deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-40458
Published: 2025-05-22
Description: An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-269
References: https://drive.google.com/file/d/1E8dxLt2LnvmLcCEUyp6qtnG-yZjyvMji/view?usp=drive_link; https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b[PII_REDACTED]9a7dd238c/full-disclosure.md
CVE: CVE-2024-40459
Published: 2025-05-22
Description: An issue in Ocuco Innovation APPMANAGER.EXE v.2.10.24.51 allows a local attacker to escalate privileges via the application manager function
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://drive.google.com/file/d/1J2PsjRc6u2q4Teo3eVnBVmTEFjOgaPzX/view?usp=drive_link; https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b[PII_REDACTED]9a7dd238c/full-disclosure.md
CVE: CVE-2024-40460
Published: 2025-05-22
Description: An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the JOBENTRY.EXE
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://drive.google.com/file/d/10M4x2jL_l-kPSZOOE_tUmBzCTCr0tMiF/view?usp=drive_link; https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b[PII_REDACTED]9a7dd238c/full-disclosure.md
CVE: CVE-2024-40461
Published: 2025-05-22
Description: An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the STOCKORDERENTRY.EXE component
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://drive.google.com/file/d/1DyiyLQRvTRAZD8gn2BT7oDzX1NQ7wmFT/view?usp=drive_link; https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b[PII_REDACTED]9a7dd238c/full-disclosure.md; https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b[PII_REDACTED]9a7dd238c/full-disclosure.md
CVE: CVE-2024-40462
Published: 2025-05-22
Description: An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the SETTINGSVATIGATOR.EXE component
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://drive.google.com/file/d/1MDU9FGo36U83yQy55nnVj1syWVy9WLm5/view?usp=drive_link; https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b[PII_REDACTED]9a7dd238c/full-disclosure.md; https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b[PII_REDACTED]9a7dd238c/full-disclosure.md
CVE: CVE-2024-41195
Published: 2025-05-22
Description: An issue in Ocuco Innovation - INNOVASERVICEINTF.EXE v2.10.24.17 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://drive.google.com/file/d/1U50ZsLo7VXWKQ1_6FxWy70F_75jzVUwi/view?usp=drive_link; https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b[PII_REDACTED]9a7dd238c/full-disclosure.md; https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b[PII_REDACTED]9a7dd238c/full-disclosure.md
CVE: CVE-2024-41196
Published: 2025-05-22
Description: An issue in Ocuco Innovation - REPORTSERVER.EXE v2.10.24.13 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://cwe.mitre.org/data/definitions/285.html; https://drive.google.com/file/d/1UqJAQiwhHZCHtgac4-YiJHElBYhqUu3M/view?usp=drive_link; https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b[PII_REDACTED]9a7dd238c/full-disclosure.md
CVE: CVE-2024-41197
Published: 2025-05-22
Description: An issue in Ocuco Innovation - INVCLIENT.EXE v2.10.24.5 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://drive.google.com/file/d/1XgbcJqYIHxAROcCACdgdD8V_97Hcwdze/view?usp=drive_link; https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b[PII_REDACTED]9a7dd238c/full-disclosure.md; https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b[PII_REDACTED]9a7dd238c/full-disclosure.md
CVE: CVE-2024-41198
Published: 2025-05-22
Description: An issue in Ocuco Innovation - REPORTS.EXE v2.10.24.13 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://drive.google.com/file/d/1k7P36ygRjQE6XfcT-FJgsN2yrtQy2yhH/view?usp=drive_link; https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b[PII_REDACTED]9a7dd238c/full-disclosure.md; https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b[PII_REDACTED]9a7dd238c/full-disclosure.md
CVE: CVE-2024-41199
Published: 2025-05-22
Description: An issue in Ocuco Innovation - JOBMANAGER.EXE v2.10.24.16 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269, CWE-287
References: https://drive.google.com/file/d/1dVvH9l0gKRK0OPcF6_8yTLPsARKFqWqB/view?usp=drive_link; https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b[PII_REDACTED]9a7dd238c/full-disclosure.md
CVE: CVE-2024-48848
Published: 2025-05-22
Description: Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-774
References: https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch
CVE: CVE-2024-51552
Published: 2025-05-22
Description: Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-257
References: https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch
CVE: CVE-2024-51553
Published: 2025-05-22
Description: Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-73
References: https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch
CVE: CVE-2024-6914
Published: 2025-05-22
Description: An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service. A malicious actor can exploit this vulnerability to reset the password of any user account, leading to a complete account takeover, including accounts with elevated privileges.

