deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-28859
Published: 2022-05-05
Description: On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scripts (nethsm-safenet-install.sh and nethsm-thales-install.sh) expose the Net HSM partition password. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: https://support.f5.com/csp/article/K47662005; https://support.f5.com/csp/article/K47662005
CVE: CVE-2022-29263
Published: 2022-05-05
Description: On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, the BIG-IP Edge Client Component Installer Service does not use best practice while saving temporary files. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://support.f5.com/csp/article/K33552735; https://support.f5.com/csp/article/K33552735
CVE: CVE-2022-29473
Published: 2022-05-05
Description: On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an IPSec ALG profile is configured on a virtual server, undisclosed responses can cause Traffic Management Microkernel(TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-754
References: https://support.f5.com/csp/article/K06323049; https://support.f5.com/csp/article/K06323049
CVE: CVE-2022-29474
Published: 2022-05-05
Description: On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a directory traversal vulnerability exists in iControl SOAP that allows an authenticated attacker with at least guest role privileges to read wsdl files in the BIG-IP file system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://support.f5.com/csp/article/K59904248; https://support.f5.com/csp/article/K59904248
CVE: CVE-2022-29479
Published: 2022-05-05
Description: On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, when an IPv6 self IP address is configured and the ipv6.strictcompliance database key is enabled (disabled by default) on a BIG-IP system, undisclosed packets may cause decreased performance. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://support.f5.com/csp/article/K64124988; https://support.f5.com/csp/article/K64124988
CVE: CVE-2022-29480
Published: 2022-05-05
Description: On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when multiple route domains are configured, undisclosed requests to big3d can cause an increase in CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://support.f5.com/csp/article/K71103363; https://support.f5.com/csp/article/K71103363
CVE: CVE-2022-29491
Published: 2022-05-05
Description: On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a virtual server is configured with HTTP, TCP on one side (client/server), and DTLS on the other (server/client), undisclosed requests can cause the TMM process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://support.f5.com/csp/article/K14229426; https://support.f5.com/csp/article/K14229426
CVE: CVE-2022-29500
Published: 2022-05-05
Description: SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
CVSS Score: 8.8 (HIGH)
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXLOI3ERTKMZR2KWNRN7OR5S55VPWENH/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y6B7OWVNVCJUDE6VDWGCBUWMRCRETAO3/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YBI4NFDGGMBKWG4EMSZL5UHATDCLPCQW/
CVE: CVE-2022-29501
Published: 2022-05-05
Description: SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges and code execution.
CVSS Score: 8.8 (HIGH)
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXLOI3ERTKMZR2KWNRN7OR5S55VPWENH/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y6B7OWVNVCJUDE6VDWGCBUWMRCRETAO3/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YBI4NFDGGMBKWG4EMSZL5UHATDCLPCQW/
CVE: CVE-2022-29502
Published: 2022-05-05
Description: SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges.
CVSS Score: 9.8 (CRITICAL)
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXLOI3ERTKMZR2KWNRN7OR5S55VPWENH/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y6B7OWVNVCJUDE6VDWGCBUWMRCRETAO3/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YBI4NFDGGMBKWG4EMSZL5UHATDCLPCQW/
CVE: CVE-2022-29592
Published: 2022-05-05
Description: Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/H4niz/Vulnerability/blob/main/Tenda-TX9-V22.03.02.10-19042022-3.md; https://github.com/H4niz/Vulnerability/blob/main/Tenda-TX9-V22.03.02.10-19042022-3.md
CVE: CVE-2021-25267
Published: 2022-05-05
Description: Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://www.sophos.com/en-us/security-advisories/sophos-sa-20220505-sfos-19-0-0; https://www.sophos.com/en-us/security-advisories/sophos-sa-20220505-sfos-19-0-0
CVE: CVE-2021-25268
Published: 2022-05-05
Description: Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA.
