deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-12625
Published: 2019-07-10
Description: An issue was discovered in Eventum 3.5.0. /htdocs/validate.php has XSS via the values parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/eventum/eventum/blob/master/CHANGELOG.md; https://github.com/eventum/eventum/releases/tag/v3.5.2; https://github.com/eventum/eventum/blob/master/CHANGELOG.md
CVE: CVE-2018-12626
Published: 2019-07-10
Description: An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/eventum/eventum/blob/master/CHANGELOG.md; https://github.com/eventum/eventum/releases/tag/v3.5.2; https://github.com/eventum/eventum/blob/master/CHANGELOG.md
CVE: CVE-2018-12627
Published: 2019-07-10
Description: An issue was discovered in Eventum 3.5.0. /htdocs/list.php has XSS via the show_notification_list_issues or show_authorized_issues parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/eventum/eventum/blob/master/CHANGELOG.md; https://github.com/eventum/eventum/releases/tag/v3.5.2; https://github.com/eventum/eventum/blob/master/CHANGELOG.md
CVE: CVE-2018-12628
Published: 2019-07-10
Description: An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/eventum/eventum/blob/master/CHANGELOG.md; https://github.com/eventum/eventum/releases/tag/v3.5.2; https://github.com/eventum/eventum/blob/master/CHANGELOG.md
CVE: CVE-2018-14550
Published: 2019-07-10
Description: An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/fouzhe/security/tree/master/libpng#stack-buffer-overflow-in-png2pnm-in-function-get_token; https://github.com/glennrp/libpng/issues/246; https://security.gentoo.org/glsa/201908-02
CVE: CVE-2019-10119
Published: 2019-07-10
Description: eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16 use session IDs for authentication but lack authorization checks. An attacker can obtain a session ID via an invalid login attempt to the RemoteApi account, aka HMCCU-154. This leads to automatic login as admin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf; https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf; https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf
CVE: CVE-2019-10120
Published: 2019-07-10
Description: On eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16, automatic login configuration (aka setAutoLogin) can be achieved by continuing to use a session ID after a logout, aka HMCCU-154.
CVSS Score: 8.8 (HIGH)
CWE: CWE-384
References: https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf; https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf; https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf
CVE: CVE-2019-10121
Published: 2019-07-10
Description: eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.15 use session IDs for authentication but lack authorization checks. An attacker can obtain a session ID via the user authentication dialogue, aka HMCCU-153. This leads to automatic login as admin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://os-s.de/advisories/OSS-2018-01.pdf; https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf; https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf
CVE: CVE-2019-10122
Published: 2019-07-10
Description: eQ-3 HomeMatic CCU2 devices before 2.41.9 and CCU3 devices before 3.43.16 have buffer overflows in the ReGa ise GmbH HTTP-Server 2.0 component, aka HMCCU-179. This may lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf; https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf; https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf
CVE: CVE-2018-14494
Published: 2019-07-10
Description: Vivotek FD8136 devices allow Remote Command Injection, related to BusyBox and wget. NOTE: the vendor sent a clarification on 2019-09-17 explaining that, although this CVE was first populated in July 2019, it is a historical vulnerability that does not apply to any current or recent Vivotek hardware or firmware
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.vdalabs.com/2018/07/23/professional-iot-hacking-series-target-selection-firmware-analysis/; https://www.vdalabs.com/2018/08/06/professional-iot-hacking-series-hunting-remote-command-injection/; https://www.vdalabs.com/2018/07/23/professional-iot-hacking-series-target-selection-firmware-analysis/
CVE: CVE-2019-12723
Published: 2019-07-10
Description: An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via container_id and old_order parameters to ajax/reorder.php by an unauthenticated user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/pluginsGLPI/fields/blob/master/ajax/reorder.php; https://github.com/pluginsGLPI/fields/pull/317; https://github.com/pluginsGLPI/fields/releases/tag/1.10.0
CVE: CVE-2018-14495
Published: 2019-07-10
