deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-24757
Published: 2021-11-01
Description: The Stylish Price List WordPress plugin before 6.9.0 does not perform capability checks in its spl_upload_ser_img AJAX action (available to both unauthenticated and authenticated users), which could allow unauthenticated users to upload images.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://wpscan.com/vulnerability/352a9e05-2d5f-4bf7-8da9-85621fb15d91; https://wpscan.com/vulnerability/352a9e05-2d5f-4bf7-8da9-85621fb15d91
CVE: CVE-2021-24770
Published: 2021-11-01
Description: The Stylish Price List WordPress plugin before 6.9.1 does not perform capability checks in its spl_upload_ser_img AJAX action (available to authenticated users), which could allow any authenticated users, such as subscriber, to upload arbitrary images.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://wpscan.com/vulnerability/4365c813-4bd7-4c7c-a15b-ef9a42d32b26; https://wpscan.com/vulnerability/4365c813-4bd7-4c7c-a15b-ef9a42d32b26
CVE: CVE-2021-24773
Published: 2021-11-01
Description: The WordPress Download Manager WordPress plugin before 3.2.16 does not escape some of the Download settings when outputting them, allowing high privilege users to perform XSS attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/aab2ddbb-7675-40fc-90ee-f5bfa8a5b995; https://wpscan.com/vulnerability/aab2ddbb-7675-40fc-90ee-f5bfa8a5b995
CVE: CVE-2021-24781
Published: 2021-11-01
Description: The Image Source Control WordPress plugin before 2.3.1 allows users with a role as low as Contributor to change arbitrary post meta fields of arbitrary posts (even those they should not be able to edit)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://plugins.trac.wordpress.org/changeset/2606615/; https://wpscan.com/vulnerability/3550ba54-7786-4ad9-aeb1-1c0750f189d0; https://plugins.trac.wordpress.org/changeset/2606615/
CVE: CVE-2021-24789
Published: 2021-11-01
Description: The Flat Preloader WordPress plugin before 1.5.5 does not escape some of its settings when outputting them in attribute in the frontend, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/e8550ccd-3898-4e27-aca9-ade89823ff4d; https://wpscan.com/vulnerability/e8550ccd-3898-4e27-aca9-ade89823ff4d
CVE: CVE-2021-24793
Published: 2021-11-01
Description: The WPeMatico RSS Feed Fetcher WordPress plugin before 2.6.12 does not escape the Feed URL added to a campaign before outputting it in an attribute, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/eeedbb3b-ae10-4472-a1d3-f196f95b9d96; https://wpscan.com/vulnerability/eeedbb3b-ae10-4472-a1d3-f196f95b9d96
CVE: CVE-2021-24794
Published: 2021-11-01
Description: The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/651dc567-943e-4f57-8ec4-6eee466785f5; https://wpscan.com/vulnerability/651dc567-943e-4f57-8ec4-6eee466785f5
CVE: CVE-2021-24799
Published: 2021-11-01
Description: The Far Future Expiry Header WordPress plugin before 1.5 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/6010ce4e-3e46-4cc1-96d8-560b30b605ed; https://wpscan.com/vulnerability/6010ce4e-3e46-4cc1-96d8-560b30b605ed
CVE: CVE-2021-24808
Published: 2021-11-01
Description: The BP Better Messages WordPress plugin before 1.9.9.41 sanitise (with sanitize_text_field) but does not escape the 'subject' parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/2605772/bp-better-messages/trunk/views/layout-new.php; https://wpscan.com/vulnerability/53ff82ec-00ec-4b20-8f60-db9db8c025b4; https://plugins.trac.wordpress.org/changeset/2605772/bp-better-messages/trunk/views/layout-new.php
CVE: CVE-2021-24809
Published: 2021-11-01
Description: The BP Better Messages WordPress plugin before 1.9.9.41 does not check for CSRF in multiple of its AJAX actions: bp_better_messages_leave_chat, bp_better_messages_join_chat, bp_messages_leave_thread, bp_messages_mute_thread, bp_messages_unmute_thread, bp_better_messages_add_user_to_thread, bp_better_messages_exclude_user_from_thread. This could allow attackers to make logged in users do unwanted actions
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/changeset/2605772/bp-better-messages/trunk/inc/ajax.php; https://wpscan.com/vulnerability/e186fef4-dca0-461f-b539-082c13a68d13; https://plugins.trac.wordpress.org/changeset/2605772/bp-better-messages/trunk/inc/ajax.php
CVE: CVE-2021-24813
Published: 2021-11-01
Description: The Events Made Easy WordPress plugin before 2.2.24 does not sanitise and escape Custom Field Names, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/2607749/; https://wpscan.com/vulnerability/a1fe0783-7a88-4d75-967f-cef970b73752; https://plugins.trac.wordpress.org/changeset/2607749/
CVE: CVE-2021-41973
Published: 2021-11-01