CVSS Score: 8.4 (HIGH)
CWE: CWE-79
References: https://www.sophos.com/en-us/security-advisories/sophos-sa-20220505-sfos-19-0-0; https://www.sophos.com/en-us/security-advisories/sophos-sa-20220505-sfos-19-0-0
CVE: CVE-2022-25989
Published: 2022-05-05
Description: An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted DHCP packet can lead to authentication bypass. An attacker can DHCP poison to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-290, CWE-290
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1479; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1479
CVE: CVE-2022-26073
Published: 2022-05-05
Description: A denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of network packets can lead to a device reboot. An attacker can send packets to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1480; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1480
CVE: CVE-2022-28575
Published: 2022-05-05
Description: It is found that there is a command injection vulnerability in the setopenvpnclientcfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows attackers to execute arbitrary commands through a carefully constructed payload
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/1; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/1
CVE: CVE-2022-28577
Published: 2022-05-05
Description: It is found that there is a command injection vulnerability in the delParentalRules interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/3; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/3
CVE: CVE-2022-28578
Published: 2022-05-05
Description: It is found that there is a command injection vulnerability in the setOpenVpnCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/2; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/2
CVE: CVE-2022-28579
Published: 2022-05-05
Description: It is found that there is a command injection vulnerability in the setParentalRules interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/4; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/4
CVE: CVE-2022-28580
Published: 2022-05-05
Description: It is found that there is a command injection vulnerability in the setL2tpServerCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/5; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/5
CVE: CVE-2022-28581
Published: 2022-05-05
Description: It is found that there is a command injection vulnerability in the setWiFiAdvancedCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/9; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/9
CVE: CVE-2022-28582
Published: 2022-05-05
Description: It is found that there is a command injection vulnerability in the setWiFiSignalCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/6; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/6
CVE: CVE-2022-28583
Published: 2022-05-05
Description: It is found that there is a command injection vulnerability in the setWiFiWpsCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/7; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/7
CVE: CVE-2022-28584
Published: 2022-05-05
Description: It is found that there is a command injection vulnerability in the setWiFiWpsStart interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/8; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/8
CVE: CVE-2022-27337
Published: 2022-05-05
Description: A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
CVSS Score: 6.5 (MEDIUM)
References: https://gitlab.freedesktop.org/poppler/poppler/-/issues/1230; https://gitlab.freedesktop.org/poppler/poppler/-/issues/1230#note_1372177; https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html
CVE: CVE-2022-27359
Published: 2022-05-05
Description: Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a this.maildoc NULL pointer dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://drive.google.com/file/d/1INiwZyuuWHWfVOBFnVTf5kC7smynSyOy/view?usp=sharing; https://www.foxitsoftware.com/support/security-bulletins.php; https://drive.google.com/file/d/1INiwZyuuWHWfVOBFnVTf5kC7smynSyOy/view?usp=sharing
CVE: CVE-2022-27360
Published: 2022-05-05
Description: SpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the component customSqlSegment.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://forum.butian.net/share/1089; https://gitee.com/smallc/SpringBlade/blob/master/blade-service/blade-user/src/main/java/org/springblade/system/user/mapper/UserMapper.xml; https://saber.bladex.vip/#/login
CVE: CVE-2022-27411
Published: 2022-05-05
Description: TOTOLINK N600R v5.3c.5507_B20171031 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter in the "Main" function.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/ejdhssh/IOT_Vul; https://github.com/ejdhssh/IOT_Vul
CVE: CVE-2022-29176
Published: 2022-05-05
Description: Rubygems is a package registry used to supply software for the Ruby language ecosystem. Due to a bug in the yank action, it was possible for any RubyGems.org user to remove and replace certain gems even if that user was not authorized to do so. To be vulnerable, a gem needed: one or more dashes in its name creation within 30 days OR no updates for over 100 days At present, we believe this vulnerability has not been exploited. RubyGems.org sends an email to all gem owners when a gem version is published or yanked. We have not received any support emails from gem owners indicating that their gem has been yanked without authorization. An audit of gem changes for the last 18 months did not find any examples of this vulnerability being used in a malicious way. A deeper audit for any possible use of this exploit is ongoing, and we will update this advisory once it is complete. Using Bundler in --frozen or --deployment mode in CI and during deploys, as the Bundler team has always recommended, will guarantee that your application does not silently switch to versions created using this exploit. To audit your application history for possible past exploits, review your Gemfile.lock and look for gems whose platform changed when the version number did not change. For example, gemname-3.1.2 updating to gemname-3.1.2-java could indicate a possible abuse of this vulnerability. RubyGems.org has been patched and is no longer vulnerable to this issue as of the 5th of May 2022.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-862, CWE-863
References: https://github.com/rubygems/rubygems.org/security/advisories/GHSA-hccv-rwq6-vh79; https://hackerone.com/bugs?subject=rubygems&report_id=1559856; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-29166
Published: 2022-05-05
Description: matrix-appservice-irc is a Node.js IRC bridge for Matrix. The vulnerability in node-irc allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. The vulnerability has been patched in matrix-appservice-irc 0.33.2. Refrain from replying to messages from untrusted participants in IRC-bridged Matrix rooms. There are no known workarounds for this issue.
