have been fixed in after commit c1e62e6.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://0dd.zone/2018/05/31/Froxlor-Object-Injection/; https://github.com/Froxlor/Froxlor/issues/555; https://0dd.zone/2018/05/31/Froxlor-Object-Injection/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: GONICUS GOsa version before commit 56070d6289d47ba3f[PII_REDACTED]dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password form (html/password.php, #308) that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open a specially crafted web page. This vulnerability appears to have been fixed in after commit 56070d6289d47ba3f[PII_REDACTED]dcceb75606001.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gosa-project/gosa-core/commit/56070d6289d47ba3f[PII_REDACTED]dcceb75606001; https://github.com/gosa-project/gosa-core/issues/14; https://lists.debian.org/debian-lts-announce/2018/07/msg00028.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/grails-fields-plugin/grails-fields/issues/278; https://github.com/martinfrancois/CVE-2[PII_REDACTED]; https://github.com/grails-fields-plugin/grails-fields/issues/278
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: inversoft prime-jwt version prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba contains a CWE-20 vulnerability in JWTDecoder.decode that can result in an incorrect signature validation of a JWT token. This attack can be exploitable when an attacker crafts a JWT token with a valid header using 'none' as algorithm and a body to requests it be validated. This vulnerability was fixed after commit abb0d479389a2509f939452a6767dc424bb5e6ba.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/inversoft/prime-jwt/issues/3; https://github.com/inversoft/prime-jwt/issues/3
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: beep version 1.3 and up contains a External Control of File Name or Path vulnerability in --device option that can result in Local unprivileged user can inhibit execution of arbitrary programs by other users, allowing DoS. This attack appear to be exploitable via The system must allow local users to run beep.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-22
References: https://github.com/johnath/beep/issues/11#issuecomment-379514298; https://github.com/johnath/beep/issues/11#issuecomment-379514298
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in `searchTree` function that can result in Execute any code as PHP user. This attack appear to be exploitable via Send POST request using search form. This vulnerability appears to have been fixed in 0.7 after commit 87b8c26b023c3fc37f0796b14bb13710f397b322.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/klaussilveira/gitlist/commit/87b8c26b023c3fc37f0796b14bb13710f397b322; https://security.szurek.pl/exploit-bypass-php-escapeshellarg-escapeshellcmd.html; https://github.com/klaussilveira/gitlist/commit/87b8c26b023c3fc37f0796b14bb13710f397b322
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: Joplin version prior to 1.0.90 contains a XSS evolving into code execution due to enabled nodeIntegration for that particular BrowserWindow instance where XSS was identified from vulnerability in Note content field - information on the fix can be found here https://github.com/laurent22/joplin/commit/494e235e18659574f836f84fcf9f4d4fcdcfcf89 that can result in executing unauthorized code within the rights in which the application is running. This attack appear to be exploitable via Victim synchronizing notes from the cloud services or other note-keeping services which contain malicious code. This vulnerability appears to have been fixed in 1.0.90 and later.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/laurent22/joplin/commit/494e235e18659574f836f84fcf9f4d4fcdcfcf89; https://github.com/laurent22/joplin/issues/500; https://github.com/laurent22/joplin/commit/494e235e18659574f836f84fcf9f4d4fcdcfcf89
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: lms version <= LMS_011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://0dd.zone/2018/06/01/LMS-Local-File-Disclosure/; https://github.com/lmsgit/lms/issues/1271; https://0dd.zone/2018/06/01/LMS-Local-File-Disclosure/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: Medis version 0.6.1 and earlier contains a XSS vulnerability evolving into code execution due to enabled nodeIntegration for the renderer process vulnerability in Key name parameter on new key creation that can result in Unauthorized code execution in the victim's machine, within the rights of the running application. This attack appear to be exploitable via Victim is synchronizing data from the redis server which contains malicious key value.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/luin/medis/issues/109; https://github.com/luin/medis/issues/109
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: Marlin Firmware Marlin version 1.1.x and earlier contains a Buffer Overflow vulnerability in cardreader.cpp (Depending on branch/version) that can result in Arbitrary code execution. This attack appear to be exploitable via Crafted G-Code instruction/file is sent to the printer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://forums.reprap.org/read.php?415%2C823246; https://github.com/MarlinFirmware/Marlin/pull/10925; http://forums.reprap.org/read.php?415%2C823246
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling (similar to CWE-774) vulnerability in write-to-RAM that can result in Denial of Service. This attack appear to be exploitable via Sending V4-(pre)signed requests with large bodies . This vulnerability appears to have been fixed in after commit 9c8b7306f55f2c8c0a5c7cea9a8db9d34be8faa7.
CVSS Score: 7.5 (HIGH)
CWE: CWE-774
References: https://github.com/minio/minio/commit/9c8b7306f55f2c8c0a5c7cea9a8db9d34be8faa7#diff-e8c3bc9bc83b5516d0cc806cd461d08bL220; https://github.com/minio/minio/pull/5957; https://github.com/minio/minio/commit/9c8b7306f55f2c8c0a5c7cea9a8db9d34be8faa7#diff-e8c3bc9bc83b5516d0cc806cd461d08bL220
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: Nov json-jwt version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web Tokens that can result in Attacker can forge a authentication tag. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 1.9.4 and later.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-347
References: https://github.com/nov/json-jwt/pull/62; https://www.debian.org/security/2018/dsa-4283; https://github.com/nov/json-jwt/pull/62
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: LoboEvolution version < 9b75694cedfa4825d4a2330abf2719d470c654cd contains a XML External Entity (XXE) vulnerability in XML Parsing when viewing the XML file in the browser that can result in disclosure of confidential data, denial of service, server side request forgery. This attack appear to be exploitable via Specially crafted XML file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-611
References: https://github.com/oswetto/LoboEvolution/issues/38; https://github.com/oswetto/LoboEvolution/issues/38
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: netbeans-mmd-plugin version <= 1.4.3 contains a XML External Entity (XXE) vulnerability in MMD file import that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted MMD file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-611
References: https://0dd.zone/2018/06/02/Netbeans-MMD-Plugin-XXE/; https://github.com/raydac/netbeans-mmd-plugin/issues/45; https://0dd.zone/2018/06/02/Netbeans-MMD-Plugin-XXE/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code execution. This attack appear to be exploitable via The attacker tricks the victim into opening a crafted markdown.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/rockiger/akiee/issues/42; https://github.com/rockiger/akiee/issues/42
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-26
Description: rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames "../" to write arbitrary files to the filesystem..
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-59, CWE-434
References: https://access.redhat.com/errata/RHSA-2018:3466; https://github.com/rubyzip/rubyzip/issues/369; https://lists.debian.org/debian-lts-announce/2018/08/msg00013.html