This vulnerability is exploitable only through the account recovery SOAP admin services exposed via the "/services" context path in affected products. The impact may be reduced if access to these endpoints has been restricted based on the "Security Guidelines for Production Deployment" by disabling exposure to untrusted networks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3561/; https://security.docs.wso2.com/en/latest/security-guidelines/security-guidelines-for-production-deployment/
CVE: CVE-2024-7103
Published: 2025-05-22
Description: A reflected cross-site scripting (XSS) vulnerability exists in the sub-organization login flow of WSO2 Identity Server 7.0.0 due to improper input validation. A malicious actor can exploit this vulnerability to inject arbitrary JavaScript into the login flow, potentially leading to UI modifications, redirections to malicious websites, or data exfiltration from the browser.

While this issue could allow an attacker to manipulate the user’s browser, session-related sensitive cookies remain protected with the httpOnly flag, preventing session hijacking.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3425/
CVE: CVE-2024-7487
Published: 2025-05-22
Description: An improper authentication vulnerability exists in WSO2 Identity Server 7.0.0 due to an implementation flaw that allows app-native authentication to be bypassed when an invalid object is passed.

Exploitation of this vulnerability could enable malicious actors to circumvent the client verification mechanism, compromising the integrity of the authentication process.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-287
References: https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3348/
CVE: CVE-2003-5004
Published: 2025-05-22
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-5962
Published: 2025-05-22
Description: A reflected cross-site scripting (XSS) vulnerability exists in the authentication endpoint of multiple WSO2 products due to missing output encoding of user-supplied input. A malicious actor can exploit this vulnerability to inject arbitrary JavaScript into the authentication flow, potentially leading to UI modifications, redirections to malicious websites, or data exfiltration from the browser.

While this issue could allow an attacker to manipulate the user’s browser, session-related sensitive cookies remain protected with the httpOnly flag, preventing session hijacking.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3443/
CVE: CVE-2025-48372
Published: 2025-05-22
Description: Schule is open-source school management system software. The generateOTP() function generates a 4-digit numeric One-Time Password (OTP). Prior to version 1.0.1, even if a secure random number generator is used, the short length and limited range (1000–9999) results in only 9000 possible combinations. This small keyspace makes the OTP highly vulnerable to brute-force attacks, especially in the absence of strong rate-limiting or lockout mechanisms. Version 1.0.1 fixes the issue.
CVSS Score: 7.3 (HIGH)
CWE: CWE-521
References: https://github.com/schule111/Schule/commit/cd53abbea93943f2c60a5281d45bebadc57636b7; https://github.com/schule111/Schule/security/advisories/GHSA-6c48-67xx-vqgc
CVE: CVE-2025-48373
Published: 2025-05-22
Description: Schule is open-source school management system software. The application relies on client-side JavaScript (index.js) to redirect users to different panels based on their role. Prior to version 1.0.1, this implementation poses a serious security risk because it assumes that the value of data.role is trustworthy on the client side. Attackers can manipulate JavaScript in the browser (e.g., via browser dev tools or intercepting API responses) and set data.role to any arbitrary value (e.g., "admin"), gaining unauthorized access to restricted areas of the application.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-863
References: https://github.com/schule111/Schule/commit/cbf7f509c37acd69b4ab8ee19d842de867b46b7e; https://github.com/schule111/Schule/security/advisories/GHSA-37h9-qq7c-6mc9
CVE: CVE-2025-48374
Published: 2025-05-22
Description: zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification. Prior to version 2.1.3 (corresponding to pseudoversion 1.4.4-0[PII_REDACTED]0828-8a99a3ed231f), when using Keycloak as an oidc provider, the clientsecret gets printed into the container stdout logs for an example at container startup. Version 2.1.3 (corresponding to pseudoversion 1.4.4-0[PII_REDACTED]0828-8a99a3ed231f) fixes the issue.
CWE: CWE-532
References: https://github.com/project-zot/zot/commit/8a99a3ed231fdcd8467e986182b4705342b6a15e; https://github.com/project-zot/zot/security/advisories/GHSA-c37v-3c8w-crq8
CVE: CVE-2025-47181
Published: 2025-05-22
Description: Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
CVSS Score: 8.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47181
CVE: CVE-2025-4975
Published: 2025-05-22
Description: When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that device.
CWE: CWE-863
References: https://play.google.com/store/apps/details?id=com.tplink.iot&hl=en_US; https://www.tp-link.com/us/support/faq/4464/
CVE: CVE-2025-48371
Published: 2025-05-22
Description: OpenFGA is an authorization/permission engine. OpenFGA versions 1.8.0 through 1.8.12 (corresponding to Helm chart openfga-0.2.16 through openfga-0.2.30 and docker 1.8.0 through 1.8.12) are vulnerable to authorization bypass when certain Check and ListObject calls are executed. Users are affected under four specific conditions: First, calling Check API or ListObjects with an authorization model that has a relationship directly assignable by both type bound public access and userset; second, there are check or list object queries with contextual tuples for the relationship that can be directly assignable by both type bound public access and userset; third, those contextual tuples’s user field is an userset; and finally, type bound public access tuples are not assigned to the relationship. Users should upgrade to version 1.8.13 to receive a patch. The upgrade is backwards compatible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://github.com/openfga/openfga/commit/e5960d4eba92b723de8ff3a5346a07f50c1379ca; https://github.com/openfga/openfga/security/advisories/GHSA-c72g-53hw-82q7
CVE: CVE-2025-4338
Published: 2025-05-22
Description: Lantronix Device installer is vulnerable to XML external entity (XXE) attacks in configuration files read from the network device. An attacker could obtain credentials, access these network devices, and modify their configurations. An attacker may also gain access to the host running the Device Installer software or the password hash of the user running the application.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-611
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-142-01; https://www.lantronix.com/products/lantronix-provisioning-manager/
CVE: CVE-2025-4562
Published: 2025-05-22
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-4642
Published: 2025-05-22
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-4692
Published: 2025-05-23
Description: Actors can use a maliciously crafted JavaScript object notation (JSON) web token (JWT) to perform privilege escalation by submitting the malicious JWT to a vulnerable method exposed on the cloud platform. If the exploit is successful, the user can escalate privileges to access any device managed by the 

