deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-38770
Published: 2022-09-13
Description: The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch other users' data upon a successful login request.
CVSS Score: 5.3 (MEDIUM)
References: https://mojodat-vulnerabilities.netlify.app/; https://transtek.com/mojodat-fixed-assets/; https://mojodat-vulnerabilities.netlify.app/
CVE: CVE-2022-38771
Published: 2022-09-13
Description: The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to send SCRIPT tags as injected input to the API request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://mojodat-vulnerabilities.netlify.app/; https://transtek.com/mojodat-fixed-assets/; https://mojodat-vulnerabilities.netlify.app/
CVE: CVE-2020-19586
Published: 2022-09-14
Description: Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://github.com/Deepak983/CVE-2020-19586/blob/main/Stored%20XSS%20in%20MIAdminStyles.i4%20through%20privileges%20escalation.pdf; https://github.com/Deepak983/CVE-2020-19586/blob/main/Stored%20XSS%20in%20MIAdminStyles.i4%20through%20privileges%20escalation.pdf
CVE: CVE-2020-19587
Published: 2022-09-14
Description: Cross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Deepak983/CVE-2020-19587/blob/main/_Stored%20XSS%20in%20MIAdminStyles.i4%20through%20privileges%20escalation.pdf; https://www.linkedin.com/in/deepak-sharma-72a044b4/; https://github.com/Deepak983/CVE-2020-19587/blob/main/_Stored%20XSS%20in%20MIAdminStyles.i4%20through%20privileges%20escalation.pdf
CVE: CVE-2022-34831
Published: 2022-09-14
Description: An issue was discovered in Keyfactor PrimeKey EJBCA before 7.9.0, related to possible inconsistencies in DNS identifiers submitted in an ACME order and the corresponding CSR submitted during finalization. During the ACME enrollment process, an order is submitted containing an identifier for one or multiple dnsNames. These are validated properly in the ACME challenge. However, if the validation passes, a non-compliant client can include additional dnsNames the CSR sent to the finalize endpoint, resulting in EJBCA issuing a certificate including the identifiers that were not validated. This occurs even if the certificate profile is configured to not allow a DN override by the CSR.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-295
References: https://support.keyfactor.com/s/detail/a6x1Q000000CwC5QAK; https://www.primekey.com/products/ejbca-enterprise/; https://support.keyfactor.com/s/detail/a6x1Q000000CwC5QAK
CVE: CVE-2022-2900
Published: 2022-09-14
Description: Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 8.1.0.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://github.com/ionicabizau/parse-url/commit/b88c81df8f4c5168af454eaa4f92afa9349e4e13; https://huntr.dev/bounties/1b4c972a-abc8-41eb-a2e1-696db746b5fd; https://github.com/ionicabizau/parse-url/commit/b88c81df8f4c5168af454eaa4f92afa9349e4e13
CVE: CVE-2022-36436
Published: 2022-09-14
Description: OSU Open Source Lab VNCAuthProxy through 1.1.1 is affected by an vncap/vnc/protocol.py VNCServerAuthenticator authentication-bypass vulnerability that could allow a malicious actor to gain unauthorized access to a VNC session or to disconnect a legitimate user from a VNC session. A remote attacker with network access to the proxy server could leverage this vulnerability to connect to VNC servers protected by the proxy server without providing any authentication credentials. Exploitation of this issue requires that the proxy server is currently accepting connections for the target VNC server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://cert.grnet.gr/en/blog/cve-2022-36436-twisted-vnc-authentication-proxy-authentication-bypass/; https://github.com/osuosl/twisted_vncauthproxy/commit/edc149af[PII_REDACTED]1b2d6fcd42c3ef0851644b; https://github.com/osuosl/twisted_vncauthproxy/tree/release/1.1.1
CVE: CVE-2022-36667
Published: 2022-09-14
Description: Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of filtering from the file upload function. The vulnerability exist during adding parts and from the upload function, the attacker can upload PHP Reverse Shell straight away to gain RCE.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/saitamang/POC-DUMP/blob/main/Garage%20Management%20System/README.md; https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html; https://github.com/saitamang/POC-DUMP/blob/main/Garage%20Management%20System/README.md
CVE: CVE-2022-36668
Published: 2022-09-14
Description: Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters. The vulnerabilities exist during creating or editing the parts under parameters. Using the XSS payload, the Stored XSS triggered and can be used for further attack vector.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/saitamang/POC-DUMP/blob/main/Garage%20Management%20System/README.md; https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html; https://github.com/saitamang/POC-DUMP/blob/main/Garage%20Management%20System/README.md
