deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-37685
Published: 2021-08-12
Description: TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`expand_dims.cc`](https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/expand_dims.cc#L36-L50) contains a vulnerability which allows reading one element outside of bounds of heap allocated data. If `axis` is a large negative value (e.g., `-100000`), then after the first `if` it would still be negative. The check following the `if` statement will pass and the `for` loop would read one element before the start of `input_dims.data` (when `i = 0`). We have patched the issue in GitHub commit d94ffe08a65400f898241c0374e9edc6fa8ed257. The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/tensorflow/tensorflow/commit/d94ffe08a65400f898241c0374e9edc6fa8ed257; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c545-c4f9-rf6v; https://github.com/tensorflow/tensorflow/commit/d94ffe08a65400f898241c0374e9edc6fa8ed257
CVE: CVE-2021-37687
Published: 2021-08-12
Description: TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`GatherNd` implementation](https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/gather_nd.cc#L124) does not support negative indices but there are no checks for this situation. Hence, an attacker can read arbitrary data from the heap by carefully crafting a model with negative values in `indices`. Similar issue exists in [`Gather` implementation](https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/gather.cc). We have patched the issue in GitHub commits bb6a0383ed553c286f87ca88c207f6774d5c4a8f and eb921122119a6b6e470ee98b89e65d721663179d. The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/tensorflow/tensorflow/commit/bb6a0383ed553c286f87ca88c207f6774d5c4a8f; https://github.com/tensorflow/tensorflow/commit/eb921122119a6b6e470ee98b89e65d721663179d; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jwf9-w5xm-f437
CVE: CVE-2021-37691
Published: 2021-08-12
Description: TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would trigger a division by zero error in LSH [implementation](https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/lsh_projection.cc#L118). We have patched the issue in GitHub commit 0575b640091680cfb70f4dd93e70658de43b94f9. The fix will be included in TensorFlow 2.6.0. We will also cherrypick thiscommit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://github.com/tensorflow/tensorflow/commit/0575b640091680cfb70f4dd93e70658de43b94f9; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-27qf-jwm8-g7f3; https://github.com/tensorflow/tensorflow/commit/0575b640091680cfb70f4dd93e70658de43b94f9
CVE: CVE-2021-37692
Published: 2021-08-12
Description: TensorFlow is an end-to-end open source platform for machine learning. In affected versions under certain conditions, Go code can trigger a segfault in string deallocation. For string tensors, `C.TF_TString_Dealloc` is called during garbage collection within a finalizer function. However, tensor structure isn't checked until encoding to avoid a performance penalty. The current method for dealloc assumes that encoding succeeded, but segfaults when a string tensor is garbage collected whose encoding failed (e.g., due to mismatched dimensions). To fix this, the call to set the finalizer function is deferred until `NewTensor` returns and, if encoding failed for a string tensor, deallocs are determined based on bytes written. We have patched the issue in GitHub commit 8721ba96e5760c229217b594f6d2ba332beedf22. The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, which is the other affected version.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/tensorflow/tensorflow/commit/8721ba96e5760c229217b594f6d2ba332beedf22; https://github.com/tensorflow/tensorflow/pull/50508; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cmgw-8vpc-rc59
CVE: CVE-2021-38602
Published: 2021-08-12
Description: PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/KielVaughn/CVE-2021-38602; https://pluxml.org/download/changelog.txt; https://github.com/KielVaughn/CVE-2021-38602
CVE: CVE-2021-38603
Published: 2021-08-12
Description: PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/163823/PluXML-5.8.7-Cross-Site-Scripting.html; https://github.com/KielVaughn/CVE-2021-38603; https://pluxml.org/download/changelog.txt
