deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-20001
Published: 2022-03-14
Description: fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary code execution. git repositories can contain per-repository configuration that change the behavior of git, including running arbitrary commands. When using the default configuration of fish, changing to a directory automatically runs `git` commands in order to display information about the current repository in the prompt. If an attacker can convince a user to change their current directory into one controlled by the attacker, such as on a shared file system or extracted archive, fish will run arbitrary commands under the attacker's control. This problem has been fixed in fish 3.4.0. Note that running git in these directories, including using the git tab completion, remains a potential trigger for this issue. As a workaround, remove the `fish_git_prompt` function from the prompt.
CVSS Score: 7.8 (HIGH)
CWE: CWE-74, CWE-427
References: https://github.com/fish-shell/fish-shell/pull/8589; https://github.com/fish-shell/fish-shell/releases/tag/3.4.0; https://github.com/fish-shell/fish-shell/security/advisories/GHSA-pj5f-6vxj-f5mq
CVE: CVE-2022-24578
Published: 2022-03-14
Description: GPAC 1.0.1 is affected by a heap-based buffer overflow in SFS_AddString () at bifs/script_dec.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://huntr.dev/bounties/1691cca3-ab54-4259-856b-751be2395b11/; https://www.debian.org/security/2023/dsa-5411; https://huntr.dev/bounties/1691cca3-ab54-4259-856b-751be2395b11/
CVE: CVE-2022-24733
Published: 2022-03-14
Description: Sylius is an open source eCommerce platform. Prior to versions 1.9.10, 1.10.11, and 1.11.2, it is possible for a page controlled by an attacker to load the website within an iframe. This will enable a clickjacking attack, in which the attacker's page overlays the target application's interface with a different interface provided by the attacker. The issue is fixed in versions 1.9.10, 1.10.11, and 1.11.2. A workaround is available. Every response from app should have an X-Frame-Options header set to: ``sameorigin``. To achieve that, add a new `subscriber` in the app.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1021
References: https://github.com/Sylius/Sylius/releases/tag/v1.10.11; https://github.com/Sylius/Sylius/releases/tag/v1.11.2; https://github.com/Sylius/Sylius/releases/tag/v1.9.10
CVE: CVE-2022-24742
Published: 2022-03-14
Description: Sylius is an open source eCommerce platform. Prior to versions 1.9.10, 1.10.11, and 1.11.2, any other user can view the data if browser tab remains unclosed after log out. The issue is fixed in versions 1.9.10, 1.10.11, and 1.11.2. A workaround is available. The application must strictly redirect to login page even browser back button is pressed. Another possibility is to set more strict cache policies for restricted content.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200, CWE-668
References: https://github.com/Sylius/Sylius/releases/tag/v1.10.11; https://github.com/Sylius/Sylius/releases/tag/v1.11.2; https://github.com/Sylius/Sylius/releases/tag/v1.9.10
CVE: CVE-2022-0943
Published: 2022-03-14
Description: Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://github.com/vim/vim/commit/5c68617d395f9d7b824f68475b24ce3e38d653a3
CVE: CVE-2022-24743
Published: 2022-03-14
Description: Sylius is an open source eCommerce platform. Prior to versions 1.10.11 and 1.11.2, the reset password token was not set to null after the password was changed. The same token could be used several times, which could result in leak of the existing token and unauthorized password change. The issue is fixed in versions 1.10.11 and 1.11.2. As a workaround, overwrite the `Sylius\Bundle\ApiBundle\CommandHandler\ResetPasswordHandler` class with code provided by the maintainers and register it in a container. More information about this workaround is available in the GitHub Security Advisory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-613, CWE-613
References: https://github.com/Sylius/Sylius/releases/tag/v1.10.11; https://github.com/Sylius/Sylius/releases/tag/v1.11.2; https://github.com/Sylius/Sylius/security/advisories/GHSA-mf3v-f2qq-pf9g
CVE: CVE-2022-24749
Published: 2022-03-14