Description: Vivotek FD8136 devices allow Remote Command Injection, aka "another command injection vulnerability in our target device," a different issue than CVE-2018-14494. NOTE: The vendor has disputed this as a vulnerability and states that the issue does not cause a web server crash or have any other affect on it's performance
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.vdalabs.com/2018/07/23/professional-iot-hacking-series-target-selection-firmware-analysis/; https://www.vdalabs.com/2018/08/06/professional-iot-hacking-series-hunting-remote-command-injection/; https://www.vdalabs.com/2018/07/23/professional-iot-hacking-series-target-selection-firmware-analysis/
CVE: CVE-2018-14496
Published: 2019-07-10
Description: Vivotek FD8136 devices allow remote memory corruption and remote code execution because of a stack-based buffer overflow, related to sprintf, vlocal_buff_4326, and set_getparam.cgi. NOTE: The vendor has disputed this as a vulnerability and states that the issue does not cause a web server crash or have any other affect on it's performance
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.vdalabs.com/2018/07/23/professional-iot-hacking-series-target-selection-firmware-analysis/; https://www.vdalabs.com/2018/11/29/professional-iot-hacking-series-hunting-remote-memory-corruption/; https://www.vdalabs.com/2018/07/23/professional-iot-hacking-series-target-selection-firmware-analysis/
CVE: CVE-2018-17147
Published: 2019-07-10
Description: Nagios XI before 5.5.4 has XSS in the auto login admin management page.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/109116; https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT; http://www.securityfocus.com/bid/109116
CVE: CVE-2018-20851
Published: 2019-07-10
Description: Helpy before 2.2.0 allows agents to edit admins.
CVSS Score: 8.8 (HIGH)
References: https://github.com/helpyio/helpy/commit/a26dd854deb17e36a605f91a6f51d128e98d3818; https://github.com/helpyio/helpy/compare/d64e97a...592bc60; https://github.com/helpyio/helpy/commit/a26dd854deb17e36a605f91a6f51d128e98d3818
CVE: CVE-2019-10653
Published: 2019-07-10
Description: An issue was discovered in Hsycms V1.1. There is a SQL injection vulnerability via a /news/*.html page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.cnblogs.com/7bit/articles/10551499.html; https://www.cnblogs.com/7bit/articles/10551499.html
CVE: CVE-2019-12724
Published: 2019-07-10
Description: An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI. It allows a stored XSS attack via the $_POST['name'] parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/pluginsGLPI/news/blob/master/front/alert.form.php; https://github.com/pluginsGLPI/news/pull/69; https://github.com/pluginsGLPI/news/releases/tag/1.5.3
CVE: CVE-2019-13071
Published: 2019-07-10
Description: CSRF in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows an attacker to submit POST requests to any forms in the web application. This can be exploited by tricking an authenticated user into visiting an attacker controlled web page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/153581/PowerPanel-Business-Edition-3.4.0-Cross-Site-Request-Forgery.html; http://seclists.org/fulldisclosure/2019/Jul/11; http://packetstormsecurity.com/files/153581/PowerPanel-Business-Edition-3.4.0-Cross-Site-Request-Forgery.html
CVE: CVE-2019-13224
Published: 2019-07-10
Description: A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://github.com/kkos/oniguruma/commit/0f7f61ed1b7b697e283e37bd2d731d0bd57adb55; https://lists.debian.org/debian-lts-announce/2019/07/msg00013.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWCPDTZOIUKGMFAD5NAKUB7FPJFAIQN5/
CVE: CVE-2019-13225
Published: 2019-07-10
Description: A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/kkos/oniguruma/commit/c509265c5f6ae7264f7b8a8aae1cfa5fc59d108c; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWCPDTZOIUKGMFAD5NAKUB7FPJFAIQN5/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SNL26OZSQRVLEO6JRNUVIMZTICXBNEQW/
CVE: CVE-2019-13240
Published: 2019-07-10
Description: An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without any information except the associated email address.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-640
References: https://github.com/glpi-project/glpi/commit/5da9f99b2d81713b1e36016b47ce656a33648bc7; https://github.com/glpi-project/glpi/commit/86a43ae47b3dd844947f40a2ffcf1a36e53dbba6; https://github.com/glpi-project/glpi/compare/1783b78...8e621f6
CVE: CVE-2019-13396
Published: 2019-07-10
Description: FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the form_include parameter in an index.php?q=system-handle-form-submit POST request because of an include_once in system_handle_form_submit in modules/system/system.module.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://getflightpath.com/node/2650; http://packetstormsecurity.com/files/153626/FlightPath-Local-File-Inclusion.html; http://getflightpath.com/node/2650
