deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-28143
Published: 2024-12-12
Description: The password change function at /cgi/admin.cgi does not require the current/old password, which makes the application vulnerable to account takeover. An attacker can use this to forcefully set a new password within the -rsetpass+-aaction+- parameter for a user without knowing the old password, e.g. by exploiting a CSRF issue.
CVSS Score: 8.4 (HIGH)
CWE: CWE-620
References: https://r.sec-consult.com/imageaccess; https://www.imageaccess.de/?page=SupportPortal&lang=en; http://seclists.org/fulldisclosure/2024/Dec/2
CVE: CVE-2024-28144
Published: 2024-12-12
Description: An attacker who can spoof the IP address and the User-Agent of a logged-in user can takeover the session because of flaws in the self-developed session management. If two users access the web interface from the same IP they are logged in as the other user.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-384
References: https://r.sec-consult.com/imageaccess; https://www.imageaccess.de/?page=SupportPortal&lang=en; http://seclists.org/fulldisclosure/2024/Dec/2
CVE: CVE-2024-28145
Published: 2024-12-12
Description: An unauthenticated attacker can perform an SQL injection by accessing the /class/dbconnect.php file and supplying malicious GET parameters. The HTTP GET parameters search, table, field, and value are vulnerable. For example, one SQL injection can be performed on the parameter "field" with the UNION keyword.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-89
References: https://r.sec-consult.com/imageaccess; https://www.imageaccess.de/?page=SupportPortal&lang=en; http://seclists.org/fulldisclosure/2024/Dec/2
CVE: CVE-2024-28146
Published: 2024-12-12
Description: The application uses several hard-coded credentials to encrypt config files during backup, to decrypt the new firmware during an update and some passwords allow a direct connection to the database server of the affected device.
CVSS Score: 8.4 (HIGH)
CWE: CWE-798
References: https://r.sec-consult.com/imageaccess; https://www.imageaccess.de/?page=SupportPortal&lang=en; http://seclists.org/fulldisclosure/2024/Dec/2
CVE: CVE-2024-50584
Published: 2024-12-12
Description: An authenticated attacker with the user/role "Poweruser" can perform an SQL injection by accessing the /class/template_io.php file and supplying malicious GET parameters. The "templates" parameter is vulnerable against blind boolean-based SQL injection attacks. SQL syntax must be injected into the JSON syntax of the templates parameter.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-89
References: https://r.sec-consult.com/imageaccess; https://www.imageaccess.de/?page=SupportPortal&lang=en; http://seclists.org/fulldisclosure/2024/Dec/2
CVE: CVE-2024-21575
Published: 2024-12-12
Description: ComfyUI-Impact-Pack is vulnerable to Path Traversal. The issue stems from missing validation of the `image.filename` field in a POST request sent to the `/upload/temp` endpoint added by the extension to the server. This results in writing arbitrary files to the file system which may, under some conditions, result in remote code execution (RCE).
CVSS Score: 8.6 (HIGH)
CWE: CWE-35
References: https://github.com/ltdrdata/ComfyUI-Impact-Pack/blob/1087f2ee063c9d53cd198add79b41a7a3465c05a/modules/impact/impact_server.py#L28; https://github.com/ltdrdata/ComfyUI-Impact-Pack/commit/a43dae373e648ae0f0cc0c9768c3cea6a72acff7
CVE: CVE-2024-54842
Published: 2024-12-12
Description: A SQL injection vulnerability was found in phpgurukul Online Nurse Hiring System v1.0 in /admin/password-recovery.php via the mobileno parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/achchhelalchauhan/phpgurukul/blob/main/SQL%20injection%20ONHP-forgetpass-mobileno.pdf
CVE: CVE-2024-55633
Published: 2024-12-12
Description: Improper Authorization vulnerability in Apache Superset. On Postgres analytic databases an attacker with SQLLab access can craft a specially designed SQL DML statement that is Incorrectly identified as a read-only query, enabling its execution. Non postgres analytics database connections and postgres analytics database connections set with a readonly user (advised) are not vulnerable. 