Description: Sylius is an open source eCommerce platform. In versions prior to 1.9.10, 1.10.11, and 1.11.2, it is possible to upload an SVG file containing cross-site scripting (XSS) code in the admin panel. In order to perform a XSS attack, the file itself has to be open in a new card or loaded outside of the IMG tag. The problem applies both to the files opened on the admin panel and shop pages. The issue is fixed in versions 1.9.10, 1.10.11, and 1.11.2. As a workaround, require a library that adds on-upload file sanitization and overwrite the service before writing the file to the filesystem. The GitHub Security Advisory contains more specific information about the workaround.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-434, CWE-79
References: https://github.com/Sylius/Sylius/releases/tag/v1.10.11; https://github.com/Sylius/Sylius/releases/tag/v1.11.2; https://github.com/Sylius/Sylius/releases/tag/v1.9.10
CVE: CVE-2021-42387
Published: 2022-03-14
Description: Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the upper bounds of the source of the copy operation.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms; https://lists.debian.org/debian-lts-announce/2022/11/msg00002.html; https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms
CVE: CVE-2021-42388
Published: 2022-03-14
Description: Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the lower bounds of the source of the copy operation.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms; https://lists.debian.org/debian-lts-announce/2022/11/msg00002.html; https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms
CVE: CVE-2021-42389
Published: 2022-03-14
Description: Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms; https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms
CVE: CVE-2021-42390
Published: 2022-03-14
Description: Divide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms; https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms
CVE: CVE-2021-42391
Published: 2022-03-14
Description: Divide-by-zero in Clickhouse's Gorilla compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms; https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms
CVE: CVE-2021-43304
Published: 2022-03-14
Description: Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms; https://lists.debian.org/debian-lts-announce/2022/11/msg00002.html; https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms
CVE: CVE-2021-43305
Published: 2022-03-14
Description: Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits. This issue is very similar to CVE-2021-43304, but the vulnerable copy operation is in a different wildCopy call.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms; https://lists.debian.org/debian-lts-announce/2022/11/msg00002.html; https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms
CVE: CVE-2022-24740
Published: 2022-03-14
Description: Volto is a ReactJS-based frontend for the Plone Content Management System. Between versions 14.0.0-alpha.5 and 15.0.0-alpha.0, a user could have their authentication cookie replaced with an authentication cookie from another user, effectively giving them control of the other user's account and privileges. This occurs when using an outdated version of the `react-cookie` library and a server is under high load. A proof of concept does not currently exist, but it is possible for this issue to occur in the wild. The patch and fix is present in Volto 15.0.0-alpha.0. As a workaround, one may manually upgrade the `react-cookie` package to 4.1.1 and then override all Volto components that use this library.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://github.com/plone/volto/pull/3051; https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67; https://github.com/plone/volto/pull/3051
CVE: CVE-2022-24762
Published: 2022-03-14
Description: sysend.js is a library that allows a user to send messages between pages that are open in the same browser. Users that use cross-origin communication may have their communications intercepted. Impact is limited by the communication occurring in the same browser. This issue has been patched in sysend.js version 1.10.0. The only currently known workaround is to avoid sending communications that a user does not want to have intercepted via sysend messages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-346
References: https://github.com/jcubic/sysend.js/commit/a24f4b776fb18191ae0f7e3d90c2c7bec459431a; https://github.com/jcubic/sysend.js/issues/33; https://github.com/jcubic/sysend.js/releases/tag/1.10.0
CVE: CVE-2022-0944
Published: 2022-03-15
Description: Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.