CVE: CVE-2021-38614
Published: 2021-08-12
Description: Polipo through 1.1.1, when NDEBUG is used, allows a heap-based buffer overflow during parsing of a Range header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.openwall.com/lists/oss-security/2021/07/28/2; https://www.openwall.com/lists/oss-security/2021/07/28/2
CVE: CVE-2021-37690
Published: 2021-08-13
Description: TensorFlow is an end-to-end open source platform for machine learning. In affected versions when running shape functions, some functions (such as `MutableHashTableShape`) produce extra output information in the form of a `ShapeAndType` struct. The shapes embedded in this struct are owned by an inference context that is cleaned up almost immediately; if the upstream code attempts to access this shape information, it can trigger a segfault. `ShapeRefiner` is mitigating this for normal output shapes by cloning them (and thus putting the newly created shape under ownership of an inference context that will not die), but we were not doing the same for shapes and types. This commit fixes that by doing similar logic on output shapes and types. We have patched the issue in GitHub commit ee119d4a[PII_REDACTED]46fba1c3dd3f13a039fbb1. The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-416
References: https://github.com/tensorflow/tensorflow/commit/ee119d4a[PII_REDACTED]46fba1c3dd3f13a039fbb1; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3hxh-8cp2-g4hg; https://github.com/tensorflow/tensorflow/commit/ee119d4a[PII_REDACTED]46fba1c3dd3f13a039fbb1
CVE: CVE-2021-37695
Published: 2021-08-13
Description: ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Fake Objects](https://ckeditor.com/cke4/addon/fakeobjects) package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using the CKEditor 4 plugins listed above at version < 4.16.2. The problem has been recognized and patched. The fix will be available in version 4.16.2.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/ckeditor/ckeditor4/commit/de3c001540715f9c3801aaa38a1917de46cfcf58; https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-m94c-37g6-cjhc; https://lists.debian.org/debian-lts-announce/2021/11/msg00007.html
CVE: CVE-2021-37343
Published: 2021-08-13
Description: A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post authenticated RCE under security context of the user running Nagios.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/165978/Nagios-XI-Autodiscovery-Shell-Upload.html; https://www.nagios.com/downloads/nagios-xi/change-log/; http://packetstormsecurity.com/files/165978/Nagios-XI-Autodiscovery-Shell-Upload.html
CVE: CVE-2021-37344
Published: 2021-08-13
Description: Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of special elements used in an OS Command (OS Command injection).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.nagios.com/downloads/nagios-xi/change-log/; https://www.nagios.com/downloads/nagios-xi/change-log/
CVE: CVE-2021-37345
Published: 2021-08-13
Description: Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is being imported from the var directory for some scripts with elevated permissions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://nagios.com; https://www.nagios.com/downloads/nagios-xi/change-log/; http://nagios.com
CVE: CVE-2021-37346
Published: 2021-08-13
Description: Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements used in an OS Command (OS Command injection).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.nagios.com/downloads/nagios-xi/change-log/; https://www.nagios.com/downloads/nagios-xi/change-log/
CVE: CVE-2021-37347
Published: 2021-08-13
Description: Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh does not validate the directory name it receives as an argument.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://www.nagios.com/downloads/nagios-xi/change-log/; https://www.nagios.com/downloads/nagios-xi/change-log/
CVE: CVE-2021-37348
Published: 2021-08-13
Description: Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://www.nagios.com/downloads/nagios-xi/change-log/; https://www.nagios.com/downloads/nagios-xi/change-log/
CVE: CVE-2021-37349
Published: 2021-08-13
Description: Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because cleaner.php does not sanitise input read from the database.
