deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-32739
Published: 2024-05-14
Description: A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_ptask_verbose" function within MCUDBHelper.

CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://www.cyberpower.com/global/en/File/GetFileSampleByType?fileId=SU-18070002-07&fileSubType=FileReleaseNote; https://www.tenable.com/security/research/tra-2024-14; https://www.cyberpower.com/global/en/File/GetFileSampleByType?fileId=SU-18070002-07&fileSubType=FileReleaseNote
CVE: CVE-2024-32776
Published: 2024-05-14
Description: Missing Authorization vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/apppresser/wordpress-apppresser-plugin-4-3-0-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/apppresser/wordpress-apppresser-plugin-4-3-0-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-32874
Published: 2024-05-14
Description: Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Below 0.13.2 Release, when uploading a file or retrieving the filename, a user may intentionally use a large Unicode filename which would lead to a application-level denial of service. This is due to no limitation set on the length of the filename and the costy use of the Unicode normalization with the form NFKD under the hood of `secure_filename()`.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-770
References: https://github.com/blakeblackshear/frigate/commit/cc851555e[PII_REDACTED]dccc8b8ecf54afee31442; https://github.com/blakeblackshear/frigate/security/advisories/GHSA-w4h6-9wrp-v5jq; https://github.com/blakeblackshear/frigate/commit/cc851555e[PII_REDACTED]dccc8b8ecf54afee31442
CVE: CVE-2024-32964
Published: 2024-05-14
Description: Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Prior to 0.150.6, lobe-chat had an unauthorized Server-Side Request Forgery vulnerability in the /api/proxy endpoint. An attacker can construct malicious requests to cause Server-Side Request Forgery without logging in, attack intranet services, and leak sensitive information.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-918
References: https://github.com/lobehub/lobe-chat/commit/465665a735556669ee30446c7ea9049a20cc7c37; https://github.com/lobehub/lobe-chat/security/advisories/GHSA-mxhq-xw3g-rphc; https://github.com/lobehub/lobe-chat/commit/465665a735556669ee30446c7ea9049a20cc7c37
CVE: CVE-2024-32985
Published: 2024-05-14
Description: Stellar-core is a reference implementation for the peer-to-peer agent that manages the Stellar network. Prior to 20.4.0, core nodes could be randomly crashed due to a race condition with a 3rd party library. The likelihood of affecting the network is low since crashed nodes come back up online right away. Code fix mitigation is part of Stellar-core v20.4.0 release
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://github.com/stellar/stellar-core/security/advisories/GHSA-mgx8-frjx-x33m; https://github.com/stellar/stellar-core/security/advisories/GHSA-mgx8-frjx-x33m
CVE: CVE-2024-32989
Published: 2024-05-14
Description: Insufficient verification vulnerability in the system sharing pop-up module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: https://consumer.huawei.com/en/support/bulletin/2024/5/; https://consumer.huawei.com/en/support/bulletin/2024/6/; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-[PII_REDACTED]
CVE: CVE-2024-32990
Published: 2024-05-14
Description: Permission verification vulnerability in the system sharing pop-up module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: https://consumer.huawei.com/en/support/bulletin/2024/5/; https://consumer.huawei.com/en/support/bulletin/2024/6/; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-[PII_REDACTED]
CVE: CVE-2024-32991
Published: 2024-05-14
Description: Permission verification vulnerability in the wpa_supplicant module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16
References: https://consumer.huawei.com/en/support/bulletin/2024/5/; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/5/
CVE: CVE-2024-32992
Published: 2024-05-14
Description: Insufficient verification vulnerability in the baseband module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://consumer.huawei.com/en/support/bulletin/2024/5/; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/5/
CVE: CVE-2024-32993
Published: 2024-05-14
Description: Out-of-bounds access vulnerability in the memory module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-362
References: https://consumer.huawei.com/en/support/bulletin/2024/5/; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/5/
CVE: CVE-2024-32995
Published: 2024-05-14
Description: Denial of service (DoS) vulnerability in the AMS module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-248
References: https://consumer.huawei.com/en/support/bulletin/2024/5/; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/5/
CVE: CVE-2024-32996
Published: 2024-05-14
Description: Privilege escalation vulnerability in the account module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-264
References: https://consumer.huawei.com/en/support/bulletin/2024/5/; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/5/
CVE: CVE-2024-32997
Published: 2024-05-14
Description: Race condition vulnerability in the binder driver module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 8.4 (HIGH)
CWE: CWE-362, CWE-362
References: https://consumer.huawei.com/en/support/bulletin/2024/5/; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/5/
CVE: CVE-2024-32998
Published: 2024-05-14
Description: NULL pointer access vulnerability in the clock module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-824, CWE-824
References: https://consumer.huawei.com/en/support/bulletin/2024/5/; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/5/
CVE: CVE-2024-32999
Published: 2024-05-14
Description: Cracking vulnerability in the OS security module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-840
References: https://consumer.huawei.com/en/support/bulletin/2024/5/; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/5/
CVE: CVE-2024-33250
Published: 2024-05-14
Description: An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268(Leo) and SRS/4.0.195(Leo) allows a remote attacker to execute arbitrary code via a crafted request.