ABUP Cloud Update Platform.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-266
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-01
CVE: CVE-2025-2394
Published: 2025-05-23
Description: Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data disclosure.
CWE: CWE-798
References: https://www.ecovacs.com/global/userhelp/dsa[PII_REDACTED]1; https://www.themissinglink.com.au/security-advisories/cve-2025-2394
CVE: CVE-2025-5098
Published: 2025-05-23
Description: PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to access a user's Gmail account without proper authorization.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200, CWE-313
References: https://korelogic.com/Resources/Advisories/KL-001-2025-003.txt; https://korelogic.com/Resources/Advisories/KL-001-2025-003.txt
CVE: CVE-2025-5099
Published: 2025-05-23
Description: An Out of Bounds Write occurs when the native library attempts PDF rendering, which can be exploited to achieve memory corruption and potentially arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-787
References: https://korelogic.com/Resources/Advisories/KL-001-2025-004.txt; https://korelogic.com/Resources/Advisories/KL-001-2025-004.txt
CVE: CVE-2025-5100
Published: 2025-05-23
Description: A double-free condition occurs during the cleanup of temporary image files, which can be exploited to achieve memory corruption and potentially arbitrary code execution.
CVSS Score: 8.0 (HIGH)
CWE: CWE-415, CWE-416
References: https://korelogic.com/Resources/Advisories/KL-001-2025-005.txt
CVE: CVE-2025-48701
Published: 2025-05-23
Description: openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://github.com/opendcim/openDCIM/issues/1601
CVE: CVE-2025-48708
Published: 2025-05-23
Description: gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-212
References: https://bugs.ghostscript.com/show_bug.cgi?id=708446; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b587663c623b4462f9e78686a31fd880207303ee; http://www.openwall.com/lists/oss-security/2025/05/23/2
CVE: CVE-2025-4594
Published: 2025-05-23
Description: The Tournamatch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'trn-ladder-registration-button' shortcode in all versions up to, and including, 4.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/tournamatch/tags/4.6.1/includes/shortcodes/class-shortcodes.php#L273; https://plugins.trac.wordpress.org/changeset/3295681/tournamatch/trunk/includes/shortcodes/class-shortcodes.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/fc912831-bbdd-4f8f-a620-47e41b1b731d?source=cve
CVE: CVE-2025-48695
Published: 2025-05-23
Description: An issue was discovered in CyberDAVA before 1.1.20. A privilege escalation vulnerability allows a low-privileged user to escalate their privilege by abusing the following API due to the lack of access control: /api/v2/users/user/<user id>/role/ROLE/<Target role> (admin access can be achieved).
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-266
References: https://github.com/michaelcheung-research/Vulnerability-Disclosure/blob/main/CVE-2025-CyberDava1/README.md?plain=1; https://www.cyberdava.com
CVE: CVE-2025-47149
Published: 2025-05-23
Description: The optional feature 'Anti-Virus & Sandbox' of i-FILTER contains an issue with improper pattern file validation. If exploited, the product may treat an unauthorized pattern file as an authorized. If the product uses a specially crafted pattern file, information in the server where the product is running may be retrieved, and/or cause a denial of service (DoS) condition.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-348
References: https://download.daj.co.jp/support/detail/?page=releasenote_content&division=6&id=1057; https://jvn.jp/en/jp/JVN68079883/
CVE: CVE-2025-5096
Published: 2025-05-23
Description: The TablePress plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the 'data-caption', 'data-s-content-padding', 'data-s-title', and 'data-footer' data-attributes in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://datatables.net/; https://github.com/DataTables/DataTablesSrc/blob/29539c40504365bc4be0599e4b0739cf270a2e09/js/core/core.constructor.js#L329; https://github.com/DataTables/DataTablesSrc/commit/d278ed307035cb8740d2fad86b7cbb995380f7bb
CVE: CVE-2024-13945
Published: 2025-05-23
Description: Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data 
if administrator credentials become compromised.