CVSS Score: 7.8 (HIGH)
References: https://www.nagios.com/downloads/nagios-xi/change-log/; https://www.nagios.com/downloads/nagios-xi/change-log/
CVE: CVE-2021-37350
Published: 2021-08-13
Description: Nagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications Tool due to improper input sanitisation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.nagios.com/downloads/nagios-xi/change-log/; https://www.nagios.com/downloads/nagios-xi/change-log/
CVE: CVE-2021-37351
Published: 2021-08-13
Description: Nagios XI before version 5.8.5 is vulnerable to insecure permissions and allows unauthenticated users to access guarded pages through a crafted HTTP request to the server.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276
References: https://www.nagios.com/downloads/nagios-xi/change-log/; https://www.nagios.com/downloads/nagios-xi/change-log/
CVE: CVE-2021-37352
Published: 2021-08-13
Description: An open redirect vulnerability exists in Nagios XI before version 5.8.5 that could lead to spoofing. To exploit the vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://www.nagios.com/downloads/nagios-xi/change-log/; https://www.nagios.com/downloads/nagios-xi/change-log/
CVE: CVE-2021-37353
Published: 2021-08-13
Description: Nagios XI Docker Wizard before version 1.1.3 is vulnerable to SSRF due to improper sanitation in table_population.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://www.nagios.com/downloads/nagios-xi/change-log/; https://www.nagios.com/downloads/nagios-xi/change-log/
CVE: CVE-2021-31399
Published: 2021-08-13
Description: On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-295
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-31399; https://excellium-services.com/cert-xlm-advisory/cve-2021-31399/; https://www.2n.cz/en_GB/products/ip-access-control/2n-access-unit-2
CVE: CVE-2021-27741
Published: 2021-08-13
Description: " Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection"
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0089834; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0089834
CVE: CVE-2021-38583
Published: 2021-08-13
Description: openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting (XSS) on multiple pages: hr/subscription.jsp and hr/application.jsp and and hr/index.jsp (with view= and data=).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/charlesbickel/CVE-2021-38583; https://openbaraza.org; https://sourceforge.net/projects/obhrms/?source=directory
CVE: CVE-2021-3573
Published: 2021-08-13
Description: A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362
References: http://www.openwall.com/lists/oss-security/2023/07/02/1; https://bugzilla.redhat.com/show_bug.cgi?id=1966578; https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git/commit/?id=e305509e678b3a4af2b3cfd410f409f7cdaabb52
CVE: CVE-2021-3635
Published: 2021-08-13
Description: A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_ADMIN) access is able to panic the system when issuing netfilter netflow commands.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=1976946; https://bugzilla.redhat.com/show_bug.cgi?id=1976946
CVE: CVE-2021-38619
Published: 2021-08-13
Description: openBaraza HCM 3.1.6 does not properly neutralize user-controllable input: an unauthenticated remote attacker can conduct a stored cross-site scripting (XSS) attack against an administrative user from hr/subscription.jsp and hr/application.jsp and and hr/index.jsp (with view=).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/charlesbickel/CVE-2021-38619; https://openbaraza.org/; https://sourceforge.net/projects/obhrms/
CVE: CVE-2021-38621
Published: 2021-08-13
Description: The remove API in v1/controller/cloudStorage/alibabaCloud/remove/index.ts in netless Agora Flat Server before 2021-07-30 mishandles file ownership.
CVSS Score: 9.1 (CRITICAL)
References: https://github.com/netless-io/flat-server/commit/425aa970f6366874c61aa1466527fced5501e476; https://github.com/netless-io/flat-server/commit/425aa970f6366874c61aa1466527fced5501e476
CVE: CVE-2021-1104
Published: 2021-08-13
Description: The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address (MTVEC) register that may lead to a vulnerability due to the initial state of the register not being defined, potentially leading to information disclosure, data tampering and denial of service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-908
References: https://riscv.org/news/2021/08/video-glitching-risc-v-chips-mtvec-corruption-for-hardening-isa-adam-zabrocki-and-alex-matrosov-def-con-29/; https://riscv.org/news/2021/08/video-glitching-risc-v-chips-mtvec-corruption-for-hardening-isa-adam-zabrocki-and-alex-matrosov-def-con-29/
CVE: CVE-2021-27401
Published: 2021-08-13
Description: The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access (view and modify) user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0004; https://www.mitel.com/support/security-advisories
CVE: CVE-2021-27402
Published: 2021-08-13
Description: The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access (view and modify) user data by injecting arbitrary directory paths due to improper URL validation, aka Directory Traversal.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0004; https://www.mitel.com/support/security-advisories
CVE: CVE-2021-29880
Published: 2021-08-13
Description: IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be vulnerable to information disclosure between tenants by routing SIEM data to the incorrect domain. IBM X-Force ID: 206979.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/206979; https://www.ibm.com/support/pages/node/6480957; https://exchange.xforce.ibmcloud.com/vulnerabilities/206979
CVE: CVE-2021-32067
Published: 2021-08-13
Description: The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to view sensitive system information through an HTTP response due to insufficient output sanitization.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-116
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0005; https://www.mitel.com/support/security-advisories
CVE: CVE-2021-32068
Published: 2021-08-13
Description: The AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack by sending multiple session renegotiation requests, due to insufficient TLS session controls. A successful exploit could allow an attacker to modify application data and state.