CVE: CVE-2022-36669
Published: 2022-09-14
Description: Hospital Information System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://code-projects.org/hospital-information-system-in-php-with-source-code/; https://github.com/saitamang/POC-DUMP/blob/main/Hospital%20Information%20System/README.md; https://github.com/saitamang/POC-DUMP/tree/main/Hospital%20Information%20System
CVE: CVE-2022-37137
Published: 2022-09-14
Description: PayMoney 3.3 is vulnerable to Stored Cross-Site Scripting (XSS) during replying the ticket. The XSS can be obtain from injecting under "Message" field with "description" parameter with the specially crafted payload to gain Stored XSS. The XSS then will prompt after that or can be access from the view ticket function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/saitamang/POC-DUMP/tree/main/PayMoney; https://paymoney.techvill.org/; https://github.com/saitamang/POC-DUMP/tree/main/PayMoney
CVE: CVE-2022-37138
Published: 2022-09-14
Description: Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator after injecting username form.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/saitamang/POC-DUMP/blob/main/Loan%20Management%20System/README.md; https://www.sourcecodester.com/php/15529/loan-management-system-oop-php-mysqlijquery-free-source-code.html; https://github.com/saitamang/POC-DUMP/blob/main/Loan%20Management%20System/README.md
CVE: CVE-2022-37139
Published: 2022-09-14
Description: Loan Management System version 1.0 suffers from a persistent cross site scripting vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/saitamang/POC-DUMP/blob/main/Loan%20Management%20System/README.md; https://www.sourcecodester.com/php/15529/loan-management-system-oop-php-mysqlijquery-free-source-code.html; https://github.com/saitamang/POC-DUMP/blob/main/Loan%20Management%20System/README.md
CVE: CVE-2022-37140
Published: 2022-09-14
Description: PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE). The vulnerability exists on the reply ticket function and upload the malicious file. A calculator will open when the victim who download the file open the RTF file.
CVSS Score: 8.0 (HIGH)
CWE: CWE-434
References: https://github.com/saitamang/POC-DUMP/tree/main/PayMoney; https://paymoney.techvill.org; https://github.com/saitamang/POC-DUMP/tree/main/PayMoney
CVE: CVE-2022-40626
Published: 2022-09-14
Description: An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account with predefined login, password and role in Zabbix Frontend.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPU4RCRYVNVM3SS523UQXE63ATCTEX5G/; https://support.zabbix.com/browse/ZBX-21350; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPU4RCRYVNVM3SS523UQXE63ATCTEX5G/
CVE: CVE-2022-40673
Published: 2022-09-14
Description: KDiskMark before 3.1.0 lacks authorization checking for D-Bus methods such as Helper::flushPageCache.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2022/09/14/1; https://github.com/JonMagon/KDiskMark/commit/3c90083a4f5ba3f240a797e509d818221542bbdc; https://github.com/JonMagon/KDiskMark/compare/3.0.0...3.1.0
CVE: CVE-2022-40674
Published: 2022-09-14
Description: libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
CVSS Score: 8.1 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/libexpat/libexpat/pull/629; https://github.com/libexpat/libexpat/pull/640; https://lists.debian.org/debian-lts-announce/2022/09/msg00029.html
CVE: CVE-2022-37661
Published: 2022-09-14
Description: SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/168336/SmartRG-Router-2.6.13-Remote-Code-Execution.html; http://packetstormsecurity.com/files/169816/SmartRG-Router-SR510n-2.6.13-Remote-Code-Execution.html; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2022-22520
Published: 2022-09-14
Description: A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204
References: https://cert.vde.com/en/advisories/VDE-2022-011; https://cert.vde.com/en/advisories/VDE-2022-039; https://cert.vde.com/en/advisories/VDE-2022-011
CVE: CVE-2022-38796
Published: 2022-09-14
Description: A Host Header Injection vulnerability in Feehi CMS 2.1.1 may allow an attacker to spoof a particular header. This can be exploited by abusing password reset emails.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74
References: https://www.youtube.com/watch?v=k8dp0FJnSsI; https://www.youtube.com/watch?v=k8dp0FJnSsI
CVE: CVE-2022-3202
Published: 2022-09-14
Description: A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the system or leak kernel internal information.