CVSS Score: 7.2 (HIGH)
CWE: CWE-1336, CWE-94
References: https://github.com/sqlpad/sqlpad/commit/3f92be386c6cd3e5eba75d85f0700d3ef54daf73; https://huntr.dev/bounties/46630727-d923-4444-a421-537ecd63e7fb; https://github.com/sqlpad/sqlpad/commit/3f92be386c6cd3e5eba75d85f0700d3ef54daf73
CVE: CVE-2022-0945
Published: 2022-03-15
Description: Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-434, CWE-79
References: https://github.com/star7th/showdoc/commit/ba45d19e1d77a7eea866dab30eff5da552694891; https://huntr.dev/bounties/8702e2bf-4af2-4391-b651-c8c89e7d089e; https://github.com/star7th/showdoc/commit/ba45d19e1d77a7eea866dab30eff5da552694891
CVE: CVE-2022-27193
Published: 2022-03-15
Description: CVRF-CSAF-Converter before 1.0.0-rc2 resolves XML External Entities (XXE). This leads to the inclusion of arbitrary (local) file content into the generated output document. An attacker can exploit this to disclose information from the system running the converter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-611
References: https://github.com/csaf-tools/CVRF-CSAF-Converter/releases/tag/1.0.0-rc2; https://github.com/csaf-tools/CVRF-CSAF-Converter/releases/tag/1.0.0-rc2
CVE: CVE-2022-0950
Published: 2022-03-15
Description: Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://github.com/star7th/showdoc/commit/237ac6d43bf3728bf3587c486a23b4a48ea7acb3; https://huntr.dev/bounties/acc23996-bd57-448f-9eb4-05a8a046c2dc; https://github.com/star7th/showdoc/commit/237ac6d43bf3728bf3587c486a23b4a48ea7acb3
CVE: CVE-2022-0951
Published: 2022-03-15
Description: File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-434, CWE-79
References: https://github.com/star7th/showdoc/commit/237ac6d43bf3728bf3587c486a23b4a48ea7acb3; https://huntr.dev/bounties/b3a983a3-17f9-4aa8-92d7-8a0c92a93932; https://github.com/star7th/showdoc/commit/237ac6d43bf3728bf3587c486a23b4a48ea7acb3
CVE: CVE-2022-0893
Published: 2022-03-15
Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9; https://huntr.dev/bounties/2859a1c1-941c-4efc-a3ad-a0657c7a77e9; https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9
CVE: CVE-2022-0894
Published: 2022-03-15
Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9; https://huntr.dev/bounties/18f8e85e-3cbf-4915-b649-8cffe99daa95; https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9
CVE: CVE-2021-45010
Published: 2022-03-15
Description: A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attackers (with valid user accounts) to upload malicious PHP files to the webroot, leading to code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/166330/Tiny-File-Manager-2.4.6-Shell-Upload.html; https://febin0x4e4a.wordpress.com/2022/01/23/tiny-file-manager-authenticated-rce/; https://github.com/febinrev/tinyfilemanager-2.4.3-exploit/raw/main/exploit.sh
CVE: CVE-2022-0954
Published: 2022-03-15
Description: Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub repository microweber/microweber prior to 1.2.11.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/microweber/microweber/commit/955471c27e671c49e4b012e3b120b004082ac3f7; https://huntr.dev/bounties/b99517c0-37fc-4efa-ab1a-3591da7f4d26; https://github.com/microweber/microweber/commit/955471c27e671c49e4b012e3b120b004082ac3f7
CVE: CVE-2022-0956
Published: 2022-03-15
Description: Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/star7th/showdoc/commit/56e450c3adf75c707500d7231a78c9fc894c7f13; https://huntr.dev/bounties/5b0e3f02-309f-4b59-8020-d7ac0f1999f2; https://github.com/star7th/showdoc/commit/56e450c3adf75c707500d7231a78c9fc894c7f13
CVE: CVE-2022-0957
Published: 2022-03-15
Description: Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/star7th/showdoc/commit/d1c9ed0d77ea5d56f09be0c492361dca8af745bb; https://huntr.dev/bounties/b4918d45-b635-40db-bb4b-34035e1aca21; https://github.com/star7th/showdoc/commit/d1c9ed0d77ea5d56f09be0c492361dca8af745bb
CVE: CVE-2022-0942
Published: 2022-03-15
Description: Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8; https://huntr.dev/bounties/a412707c-18da-4c84-adc0-9801ed8068c9; https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
CVE: CVE-2022-24721
Published: 2022-03-15
Description: CometD is a scalable comet implementation for web messaging. In any version prior to 5.0.11, 6.0.6, and 7.0.6, internal usage of Oort and Seti channels is improperly authorized, so any remote user could subscribe and publish to those channels. By subscribing to those channels, a remote user may be able to watch cluster-internal traffic that contains other users' (possibly sensitive) data. By publishing to those channels, a remote user may be able to create/modify/delete other user's data and modify the cluster structure. A fix is available in versions 5.0.11, 6.0.6, and 7.0.6. As a workaround, install a custom `SecurityPolicy` that forbids subscription and publishing to remote, non-Oort, sessions on Oort and Seti channels.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: https://github.com/cometd/cometd/issues/1146; https://github.com/cometd/cometd/security/advisories/GHSA-rjmq-6v55-4rjv; https://github.com/cometd/cometd/issues/1146