CVSS Score: 8.0 (HIGH)
CWE: CWE-74, CWE-74
References: https://github.com/matrix-org/matrix-appservice-irc/security/advisories/GHSA-37hr-348p-rmf4; https://matrix.org/blog/2022/05/04/0-34-0-security-release-for-matrix-appservice-irc-high-severity; https://github.com/matrix-org/matrix-appservice-irc/security/advisories/GHSA-37hr-348p-rmf4
CVE: CVE-2022-29167
Published: 2022-05-05
Description: Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and response, covering the HTTP method, request URI, host, and optionally the request payload. Hawk used a regular expression to parse `Host` HTTP header (`Hawk.utils.parseHost()`), which was subject to regular expression DoS attack - meaning each added character in the attacker's input increases the computation time exponentially. `parseHost()` was patched in `9.0.1` to use built-in `URL` class to parse hostname instead. `Hawk.authenticate()` accepts `options` argument. If that contains `host` and `port`, those would be used instead of a call to `utils.parseHost()`.
CVSS Score: 7.4 (HIGH)
CWE: CWE-400, CWE-1333
References: https://github.com/mozilla/hawk/pull/286; https://github.com/mozilla/hawk/security/advisories/GHSA-44pw-h2cw-w3vq; https://github.com/mozilla/hawk/pull/286
CVE: CVE-2022-29172
Published: 2022-05-05
Description: Auth0 is an authentication broker that supports both social and enterprise identity providers, including Active Directory, LDAP, Google Apps, and Salesforce. In versions before `11.33.0`, when the “additional signup fields” feature [is configured](https://github.com/auth0/lock#additional-sign-up-fields), a malicious actor can inject invalidated HTML code into these additional fields, which is then stored in the service `user_metdata` payload (using the `name` property). Verification emails, when applicable, are generated using this metadata. It is therefor possible for an actor to craft a malicious link by injecting HTML, which is then rendered as the recipient's name within the delivered email template. You are impacted by this vulnerability if you are using `auth0-lock` version `11.32.2` or lower and are using the “additional signup fields” feature in your application. Upgrade to version `11.33.0`.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/auth0/lock/commit/79ae557d331274b114848150f19832ae341771b1; https://github.com/auth0/lock/security/advisories/GHSA-7ww6-75fj-jcj7; https://github.com/auth0/lock/commit/79ae557d331274b114848150f19832ae341771b1
CVE: CVE-2022-29173
Published: 2022-05-05
Description: go-tuf is a Go implementation of The Update Framework (TUF). go-tuf does not correctly implement the client workflow for updating the metadata files for roles other than the root role. Specifically, checks for rollback attacks are not implemented correctly meaning an attacker can cause clients to install software that is older than the software which the client previously knew to be available, and may include software with known vulnerabilities. In more detail, the client code of go-tuf has several issues in regards to preventing rollback attacks: 1. It does not take into account the content of any previously trusted metadata, if available, before proceeding with updating roles other than the root role (i.e., steps 5.4.3.1 and 5.5.5 of the detailed client workflow). This means that any form of version verification done on the newly-downloaded metadata is made using the default value of zero, which always passes. 2. For both timestamp and snapshot roles, go-tuf saves these metadata files as trusted before verifying if the version of the metafiles they refer to is correct (i.e., steps 5.5.4 and 5.6.4 of the detailed client workflow). A fix is available in version 0.3.0 or newer. No workarounds are known for this issue apart from upgrading.