CVSS Score: 7.1 (HIGH)
CWE: CWE-476, CWE-476
References: https://github.com/torvalds/linux/commit/a[PII_REDACTED]0ec41e09181396c1e829287b48d47; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://github.com/torvalds/linux/commit/a[PII_REDACTED]0ec41e09181396c1e829287b48d47
CVE: CVE-2022-20231
Published: 2022-09-14
Description: In smc_intc_request_fiq of arm_gic.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-211485702References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-10-01; https://source.android.com/security/bulletin/pixel/2022-10-01
CVE: CVE-2022-20364
Published: 2022-09-14
Description: In sysmmu_unmap of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-233606615References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-10-01; https://source.android.com/security/bulletin/pixel/2022-10-01
CVE: CVE-2022-3212
Published: 2022-09-14
Description: <bytes::Bytes as axum_core::extract::FromRequest>::from_request would not, by default, set a limit for the size of the request body. That meant if a malicious peer would send a very large (or infinite) body your server might run out of memory and crash. This also applies to these extractors which used Bytes::from_request internally: axum::extract::Form axum::extract::Json String
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://research.jfrog.com/vulnerabilities/axum-core-dos/; https://rustsec.org/advisories/RUSTSEC-2022-0055.html; https://research.jfrog.com/vulnerabilities/axum-core-dos/
CVE: CVE-2021-38924
Published: 2022-09-14
Description: IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 210163.
CVSS Score: 7.5 (HIGH)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/210163; https://www.ibm.com/support/pages/node/6620059; https://exchange.xforce.ibmcloud.com/vulnerabilities/210163
CVE: CVE-2022-0029
Published: 2022-09-14
Description: An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://security.paloaltonetworks.com/CVE-2022-0029; https://security.paloaltonetworks.com/CVE-2022-0029
CVE: CVE-2022-1778
Published: 2022-09-14
Description: Improper Input Validation vulnerability in Hitachi Energy MicroSCADA X SYS600 while reading a specific configuration file causes a buffer-overflow that causes a failure to start the SYS600. The configuration file can only be accessed by an administrator access. This issue affects: Hitachi Energy MicroSCADA X SYS600 version 10 to version 10.3.1. cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:*
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://publisher.hitachienergy.com/preview?DocumentId=8DBD000106&languageCode=en&Preview=true; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000106&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2022-29492
Published: 2022-09-14
Description: Improper Input Validation vulnerability in the handling of a malformed IEC 104 TCP packet in the Hitachi Energy MicroSCADA X SYS600, MicroSCADA Pro SYS600. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connection is left open. This may cause a denial-of-service if the affected connection is left open. This issue affects: Hitachi Energy MicroSCADA Pro SYS600 version 9.4 FP2 Hotfix 4 and earlier versions Hitachi Energy MicroSCADA X SYS600 version 10 to version 10.3.1. cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.0:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:*
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://search.abb.com/library/Download.aspx?DocumentID=8DBD000106&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000106&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2022-29922
Published: 2022-09-14
Description: Improper Input Validation vulnerability in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server in the Hitachi Energy MicroSCADA X SYS600, MicroSCADA Pro SYS600. The vulnerability may cause a denial-of-service on the IEC 61850 OPC Server part of the SYS600 product. This issue affects: Hitachi Energy MicroSCADA Pro SYS600 version 9.4 FP2 Hotfix 4 and earlier versions Hitachi Energy MicroSCADA X SYS600 version 10 to version 10.3.1. cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.0:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:*
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://search.abb.com/library/Download.aspx?DocumentID=8DBD000106&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000106&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2022-2277