Description: In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: http://www.openwall.com/lists/oss-security/2021/11/01/2; http://www.openwall.com/lists/oss-security/2021/11/01/8; https://lists.apache.org/thread.html/r0b907da9340d5ff4e6c1a4798ef4e79700a668657f27cca8a39e9250%40%3Cdev.mina.apache.org%3E
CVE: CVE-2021-27644
Published: 2021-11-01
Description: In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center. (Only applicable to MySQL data source with internal login account password)
CVSS Score: 8.8 (HIGH)
CWE: CWE-264, CWE-89
References: http://www.openwall.com/lists/oss-security/2021/11/01/3; https://lists.apache.org/thread.html/r35d6acf021486a390a7ea09e6650c2fe19e72522bd484791d606a6e6%40%3Cdev.dolphinscheduler.apache.org%3E; https://lists.apache.org/thread.html/r35d6acf021486a390a7ea09e6650c2fe19e72522bd484791d606a6e6%40%3Cdev.dolphinscheduler.apache.org%3E
CVE: CVE-2021-25874
Published: 2021-11-01
Description: AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter which allows a remote unauthenticated attacker to retrieve databases information such as application passwords hashes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://avideoyouphptube.com; https://synacktiv.com; https://www.synacktiv.com/sites/default/files/2021-01/YouPHPTube_Multiple_Vulnerabilities.pdf
CVE: CVE-2021-25875
Published: 2021-11-01
Description: AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the searchPhrase parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://avideoyouphptube.com; https://synacktiv.com; https://www.synacktiv.com/sites/default/files/2021-01/YouPHPTube_Multiple_Vulnerabilities.pdf
CVE: CVE-2021-25876
Published: 2021-11-01
Description: AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://avideoyouphptube.com; https://synacktiv.com; https://www.synacktiv.com/sites/default/files/2021-01/YouPHPTube_Multiple_Vulnerabilities.pdf
CVE: CVE-2021-25877
Published: 2021-11-01
Description: AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag and code variables in file save.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: http://avideoyouphptube.com; https://synacktiv.com; https://www.synacktiv.com/sites/default/files/2021-01/YouPHPTube_Multiple_Vulnerabilities.pdf
CVE: CVE-2021-25878
Published: 2021-11-01
Description: AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://avideoyouphptube.com; https://synacktiv.com; https://www.synacktiv.com/sites/default/files/2021-01/YouPHPTube_Multiple_Vulnerabilities.pdf
CVE: CVE-2021-42557
Published: 2021-11-01
Description: In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials.
CVSS Score: 7.5 (HIGH)
References: https://github.com/jeedom/core/releases; https://www.synacktiv.com/sites/default/files/2021-10/advisory_Jeedom_Auth_Bypass_CVE-2021-42557.pdf; https://github.com/jeedom/core/releases
CVE: CVE-2021-22563
Published: 2021-11-01
Description: Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector<std::vector<T>> when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with https://github.com/libjxl/libjxl/pull/757
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://github.com/libjxl/libjxl/issues/735; https://github.com/libjxl/libjxl/pull/757; https://github.com/libjxl/libjxl/issues/735
CVE: CVE-2021-22564
Published: 2021-11-01
Description: For certain valid JPEG XL images with a size slightly larger than an integer number of groups (256x256 pixels) when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur when processing the right or bottom edges of the image, but only when groups are processed in certain order. Groups can be processed out of order in multi-threaded decoding environments with heavy thread load but also with images that contain the groups in an arbitrary order in the file. It is recommended to upgrade past 0.6.0 or patch with https://github.com/libjxl/libjxl/pull/775
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://github.com/libjxl/libjxl/issues/708; https://github.com/libjxl/libjxl/pull/775; https://github.com/libjxl/libjxl/issues/708
CVE: CVE-2021-27004
Published: 2021-11-01
Description: System Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow a local attacker to discover plaintext iSCSI CHAP credentials.
CVSS Score: 5.5 (MEDIUM)
References: https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/; https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/
CVE: CVE-2020-28702
Published: 2021-11-01
Description: A SQL injection vulnerability in TopicMapper.xml of PybbsCMS v5.2.1 allows attackers to access sensitive database information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/tomoya92/pybbs/issues/137; https://github.com/tomoya92/pybbs/issues/137
CVE: CVE-2021-27005
Published: 2021-11-01
Description: Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerability which could allow a remote attacker to cause a crash of the httpd server.