CVSS Score: 7.2 (HIGH)
CWE: CWE-918
References: https://github.com/hacker2004/cccccckkkkkk/blob/main/CVE-2024-33250.md; https://github.com/hacker2004/cccccckkkkkk/blob/main/CVE-2024-33250.md
CVE: CVE-2024-33263
Published: 2024-05-14
Description: QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(JSRuntime *) at quickjs.c.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-617
References: https://github.com/bellard/quickjs/issues/277; https://github.com/bellard/quickjs/issues/277
CVE: CVE-2024-33386
Published: 2024-05-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2024-33433
Published: 2024-05-14
Description: Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20[PII_REDACTED] allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the Wireless Page.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-233
References: https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_2_Guest_Access_Control/README.md; https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_2_Guest_Access_Control/README.md
CVE: CVE-2024-33454
Published: 2024-05-14
Description: Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stack component.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://gist.github.com/Zakary-D/30f565c4266c02c62aa9089c363e78e9; https://gist.github.com/Zakary-D/30f565c4266c02c62aa9089c363e78e9
CVE: CVE-2024-33771
Published: 2024-05-14
Description: A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS, allows remote authenticated users to trigger a denial of service (DoS) through the parameter "webpage."
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md; https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md
CVE: CVE-2024-33772
Published: 2024-05-14
Description: A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger a denial of service (DoS) through the parameter "curTime."
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-121
References: https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md; https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md
CVE: CVE-2024-33773
Published: 2024-05-14
Description: A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigger a denial of service (DoS) through the parameter "webpage."
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md; https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md
CVE: CVE-2024-33774
Published: 2024-05-14
Description: A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetup_Wizard allows remote authenticated users to trigger a denial of service (DoS) through the parameter "webpage."