This issue affects Apache Superset: before 4.1.0.

Users are recommended to upgrade to version 4.1.0, which fixes the issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://lists.apache.org/thread/bwmd17fcvljt9q4cgctp4v09zh3qs7fb; http://www.openwall.com/lists/oss-security/2024/12/12/1
CVE: CVE-2024-52901
Published: 2024-12-12
Description: IBM InfoSphere Information Server 11.7 could allow an authenticated user to GUI to not load or stop working due to improper input validation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1284
References: https://www.ibm.com/support/pages/node/7177700
CVE: CVE-2024-55099
Published: 2024-12-12
Description: A SQL Injection vulnerability was found in /admin/index.php in phpgurukul Online Nurse Hiring System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/achchhelalchauhan/phpgurukul/blob/main/SQL%20injection%20ONHP-username.pdf; https://github.com/kuzgunaka/CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-
CVE: CVE-2024-31670
Published: 2024-12-12
Description: rizin before v0.6.3 is vulnerable to Buffer Overflow via create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf functions in librz/bin/format/mach0/dyldcache.c.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-120
References: https://github.com/rizinorg/rizin/commit/75bac3088b2ec173e22d4be9d525ceacc987cf02
CVE: CVE-2024-47238
Published: 2024-12-12
Description: Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.dell.com/support/kbdoc/en-us/000227595/dsa-2024-355
CVE: CVE-2024-54810
Published: 2024-12-12
Description: A SQL Injection vulnerability was found in /preschool/admin/password-recovery.php in PHPGurukul Pre-School Enrollment System Project v1.0, which allows remote attackers to execute arbitrary code via the mobileno parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Pre-School%20Enrollment/SQL%20Injection%20pre-school%20pa.pdf; https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Pre-School%20Enrollment/SQL%20Injection%20pre-school%20pa.pdf
CVE: CVE-2024-55662
Published: 2024-12-12
Description: XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-1 and prior to versions 15.10.9 and 16.3.0, on instances where `Extension Repository Application` is installed, any user can execute any code requiring `programming` rights on the server. This vulnerability has been fixed in XWiki 15.10.9 and 16.3.0. Since `Extension Repository Application` is not mandatory, it can be safely disabled on instances that do not use it as a workaround. It is also possible to manually apply the patches from commit 8659f17d500522bf33595e402391592a35a162e8 to the page `ExtensionCode.ExtensionSheet` and to the page `ExtensionCode.ExtensionAuthorsDisplayer`.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-96, CWE-863, CWE-94, CWE-863
References: https://github.com/xwiki/xwiki-platform/commit/8659f17d500522bf33595e402391592a35a162e8; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-j2pq-22jj-4pm5; https://jira.xwiki.org/browse/XWIKI-21890
CVE: CVE-2024-49071
Published: 2024-12-12
Description: Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-612
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49071
CVE: CVE-2024-49147
Published: 2024-12-12
Description: Deserialization of untrusted data in Microsoft Update Catalog allows an unauthorized attacker to elevate privileges on the website’s webserver.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49147
CVE: CVE-2024-54811
Published: 2024-12-12
Description: A SQL injection vulnerability in /index.php in PHPGurukul Park Ticketing Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "login" parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Park%20ticket/report%20sql.pdf; https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Park%20ticket/report%20sql.pdf
CVE: CVE-2024-55663
Published: 2024-12-12