CVE: CVE-2017-12652
Published: 2019-07-10
Description: libpng before 1.6.32 does not properly check the length of chunks against the user limit.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/109269; https://github.com/glennrp/libpng/blob/df7e9dae0c4aac63d55361e35709c864fa1b8363/ANNOUNCE; https://github.com/pnggroup/libpng/commit/347538efbdc21b8df684ebd92d37400b3ce85d55
CVE: CVE-2017-6217
Published: 2019-07-10
Description: paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/paypal/adaptivepayments-sdk-php/issues/87; https://github.com/paypal/adaptivepayments-sdk-php/issues/87
CVE: CVE-2017-7189
Published: 2019-07-10
Description: main/streams/xp_socket.c in PHP 7.x before 2017-03-07 misparses fsockopen calls, such as by interpreting fsockopen('127.0.0.1:80', 443) as if the address/port were 127.0.0.1:80:443, which is later truncated to 127.0.0.1:80. This behavior has a security risk if the explicitly provided port number (i.e., 443 in this example) is hardcoded into an application as a security policy, but the hostname argument (i.e., 127.0.0.1:80 in this example) is obtained from untrusted input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://bugs.php.net/bug.php?id=74192; https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595a; https://bugs.php.net/bug.php?id=74192
CVE: CVE-2018-14831
Published: 2019-07-10
Description: An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a crafted /admin.php?s=Tpl/Add/id/ URI.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: https://gist.github.com/feric/98180bad0a73716e143ff8dc03fda12f; https://gist.github.com/feric/98180bad0a73716e143ff8dc03fda12f
CVE: CVE-2018-19493
Published: 2019-07-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is a persistent XSS vulnerability in the environment pages due to a lack of input validation and output encoding.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/109122; https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/53037
CVE: CVE-2018-19494
Published: 2019-07-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access vulnerability that allows an unauthorized user to view private group names.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/51262; https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
CVE: CVE-2018-19495
Published: 2019-07-10
Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an SSRF vulnerability in the Prometheus integration.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/; https://gitlab.com/gitlab-org/gitlab-ee/issues/8167; https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
CVE: CVE-2018-19496
Published: 2019-07-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access control vulnerability that permits a user with insufficient privileges to promote a project milestone to a group milestone.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/51301; https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
CVE: CVE-2018-19577
Published: 2019-07-10
Description: Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the title and namespace of a confidential issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/109179; https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/52444
CVE: CVE-2019-12467
Published: 2019-07-10
Description: MediaWiki through 1.32.1 has Incorrect Access Control (issue 1 of 3). A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
CVSS Score: 5.3 (MEDIUM)
References: https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html; https://phabricator.wikimedia.org/T209794; https://seclists.org/bugtraq/2019/Jun/12
CVE: CVE-2019-12468
Published: 2019-07-10
Description: An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.27.0 through 1.32.1. Directly POSTing to Special:ChangeEmail would allow for bypassing re-authentication, allowing for potential account takeover.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://lists.wikimedia.org/pipermail/mediawiki-announce/; https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html; https://phabricator.wikimedia.org/T197279
CVE: CVE-2018-10531
Published: 2019-07-10
Description: An issue was discovered in the America's Army Proving Grounds platform for the Unreal Engine. With a false packet sent via UDP, the application server responds with several bytes, giving the possibility of DoS amplification, even being able to be used in DDoS attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.xlabs.com.br/blog/author/mauricio-correa/; https://www.xlabs.com.br/blog/cve-2018-10531-americas-army-proving-grounds-ddos-amplification/; https://www.xlabs.com.br/blog/author/mauricio-correa/
