deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-28468
Published: 2022-04-05
Description: Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Payroll-Management-System; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Payroll-Management-System
CVE: CVE-2021-45103
Published: 2022-04-06
Description: An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer.
CVSS Score: 8.1 (HIGH)
CWE: CWE-532
References: https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0005/; https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2022-0001; https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0005/
CVE: CVE-2022-26250
Published: 2022-04-06
Description: Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://synaman.com; http://synametrics.com; https://www.bencteux.fr/posts/synaman/
CVE: CVE-2022-26251
Published: 2022-04-06
Description: The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: http://synaman.com; http://synametrics.com; https://www.bencteux.fr/posts/synaman/
CVE: CVE-2022-26952
Published: 2022-04-06
Description: Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow in the function for building the Location header string when an unauthenticated user is redirected to the authentication page.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/X-C3LL/PoC-CVEs/blob/master/CVE-2022-26952%20%26%20CVE-2022-26953/readme.md; https://hub.digi.com/dp/path=/support/asset/digi-passport-1.5.2-firmware-release-notes/; https://hub.digi.com/support/products/infrastructure-management/digi-passport/
CVE: CVE-2022-26953
Published: 2022-04-06
Description: Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow. An attacker can supply a string in the page parameter for reboot.asp endpoint, allowing him to force an overflow when the string is concatenated to the HTML body.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/X-C3LL/PoC-CVEs/blob/master/CVE-2022-26952%20%26%20CVE-2022-26953/readme.md; https://hub.digi.com/dp/path=/support/asset/digi-passport-1.5.2-firmware-release-notes/; https://hub.digi.com/support/products/infrastructure-management/digi-passport/
CVE: CVE-2021-30497
Published: 2022-04-06
Description: Ivanti Avalanche (Premise) 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. The imageFilePath parameter processed by the /AvalancheWeb/image endpoint is not verified to be within the scope of the image folder, e.g., the attacker can obtain sensitive information via the C:/Windows/system32/config/system.sav value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://forums.ivanti.com/s/article/Security-Alert-CVE-2021-30497-Directory-Traversal-Vulnerability?language=en_US; https://help.ivanti.com/wl/help/en_us/aod/5.4/Avalanche/Console/Launching_the_Avalanche.htm; https://ssd-disclosure.com/ssd-advisory-ivanti-avalanche-directory-traversal/
CVE: CVE-2021-40374
Published: 2022-04-06
Description: A stored cross-site scripting (XSS) vulnerability was identified in Apperta Foundation OpenEyes 3.5.1. Updating a patient's details allows remote attackers to inject arbitrary web script or HTML via the Address1 parameter. This JavaScript then executes when the patient profile is loaded, which could be used in a XSS attack.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/DCKento/CVE-2021-40374; https://openeyes.apperta.org/; https://github.com/DCKento/CVE-2021-40374
CVE: CVE-2021-40375
Published: 2022-04-06
Description: Apperta Foundation OpenEyes 3.5.1 allows remote attackers to view the sensitive information of patients without having the intended level of privilege. Despite OpenEyes returning a Forbidden error message, the contents of a patient's profile are still returned in the server response. This response can be read in an intercepting proxy or by viewing the page source. Sensitive information returned in responses includes patient PII and medication records or history.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/DCKento/CVE-2021-40375; https://openeyes.apperta.org/; https://github.com/DCKento/CVE-2021-40375
CVE: CVE-2021-45104
Published: 2022-04-06
Description: An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data.
CVSS Score: 7.4 (HIGH)
CWE: CWE-319
References: https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0006/; https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2022-0002; https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0006/
CVE: CVE-2022-26110
Published: 2022-04-06
Description: An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0. When a user authenticates to an HTCondor daemon via the CLAIMTOBE method, the user can then impersonate any entity when issuing additional commands to that daemon.