CVSS Score: 8.0 (HIGH)
CWE: CWE-354, CWE-354
References: https://github.com/theupdateframework/go-tuf/commit/ed6788e710fc3093a7ecc2d078bf734c0f200d8d; https://github.com/theupdateframework/go-tuf/security/advisories/GHSA-66x3-6cw3-v5gj; https://github.com/theupdateframework/go-tuf/commit/ed6788e710fc3093a7ecc2d078bf734c0f200d8d
CVE: CVE-2022-29175
Published: 2022-05-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: This candidate was withdrawn. Further investigation showed that it was not a security issue. Notes: Consult https://github.com/vyperlang/vyper/security/advisories/GHSA-42j8-8cjv-j5r9 for more information. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2022-29535
Published: 2022-05-05
Description: Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://manageengine.com; https://www.manageengine.com/network-monitoring/security-updates/cve-2022-29535.html; https://manageengine.com
CVE: CVE-2022-24817
Published: 2022-05-06
Description: Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via malicious Kubeconfig. In multi-tenancy deployments this can also lead to privilege escalation if the controller's service account has elevated permissions. Workarounds include disabling functionality via Validating Admission webhooks by restricting users from setting the `spec.kubeConfig` field in Flux `Kustomization` and `HelmRelease` objects. Additional mitigations include applying restrictive AppArmor and SELinux profiles on the controller’s pod to limit what binaries can be executed. This vulnerability is fixed in kustomize-controller v0.23.0 and helm-controller v0.19.0, both included in flux2 v0.29.0
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://github.com/fluxcd/flux2/security/advisories/GHSA-vvmq-fwmg-2gjc; https://github.com/fluxcd/flux2/security/advisories/GHSA-vvmq-fwmg-2gjc
CVE: CVE-2022-24884
Published: 2022-05-06
Description: ecdsautils is a tiny collection of programs used for ECDSA (keygen, sign, verify). `ecdsa_verify_[prepare_]legacy()` does not check whether the signature values `r` and `s` are non-zero. A signature consisting only of zeroes is always considered valid, making it trivial to forge signatures. Requiring multiple signatures from different public keys does not mitigate the issue: `ecdsa_verify_list_legacy()` will accept an arbitrary number of such forged signatures. Both the `ecdsautil verify` CLI command and the libecdsautil library are affected. The issue has been fixed in ecdsautils 0.4.1. All older versions of ecdsautils (including versions before the split into a library and a CLI utility) are vulnerable.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-347, CWE-347
References: https://github.com/freifunk-gluon/ecdsautils/commit/1d4b091abdf15ad7b2312535b5b95ad70f6dbd08; https://github.com/freifunk-gluon/ecdsautils/commit/39b6d0a77414fd41614953a0e185c4eefa2f88ad; https://github.com/freifunk-gluon/ecdsautils/security/advisories/GHSA-qhcg-9ffp-78pw
CVE: CVE-2022-24899
Published: 2022-05-06
Description: Contao is a powerful open source CMS that allows you to create professional websites and scalable web applications. In versions of Contao prior to 4.13.3 it is possible to inject code into the canonical tag. As a workaround users may disable canonical tags in the root page settings.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://contao.org/en/security-advisories/cross-site-scripting-via-canonical-url.html; https://github.com/contao/contao/commit/199206849a87ddd0fa5cf674eb3c58292fd8366c; https://github.com/contao/contao/security/advisories/GHSA-m8x6-6r63-qvj2