CVE: CVE-2022-0430
Published: 2022-03-15
Description: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/httpie/httpie/commit/65ab7d5caaaf2f95e61f9dd65441801c2ddee38b; https://huntr.dev/bounties/dafb2e4f-c6b6-4768-8ef5-b396cd6a801f; https://github.com/httpie/httpie/commit/65ab7d5caaaf2f95e61f9dd65441801c2ddee38b
CVE: CVE-2022-0961
Published: 2022-03-15
Description: The microweber application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in GitHub repository microweber/microweber prior to 1.2.12.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://github.com/microweber/microweber/commit/f7acbd075dff4825b35b597b74958de9edce67fc; https://huntr.dev/bounties/cdf00e14-38a7-4b6b-9bb4-3a71bf24e436; https://github.com/microweber/microweber/commit/f7acbd075dff4825b35b597b74958de9edce67fc
CVE: CVE-2022-24752
Published: 2022-03-15
Description: SyliusGridBundle is a package of generic data grids for Symfony applications. Prior to versions 1.10.1 and 1.11-rc2, values added at the end of query sorting were passed directly to the database. The maintainers do not know if this could lead to direct SQL injections but took steps to remediate the vulnerability. The issue is fixed in versions 1.10.1 and 1.11-rc2. As a workaround, overwrite the`Sylius\Component\Grid\Sorting\Sorter.php` class and register it in the container. More information about this workaround is available in the GitHub Security Advisory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Sylius/SyliusGridBundle/commit/73d0791d0575f955e830a3da4c3345f420d2f784; https://github.com/Sylius/SyliusGridBundle/pull/222; https://github.com/Sylius/SyliusGridBundle/releases/tag/v1.10.1
CVE: CVE-2022-24755
Published: 2022-03-15
Description: Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director >= 18.2 >= 18.2 but prior to 21.1.0, 20.0.6, and 19.2.12 is built and configured for PAM authentication, it will skip authorization checks completely. Expired accounts and accounts with expired passwords can still login. This problem will affect users that have PAM enabled. Currently there is no authorization (e.g. check for expired or disabled accounts), but only plain authentication (i.e. check if username and password match). Bareos Director versions 21.1.0, 20.0.6 and 19.2.12 implement the authorization check that was previously missing. The only workaround is to make sure that authentication fails if the user is not authorized.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: https://github.com/bareos/bareos/pull/1115; https://github.com/bareos/bareos/pull/1119; https://github.com/bareos/bareos/pull/1121
CVE: CVE-2022-24756
Published: 2022-03-15
Description: Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director >= 18.2 but prior to 21.1.0, 20.0.6, and 19.2.12 is built and configured for PAM authentication, a failed PAM authentication will leak a small amount of memory. An attacker that is able to use the PAM Console (i.e. by knowing the shared secret or via the WebUI) can flood the Director with failing login attempts which will eventually lead to an out-of-memory condition in which the Director will not work anymore. Bareos Director versions 21.1.0, 20.0.6 and 19.2.12 contain a Bugfix for this problem. Users who are unable to upgrade may disable PAM authentication as a workaround.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://github.com/bareos/bareos/pull/1115; https://github.com/bareos/bareos/pull/1119; https://github.com/bareos/bareos/pull/1121
CVE: CVE-2022-0963
Published: 2022-03-15
Description: Unrestricted XML Files Leads to Stored XSS in GitHub repository microweber/microweber prior to 1.2.12.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/microweber/microweber/commit/975fc1d6d3fba598ee550849ceb81af23ce72e08; https://huntr.dev/bounties/a89a4198-0880-4aa2-8439-a463f39f244c; https://github.com/microweber/microweber/commit/975fc1d6d3fba598ee550849ceb81af23ce72e08
CVE: CVE-2022-0964
Published: 2022-03-15
Description: Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8; https://huntr.dev/bounties/dbe39998-8eb7-46ea-997f-7b27f6f16ea0; https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
CVE: CVE-2022-0965
Published: 2022-03-15
Description: Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8; https://huntr.dev/bounties/d66c88ce-63e2-4515-a429-8e43a42aa347; https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
CVE: CVE-2022-0966
Published: 2022-03-15
Description: Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8; https://huntr.dev/bounties/e06c0d55-00a3-4f82-a009-0310b2e402fe; https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
CVE: CVE-2022-0967
Published: 2022-03-15
Description: Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/167198/Showdoc-2.10.3-Cross-Site-Scripting.html; https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8; https://huntr.dev/bounties/9dea3c98-7609-480d-902d-149067bd1e2a