deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-34661
Published: 2021-08-09
Description: The WP Fusion Lite WordPress plugin is vulnerable to Cross-Site Request Forgery via the `show_logs_section` function found in the ~/includes/admin/logging/class-log-handler.php file which allows attackers to drop all logs for the plugin, in versions up to and including 3.37.18.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/browser/wp-fusion-lite/trunk/includes/admin/logging/class-log-handler.php?rev=2533608#L302; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34661; https://plugins.trac.wordpress.org/browser/wp-fusion-lite/trunk/includes/admin/logging/class-log-handler.php?rev=2533608#L302
CVE: CVE-2021-36798
Published: 2021-08-09
Description: A Denial-of-Service (DoS) vulnerability was discovered in Team Server in HelpSystems Cobalt Strike 4.2 and 4.3. It allows remote attackers to crash the C2 server thread and block beacons' communication with it.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://labs.sentinelone.com/hotcobalt-new-cobalt-strike-dos-vulnerability-that-lets-you-halt-operations/; https://www.cobaltstrike.com/releasenotes.txt; https://labs.sentinelone.com/hotcobalt-new-cobalt-strike-dos-vulnerability-that-lets-you-halt-operations/
CVE: CVE-2021-37573
Published: 2021-08-09
Description: A reflected cross-site scripting (XSS) vulnerability in the web server TTiny Java Web Server and Servlet Container (TJWS) <=1.115 allows an adversary to inject malicious code on the server's "404 Page not Found" error page
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/163825/Tiny-Java-Web-Server-1.115-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2021/Aug/13; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-042.txt
CVE: CVE-2021-37788
Published: 2021-08-09
Description: A vulnerability in the web UI of Gurock TestRail v5.3.0.3603 could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjacking attack. The vulnerability is due to insufficient input validation of iFrame data in HTTP requests that are sent to an affected device. An attacker could exploit this vulnerability by sending crafted HTTP packets with malicious iFrame data. A successful exploit could allow the attacker to perform a clickjacking attack where the user is tricked into clicking a malicious link.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-1021
References: https://gist.github.com/rvismit/67bc11dd9ccb[PII_REDACTED]cb81d25740; https://gist.github.com/rvismit/67bc11dd9ccb[PII_REDACTED]cb81d25740
CVE: CVE-2021-33256
Published: 2021-08-09
Description: A CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1 Build No: 6101 can be exploited by an unauthenticated user. The j_username parameter seems to be vulnerable and a reverse shell could be obtained if a privileged user exports "User Attempts Audit Report" as CSV file. Note: The vendor disputes this vulnerability, claiming "This is not a valid vulnerability in our ADSSP product. We don't see this as a security issue at our side.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://docs.unsafe-inline.com/0day/manageengine-adselfservice-plus-6.1-csv-injection; https://docs.unsafe-inline.com/0day/manageengine-adselfservice-plus-6.1-csv-injection
CVE: CVE-2021-20349
Published: 2021-08-09
Description: IBM Tivoli Workload Scheduler 9.4 and 9.5 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and gain lower level privileges. IBM X-Force ID: 194599.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-787
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/194599; https://www.ibm.com/support/pages/node/6479347; https://exchange.xforce.ibmcloud.com/vulnerabilities/194599
CVE: CVE-2021-21740
Published: 2021-08-09
Description: There is an information leak vulnerability in the digital media player (DMS) of ZTE's residential gateway product. The attacker could insert the USB disk with the symbolic link into the residential gateway, and access unauthorized directory information through the symbolic link, causing information leak.