Description: XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 13.10.5 and 14.3-rc-1, in `getdocument.vm`; the ordering of the returned documents is defined from an unsanitized request parameter (request.sort) and can allow any user to inject HQL. Depending on the used database backend, the attacker may be able to not only obtain confidential information such as password hashes from the database, but also execute UPDATE/INSERT/DELETE queries. This has been patched in 13.10.5 and 14.3-rc-1. There is no known workaround, other than upgrading XWiki.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-116
References: https://github.com/xwiki/xwiki-platform/commit/673076e2e8b88a36cdeaf7007843aa9ca1a068a0; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-wh34-m772-5398; https://jira.xwiki.org/browse/XWIKI-17568
CVE: CVE-2024-55875
Published: 2024-12-12
Description: http4k is a functional toolkit for Kotlin HTTP applications. Prior to version 5.41.0.0, there is a potential XXE (XML External Entity Injection) vulnerability when http4k handling malicious XML contents within requests, which might allow attackers to read local sensitive information on server, trigger Server-side Request Forgery and even execute code under some circumstances. Version 5.41.0.0 contains a patch for the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200, CWE-611, CWE-918
References: https://github.com/http4k/http4k/blob/25696dff2d90206cc1da42f42a1a8dbcdbcdf18c/core/format/xml/src/main/kotlin/org/http4k/format/Xml.kt#L42-L46; https://github.com/http4k/http4k/commit/35297adc6d6aca4951d50d8cdf17ff87a8b19fbc; https://github.com/http4k/http4k/security/advisories/GHSA-7mj5-hjjj-8rgw
CVE: CVE-2024-55876
Published: 2024-12-12
Description: XWiki Platform is a generic wiki platform. Starting in version 1.2-milestone-2 and prior to versions 15.10.9 and 16.3.0, any user with an account on the main wiki could run scheduling operations on subwikis. To reproduce, as a user on the main wiki without any special right, view the document `Scheduler.WebHome` in a subwiki. Then, click on any operation (*e.g.,* Trigger) on any job. If the operation is successful, then the instance is vulnerable. This has been patched in XWiki 15.10.9 and 16.3.0. As a workaround, those who have subwikis where the Job Scheduler is enabled can edit the objects on `Scheduler.WebPreferences` to match the patch.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://github.com/xwiki/xwiki-platform/commit/54bcc5a7a2e440cc591b91eece9c13dc0c487331; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-cwq6-mjmx-47p6; https://jira.xwiki.org/browse/XWIKI-21663
CVE: CVE-2024-55877
Published: 2024-12-12
Description: XWiki Platform is a generic wiki platform. Starting in version 9.7-rc-1 and prior to versions 15.10.11, 16.4.1, and 16.5.0, any user with an account can perform arbitrary remote code execution by adding instances of `XWiki.WikiMacroClass` to any page. This compromises the confidentiality, integrity and availability of the whole XWiki installation. This vulnerability has been fixed in XWiki 15.10.11, 16.4.1 and 16.5.0. It is possible to manually apply the patch to the page `XWiki.XWikiSyntaxMacrosList` as a workaround.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-96, CWE-94
References: https://github.com/xwiki/xwiki-platform/commit/40e1afe001d61eafdf13f3621b4b597a0e58a3e3; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-2r87-74cx-2p7c; https://jira.xwiki.org/browse/XWIKI-22030
CVE: CVE-2024-55878
Published: 2024-12-12
Description: SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in version 1.0.12 and prior to version 1.1.12, when calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code. Version 1.1.12 fixes the issue. As a workaround, don't use direct publication via toHTMLEx.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/shuchkin/simplexlsx/commit/cb4e716259e83d18e89292a4f1b721f4d34e28c2; https://github.com/shuchkin/simplexlsx/security/advisories/GHSA-x6mh-rjwm-8ph7
