deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-0436
Published: 2024-02-26
Description: Theoretically, it would be possible for an attacker to brute-force the password for an instance in single-user password protection mode via a timing attack given the linear nature of the `!==` used for comparison.

The risk is minified by the additional overhead of the request, which varies in a non-constant nature making the attack less reliable to execute
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://github.com/mintplex-labs/anything-llm/commit/3c859ba3038121b67fb98e87dc52617fa27cbef0; https://huntr.com/bounties/3e73cb96-c038-46a1-81b7-4d2215b36268; https://github.com/mintplex-labs/anything-llm/commit/3c859ba3038121b67fb98e87dc52617fa27cbef0
CVE: CVE-2024-0439
Published: 2024-02-26
Description: As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience for the role since most managers would not be savvy enough to modify these settings. They can use their token to still modify those settings though through a standard HTTP request

While this is not a critical vulnerability, it does indeed need to be patched to enforce the expected permission level.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://github.com/mintplex-labs/anything-llm/commit/7200a06ef07d92eef5f3c4c8be29824aa001d688; https://huntr.com/bounties/7fc1b78e-7faf-4f40-961d-61e53dac81ce; https://github.com/mintplex-labs/anything-llm/commit/7200a06ef07d92eef5f3c4c8be29824aa001d688
CVE: CVE-2024-0440
Published: 2024-02-26
Description: Attacker, with permission to submit a link or submits a link via POST  to be collected that is using the file:// protocol can then introspect host files and other relatively stored files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://github.com/mintplex-labs/anything-llm/commit/1563a1b20f72846d617a88510970d0426ab880d3; https://huntr.com/bounties/263fd7eb-f9a9-4578-9655-0e28c609272f; https://github.com/mintplex-labs/anything-llm/commit/1563a1b20f72846d617a88510970d0426ab880d3
CVE: CVE-2024-0455
Published: 2024-02-26
Description: The inclusion of the web scraper for AnythingLLM means that any user with the proper authorization level (manager, admin, and when in single user) could put in the URL
```
http://169.254.169.254/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance
```
which is a special IP and URL that resolves only when the request comes from within an EC2 instance. This would allow the user to see the connection/secret credentials for their specific instance and be able to manage it regardless of who deployed it.

