deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-29063
Published: 2022-09-02
Description: The Solr plugin of Apache OFBiz is configured by default to automatically make a RMI request on localhost, port 1099. In version 18.12.05 and earlier, by hosting a malicious RMI server on localhost, an attacker may exploit this behavior, at server start-up or on a server restart, in order to run arbitrary code. Upgrade to at least 18.12.06 or apply patches at https://issues.apache.org/jira/browse/OFBIZ-12646.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: http://www.openwall.com/lists/oss-security/2022/09/02/6; https://lists.apache.org/thread/ytzrjc16pf357zntwk8tjby13kbx9105; http://www.openwall.com/lists/oss-security/2022/09/02/6
CVE: CVE-2022-29158
Published: 2022-09-02
Description: Apache OFBiz up to version 18.12.05 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles URLs provided by external, unauthenticated users. Upgrade to 18.12.06 or apply patches at https://issues.apache.org/jira/browse/OFBIZ-12599
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333, CWE-1333
References: http://www.openwall.com/lists/oss-security/2022/09/02/5; https://lists.apache.org/thread/7k92rg1o4ql2yw3o0vttkcl2jhq7j928; http://www.openwall.com/lists/oss-security/2022/09/02/5
CVE: CVE-2022-38054
Published: 2022-09-02
Description: In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384, CWE-384
References: http://www.openwall.com/lists/oss-security/2022/09/02/1; https://lists.apache.org/thread/rsd3h89xdp16rg0ltovx3m7q3ypkxsbb; http://www.openwall.com/lists/oss-security/2022/09/02/1
CVE: CVE-2022-38170
Published: 2022-09-02
Description: In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `--daemon` flag which could result in a race condition giving world-writable files in the Airflow home directory and allowing local users to expose arbitrary file contents via the webserver.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-732
References: http://www.openwall.com/lists/oss-security/2022/09/02/12; http://www.openwall.com/lists/oss-security/2022/09/02/3; http://www.openwall.com/lists/oss-security/2022/09/21/2
CVE: CVE-2021-35097
Published: 2022-09-02
Description: Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 7.3 (HIGH)
CWE: CWE-347
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2021-35108
Published: 2022-09-02
Description: Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivity, Snapdragon Mobile
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-754
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2021-35109
Published: 2022-09-02
Description: Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in Snapdragon Connectivity, Snapdragon Mobile
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2021-35113
Published: 2022-09-02
Description: Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS Score: 7.3 (HIGH)
CWE: CWE-347
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2021-35122
Published: 2022-09-02
Description: Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-20
References: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin
CVE: CVE-2021-35132
Published: 2022-09-02
Description: Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS Score: 8.4 (HIGH)
CWE: CWE-1284
References: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin
CVE: CVE-2021-35133
Published: 2022-09-02
Description: Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin
CVE: CVE-2021-35134
Published: 2022-09-02
Description: Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 8.4 (HIGH)
CWE: CWE-131
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2021-35135
Published: 2022-09-02
Description: A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-476
References: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin
CVE: CVE-2021-44718
Published: 2022-09-02
Description: wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-the-Middle (MITM) position. The root cause is that the client module accepts TLS messages that normally are only sent to TLS servers.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-835
References: https://github.com/wolfSSL/wolfssl/releases; https://www.wolfssl.com/docs/security-vulnerabilities/; https://github.com/wolfSSL/wolfssl/releases
CVE: CVE-2022-22059
Published: 2022-09-02
Description: Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 8.4 (HIGH)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2022-22061
Published: 2022-09-02
Description: Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
CVSS Score: 7.8 (HIGH)
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2022-22062
Published: 2022-09-02
Description: An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2022-22067
Published: 2022-09-02
Description: Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2022-22069
Published: 2022-09-02
Description: Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS Score: 7.7 (HIGH)
CWE: CWE-312
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2022-22070
Published: 2022-09-02