Published: 2022-09-14
Description: Improper Input Validation vulnerability exists in the Hitachi Energy MicroSCADA X SYS600's ICCP stack during the ICCP communication establishment causes a denial-of-service when ICCP of SYS600 is request to forward any data item updates with timestamps too distant in the future to any remote ICCP system. By default, ICCP is not configured and not enabled. This issue affects: Hitachi Energy MicroSCADA X SYS600 version 10.2 to version 10.3.1. cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:*
CVSS Score: 7.5 (HIGH)
CWE: CWE-1284, CWE-1284
References: https://publisher.hitachienergy.com/preview?DocumentID=8DBD000106&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000106&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2022-31143
Published: 2022-09-14
Description: GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. It was found that in affected versions there is an exposure of private information defined in setup of GLPI (like smtp or cas hosts). Note that passwords are not exposed. Users are advised to upgrade to version 10.0.3. There are no known workarounds for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/glpi-project/glpi/commit/e66a0dfe697cbd4b3ec22736a8f8fd025a28f978; https://github.com/glpi-project/glpi/security/advisories/GHSA-6mmq-x3j2-677j; https://github.com/glpi-project/glpi/commit/e66a0dfe697cbd4b3ec22736a8f8fd025a28f978
CVE: CVE-2022-31187
Published: 2022-09-14
Description: GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Affected versions were found to not properly neutralize HTML tags in the global search context. Users are advised to upgrade to version 10.0.3 to resolve this issue. Users unable to upgrade should disable global search.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/glpi-project/glpi/commit/e248ed5649d267c0f61a17d99b7bd6be4074aadb; https://github.com/glpi-project/glpi/security/advisories/GHSA-43j5-xhvj-9236; https://github.com/glpi-project/glpi/commit/e248ed5649d267c0f61a17d99b7bd6be4074aadb
CVE: CVE-2022-35945
Published: 2022-09-14
Description: GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Information associated to registration key are not properly escaped in registration key configuration page. They can be used to steal a GLPI administrator cookie. Users are advised to upgrade to 10.0.3. There are no known workarounds for this issue. ### Workarounds Do not use a registration key created by an untrusted person.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/glpi-project/glpi/commit/2b8f9aa54ae4a4ec07bde0c8db739a292b8ec09a; https://github.com/glpi-project/glpi/security/advisories/GHSA-jrgw-cx24-56x5; https://github.com/glpi-project/glpi/commit/2b8f9aa54ae4a4ec07bde0c8db739a292b8ec09a
CVE: CVE-2022-35946
Published: 2022-09-14
Description: GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In affected versions request input is not properly validated in the plugin controller and can be used to access low-level API of Plugin class. An attacker can, for instance, alter database data. Attacker must have "General setup" update rights to be able to perform this attack. Users are advised to upgrade to version 10.0.3. Users unable to upgrade should remove the `front/plugin.form.php` script.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/glpi-project/glpi/commit/f542ec8378afbd8038aeca5975b15eca3f0574c8; https://github.com/glpi-project/glpi/security/advisories/GHSA-92q5-pfr8-r9r2; https://github.com/glpi-project/glpi/commit/f542ec8378afbd8038aeca5975b15eca3f0574c8
CVE: CVE-2022-35947
Published: 2022-09-14
Description: GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Affected versions have been found to be vulnerable to a SQL injection attack which an attacker could leverage to simulate an arbitrary user login. Users are advised to upgrade to version 10.0.3. Users unable to upgrade should disable the `Enable login with external token` API configuration.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-89
References: https://github.com/glpi-project/glpi/commit/564309d2c1180d5ba1615f4bbaf6623df81b4962; https://github.com/glpi-project/glpi/security/advisories/GHSA-7p3q-cffg-c8xh; https://github.com/glpi-project/glpi/commit/564309d2c1180d5ba1615f4bbaf6623df81b4962