CVE: CVE-2024-55879
Published: 2024-12-12
Description: XWiki Platform is a generic wiki platform. Starting in version 2.3 and prior to versions 15.10.9, 16.3.0, any user with script rights can perform arbitrary remote code execution by adding instances of `XWiki.ConfigurableClass` to any page. This compromises the confidentiality, integrity and availability of the whole XWiki installation. This has been patched in XWiki 15.10.9 and 16.3.0. No known workarounds are available except upgrading.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-862
References: https://github.com/xwiki/xwiki-platform/commit/8493435ff9606905a2d913607d6c79862d0c168d; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-r279-47wg-chpr; https://jira.xwiki.org/browse/XWIKI-21207
CVE: CVE-2024-55885
Published: 2024-12-12
Description: beego is an open-source web framework for the Go programming language. Versions of beego prior to 2.3.4 use MD5 as a hashing algorithm. MD5 is no longer considered secure against well-funded opponents due to its vulnerability to collision attacks. Version 2.3.4 replaces MD5 with SHA256.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327, CWE-328
References: https://github.com/beego/beego/commit/e7fa4835f71f47ab1d13afd638cebf661800d5a4; https://github.com/beego/beego/security/advisories/GHSA-9j3m-fr7q-jxfw
CVE: CVE-2024-55886
Published: 2024-12-12
Description: OpenSearch Data Prepper is a component of the OpenSearch project that accepts, filters, transforms, enriches, and routes data at scale. A vulnerability exists in the OpenTelemetry Logs source in Data Prepper starting inversion 2.1.0 and prior to version 2.10.2 where some custom authentication plugins will not perform authentication. This allows unauthorized users to ingest OpenTelemetry Logs data under certain conditions. This vulnerability does not affect the built-in `http_basic` authentication provider in Data Prepper. Pipelines which use the `http_basic` authentication provider continue to require authentication. The vulnerability exists only for custom implementations of Data Prepper’s `GrpcAuthenticationProvider` authentication plugin which implement the `getHttpAuthenticationService()` method instead of `getAuthenticationInterceptor()`. Data Prepper 2.10.2 contains a fix for this issue. For those unable to upgrade, one may use the built-in `http_basic` authentication provider in Data Prepper and/or add an authentication proxy in front of one's Data Prepper instances running the OpenTelemetry Logs source.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-287
References: https://github.com/opensearch-project/data-prepper/security/advisories/GHSA-725p-63vv-v948
CVE: CVE-2024-55888
Published: 2024-12-12
Description: Hush Line is an open-source whistleblower management system. Starting in version 0.1.0 and prior to version 0.3.5, the productions server appeared to have been misconfigured and missed providing any content security policy or security headers. This could result in bypassing of cross-site scripting filters. Version 0.3.5 fixed the issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-1021
References: https://github.com/scidsg/hushline/security/advisories/GHSA-m592-g8qv-hrqx
CVE: CVE-2024-12289
Published: 2024-12-12
Description: Boundary Community Edition and Boundary Enterprise (“Boundary”) incorrectly handle HTTP requests during the initialization of the Boundary controller, which may cause the Boundary server to terminate prematurely. Boundary is only vulnerable to this flaw during the initialization of the Boundary controller, which on average is measured in milliseconds during the Boundary startup process.