Description: Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2022-22080
Published: 2022-09-02
Description: Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2022-22096
Published: 2022-09-02
Description: Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Snapdragon Mobile
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin
CVE: CVE-2022-22097
Published: 2022-09-02
Description: Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapdragon Consumer IOT
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin
CVE: CVE-2022-22098
Published: 2022-09-02
Description: Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon Auto
CVSS Score: 8.4 (HIGH)
CWE: CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin
CVE: CVE-2022-22099
Published: 2022-09-02
Description: Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto
CVSS Score: 8.4 (HIGH)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2022-22100
Published: 2022-09-02
Description: Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin
CVE: CVE-2022-22101
Published: 2022-09-02
Description: Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-400
References: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin
CVE: CVE-2022-22102
Published: 2022-09-02
Description: Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto
CVSS Score: 8.4 (HIGH)
CWE: CWE-704
References: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin
CVE: CVE-2022-22104
Published: 2022-09-02
Description: Memory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto
CVSS Score: 8.4 (HIGH)
CWE: CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin
CVE: CVE-2022-22106
Published: 2022-09-02
Description: Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto
CVSS Score: 8.4 (HIGH)
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2022-25657
Published: 2022-09-02
Description: Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS Score: 7.3 (HIGH)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin
CVE: CVE-2022-25658
Published: 2022-09-02
Description: Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 7.3 (HIGH)
CWE: CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin
CVE: CVE-2022-25659
Published: 2022-09-02
Description: Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 7.3 (HIGH)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin
CVE: CVE-2022-25668
Published: 2022-09-02
Description: Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 7.3 (HIGH)
CWE: CWE-415
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2022-25680
Published: 2022-09-02
Description: Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto
CVSS Score: 8.4 (HIGH)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin
CVE: CVE-2022-37458
Published: 2022-09-02
Description: Discourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an unlimited rate.
CVSS Score: 7.2 (HIGH)
References: https://github.com/discourse/discourse/security/advisories/GHSA-q2rg-m477-8wg7; https://github.com/discourse/discourse/tags; https://www.enisa.europa.eu/topics/threat-risk-management/vulnerability-disclosure
CVE: CVE-2022-36076
Published: 2022-09-02
Description: NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. Due to an unnecessarily strict conditional in the code handling the first step of the SSO process, the pre-existing logic that added (and later checked) a nonce was inadvertently rendered opt-in instead of opt-out. This re-exposed a vulnerability in that a specially crafted Man-in-the-Middle (MITM) attack could theoretically take over another user account during the single sign-on process. The issue has been fully patched in version 1.17.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://blogs.opera.com/security/2022/03/bug-bounty-adventures-a-nodebb-0-day/; https://github.com/NodeBB/NodeBB/commit/a2400f6baff44cb2996487bcd0cc6e2acc74b3d4; https://github.com/NodeBB/NodeBB/security/advisories/GHSA-xmgg-fx9p-prq6
CVE: CVE-2022-36078
Published: 2022-09-02
Description: Binary provides encoding/decoding in Borsh and other formats. The vulnerability is a memory allocation vulnerability that can be exploited to allocate slices in memory with (arbitrary) excessive size value, which can either exhaust available memory or crash the whole program. When using `github.com/gagliardetto/binary` to parse unchecked (or wrong type of) data from untrusted sources of input (e.g. the blockchain) into slices, it's possible to allocate memory with excessive size. When `dec.Decode(&val)` method is used to parse data into a structure that is or contains slices of values, the length of the slice was previously read directly from the data itself without any checks on the size of it, and then a slice was allocated. This could lead to an overflow and an allocation of memory with excessive size value. Users should upgrade to `v0.7.1` or higher. A workaround is not to rely on the `dec.Decode(&val)` function to parse the data, but to use a custom `UnmarshalWithDecoder()` method that reads and checks the length of any slice.