CVSS Score: 2.4 (LOW)
CWE: CWE-59
References: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1017244; https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1017244
CVE: CVE-2021-29714
Published: 2021-08-09
Description: IBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service due to improper input validation. IBM X-Force ID: 200968.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/200968; https://www.ibm.com/support/pages/node/6479397; https://exchange.xforce.ibmcloud.com/vulnerabilities/200968
CVE: CVE-2021-25954
Published: 2021-08-09
Description: In “Dolibarr” application, 2.8.1 to 13.0.4 don’t restrict or incorrectly restricts access to a resource from an unauthorized actor. A low privileged attacker can modify the Private Note which only an administrator has rights to do, the affected field is at “/adherents/note.php?id=1” endpoint.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284, CWE-863
References: https://github.com/Dolibarr/dolibarr/commit/8cc100012d46282799fb19f735a53b[PII_REDACTED]; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25954; https://github.com/Dolibarr/dolibarr/commit/8cc100012d46282799fb19f735a53b[PII_REDACTED]
CVE: CVE-2013-6276
Published: 2021-08-09
Description: QNAP F_VioCard 2312 and F_VioGate 2308 have hardcoded entries in authorized_keys files. NOTE: 1. All active models are not affected. The last affected model was EOL since 2010. 2. The legacy authorization mechanism is no longer adopted in all active models
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://firmware.re/vulns/acsa-2013-002.php; http://web.archive.org/web/[PII_REDACTED]0014/http://firmware.re/vulns/acsa-2013-002.php; http://firmware.re/vulns/acsa-2013-002.php
CVE: CVE-2021-32815
Published: 2021-08-09
Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The assertion failure is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when modifying the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `fi`. ### Patches The bug is fixed in version v0.27.5. ### References Regression test and bug fix: #1739 ### For more information Please see our [security policy](https://github.com/Exiv2/exiv2/security/policy) for information about Exiv2 security.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617, CWE-617
References: https://github.com/Exiv2/exiv2/pull/1739; https://github.com/Exiv2/exiv2/security/advisories/GHSA-mv9g-fxh2-m49m; https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE: CVE-2021-34334
Published: 2021-08-09
Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. The bug is fixed in version v0.27.5.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://github.com/Exiv2/exiv2/pull/1766; https://github.com/Exiv2/exiv2/security/advisories/GHSA-hqjh-hpv8-8r9p; https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE: CVE-2021-37623
Published: 2021-08-09
Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when deleting the IPTC data, which is a less frequently used Exiv2 operation that requires an extra command line option (`-d I rm`). The bug is fixed in version v0.27.5.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://github.com/Exiv2/exiv2/pull/1790; https://github.com/Exiv2/exiv2/security/advisories/GHSA-mvc4-g5pv-4qqq; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FMDT4PJB7P43WSOM3TRQIY3J33BAFVVE/
CVE: CVE-2013-4717
Published: 2021-08-09
Description: Multiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/PreferencesCustomQueue.pm, Kernel/System/CustomerCompany.pm, Kernel/System/Ticket/IndexAccelerator/RuntimeDB.pm, Kernel/System/Ticket/IndexAccelerator/StaticDB.pm, and Kernel/System/TicketSearch.pm.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://web.archive.org/web/[PII_REDACTED]0539/http://www.otrs.com/de/open-source/community-news/security-advisories/security-advisory-2013-05/; https://web.archive.org/web/[PII_REDACTED]0539/http://www.otrs.com/de/open-source/community-news/security-advisories/security-advisory-2013-05/
CVE: CVE-2013-4718
Published: 2021-08-09
Description: Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) ITSM 3.0.x before 3.0.9, 3.1.x before 3.1.10, and 3.2.x before 3.2.7 allows remote authenticated users to inject arbitrary web script or HTML via an ITSM ConfigItem search.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://web.archive.org/web/[PII_REDACTED]0539/http://www.otrs.com/de/open-source/community-news/security-advisories/security-advisory-2013-05/; https://web.archive.org/web/[PII_REDACTED]0539/http://www.otrs.com/de/open-source/community-news/security-advisories/security-advisory-2013-05/