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md; https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md
CVE: CVE-2024-33818
Published: 2024-05-14
Description: Globitel KSA SpeechLog v8.1 was discovered to contain an Insecure Direct Object Reference (IDOR) via the userID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: https://medium.com/%40rajput.thakur/insecure-direct-object-references-cve-2024-33818-86785aa8c969; https://medium.com/%40rajput.thakur/insecure-direct-object-references-cve-2024-33818-86785aa8c969
CVE: CVE-2024-33819
Published: 2024-05-14
Description: Globitel KSA SpeechLog v8.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Save Query function.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40rajput.thakur/speechlog-v-8-1-stored-cross-site-scripting-cve-2024-33819-1b1164fb0ecd; https://medium.com/%40rajput.thakur/speechlog-v-8-1-stored-cross-site-scripting-cve-2024-33819-1b1164fb0ecd
CVE: CVE-2024-33873
Published: 2024-05-14
Description: HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5D__scatter_mem in H5Dscatgath.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/; https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
CVE: CVE-2024-33874
Published: 2024-05-14
Description: HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/; https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
CVE: CVE-2024-33875
Published: 2024-05-14
Description: HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5O__layout_encode in H5Olayout.c, resulting in the corruption of the instruction pointer.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-120
References: https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/; https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
CVE: CVE-2024-33876
Published: 2024-05-14
Description: HDF5 Library through 1.14.3 has a heap buffer overflow in H5S__point_deserialize in H5Spoint.c.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-120
References: https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/; https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
CVE: CVE-2024-33877
Published: 2024-05-14
Description: HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5T__conv_struct_opt in H5Tconv.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/; https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
CVE: CVE-2024-33878
Published: 2024-05-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2024-33938
Published: 2024-05-14
Description: Missing Authorization vulnerability in codename065 Sliding Widgets allows Cross-Site Scripting (XSS).This issue affects Sliding Widgets: from n/a through 1.5.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/sliding-widgets/wordpress-sliding-widgets-plugin-1-5-0-broken-access-control-to-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/sliding-widgets/wordpress-sliding-widgets-plugin-1-5-0-broken-access-control-to-xss-vulnerability?_s_id=cve
CVE: CVE-2024-33942
Published: 2024-05-14
Description: Missing Authorization vulnerability in Eric Alli Google Typography.This issue affects Google Typography: from n/a through 1.1.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/google-typography/wordpress-google-typography-plugin-1-1-2-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/google-typography/wordpress-google-typography-plugin-1-1-2-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-33950
Published: 2024-05-14
Description: Administrator Cross Site Scripting (XSS) in Archives Calendar Widget <= 1.0.15 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/archives-calendar-widget/wordpress-archives-calendar-widget-plugin-1-0-15-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/archives-calendar-widget/wordpress-archives-calendar-widget-plugin-1-0-15-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-33951
Published: 2024-05-14
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adam DeHaven Perfect Pullquotes allows Stored XSS.This issue affects Perfect Pullquotes: from n/a through 1.7.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/perfect-pullquotes/wordpress-perfect-pullquotes-plugin-1-7-5-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/perfect-pullquotes/wordpress-perfect-pullquotes-plugin-1-7-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-33952
Published: 2024-05-14
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Tadlock Unique allows Stored XSS.This issue affects Unique: from n/a through 0.3.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/unique/wordpress-unique-theme-0-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/unique/wordpress-unique-theme-0-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-33953
Published: 2024-05-14
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt van Andel Adventure Journal allows Stored XSS.This issue affects Adventure Journal: from n/a through 1.7.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/adventure-journal/wordpress-adventure-journal-theme-1-7-2-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/adventure-journal/wordpress-adventure-journal-theme-1-7-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-33954
Published: 2024-05-14
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Atanas Yonkov Pliska allows Stored XSS.This issue affects Pliska: from n/a through 0.3.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/pliska/wordpress-pliska-theme-0-3-5-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/pliska/wordpress-pliska-theme-0-3-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-33955
Published: 2024-05-14
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme Freesia Freesia Empire allows Stored XSS.This issue affects Freesia Empire: from n/a through 1.4.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/freesia-empire/wordpress-freesia-empire-theme-1-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/freesia-empire/wordpress-freesia-empire-theme-1-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-33956
Published: 2024-05-14
Description: Missing Authorization vulnerability in ThemeLocation Custom WooCommerce Checkout Fields Editor.This issue affects Custom WooCommerce Checkout Fields Editor: from n/a through 1.3.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/add-fields-to-checkout-page-woocommerce/wordpress-custom-woocommerce-checkout-fields-editor-plugin-1-3-0-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/add-fields-to-checkout-page-woocommerce/wordpress-custom-woocommerce-checkout-fields-editor-plugin-1-3-0-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-34070
Published: 2024-05-14
Description: Froxlor is open source server administration software. Prior to 2.1.9, a Stored Blind Cross-Site Scripting (XSS) vulnerability was identified in the Failed Login Attempts Logging Feature of the Froxlor Application. An unauthenticated User can inject malicious scripts in the loginname parameter on the Login attempt, which will then be executed when viewed by the Administrator in the System Logs.  By exploiting this vulnerability, the attacker can perform various malicious actions such as forcing the Administrator to execute actions without their knowledge or consent. For instance, the attacker can force the Administrator to add a new administrator controlled by the attacker, thereby giving the attacker full control over the application. This vulnerability is fixed in 2.1.9.

CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-80
References: https://github.com/froxlor/Froxlor/commit/a862307bce5cdfb1c208b835f3e8faddd23046e6; https://github.com/froxlor/Froxlor/security/advisories/GHSA-x525-54hf-xr53; https://github.com/froxlor/Froxlor/commit/a862307bce5cdfb1c208b835f3e8faddd23046e6
CVE: CVE-2024-34074
Published: 2024-05-14
Description: Frappe is a full-stack web application framework. Prior to 15.26.0 and 14.74.0, the login page accepts redirect argument and it allowed redirect to untrusted external URls. This behaviour can be used by malicious actors for phishing. This vulnerability is fixed in 15.26.0 and 14.74.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/frappe/frappe/commit/65b3c42635038cdff17d3109be6c373bac004829; https://github.com/frappe/frappe/pull/26304; https://github.com/frappe/frappe/security/advisories/GHSA-7g27-q225-j894
CVE: CVE-2024-34077
Published: 2024-05-14
Description: MantisBT (Mantis Bug Tracker) is an open source issue tracker. Insufficient access control in the registration and password reset process allows an attacker to reset another user's password and takeover their account, if the victim has an incomplete request pending. The exploit is only possible while the verification token is valid, i.e for 5 minutes after the confirmation URL sent by e-mail has been opened, and the user did not complete the process by updating their password. A brute-force attack calling account_update.php with increasing user IDs is possible. A successful takeover would grant the attacker full access to the compromised account, including sensitive information and functionalities associated with the account, the extent of which depends on its privileges and the data it has access to. Version 2.26.2 contains a patch for the issue. As a workaround, one may mitigate the risk by reducing the verification token's validity (change the value of the `TOKEN_EXPIRY_AUTHENTICATED` constant in `constants_inc.php`).
CVSS Score: 7.3 (HIGH)
CWE: CWE-305, CWE-620
References: https://github.com/mantisbt/mantisbt/commit/92d11a01b195a1b6717a2f[PII_REDACTED]58ea6d00; https://github.com/mantisbt/mantisbt/security/advisories/GHSA-93x3-m7pw-ppqm; https://mantisbt.org/bugs/view.php?id=34433
CVE: CVE-2024-34079
Published: 2024-05-14
Description: octo-sts is a GitHub App that acts like a Security Token Service (STS) for the Github API. This vulnerability can spike the resource utilization of the STS service, and combined with a significant traffic volume could potentially lead to a denial of service. This vulnerability is fixed in 0.1.0
CVSS Score: 3.7 (LOW)
CWE: CWE-400
References: https://github.com/octo-sts/app/commit/74ba874c017cf973edd6711144cf4399a9fcff57; https://github.com/octo-sts/app/security/advisories/GHSA-75r6-6jg8-pfcq; https://github.com/octo-sts/app/commit/74ba874c017cf973edd6711144cf4399a9fcff57
CVE: CVE-2024-34080
Published: 2024-05-14
Description: MantisBT (Mantis Bug Tracker) is an open source issue tracker. If an issue references a note that belongs to another issue that the user doesn't have access to, then it gets hyperlinked. Clicking on the link gives an access denied error as expected, yet some information remains available via the link, link label, and tooltip. This can result in disclosure of the existence of the note, the note author name, the note creation timestamp, and the issue id the note belongs to. Version 2.26.2 contains a patch for the issue. No known workarounds are available.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/mantisbt/mantisbt/commit/0a50562369d823689c9b946066d1e49d3c2df226; https://github.com/mantisbt/mantisbt/pull/2000; https://github.com/mantisbt/mantisbt/security/advisories/GHSA-99jc-wqmr-ff2q