This vulnerability, CVE-2024-12289, is fixed in Boundary Community Edition and Boundary Enterprise 0.16.4, 0.17.3, 0.18.2.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-460, CWE-665
References: https://discuss.hashicorp.com/t/hcsec-2024-28-boundary-controller-incorrectly-handles-http-requests-on-initialization-which-may-lead-to-a-denial-of-service
CVE: CVE-2024-12212
Published: 2024-12-13
Description: The vulnerability occurs in the parsing of CSP files. The issues result 
from the lack of proper validation of user-supplied data, which could 
allow reading past the end of allocated data structures, resulting in 
execution of arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://hornerautomation.com/cscape-software-free/cscape-software/; https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-05
CVE: CVE-2024-9508
Published: 2024-12-13
Description: Horner Automation Cscape contains a memory corruption vulnerability, which 
could allow an attacker to disclose information and execute arbitrary 
code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://hornerautomation.com/cscape-software-free/cscape-software/; https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-05
CVE: CVE-2024-12603
Published: 2024-12-13
Description: A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-602
References: https://security.tecno.com/SRC/blogdetail/356?lang=en_US; https://security.tecno.com/SRC/securityUpdates
CVE: CVE-2019-25221
Published: 2024-12-13
Description: The Responsive Filterable Portfolio plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset?old_path=/responsive-filterable-portfolio/tags/1.0.8&new_path=/responsive-filterable-portfolio/tags/1.0.9&sfp_email=&sfph_mail=; https://wordpress.org/plugins/responsive-filterable-portfolio/; https://www.wordfence.com/threat-intel/vulnerabilities/id/97827e26-d418-4c96-b0d0-10b92a4513bd?source=cve
CVE: CVE-2024-12300
Published: 2024-12-13
Description: The AR for WordPress plugin for WordPress is vulnerable to unauthorized double extension file upload due to a missing capability check on the set_ar_featured_image() function in all versions up to, and including, 7.3. This makes it possible for unauthenticated attackers to upload php files leveraging a double extension attack. It's important to note the file is deleted immediately and double extension attacks only work on select servers making this unlikely to be successfully exploited.
CVSS Score: 3.7 (LOW)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/ar-for-wordpress/trunk/includes/ar-add-media.php?rev=3177638; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3206666%40ar-for-wordpress%2Ftrunk&old=3205240%40ar-for-wordpress%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/8b507369-49f7-4a1d-900b-c7bef40aec96?source=cve
CVE: CVE-2024-12572
Published: 2024-12-13
Description: The Hello In All Languages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/hello-in-all-languages/trunk/hello-in-all-languages.php#L398; https://www.wordfence.com/threat-intel/vulnerabilities/id/85501fc0-5d51-492b-b208-4b84f371ee77?source=cve
CVE: CVE-2024-11767
Published: 2024-12-13
Description: The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'newsman_subscribe_widget' shortcode in all versions up to, and including, 2.7.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/newsmanapp/trunk/newsmanapp.php#L1054; https://plugins.trac.wordpress.org/browser/newsmanapp/trunk/newsmanapp.php#L1075; https://plugins.trac.wordpress.org/changeset/3205721/newsmanapp/trunk/newsmanapp.php
CVE: CVE-2024-11809
Published: 2024-12-13
Description: The Primer MyData for Woocommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'img_src' parameter in all versions up to, and including, 4.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3205727%40primer-mydata%2Ftrunk&old=3188823%40primer-mydata%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/aca092cf-9482-468e-8dd4-af04e25bcf33?source=cve
CVE: CVE-2024-12574
Published: 2024-12-13
Description: The SVG Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/svg-shortcode/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/3b378256-2d9b-4aad-abfe-fecfc76f0bb4?source=cve
CVE: CVE-2024-12579
Published: 2024-12-13
Description: The Minify HTML plugin for WordPress is vulnerable to Regular Expression Denial of Service (ReDoS) in all versions up to, and including, 2.1.10. This is due to processing user-supplied input as a regular expression.  This makes it possible for unauthenticated attackers to create comments that can cause catastrophic backtracking and break pages.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://plugins.trac.wordpress.org/changeset/3203890/minify-html-markup; https://www.wordfence.com/threat-intel/vulnerabilities/id/80334e81-c33d-464c-9409-f49c34681890?source=cve
CVE: CVE-2024-21543
Published: 2024-12-13
Description: Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, granting access to users with valid credentials, and eventually bypassing custom authentication checks such as two-factor authentication, LDAP validations, or requirements from configured AUTHENTICATION_BACKENDS.
CVSS Score: 7.1 (HIGH)
CWE: CWE-287, CWE-295
References: https://github.com/sunscrapers/djoser/commit/d33c3993c0c735f23cbedc60fa59fce69354f19d; https://github.com/sunscrapers/djoser/issues/795; https://github.com/sunscrapers/djoser/pull/819