deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-22412
Published: 2024-03-18
Description: ClickHouse is an open-source column-oriented database management system. A bug exists in the cloud ClickHouse offering prior to version 24.0.2.54535 and in github.com/clickhouse/clickhouse version 23.1. Query caching bypasses the role based access controls and the policies being enforced on roles. In affected versions, the query cache only respects separate users, however this is not documented and not expected behavior. People relying on ClickHouse roles can have their access control lists bypassed if they are using query caching. Attackers who have control of a role could guess queries and see data they shouldn't have access to. Version 24.1 of ClickHouse and version 24.0.2.54535 of ClickHouse Cloud contain a patch for this issue. Based on the documentation, role based access control should be enforced regardless if query caching is enabled or not.
CVSS Score: 2.4 (LOW)
CWE: CWE-863
References: https://github.com/ClickHouse/ClickHouse/blob/bd17ee769e337906c4b1f404861e042ad72fcbfc/src/Interpreters/executeQuery.cpp#L1013-L1015; https://github.com/ClickHouse/ClickHouse/pull/58611; https://github.com/ClickHouse/ClickHouse/security/advisories/GHSA-45h5-f7g3-gr8r
CVE: CVE-2024-23333
Published: 2024-03-18
Description: LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LDAP directory. LAM's log configuration allows to specify arbitrary paths for log files. Prior to version 8.7, an attacker could exploit this by creating a PHP file and cause LAM to log some PHP code to this file. When the file is then accessed via web the code would be executed. The issue is mitigated by the following: An attacker needs to know LAM's master configuration password to be able to change the main settings; and the webserver needs write access to a directory that is accessible via web. LAM itself does not provide any such directories. The issue has been fixed in 8.7. As a workaround, limit access to LAM configuration pages to authorized users.

CVSS Score: 7.9 (HIGH)
CWE: CWE-74
References: https://github.com/LDAPAccountManager/lam/releases/tag/8.7; https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-fm9w-7m7v-wxqv; https://github.com/LDAPAccountManager/lam/releases/tag/8.7
CVE: CVE-2024-2604
Published: 2024-03-18
Description: A vulnerability was found in SourceCodester File Manager App 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/update-file.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257182 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20File%20Manager%20App/Arbitrary%20File%20Upload%20-%20update-file.php.md; https://vuldb.com/?ctiid.257182; https://vuldb.com/?id.257182
CVE: CVE-2024-24578
Published: 2024-03-18
Description: RaspberryMatic is an open-source operating system for HomeMatic internet-of-things devices. RaspberryMatic / OCCU prior to version 3.75.6.20240316 contains a unauthenticated remote code execution (RCE) vulnerability, caused by multiple issues within the Java based `HMIPServer.jar` component. RaspberryMatric includes a Java based `HMIPServer`, that can be accessed through URLs starting with `/pages/jpages`. The `FirmwareController` class does however not perform any session id checks, thus this feature can be accessed without a valid session. Due to this issue, attackers can gain remote code execution as root user, allowing a full system compromise. Version 3.75.6.20240316 contains a patch.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-23, CWE-306
References: https://github.com/jens-maus/RaspberryMatic/security/advisories/GHSA-q967-q4j8-637h; https://github.com/jens-maus/RaspberryMatic/security/advisories/GHSA-q967-q4j8-637h
CVE: CVE-2024-28237
Published: 2024-03-18
Description: OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through the "Test" button included in the web interface will execute JavaScript code in the victims browser when attempting to render the snapshot image. An attacker who successfully talked a victim with admin rights into performing a snapshot test with such a crafted URL could use this to retrieve or modify sensitive configuration settings, interrupt prints or otherwise interact with the OctoPrint instance in a malicious way. The vulnerability is patched in version 1.10.0rc3. OctoPrint administrators are strongly advised to thoroughly vet who has admin access to their installation and what settings they modify based on instructions by strangers.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/OctoPrint/OctoPrint/commit/779894c1bc6478332d14bc9ed1006df1354eb517; https://github.com/OctoPrint/OctoPrint/security/advisories/GHSA-x7mf-wrh9-r76c; https://github.com/OctoPrint/OctoPrint/commit/779894c1bc6478332d14bc9ed1006df1354eb517
CVE: CVE-2024-28248
Published: 2024-03-18
Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.13.9 and prior to versions 1.13.13, 1.14.8, and 1.15.2, Cilium's HTTP policies are not consistently applied to all traffic in the scope of the policies, leading to HTTP traffic being incorrectly and intermittently forwarded when it should be dropped. This issue has been patched in Cilium 1.15.2, 1.14.8, and 1.13.13. There are no known workarounds for this issue.