CVSS Score: 8.8 (HIGH)
References: https://lists.debian.org/debian-lts-announce/2022/04/msg00016.html; https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2022-0003/; https://www.debian.org/security/2022/dsa-5144
CVE: CVE-2022-1248
Published: 2022-04-06
Description: A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the file /SAP_Information_System/controllers/add_admin.php. An unauthenticated attacker is able to create a new admin account for the web application with a simple POST request. Exploit details were disclosed.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287, CWE-306
References: http://packetstormsecurity.com/files/166609/SAP-Information-System-1.0.0-Missing-Authorization.html; https://vuldb.com/?id.196550; http://packetstormsecurity.com/files/166609/SAP-Information-System-1.0.0-Missing-Authorization.html
CVE: CVE-2022-1234
Published: 2022-04-06
Description: XSS in livehelperchat in GitHub repository livehelperchat/livehelperchat prior to 3.97. This vulnerability has the potential to deface websites, result in compromised user accounts, and can run malicious code on web pages, which can lead to a compromise of the user’s device.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/livehelperchat/livehelperchat/commit/a09aa0d793818dc4cae78ac4bcfb557d4fd2a30d; https://huntr.dev/bounties/0d[PII_REDACTED]-4053-85c1-b41b94c814d4; https://github.com/livehelperchat/livehelperchat/commit/a09aa0d793818dc4cae78ac4bcfb557d4fd2a30d
CVE: CVE-2020-29013
Published: 2022-04-06
Description: An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: https://fortiguard.com/advisory/FG-IR-20-178; https://fortiguard.com/advisory/FG-IR-20-178
CVE: CVE-2022-23441
Published: 2022-04-06
Description: A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-798
References: https://fortiguard.com/psirt/FG-IR-22-019; https://fortiguard.com/psirt/FG-IR-22-019
CVE: CVE-2022-23446
Published: 2022-04-06
Description: A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole application unresponsive via changing its root directory access permission.
CVSS Score: 4.4 (MEDIUM)
References: https://fortiguard.com/psirt/FG-IR-22-052; https://fortiguard.com/psirt/FG-IR-22-052
CVE: CVE-2021-24009
Published: 2022-04-06
Description: Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of FortiWAN before 4.5.9 may allow an authenticated attacker to execute arbitrary commands on the underlying system's shell via specifically crafted HTTP requests.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://fortiguard.com/psirt/FG-IR-21-060; https://fortiguard.com/psirt/FG-IR-21-060
CVE: CVE-2021-26112
Published: 2022-04-06
Description: Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow an unauthenticated attacker to potentially corrupt control data in memory and execute arbitrary code via specifically crafted requests.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://fortiguard.com/psirt/FG-IR-21-065; https://fortiguard.com/psirt/FG-IR-21-065
CVE: CVE-2021-26114
Published: 2022-04-06
Description: Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fortiguard.com/psirt/FG-IR-21-062; https://fortiguard.com/psirt/FG-IR-21-062
CVE: CVE-2021-32593
Published: 2022-04-06
Description: A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-327
References: https://fortiguard.com/psirt/FG-IR-21-070; https://fortiguard.com/psirt/FG-IR-21-070
CVE: CVE-2021-43205
Published: 2022-04-06
Description: An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Linux version 7.0.2 and below, 6.4.7 and below and 6.2.9 and below may allow an unauthenticated attacker to access the confighandler webserver via external binaries.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://fortiguard.com/psirt/FG-IR-21-226; https://fortiguard.com/psirt/FG-IR-21-226
CVE: CVE-2021-44169
Published: 2022-04-06
Description: A improper initialization in Fortinet FortiClient (Windows) version 6.0.10 and below, version 6.2.9 and below, version 6.4.7 and below, version 7.0.3 and below allows attacker to gain administrative privileges via placing a malicious executable inside the FortiClient installer's directory.
CVSS Score: 8.2 (HIGH)
CWE: CWE-665
References: https://fortiguard.com/psirt/FG-IR-21-238; https://fortiguard.com/psirt/FG-IR-21-238
CVE: CVE-2022-1237
Published: 2022-04-06
Description: Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://github.com/radareorg/radare2/commit/2d782cdaa2112c10b8dd5e7a93c134b2ada9c1a6; https://huntr.dev/bounties/ad3c9c4c-76e7-40c8-bd4a-c095acd8bb40; https://github.com/radareorg/radare2/commit/2d782cdaa2112c10b8dd5e7a93c134b2ada9c1a6
CVE: CVE-2022-1238
Published: 2022-04-06
Description: Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/radareorg/radare2/commit/c40a4f9862104ede15d0ba05ccbf[PII_REDACTED]78; https://huntr.dev/bounties/47422cdf-aad2-4405-a6a1-6f63a3a93200; https://github.com/radareorg/radare2/commit/c40a4f9862104ede15d0ba05ccbf[PII_REDACTED]78
CVE: CVE-2022-23440
Published: 2022-04-06
Description: A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment.