This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-36
References: https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch
CVE: CVE-2025-4379
Published: 2025-05-23
Description: DobryCMS in versions 2.* and lower is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in szukaj parameter allows arbitrary JavaScript to be executed on victim's browser when specially crafted URL is opened.

A hotfix for affected versions was released on 29.04.2025. It removes the vulnerability without incrementing the version.
CWE: CWE-79
References: https://cert.pl/en/posts/2025/05/CVE-2025-4379; https://cert.pl/posts/2025/05/CVE-2025-4379; https://studiofabryka.pl/Systemy_CMS.html
CVE: CVE-2025-36527
Published: 2025-05-23
Description: Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.
CVSS Score: 8.3 (HIGH)
CWE: CWE-89
References: https://www.manageengine.com/products/active-directory-audit/cve-2025-36527.html
CVE: CVE-2025-3893
Published: 2025-05-23
Description: While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this action. Input provided by the the user is not sanitized, leading to SQL Injection vulnerability. 
Version 5.20 of MegaBIP fixes this issue.
CWE: CWE-89
References: https://cert.pl/en/posts/2025/05/CVE-2025-3893; https://megabip.pl/index.php?id=24,145; https://www.gov.pl/web/cyfryzacja/rekomendacja-pelnomocnika-rzadu-ds-cyberbezpieczenstwa-dotyczaca-biuletynow-informacji-publicznej
CVE: CVE-2025-3894
Published: 2025-05-23
Description: Text editor embedded into MegaBIP software does not neutralize user input allowing Stored XSS attacks on other users. In order to use the editor high privileges are required.  
Version 5.20 of MegaBIP fixes this issue.
CWE: CWE-79
References: https://cert.pl/en/posts/2025/05/CVE-2025-3893; https://megabip.pl/index.php?id=24,145; https://www.gov.pl/web/cyfryzacja/rekomendacja-pelnomocnika-rzadu-ds-cyberbezpieczenstwa-dotyczaca-biuletynow-informacji-publicznej
CVE: CVE-2025-3895
Published: 2025-05-23
Description: Token used for resetting passwords in MegaBIP software are generated using a small space of random values combined with a queryable value.
 It allows an unauthenticated attacker who know user login names to brute force these tokens and change account passwords (including these belonging to administrators). 
Version 5.20 of MegaBIP fixes this issue.
CWE: CWE-334
References: https://cert.pl/en/posts/2025/05/CVE-2025-3893; https://megabip.pl/index.php?id=24,145; https://www.gov.pl/web/cyfryzacja/rekomendacja-pelnomocnika-rzadu-ds-cyberbezpieczenstwa-dotyczaca-biuletynow-informacji-publicznej