CVSS Score: 7.2 (HIGH)
CWE: CWE-693
References: https://docs.cilium.io/en/stable/security/policy/language/#http; https://github.com/cilium/cilium/releases/tag/v1.13.13; https://github.com/cilium/cilium/releases/tag/v1.14.8
CVE: CVE-2024-28249
Published: 2024-03-18
Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.13.13, 1.14.8, and 1.15.2, in Cilium clusters with IPsec enabled and traffic matching Layer 7 policies, IPsec-eligible traffic between a node's Envoy proxy and pods on other nodes is sent unencrypted and IPsec-eligible traffic between a node's DNS proxy and pods on other nodes is sent unencrypted. This issue has been resolved in Cilium 1.15.2, 1.14.8, and 1.13.13. There is no known workaround for this issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-311, CWE-319
References: https://github.com/cilium/cilium/releases/tag/v1.13.13; https://github.com/cilium/cilium/releases/tag/v1.14.8; https://github.com/cilium/cilium/releases/tag/v1.15.2
CVE: CVE-2024-28250
Published: 2024-03-18
Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.8 and 1.15.2, In Cilium clusters with WireGuard enabled and traffic matching Layer 7 policies Wireguard-eligible traffic that is sent between a node's Envoy proxy and pods on other nodes is sent unencrypted and Wireguard-eligible traffic that is sent between a node's DNS proxy and pods on other nodes is sent unencrypted. This issue has been resolved in Cilium 1.14.8 and 1.15.2 in in native routing mode (`routingMode=native`) and in Cilium 1.14.4 in tunneling mode (`routingMode=tunnel`). Not that in tunneling mode, `encryption.wireguard.encapsulate` must be set to `true`. There is no known workaround for this issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-311, CWE-319
References: https://github.com/cilium/cilium/releases/tag/v1.13.13; https://github.com/cilium/cilium/releases/tag/v1.14.8; https://github.com/cilium/cilium/releases/tag/v1.15.2
CVE: CVE-2024-28855
Published: 2024-03-18
Description: ZITADEL, open source authentication management software, uses Go templates to render the login UI. Due to a improper use of the `text/template` instead of the `html/template` package, the Login UI did not sanitize input parameters prior to versions 2.47.3, 2.46.1, 2.45.1, 2.44.3, 2.43.9, 2.42.15, and 2.41.15. An attacker could create a malicious link, where he injected code which would be rendered as part of the login screen. While it was possible to inject HTML including JavaScript, the execution of such scripts would be prevented by the Content Security Policy. Versions 2.47.3, 2.46.1, 2.45.1, 2.44.3, 2.43.9, 2.42.15, and 2.41.15 contain a patch for this issue. No known workarounds are available.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-79
References: https://github.com/zitadel/zitadel/releases/tag/v2.41.15; https://github.com/zitadel/zitadel/releases/tag/v2.42.15; https://github.com/zitadel/zitadel/releases/tag/v2.43.9
CVE: CVE-2024-28864
Published: 2024-03-18
Description: SecureProps is a PHP library designed to simplify the encryption and decryption of property data in objects. A vulnerability in SecureProps version 1.2.0 and 1.2.1 involves a regex failing to detect tags during decryption of encrypted data. This occurs when the encrypted data has been encoded with `NullEncoder` and passed to `TagAwareCipher`, and contains special characters such as `\n`. As a result, the decryption process is skipped since the tags are not detected. This causes the encrypted data to be returned in plain format.  The vulnerability affects users who implement `TagAwareCipher` with any base cipher that has `NullEncoder` (not default). The patch for the issue has been released. Users are advised to update to version 1.2.2. As a workaround, one may use the default `Base64Encoder` with the base cipher decorated with `TagAwareCipher` to prevent special characters in the encrypted string from interfering with regex tag detection logic.  This workaround is safe but may involve double encoding since `TagAwareCipher` uses `NullEncoder` by default.