CVSS Score: 7.5 (HIGH)
References: https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/; https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/
CVE: CVE-2021-29212
Published: 2021-11-01
Description: A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.90 and 1.95. The vulnerability could be remotely exploited to allow an unauthenticated user to run arbitrary code leading complete impact to confidentiality, integrity, and availability of the iLO Amplifier Pack appliance.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04189en_us; https://www.zerodayinitiative.com/advisories/ZDI-21-1278/; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04189en_us
CVE: CVE-2021-29213
Published: 2021-11-01
Description: A potential local bypass of security restrictions vulnerability has been identified in HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProLiant MicroServer Gen10 Plus server's system ROMs prior to version 2.52. The vulnerability could be locally exploited to cause disclosure of sensitive information, denial of service (DoS), and/or compromise system integrity.
CVSS Score: 6.7 (MEDIUM)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04197en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04197en_us
CVE: CVE-2021-3440
Published: 2021-11-01
Description: HP Print and Scan Doctor, an application within the HP Smart App for Windows, is potentially vulnerable to local elevation of privilege.
CVSS Score: 7.8 (HIGH)
References: https://support.hp.com/us-en/document/ish_4[PII_REDACTED]263-16/hpsbpi03727; https://support.hp.com/us-en/document/ish_4[PII_REDACTED]263-16/hpsbpi03727
CVE: CVE-2021-3704
Published: 2021-11-01
Description: Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow a Denial of Service on the device.
CVSS Score: 7.5 (HIGH)
References: https://support.hp.com/us-en/document/ish_4[PII_REDACTED]589-16/hpsbpi03741; https://support.hp.com/us-en/document/ish_4[PII_REDACTED]589-16/hpsbpi03741
CVE: CVE-2021-3705
Published: 2021-11-01
Description: Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow an unauthorized user to reconfigure, reset the device.
CVSS Score: 9.8 (CRITICAL)
References: https://support.hp.com/us-en/document/ish_4[PII_REDACTED]589-16/hpsbpi03741; https://support.hp.com/us-en/document/ish_4[PII_REDACTED]589-16/hpsbpi03741
CVE: CVE-2021-38847
Published: 2021-11-01
Description: S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted IMG file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/bousalman/S-Cart-Arbitrary-File-Upload; https://github.com/bousalman/S-Cart-Arbitrary-File-Upload
CVE: CVE-2021-26739
Published: 2021-11-01
Description: SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/millken/doyocms/issues/5; https://github.com/millken/doyocms/issues/5
CVE: CVE-2021-26740
Published: 2021-11-01
Description: Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/millken/doyocms/issues/4; https://github.com/millken/doyocms/issues/4
CVE: CVE-2021-42917
Published: 2021-11-01
Description: Buffer overflow vulnerability in Kodi xbmc up to 19.0, allows attackers to cause a denial of service due to improper length of values passed to istream.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/fuzzard/xbmc/commit/80c8138c09598e88b4ddb6dbb279fa193bbb3237; https://github.com/xbmc/xbmc/commit/48730b[PII_REDACTED]5d46dfccc4029bd36d072df3; https://github.com/xbmc/xbmc/issues/20305
CVE: CVE-2021-31848
Published: 2021-11-01
Description: Cross site scripting (XSS) vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker to highjack an active DLP ePO administrator session by convincing the logged in administrator to click on a carefully crafted link in the case management part of the DLP ePO extension.
CVSS Score: 8.4 (HIGH)
CWE: CWE-79, CWE-79
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10371; https://kc.mcafee.com/corporate/index?page=content&id=SB10371
CVE: CVE-2021-31849
Published: 2021-11-01
Description: SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension.
CVSS Score: 8.4 (HIGH)
CWE: CWE-89, CWE-89
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10371; https://kc.mcafee.com/corporate/index?page=content&id=SB10371
CVE: CVE-2018-10909
Published: 2021-11-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-20136
Published: 2021-11-01
Description: ManageEngine Log360 Builds < 5235 are affected by an improper access control vulnerability allowing database configuration overwrite. An unauthenticated remote attacker can send a specially crafted message to Log360 to change its backend database to an attacker-controlled database and to force Log360 to restart. An attacker can leverage this vulnerability to achieve remote code execution by replacing files executed by Log360 on startup.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.tenable.com/security/research/tra-2021-48; https://www.tenable.com/security/research/tra-2021-48
CVE: CVE-2021-38356
Published: 2021-11-01
Description: The NextScripts: Social Networks Auto-Poster <= 4.3.20 WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $_REQUEST['page'] parameter which is echoed out on inc/nxs_class_snap.php by supplying the appropriate value 'nxssnap-post' to load the page in $_GET['page'] along with malicious JavaScript in $_POST['page'].