The user would have to have pre-existing knowledge of the hosting infra which the target instance is deployed on, but if sent - would resolve if on EC2 and the proper `iptable` or firewall rule is not configured for their setup.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/mintplex-labs/anything-llm/commit/b2b2c2afe15c48952d57b4d01e7108f9515c5f55; https://huntr.com/bounties/07d83b49-7ebb-40d2-83fc-78381e3c5c9c; https://github.com/mintplex-labs/anything-llm/commit/b2b2c2afe15c48952d57b4d01e7108f9515c5f55
CVE: CVE-2024-0798
Published: 2024-02-26
Description: A privilege escalation vulnerability exists in mintplex-labs/anything-llm, allowing users with 'default' role to delete documents uploaded by 'admin'. Despite the intended restriction that prevents 'default' role users from deleting admin-uploaded documents, an attacker can exploit this vulnerability by sending a crafted DELETE request to the /api/system/remove-document endpoint. This vulnerability is due to improper access control checks, enabling unauthorized document deletion and potentially leading to loss of data integrity.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-272
References: https://github.com/mintplex-labs/anything-llm/commit/d5cde8b7c27a47ab45b05b441db16751537f1733; https://huntr.com/bounties/607f03a0-ab4d-4905-b253-3d28bbbd363c; https://github.com/mintplex-labs/anything-llm/commit/d5cde8b7c27a47ab45b05b441db16751537f1733
CVE: CVE-2024-1165
Published: 2024-02-26
Description: The Brizy – Page Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.39 via the 'id'. This makes it possible for authenticated attackers, with contributor-level access and above, to upload files to arbitrary locations on the server
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://plugins.trac.wordpress.org/browser/brizy/tags/2.4.39/editor/screenshot/manager.php#L33; https://plugins.trac.wordpress.org/changeset/3034945/brizy/tags/2.4.41/editor/screenshot/manager.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/7673b2ba-5d7a-4ae9-92e7-1a910687fdb8?source=cve
CVE: CVE-2024-1436
Published: 2024-02-26
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wiloke WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit.This issue affects WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit: from n/a through 1.0.9.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://patchstack.com/database/vulnerability/myshopkit-popup-smartbar-slidein/wordpress-woocommerce-myshopkit-plugin-1-0-9-sensitive-data-exposure-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/myshopkit-popup-smartbar-slidein/wordpress-woocommerce-myshopkit-plugin-1-0-9-sensitive-data-exposure-vulnerability?_s_id=cve
CVE: CVE-2024-1622
Published: 2024-02-26
Description: Due to a mistake in error checking, Routinator will terminate when an incoming RTR connection is reset by the peer too quickly after opening.
CVSS Score: 7.5 (HIGH)
CWE: CWE-253, CWE-754
References: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HPRUIPAI2BBDGFVLN733JLIUJWLEBLF/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K52QRRYBHLP73RAS3CGOPBWYT7EZVP6O/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N2N3N3SNBHSH7GN3JOLR7YUF5FCTQQ5O/
CVE: CVE-2024-1710
Published: 2024-02-26
Description: The Addon Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the onAjaxAction function action in all versions up to, and including, 1.3.76. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform several unauthorized actions including uploading arbitrary files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/addon-library/trunk/inc_php/unitecreator_actions.class.php#L39; https://www.wordfence.com/threat-intel/vulnerabilities/id/15cf34d8-256b-495e-9385-a5d526bfb335?source=cve; https://plugins.trac.wordpress.org/browser/addon-library/trunk/inc_php/unitecreator_actions.class.php#L39
CVE: CVE-2024-1735
Published: 2024-02-26
Description: A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authentication. All users who rely on armeria-saml older than version 1.27.2 must upgrade to 1.27.2 or later.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287
References: https://github.com/line/armeria/security/advisories/GHSA-4m6j-23p2-8c54; https://github.com/line/armeria/security/advisories/GHSA-4m6j-23p2-8c54
CVE: CVE-2024-1758
Published: 2024-02-26
Description: The SuperFaktura WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.40.3 via the wc_sf_url_check function. This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. CVE-2024-32803 appears to be a duplicate of this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://plugins.trac.wordpress.org/browser/woocommerce-superfaktura/trunk/class-wc-superfaktura.php#L3418; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3040372%40woocommerce-superfaktura&new=3040372%40woocommerce-superfaktura&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/520598d7-863f-4bf3-ba74-fa9b2cc32767?source=cve
CVE: CVE-2024-1871
Published: 2024-02-26
Description: A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. Affected is an unknown function of the file /process/assignp.php of the component Project Assignment Report. The manipulation of the argument pname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-254694 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20EMPLOYEE%20MANAGEMENT%20SYSTEM/XSS%20Vulnerability%20in%20Project%20Assignment%20Report.md; https://vuldb.com/?ctiid.254694; https://vuldb.com/?id.254694
CVE: CVE-2024-1875
Published: 2024-02-26
Description: A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. This issue affects some unknown processing of the file users/register-complaint.php of the component Lodge Complaint Section. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254723.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://toradah.notion.site/Remote-Code-Execution-RCE-via-Unrestricted-File-Upload-6ed7ae9c833c4d8baaae7d64ae0c4a47?pvs=4; https://vuldb.com/?ctiid.254723; https://vuldb.com/?id.254723
CVE: CVE-2024-1876
Published: 2024-02-26
Description: A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /psubmit.php. The manipulation of the argument pid with the input '+or+1%3d1%23 leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254724.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20EMPLOYEE%20MANAGEMENT%20SYSTEM/Employee%20Project%20SQL%20Injection%20Update.md; https://vuldb.com/?ctiid.254724; https://vuldb.com/?id.254724
CVE: CVE-2024-1877
Published: 2024-02-26
Description: A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /cancel.php. The manipulation of the argument id with the input 1%20or%201=1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-254725 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20EMPLOYEE%20MANAGEMENT%20SYSTEM/Employee%20Leave%20Cancel%20SQL%20Injection.md; https://vuldb.com/?ctiid.254725; https://vuldb.com/?id.254725
CVE: CVE-2024-1878
Published: 2024-02-26
Description: A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /myprofile.php. The manipulation of the argument id with the input 1%20or%201=1 leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-254726 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20EMPLOYEE%20MANAGEMENT%20SYSTEM/IDOR%20Employee%20Profile.md; https://vuldb.com/?ctiid.254726; https://vuldb.com/?id.254726
CVE: CVE-2024-1885
Published: 2024-02-26
Description: This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage.