CVSS Score: 2.6 (LOW)
CWE: CWE-1333
References: https://github.com/IlicMiljan/Secure-Props/commit/ab7b561040cd37fda3dbf9a6cab01fefcaa16627; https://github.com/IlicMiljan/Secure-Props/issues/20; https://github.com/IlicMiljan/Secure-Props/pull/21
CVE: CVE-2024-28865
Published: 2024-03-18
Description: django-wiki is a wiki system for Django. Installations of django-wiki prior to version 0.10.1 are vulnerable to maliciously crafted article content that can cause severe use of server CPU through a regular expression loop. Version 0.10.1 fixes this issue. As a workaround, close off access to create and edit articles by anonymous users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/django-wiki/django-wiki/commit/8e280fd6c0bd27ce847c67b2d216c6cbf920f88c; https://github.com/django-wiki/django-wiki/security/advisories/GHSA-wj85-w4f4-xh8h; https://github.com/django-wiki/django-wiki/commit/8e280fd6c0bd27ce847c67b2d216c6cbf920f88c
CVE: CVE-2023-40275
Published: 2024-03-19
Description: An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to _common/search/searchByAjax/patientslistShow.jsp.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://github.com/BugBountyHunterCVE/CVE-2023-40275/blob/main/CVE-2023-40275_Unauthenticated-Patient-List-Retrieval_OpenClinic-GA_5.247.01_Report.md; https://sourceforge.net/projects/open-clinic/; https://github.com/BugBountyHunterCVE/CVE-2023-40275/blob/main/CVE-2023-40275_Unauthenticated-Patient-List-Retrieval_OpenClinic-GA_5.247.01_Report.md
CVE: CVE-2023-40276
Published: 2024-03-19
Description: An issue was discovered in OpenClinic GA 5.247.01. An Unauthenticated File Download vulnerability has been discovered in pharmacy/exportFile.jsp.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://github.com/BugBountyHunterCVE/CVE-2023-40276/blob/main/CVE-2023-40276_Unauthenticated-File-Download_OpenClinic-GA_5.247.01_Report.md; https://sourceforge.net/projects/open-clinic/; https://github.com/BugBountyHunterCVE/CVE-2023-40276/blob/main/CVE-2023-40276_Unauthenticated-File-Download_OpenClinic-GA_5.247.01_Report.md
CVE: CVE-2023-40277
Published: 2024-03-19
Description: An issue was discovered in OpenClinic GA 5.247.01. A Reflected Cross-Site Scripting (XSS) vulnerability has been discovered in the login.jsp message parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/BugBountyHunterCVE/CVE-2023-40277/blob/main/CVE-2023-40277_Reflected-XSS_OpenClinic-GA_5.247.01_Report.md; https://sourceforge.net/projects/open-clinic/; https://github.com/BugBountyHunterCVE/CVE-2023-40277/blob/main/CVE-2023-40277_Reflected-XSS_OpenClinic-GA_5.247.01_Report.md
CVE: CVE-2023-40280
Published: 2024-03-19
Description: An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to popup.jsp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/BugBountyHunterCVE/CVE-2023-40280/blob/main/CVE-2023-40280_Authenticated-Directory-Path-Traversal_OpenClinic-GA_5.247.01_Report.md; https://sourceforge.net/projects/open-clinic/; https://github.com/BugBountyHunterCVE/CVE-2023-40280/blob/main/CVE-2023-40280_Authenticated-Directory-Path-Traversal_OpenClinic-GA_5.247.01_Report.md
CVE: CVE-2024-2620
Published: 2024-03-19
Description: A vulnerability has been found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected by this vulnerability is an unknown functionality of the file api/client/down_file.php. The manipulation of the argument uuid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257197 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-down_file.pdf; https://vuldb.com/?ctiid.257197; https://vuldb.com/?id.257197
CVE: CVE-2024-2621
Published: 2024-03-19
Description: A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected by this issue is some unknown functionality of the file api/client/user/pwd_update.php. The manipulation of the argument uuid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-257198 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-pwd_update.php.pdf; https://vuldb.com/?ctiid.257198; https://vuldb.com/?id.257198
CVE: CVE-2024-2622
Published: 2024-03-19
Description: A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318. It has been classified as critical. This affects an unknown part of the file /api/client/editemedia.php. The manipulation of the argument number/enterprise_uuid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257199.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-editemedia.pdf; https://vuldb.com/?ctiid.257199; https://vuldb.com/?id.257199
CVE: CVE-2024-21503
Published: 2024-03-19
Description: Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.Exploiting this vulnerability is possible when running Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333, CWE-75
References: https://github.com/psf/black/commit/f[PII_REDACTED]8d212b8965a8993cee8bedf5fe9b8; https://github.com/psf/black/releases/tag/24.3.0; https://security.snyk.io/vuln/SNYK-PYTHON-BLACK-6256273
CVE: CVE-2024-21504
Published: 2024-03-19
Description: Versions of the package livewire/livewire from 3.3.5 and before 3.4.9 are vulnerable to Cross-site Scripting (XSS) when a page uses [Url] for a property. An attacker can inject HTML code in the context of the user's browser session by crafting a malicious link and convincing the user to click on it.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/livewire/livewire/commit/c65b3f0798ab2c9338213ede3588c3cdf4e6fcc0; https://github.com/livewire/livewire/pull/8117; https://github.com/livewire/livewire/releases/tag/v3.4.9
CVE: CVE-2024-22017
Published: 2024-03-19
Description: setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid().
This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid().
This vulnerability affects all users using version greater or equal than Node.js 18.18.0, Node.js 20.4.0 and Node.js 21.
CVSS Score: 7.3 (HIGH)
CWE: CWE-250
References: http://www.openwall.com/lists/oss-security/2024/03/11/1; https://hackerone.com/reports/2170226; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-22025
Published: 2024-03-19
Description: A vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack through resource exhaustion when using the fetch() function to retrieve content from an untrusted URL.