CVSS Score: 7.8 (HIGH)
CWE: CWE-798
References: https://fortiguard.com/psirt/FG-IR-22-018; https://fortiguard.com/psirt/FG-IR-22-018
CVE: CVE-2022-1240
Published: 2022-04-06
Description: Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the `r_str_ncpy` function. Therefore I think it is very likely to be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://github.com/radareorg/radare2/commit/ca8d8b39f3e34a4fd943270330b80f1148129de4; https://huntr.dev/bounties/e589bd97-4c74-4e79-93b5-0951a281facc; https://github.com/radareorg/radare2/commit/ca8d8b39f3e34a4fd943270330b80f1148129de4
CVE: CVE-2022-1253
Published: 2022-04-06
Description: Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://github.com/strukturag/libde265/commit/8e89fe0e175d2870c39486fdd09250b230ec10b8; https://huntr.dev/bounties/1-other-strukturag/libde265; https://www.debian.org/security/2023/dsa-5346
CVE: CVE-2022-24786
Published: 2022-04-06
Description: PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI (Reference Picture Selection Indication) packet, but any app that directly uses pjmedia_rtcp_fb_parse_rpsi() will be affected. A patch is available in the `master` branch of the `pjsip/pjproject` GitHub repository. There are currently no known workarounds.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-787, CWE-125, CWE-787
References: https://github.com/pjsip/pjproject/commit/11559e49e65bdf00922ad5ae28913ec6a198d508; https://github.com/pjsip/pjproject/security/advisories/GHSA-vhxv-phmx-g52q; https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html
CVE: CVE-2022-24793
Published: 2022-04-06
Description: PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.12 and prior affects applications that use PJSIP DNS resolution. It doesn't affect PJSIP users who utilize an external resolver. This vulnerability is related to CVE-2023-27585. The difference is that this issue is in parsing the query record `parse_rr()`, while the issue in CVE-2023-27585 is in `parse_query()`. A patch is available in the `master` branch of the `pjsip/pjproject` GitHub repository. A workaround is to disable DNS resolution in PJSIP config (by setting `nameserver_count` to zero) or use an external resolver instead.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/pjsip/pjproject/commit/9fae8f43accef8ea65d4a8ae9cdf297c46cfe29a; https://github.com/pjsip/pjproject/security/advisories/GHSA-p6g5-v97c-w5q4; https://lists.debian.org/debian-lts-announce/2022/05/msg00047.html
CVE: CVE-2022-27107
Published: 2022-04-06
Description: OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via the GET/POST "createVideo[linkAddress]" parameter
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/orangehrm/orangehrm/issues/1176; https://github.com/orangehrm/orangehrm/issues/1176
CVE: CVE-2022-27108
Published: 2022-04-06
Description: OrangeHRM 4.10 is vulnerable to Insecure Direct Object Reference (IDOR) via the end point symfony/web/index.php/time/createTimesheet`. Any user can create a timesheet in another user's account.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://github.com/orangehrm/orangehrm/issues/1173; https://github.com/orangehrm/orangehrm/issues/1173
CVE: CVE-2022-27109
Published: 2022-04-06
Description: OrangeHRM 4.10 suffers from a Referer header injection redirect vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://github.com/orangehrm/orangehrm/issues/1174; https://github.com/orangehrm/orangehrm/issues/1174
CVE: CVE-2022-27110
Published: 2022-04-06
Description: OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://github.com/orangehrm/orangehrm/issues/1175; https://github.com/orangehrm/orangehrm/issues/1175
CVE: CVE-2021-22127
Published: 2022-04-06
Description: An improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3, FortiClient for Linux 6.2.x before 6.2.9 may allow an unauthenticated attacker to execute arbitrary code on the host operating system as root via tricking the user into connecting to a network with a malicious name.