CVE: CVE-2014-9320
Published: 2021-08-09
Description: SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and consequently gain SYSTEM privileges via vectors involving CORBA calls, aka SAP Note 2039905.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/129613/SAP-Business-Objects-Search-Token-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2014/Dec/60; https://exchange.xforce.ibmcloud.com/vulnerabilities/99607
CVE: CVE-2015-2073
Published: 2021-08-09
Description: The File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full pathname, aka SAP Note 2018682.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/130520/SAP-Business-Objects-Unauthorized-File-Repository-Server-Read.html; http://seclists.org/fulldisclosure/2015/Feb/92; http://www.securityfocus.com/archive/1/archive/1/534748/100/0/threaded
CVE: CVE-2015-2074
Published: 2021-08-09
Description: The File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka SAP Note 2018681.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/130521/SAP-Business-Objects-Unauthorized-File-Repository-Server-Write.html; http://seclists.org/fulldisclosure/2015/Feb/93; http://www.securityfocus.com/archive/1/archive/1/534749/100/0/threaded
CVE: CVE-2015-7731
Published: 2021-08-09
Description: SAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other sensitive information via the DataVault, aka SAP Security Note 2094830.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://seclists.org/bugtraq/2015/Aug/39; https://www.onapsis.com/research/security-advisories/SAP-Mobile-Platform-DataVault-Keystream-Recovery; https://seclists.org/bugtraq/2015/Aug/39
CVE: CVE-2018-17861
Published: 2021-08-09
Description: A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Portal/EPP allows remote attackers to inject arbitrary web script via the wsdlLib parameter to /ctcprotocol/Protocol. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151945/SAP-J2EE-Engine-7.01-Portal-EPP-Protocol-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Mar/6; https://seclists.org/bugtraq/2019/Mar/4
CVE: CVE-2018-17862
Published: 2021-08-09
Description: A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Fiori allows remote attackers to inject arbitrary web script via the sys_jdbc parameter to /TestJDBC_Web/test2. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151946/SAP-J2EE-Engine-7.01-Fiori-test2-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Mar/8; https://seclists.org/bugtraq/2019/Mar/5
CVE: CVE-2018-17865
Published: 2021-08-09
Description: A cross-site scripting (XSS) vulnerability in SAP J2EE Engine 7.01 allows remote attackers to inject arbitrary web script via the wsdlPath parameter to /ctcprotocol/Protocol. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://seclists.org/bugtraq/2019/Mar/6; https://seclists.org/bugtraq/2019/Mar/6
CVE: CVE-2021-37616
Published: 2021-08-09
Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when printing the interpreted (translated) data, which is a less frequently used Exiv2 operation that requires an extra command line option (`-p t` or `-P t`). The bug is fixed in version v0.27.5.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/Exiv2/exiv2/pull/1758; https://github.com/Exiv2/exiv2/security/advisories/GHSA-54f7-vvj7-545w; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FMDT4PJB7P43WSOM3TRQIY3J33BAFVVE/
CVE: CVE-2021-37618
Published: 2021-08-09
Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when printing the image ICC profile, which is a less frequently used Exiv2 operation that requires an extra command line option (`-p C`). The bug is fixed in version v0.27.5.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/Exiv2/exiv2/pull/1759; https://github.com/Exiv2/exiv2/security/advisories/GHSA-583f-w9pm-99r2; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FMDT4PJB7P43WSOM3TRQIY3J33BAFVVE/
CVE: CVE-2021-37619
Published: 2021-08-09
Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.5.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/Exiv2/exiv2/pull/1752; https://github.com/Exiv2/exiv2/security/advisories/GHSA-mxw9-qx4c-6m8v; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FMDT4PJB7P43WSOM3TRQIY3J33BAFVVE/
CVE: CVE-2021-37620
Published: 2021-08-09
Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. The bug is fixed in version v0.27.5.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/Exiv2/exiv2/pull/1769; https://github.com/Exiv2/exiv2/security/advisories/GHSA-v5g7-46xf-h728; https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE: CVE-2021-37621