CVSS Score: 6.3 (MEDIUM)
CWE: CWE-94
References: https://lgsecurity.lge.com/bulletins/idproducts#updateDetails; https://lgsecurity.lge.com/bulletins/idproducts#updateDetails
CVE: CVE-2024-1886
Published: 2024-02-26
Description: 


This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.




CVSS Score: 3.0 (LOW)
CWE: CWE-35, CWE-22
References: https://lgsecurity.lge.com/bulletins/idproducts#updateDetails; https://lgsecurity.lge.com/bulletins/idproducts#updateDetails
CVE: CVE-2024-1889
Published: 2024-02-26
Description: Cross-Site Request Forgery vulnerability in SMA Cluster Controller, affecting version 01.05.01.R. This vulnerability could allow an attacker to send a malicious link to an authenticated user to perform actions with these user permissions on the affected device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-sma-products; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-sma-products
CVE: CVE-2024-1890
Published: 2024-02-26
Description: Vulnerability whereby an attacker could send a malicious link to an authenticated operator, which could allow remote attackers to perform a clickjacking attack on Sunny WebBox firmware version 1.6.1 and earlier.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-1021
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-sma-products; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-sma-products
CVE: CVE-2024-21802
Published: 2024-02-26
Description: A heap-based buffer overflow vulnerability exists in the GGUF library info-&gt;ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1914; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1914; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1914
CVE: CVE-2024-21825
Published: 2024-02-26
Description: A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1912; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1912; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1912
CVE: CVE-2024-21836
Published: 2024-02-26
Description: A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1915; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1915; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1915
CVE: CVE-2024-22201
Published: 2024-02-26
Description: Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptors, eventually causing the server to stop accepting new connections from valid clients. The vulnerability is patched in 9.4.54, 10.0.20, 11.0.20, and 12.0.6.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-770
References: http://www.openwall.com/lists/oss-security/2024/03/20/2; https://github.com/jetty/jetty.project/issues/11256; https://github.com/jetty/jetty.project/security/advisories/GHSA-rggv-cv7r-mw98
CVE: CVE-2024-22371
Published: 2024-02-26
Description: Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that exposes sensitive data. Vulnerability in Apache Camel.This issue affects Apache Camel: from 3.21.X through 3.21.3, from 3.22.X through 3.22.0, from 4.0.X through 4.0.3, from 4.X through 4.3.0.

Users are recommended to upgrade to version 3.21.4, 3.22.1, 4.0.4 or 4.4.0, which fixes the issue.