CVSS Score: 8.8 (HIGH)
CWE: CWE-789, CWE-1284
References: https://github.com/gagliardetto/binary/pull/7; https://github.com/gagliardetto/binary/releases/tag/v0.7.1; https://github.com/gagliardetto/binary/security/advisories/GHSA-4p6f-m4f9-ch88
CVE: CVE-2020-22669
Published: 2022-09-02
Description: Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability. Attackers can use the comment characters and variable assignments in the SQL syntax to bypass Modsecurity WAF protection and implement SQL injection attacks on Web applications.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1727; https://github.com/coreruleset/coreruleset/pull/1793; https://lists.debian.org/debian-lts-announce/2023/01/msg00033.html
CVE: CVE-2021-27693
Published: 2022-09-02
Description: Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://github.com/sanluan/PublicCMS/commit/0f4c4872914b6a71305e121a7d9a19c07cde0338; https://github.com/sanluan/PublicCMS/issues/51; https://github.com/sanluan/PublicCMS/commit/0f4c4872914b6a71305e121a7d9a19c07cde0338
CVE: CVE-2022-34369
Published: 2022-09-02
Description: Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3 , contain an insertion of sensitive information in log files vulnerability. A remote unprivileged attacker could potentially exploit this vulnerability, leading to exposure of this sensitive data.
CVSS Score: 8.1 (HIGH)
CWE: CWE-532, CWE-532
References: https://www.dell.com/support/kbdoc/en-us/000202171/dsa-2022-172-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000202171/dsa-2022-172-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE: CVE-2022-34371
Published: 2022-09-02
Description: Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerability. A malicious unprivileged network attacker could potentially exploit this vulnerability, leading to full system compromise.
CVSS Score: 8.1 (HIGH)
CWE: CWE-522
References: https://www.dell.com/support/kbdoc/en-us/000202171/dsa-2022-172-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000202171/dsa-2022-172-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE: CVE-2022-34378
Published: 2022-09-02
Description: Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3, contain a relative path traversal vulnerability. A low privileged local attacker could potentially exploit this vulnerability, leading to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-23, CWE-22
References: https://www.dell.com/support/kbdoc/en-us/000202171/dsa-2022-172-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000202171/dsa-2022-172-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE: CVE-2022-34382
Published: 2022-09-02
Description: Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vulnerability in the custom catalog configuration. A local malicious user may potentially exploit this vulnerability in order to elevate their privileges.
CVSS Score: 7.8 (HIGH)
References: https://www.dell.com/support/kbdoc/000202198; https://www.dell.com/support/kbdoc/000202198
CVE: CVE-2022-36071
Published: 2022-09-02
Description: SFTPGo is configurable SFTP server with optional HTTP/S, FTP/S and WebDAV support. SFTPGo WebAdmin and WebClient support login using TOTP (Time-based One Time Passwords) as a secondary authentication factor. Because TOTPs are often configured on mobile devices that can be lost, stolen or damaged, SFTPGo also supports recovery codes. These are a set of one time use codes that can be used instead of the TOTP. In SFTPGo versions from version 2.2.0 to 2.3.3 recovery codes can be generated before enabling two-factor authentication. An attacker who knows the user's password could potentially generate some recovery codes and then bypass two-factor authentication after it is enabled on the account at a later time. This issue has been fixed in version 2.3.4. Recovery codes can now only be generated after enabling two-factor authentication and are deleted after disabling it.
CVSS Score: 8.3 (HIGH)
CWE: CWE-287, CWE-916
References: https://github.com/drakkan/sftpgo/issues/965; https://github.com/drakkan/sftpgo/security/advisories/GHSA-54qx-8p8w-xhg8; https://github.com/drakkan/sftpgo/issues/965
CVE: CVE-2022-3065
Published: 2022-09-02
Description: Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://github.com/jgraph/drawio/commit/59887e45b36f06c8dd4919a32bacd994d9f084da; https://huntr.dev/bounties/5f3bc4b6-1d53-46b7-a23d-70f5faaf0c76; https://github.com/jgraph/drawio/commit/59887e45b36f06c8dd4919a32bacd994d9f084da