CVSS Score: 7.1 (HIGH)
CWE: CWE-78
References: https://fortiguard.com/advisory/FG-IR-20-241; https://fortiguard.com/advisory/FG-IR-20-241
CVE: CVE-2021-26104
Published: 2022-04-06
Description: Multiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, and FortiPortal 5.2.5 and below, 5.3.5 and below and 6.0.4 and below may allow a local authenticated and unprivileged user to execute arbitrary shell commands as root via specifically crafted CLI command parameters.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://fortiguard.com/advisory/FG-IR-21-037; https://github.com/orangecertcc/security-research/security/advisories/GHSA-f73m-fvj3-m2pm; https://fortiguard.com/advisory/FG-IR-21-037
CVE: CVE-2021-26113
Published: 2022-04-06
Description: A use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-916
References: https://fortiguard.com/psirt/FG-IR-21-064; https://fortiguard.com/psirt/FG-IR-21-064
CVE: CVE-2021-26116
Published: 2022-04-06
Description: An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of FortiAuthenticator before 6.3.1 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: https://fortiguard.com/advisory/FG-IR-21-068; https://fortiguard.com/advisory/FG-IR-21-068
CVE: CVE-2021-32585
Published: 2022-04-06
Description: An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow an attacker to perform a stored cross-site scripting attack via specifically crafted HTTP requests.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://fortiguard.com/psirt/FG-IR-21-078; https://fortiguard.com/psirt/FG-IR-21-078
CVE: CVE-2021-41026
Published: 2022-04-06
Description: A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://fortiguard.com/advisory/FG-IR-21-156; https://fortiguard.com/advisory/FG-IR-21-156
CVE: CVE-2022-22410
Published: 2022-04-06
Description: IBM Watson Query with Cloud Pak for Data as a Service could allow an authenticated user to obtain sensitive information that would allow them to examine or alter system configurations or data sources connected to the service. IBM X-Force ID: 222763.
CVSS Score: 7.2 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/222763; https://www.ibm.com/support/pages/node/6569235; https://exchange.xforce.ibmcloud.com/vulnerabilities/222763
CVE: CVE-2021-43138
Published: 2022-04-06
Description: In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1321
References: https://github.com/caolan/async/blob/master/lib/internal/iterator.js; https://github.com/caolan/async/blob/master/lib/mapValuesLimit.js; https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md#v264
CVE: CVE-2022-20784
Published: 2022-04-06
Description: A vulnerability in the Web-Based Reputation Score (WBRS) engine of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass established web request policies and access blocked content on an affected device. This vulnerability is due to incorrect handling of certain character combinations inserted into a URL. An attacker could exploit this vulnerability by sending crafted URLs to be processed by an affected device. A successful exploit could allow the attacker to bypass the web proxy and access web content that has been blocked by policy.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-swa-filter-bypass-XXXTU3X; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-swa-filter-bypass-XXXTU3X
CVE: CVE-2022-24822
Published: 2022-04-06
Description: Podium is a library for building micro frontends. @podium/layout is a module for building a Podium layout server, and @podium/proxy is a module for proxying HTTP requests from a layout server to a podlet server. In @podium/layout prior to version 4.6.110 and @podium/proxy prior to version 4.2.74, an attacker using the `Trailer` header as part of the request against proxy endpoints has the ability to take down the server. All Podium layouts that include podlets with proxy endpoints are affected. `@podium/layout`, which is the main way developers/users are vulnerable to this exploit, has been patched in version `4.6.110`. All earlier versions are vulnerable.`@podium/proxy`, which is the source of the vulnerability and is used by `@podium/layout` has been patched in version `4.2.74`. All earlier versions are vulnerable. It is not easily possible to work around this issue without upgrading.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://github.com/podium-lib/layout/commit/fe43e655432b0a5f07b6475f67babcc2588fb039; https://github.com/podium-lib/layout/releases/tag/v4.6.110; https://github.com/podium-lib/proxy/commit/9698a40df081217ce142d4de71f929baaa339cdf
CVE: CVE-2022-26850
Published: 2022-04-06
Description: When creating or updating credentials for single-user access, Apache NiFi wrote a copy of the Login Identity Providers configuration to the operating system temporary directory. On most platforms, the operating system temporary directory has global read permissions. NiFi immediately moved the temporary file to the final configuration directory, which significantly limited the window of opportunity for access. NiFi 1.16.0 includes updates to replace the Login Identity Providers configuration without writing a file to the operating system temporary directory.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-668
References: http://www.openwall.com/lists/oss-security/2022/04/06/2; https://nifi.apache.org/security.html#CVE-2022-26850; http://www.openwall.com/lists/oss-security/2022/04/06/2