CVE: CVE-2018-19569
Published: 2019-07-10
Description: GitLab CE/EE, versions 8.8 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an authorization vulnerability that allows access to the web-UI as a user using a Personal Access Token of any scope.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: http://www.securityfocus.com/bid/109118; https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/50319
CVE: CVE-2018-19570
Published: 2019-07-10
Description: GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecognized HTML tags.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/109169; https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/52392
CVE: CVE-2018-19572
Published: 2019-07-10
Description: GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the GitLab Pages chroot environment. This is fixed in versions 11.5.1, 11.4.8, and 11.3.11.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/; https://gitlab.com/gitlab-org/gitlab-pages/issues/98; https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
CVE: CVE-2018-19573
Published: 2019-07-10
Description: GitLab CE/EE, versions 10.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via Mermaid.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/109164; https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/45906
CVE: CVE-2018-19574
Published: 2019-07-10
Description: GitLab CE/EE, versions 7.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in the OAuth authorization page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/109163; https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/42057
CVE: CVE-2018-19575
Published: 2019-07-10
Description: GitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an insecure direct object reference issue that allows a user to make comments on a locked issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://www.securityfocus.com/bid/109121; https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/52523
CVE: CVE-2018-19576
Published: 2019-07-10
Description: GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allows a Guest user to make changes to or delete their own comments on an issue, after the issue was made Confidential.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/51238; https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
CVE: CVE-2019-12466
Published: 2019-07-10
Description: Wikimedia MediaWiki through 1.32.1 allows CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html; https://phabricator.wikimedia.org/T25227; https://seclists.org/bugtraq/2019/Jun/12
CVE: CVE-2019-12471
Published: 2019-07-10
Description: Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS. Loading user JavaScript from a non-existent account allows anyone to create the account, and perform XSS on users loading that script. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html; https://phabricator.wikimedia.org/T207603; https://seclists.org/bugtraq/2019/Jun/12
CVE: CVE-2019-12472
Published: 2019-07-10
Description: An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1. It is possible to bypass the limits on IP range blocks ($wgBlockCIDRLimit) by using the API. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
CVSS Score: 7.5 (HIGH)
References: https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html; https://phabricator.wikimedia.org/T199540; https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
CVE: CVE-2019-12473
Published: 2019-07-10
Description: Wikimedia MediaWiki 1.27.0 through 1.32.1 might allow DoS. Passing invalid titles to the API could cause a DoS by querying the entire watchlist table. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
CVSS Score: 7.5 (HIGH)
References: https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html; https://phabricator.wikimedia.org/T204729; https://seclists.org/bugtraq/2019/Jun/12
CVE: CVE-2019-12474
Published: 2019-07-10
Description: Wikimedia MediaWiki 1.23.0 through 1.32.1 has an information leak. Privileged API responses that include whether a recent change has been patrolled may be cached publicly. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
CVSS Score: 7.5 (HIGH)
References: https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html; https://phabricator.wikimedia.org/T212118; https://seclists.org/bugtraq/2019/Jun/12
CVE: CVE-2018-19571
Published: 2019-07-10
Description: GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhooks.
CVSS Score: 7.7 (HIGH)
CWE: CWE-918
References: http://packetstormsecurity.com/files/160516/GitLab-11.4.7-Remote-Code-Execution.html; http://packetstormsecurity.com/files/160699/GitLab-11.4.7-Remote-Code-Execution.html; https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/