CVSS Score: 2.9 (LOW)
CWE: CWE-922
References: https://camel.apache.org/security/CVE-2024-22371.html; https://camel.apache.org/security/CVE-2024-22371.html
CVE: CVE-2024-22873
Published: 2024-02-26
Description: Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery (SSRF) via the event subscription function (/service/subscription.go). This vulnerability allows attackers to access internal requests via a crafted POST request.
CVSS Score: 8.1 (HIGH)
CWE: CWE-918
References: http://blueking.com; http://tencent.com; https://gist.github.com/exp1orer/0f190c6a64b668a9b1c4c47789affa09
CVE: CVE-2024-23496
Published: 2024-02-26
Description: A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1913; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1913; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1913
CVE: CVE-2024-23605
Published: 2024-02-26
Description: A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1916; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1916; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1916
CVE: CVE-2024-23835
Published: 2024-02-26
Description: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.  Prior to version 7.0.3, excessive memory use during pgsql parsing could lead to OOM-related crashes.  This vulnerability is patched in 7.0.3.  As workaround, users can disable the pgsql app layer parser.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-770, CWE-770
References: https://github.com/OISF/suricata/commit/86de7cffa7e8f06fe9d600127e7dabe89c7e81dd; https://github.com/OISF/suricata/commit/f52c033e566beafb4480c139eb18662a2870464f; https://github.com/OISF/suricata/security/advisories/GHSA-8583-353f-mvwc
CVE: CVE-2024-23836
Published: 2024-02-26
Description: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service.  This vulnerability is patched in 6.0.16 or 7.0.3.  Workarounds include disabling the affected protocol app-layer parser in the yaml and reducing the `stream.reassembly.depth` value helps reduce the severity of the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://github.com/OISF/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7; https://github.com/OISF/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747; https://github.com/OISF/suricata/commit/83c5567ea7b0b28376f57dcfee9c6301448c7bc7
CVE: CVE-2024-23837
Published: 2024-02-26
Description: LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://github.com/OISF/libhtp/commit/20ac301d801cdf01b3f021cca08a22a87f477c4a; https://github.com/OISF/libhtp/security/advisories/GHSA-f9wf-rrjj-qx8m; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/
CVE: CVE-2024-23839
Published: 2024-02-26
Description: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.  Prior to 7.0.3, specially crafted traffic can cause a heap use after free if the ruleset uses the http.request_header or http.response_header keyword.  The vulnerability has been patched in 7.0.3.  To work around the vulnerability, avoid the http.request_header and http.response_header keywords.
CVSS Score: 7.1 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/OISF/suricata/commit/cd731fcaf42e5f7078c9be643bfa0cee2ad53e8f; https://github.com/OISF/suricata/security/advisories/GHSA-qxj6-hr2p-mmc7; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/
CVE: CVE-2024-24568
Published: 2024-02-26
Description: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.  Prior to 7.0.3, the rules inspecting HTTP2 headers can get bypassed by crafted traffic. The vulnerability has been patched in 7.0.3.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/OISF/suricata/commit/478a2a38f54e2ae235f8486bff87d7d66b6307f0; https://github.com/OISF/suricata/security/advisories/GHSA-gv29-5hqw-5h8c; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/
CVE: CVE-2024-24714
Published: 2024-02-26
Description: Unrestricted Upload of File with Dangerous Type vulnerability in bPlugins LLC Icons Font Loader.This issue affects Icons Font Loader: from n/a through 1.1.4.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://patchstack.com/database/vulnerability/icons-font-loader/wordpress-icons-font-loader-plugin-1-1-4-arbitrary-file-upload-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/icons-font-loader/wordpress-icons-font-loader-plugin-1-1-4-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2024-25081
Published: 2024-02-26
Description: Splinefont in FontForge through 20230101 allows command injection via crafted filenames.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-77
References: http://www.openwall.com/lists/oss-security/2024/03/08/2; https://fontforge.org/en-US/downloads/; https://github.com/fontforge/fontforge/pull/5367
CVE: CVE-2024-25082
Published: 2024-02-26
Description: Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: http://www.openwall.com/lists/oss-security/2024/03/08/2; https://fontforge.org/en-US/downloads/; https://github.com/fontforge/fontforge/pull/5367
CVE: CVE-2024-25344
Published: 2024-02-26
Description: Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 allows a remtoe attacker to execute arbitrary code and obtain sensitive information via the settings.php, settings+company.php, settings_defaults.php,settings_integrations.php, settings_invoice.php, settings_localization.php, settings_mail.php components.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/itflow-org/itflow/commit/432488eca3998c5be6b6b9e8f8ba01f54bc12378; https://github.com/itflow-org/itflow/commit/8068cb6081e4760860a634c1066b2c64d0ee2d46; https://itflow.org/