Published: 2021-08-09
Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when printing the image ICC profile, which is a less frequently used Exiv2 operation that requires an extra command line option (`-p C`). The bug is fixed in version v0.27.5.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://github.com/Exiv2/exiv2/pull/1778; https://github.com/Exiv2/exiv2/security/advisories/GHSA-m479-7frc-gqqg; https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE: CVE-2021-37622
Published: 2021-08-09
Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when deleting the IPTC data, which is a less frequently used Exiv2 operation that requires an extra command line option (`-d I rm`). The bug is fixed in version v0.27.5.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://github.com/Exiv2/exiv2/pull/1788; https://github.com/Exiv2/exiv2/security/advisories/GHSA-9jh3-fcc3-g6hv; https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE: CVE-2021-34335
Published: 2021-08-09
Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A floating point exception (FPE) due to an integer divide by zero was found in Exiv2 versions v0.27.4 and earlier. The FPE is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when printing the interpreted (translated) data, which is a less frequently used Exiv2 operation that requires an extra command line option (`-p t` or `-P t`). The bug is fixed in version v0.27.5.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://github.com/Exiv2/exiv2/pull/1750; https://github.com/Exiv2/exiv2/security/advisories/GHSA-pvjp-m4f6-q984; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FMDT4PJB7P43WSOM3TRQIY3J33BAFVVE/
CVE: CVE-2021-37615
Published: 2021-08-09
Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when printing the interpreted (translated) data, which is a less frequently used Exiv2 operation that requires an extra command line option (`-p t` or `-P t`). The bug is fixed in version v0.27.5.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/Exiv2/exiv2/pull/1758; https://github.com/Exiv2/exiv2/security/advisories/GHSA-h9x9-4f77-336w; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FMDT4PJB7P43WSOM3TRQIY3J33BAFVVE/
CVE: CVE-2021-37633
Published: 2021-08-09
Description: Discourse is an open source discussion platform. In versions prior to 2.7.8 rendering of d-popover tooltips can be susceptible to XSS attacks. This vulnerability only affects sites which have modified or disabled Discourse's default Content Security Policy. This issue is patched in the latest `stable` 2.7.8 version of Discourse. As a workaround users may ensure that the Content Security Policy is enabled, and has not been modified in a way which would make it more vulnerable to XSS attacks.
CVSS Score: 7.4 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/discourse/discourse/commit/38199424bc840d2ef002cd1e9bffdbb99191eb47; https://github.com/discourse/discourse/security/advisories/GHSA-v3v8-3m5w-pjp9; https://github.com/discourse/discourse/commit/38199424bc840d2ef002cd1e9bffdbb99191eb47
CVE: CVE-2021-37634
Published: 2021-08-09
Description: Leafkit is a templating language with Swift-inspired syntax. Versions prior to 1.3.0 are susceptible to Cross-site Scripting (XSS) attacks. This affects anyone passing unsanitised data to Leaf's variable tags. Before this fix, Leaf would not escape any strings passed to tags as variables. If an attacker managed to find a variable that was rendered with their unsanitised data, they could inject scripts into a generated Leaf page, which could enable XSS attacks if other mitigations such as a Content Security Policy were not enabled. This has been patched in 1.3.0. As a workaround sanitize any untrusted input before passing it to Leaf and enable a CSP to block inline script and CSS data.
CVSS Score: 7.4 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/vapor/leaf-kit-ghsa-rv3x-xq3r-8j9h/pull/1; https://github.com/vapor/leaf-kit/security/advisories/GHSA-rv3x-xq3r-8j9h; https://github.com/vapor/leaf-kit-ghsa-rv3x-xq3r-8j9h/pull/1
CVE: CVE-2021-21564
Published: 2021-08-09
Description: Dell OpenManage Enterprise versions prior to 3.6.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to hijack an elevated session or perform unauthorized actions by sending malformed data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200, CWE-287
References: https://www.dell.com/support/kbdoc/000189673; https://www.dell.com/support/kbdoc/000189673