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.wordfence.com/blog/2021/10/xss-vulnerability-in-nextscripts-social-networks-auto-poster-plugin-impacts-100000-sites/; https://www.wordfence.com/blog/2021/10/xss-vulnerability-in-nextscripts-social-networks-auto-poster-plugin-impacts-100000-sites/
CVE: CVE-2021-39333
Published: 2021-11-01
Description: The Hashthemes Demo Importer Plugin <= 1.1.1 for WordPress contained several AJAX functions which relied on a nonce which was visible to all logged-in users for access control, allowing them to execute a function that truncated nearly all database tables and removed the contents of wp-content/uploads.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: https://www.wordfence.com/blog/2021/10/site-deletion-vulnerability-in-hashthemes-plugin/; https://www.wordfence.com/blog/2021/10/site-deletion-vulnerability-in-hashthemes-plugin/
CVE: CVE-2021-39340
Published: 2021-11-01
Description: The Notification WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/src/classes/Utils/Settings.php file which made it possible for attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 7.2.4. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/BigTiger2020/word-press/blob/main/Notification.md; https://plugins.trac.wordpress.org/browser/notification/tags/7.2.4/src/classes/Utils/Settings.php#L167; https://wordfence.com/vulnerability-advisories/#CVE-2021-39340
CVE: CVE-2021-39341
Published: 2021-11-01
Description: The OptinMonster WordPress plugin is vulnerable to sensitive information disclosure and unauthorized setting updates due to insufficient authorization validation via the logged_in_or_has_api_key function in the ~/OMAPI/RestApi.php file that can used to exploit inject malicious web scripts on sites with the plugin installed. This affects versions up to, and including, 2.6.4.
CVSS Score: 8.2 (HIGH)
CWE: CWE-285, CWE-319, CWE-863
References: https://plugins.trac.wordpress.org/browser/optinmonster/trunk/OMAPI/RestApi.php?rev=2606519#L1460; https://wordfence.com/vulnerability-advisories/#CVE-2021-39341; https://www.wordfence.com/blog/2021/10/1000000-sites-affected-by-optinmonster-vulnerabilities/
CVE: CVE-2021-39346
Published: 2021-11-01
Description: The Google Maps Easy WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/modules/marker_groups/views/tpl/mgrEditMarkerGroup.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.9.33. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/BigTiger2020/word-press/blob/main/Google%20Maps%20Easy.md; https://plugins.trac.wordpress.org/changeset/2620851/google-maps-easy/trunk/modules/marker_groups/views/tpl/mgrEditMarkerGroup.php; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39346
CVE: CVE-2021-41187
Published: 2021-11-01
Description: DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability has been found in specific versions of DHIS2. This vulnerability affects the API endpoints for /api/trackedEntityInstances and api/events in DHIS2. The system is vulnerable to attack only from users that are logged in to DHIS2, and there is no known way of exploiting the vulnerability without first being logged in as a DHIS2 user. A successful exploit of this vulnerability could allow the malicious user to read, edit and delete data in the DHIS2 instance. There are no known exploits of the security vulnerabilities addressed by these patch releases. However, we strongly recommend that all DHIS2 implementations using versions 2.32, 2.33, 2.34, 2.35 and 2.36 install these patches as soon as possible. There is no straightforward known workaround for DHIS2 instances using the Tracker functionality other than upgrading the affected DHIS2 server to one of the patches in which this vulnerability has been fixed. For implementations which do NOT use Tracker functionality, it may be possible to block all network access to POST to the /api/trackedEntityInstance and /api/events endpoints as a temporary workaround while waiting to upgrade.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://github.com/dhis2/dhis2-core/security/advisories/GHSA-fvm5-gp3j-c7c6; https://github.com/dhis2/dhis2-core/security/advisories/GHSA-fvm5-gp3j-c7c6
CVE: CVE-2021-43058
Published: 2021-11-01
Description: An open redirect vulnerability exists in Replicated Classic versions prior to 2.53.1 that could lead to spoofing. To exploit this vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, redirecting the user to an untrusted site.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://www.replicated.com/security/advisories/CVE-2021-43058; https://www.replicated.com/security/advisories/CVE-2021-43058