CVSS Score: 3.7 (LOW)
CWE: CWE-770
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0005; https://www.mitel.com/support/security-advisories
CVE: CVE-2021-32069
Published: 2021-08-13
Description: The AWV component of Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack due to improper TLS negotiation. A successful exploit could allow an attacker to view and modify data.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-295
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0005; https://www.mitel.com/support/security-advisories
CVE: CVE-2021-32070
Published: 2021-08-13
Description: The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to perform a clickjacking attack due to an insecure header response. A successful exploit could allow an attacker to modify the browser header and redirect users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-1021
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0005; https://www.mitel.com/support/security-advisories
CVE: CVE-2021-32071
Published: 2021-08-13
Description: The MiCollab Client service in Mitel MiCollab before 9.3 could allow an unauthenticated user to gain system access due to improper access control. A successful exploit could allow an attacker to view and modify application data, and cause a denial of service for users.
CVSS Score: 9.8 (CRITICAL)
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0005; https://www.mitel.com/support/security-advisories
CVE: CVE-2021-32072
Published: 2021-08-13
Description: The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to get source code information (disclosing sensitive application data) due to insufficient output sanitization. A successful exploit could allow an attacker to view source code methods.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-116
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0005; https://www.mitel.com/support/security-advisories
CVE: CVE-2021-34398
Published: 2021-08-13
Description: NVIDIA DCGM, all versions prior to 2.2.9, contains a vulnerability in the DIAG module where any user can inject shared libraries into the DCGM server, which is usually running as root, which may lead to privilege escalation, total loss of confidentiality and integrity, and complete denial of service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-829
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5219; https://nvidia.custhelp.com/app/answers/detail/a_id/5219
CVE: CVE-2021-36380
Published: 2021-08-13
Description: Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dnsAddr /cgi/networkDiag.cgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://research.nccgroup.com/2021/07/26/technical-advisory-sunhillo-sureline-unauthenticated-os-command-injection-cve-2021-36380/; https://www.sunhillo.com/product/sureline/; https://research.nccgroup.com/2021/07/26/technical-advisory-sunhillo-sureline-unauthenticated-os-command-injection-cve-2021-36380/
CVE: CVE-2021-37028
Published: 2021-08-13
Description: There is a command injection vulnerability in the HG8045Q product. When the command-line interface is enabled, which is disabled by default, attackers with administrator privilege could execute part of commands.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: http://jvn.jp/en/jp/JVN41646618/index.html; https://support.huawei.com/carrier/navi?coltype=software#col=software&from=product&detailId=PBI1-252279599&path=PBI1-252301455/PBI1-252303293/PBI1-23709862/PBI1-22318696/PBI1-21457383; http://jvn.jp/en/jp/JVN41646618/index.html
CVE: CVE-2021-37586
Published: 2021-08-13
Description: The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user (with Administrator rights) to replay a previously recorded conversation of another tenant due to insufficient validation.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0006; https://www.mitel.com/support/security-advisories
CVE: CVE-2021-37693
Published: 2021-08-13
Description: Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta4, when adding additional email addresses to an existing account on a Discourse site an email token is generated as part of the email verification process. Deleting the additional email address does not invalidate an unused token which can then be used in other contexts, including reseting a password.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-613, CWE-640
References: https://github.com/discourse/discourse/commit/fb14e50741a4880cda22244eded8858e2f5336ef; https://github.com/discourse/discourse/security/advisories/GHSA-9377-96f4-cww4; https://github.com/discourse/discourse/commit/fb14e50741a4880cda22244eded8858e2f5336ef