The vulnerability stems from the fact that the fetch() function in Node.js always decodes Brotli, making it possible for an attacker to cause resource exhaustion when fetching content from an untrusted URL.
An attacker controlling the URL passed into fetch() can exploit this vulnerability to exhaust memory, potentially leading to process termination, depending on the system configuration.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-404
References: https://hackerone.com/reports/2284065; https://lists.debian.org/debian-lts-announce/2024/03/msg00029.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-26369
Published: 2024-03-19
Description: An issue in the HistoryQosPolicy component of FastDDS v2.12.x, v2.11.x, v2.10.x, and v2.6.x leads to a SIGABRT (signal abort) upon receiving DataWriter's data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/eProsima/Fast-DDS/issues/4365; https://github.com/eProsima/Fast-DDS/pull/4375; https://github.com/eProsima/Fast-DDS/issues/4365
CVE: CVE-2024-28446
Published: 2024-03-19
Description: Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lan_netmask parameter at /apply.cgi.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-121
References: https://github.com/AdamRitz/lbtvul/blob/main/t300mini.md; https://github.com/AdamRitz/lbtvul/blob/main/t300mini.md
CVE: CVE-2024-28447
Published: 2024-03-19
Description: Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lan_ipaddr parameters at /apply.cgi.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121
References: https://github.com/AdamRitz/lbtvul/blob/main/t300mini.md; https://github.com/AdamRitz/lbtvul/blob/main/t300mini.md
CVE: CVE-2024-0054
Published: 2024-03-19
Description: Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs local_list.cgi, create_overlay.cgi and irissetup.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS
versions for the highlighted flaw. Please refer to the Axis security advisory
for more information and solution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-155
References: https://www.axis.com/dam/public/76/f3/1d/cve-2024-0054-en-US-432116.pdf; https://www.axis.com/dam/public/76/f3/1d/cve-2024-0054-en-US-432116.pdf
CVE: CVE-2024-0055
Published: 2024-03-19
Description: Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-155
References: https://www.axis.com/dam/public/c4/00/c5/cve-2024-0055-en-US-432117.pdf; https://www.axis.com/dam/public/c4/00/c5/cve-2024-0055-en-US-432117.pdf
CVE: CVE-2024-24042
Published: 2024-03-19
Description: Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://gist.github.com/apple502j/[PII_REDACTED]5fe1a6708309ce934e4ed; https://github.com/Devan-Kerman/ARRP/commit/7ea80db462c8bf66a0565e84fa49c1f2ecb9287b; https://gist.github.com/apple502j/[PII_REDACTED]5fe1a6708309ce934e4ed
CVE: CVE-2024-24043
Published: 2024-03-19
Description: Directory Traversal vulnerability in Speedy11CZ MCRPX v.1.4.0 and before allows a local attacker to execute arbitrary code via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://gist.github.com/apple502j/[PII_REDACTED]5fe1a6708309ce934e4ed; https://github.com/Speedy11CZ/mcrpx/commit/02ca6d1fd[PII_REDACTED]46766ac9d04d20db35b8e; https://github.com/Speedy11CZ/mcrpx/releases/tag/v1.4.1
CVE: CVE-2024-22453
Published: 2024-03-19
Description: Dell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability. A local high privileged attacker could potentially exploit this vulnerability to write to otherwise unauthorized memory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-122, CWE-787
References: https://www.dell.com/support/kbdoc/en-us/000223209/dsa-2024-105-security-update-for-dell-poweredge-server-bios-for-a-heap-based-buffer-overflow-vulnerability; https://www.dell.com/support/kbdoc/en-us/000223209/dsa-2024-105-security-update-for-dell-poweredge-server-bios-for-a-heap-based-buffer-overflow-vulnerability
CVE: CVE-2024-25942
Published: 2024-03-19
Description: Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20, CWE-787
References: https://www.dell.com/support/kbdoc/en-us/000223210/dsa-2024-104-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability; https://www.dell.com/support/kbdoc/en-us/000223210/dsa-2024-104-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability
CVE: CVE-2024-24683
Published: 2024-03-19
Description: Improper Input Validation vulnerability in Apache Hop Engine.This issue affects Apache Hop Engine: before 2.8.0.

Users are recommended to upgrade to version 2.8.0, which fixes the issue.

When Hop Server writes links to the PrepareExecutionPipelineServlet page one of the parameters provided to the user was not properly escaped.
The variable not properly escaped is the "id", which is not directly accessible by users creating pipelines making the risk of exploiting this low.

This issue only affects users using the Hop Server component and does not directly affect the client.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2024/03/18/1; https://lists.apache.org/thread/ts203zssv1n9qth1wdlhk2bhos3vcq6t; http://www.openwall.com/lists/oss-security/2024/03/18/1