deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-36688
Published: 2022-08-29
Description: Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockout&month=.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-2.md; https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-2.md
CVE: CVE-2022-36689
Published: 2022-08-29
Description: Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/waste&month=.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-3.md; https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-3.md
CVE: CVE-2022-36690
Published: 2022-08-29
Description: Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user&id=.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-4.md; https://github.com/k0xx11/vul-wiki/blob/master/vendors/oretnom23/ingredients-stock-management-system/SQLi-4.md
CVE: CVE-2022-0284
Published: 2022-08-29
Description: A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format (TIFF) image to convert it into a PICON file format. This issue can potentially lead to a denial of service and information disclosure.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://access.redhat.com/security/cve/CVE-2022-0284; https://bugzilla.redhat.com/show_bug.cgi?id=2045943; https://github.com/ImageMagick/ImageMagick/commit/e50f19fd73c792ebe912df8ab83aa51a243a3da7
CVE: CVE-2022-0336
Published: 2022-08-29
Description: The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276, CWE-276
References: https://access.redhat.com/security/cve/CVE-2022-0336; https://bugzilla.redhat.com/show_bug.cgi?id=2046134; https://bugzilla.samba.org/show_bug.cgi?id=14950
CVE: CVE-2022-0358
Published: 2022-08-29
Description: A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-273, CWE-273
References: https://access.redhat.com/security/cve/CVE-2022-0358; https://bugzilla.redhat.com/show_bug.cgi?id=2044863; https://gitlab.com/qemu-project/qemu/-/commit/449e8171f96a6a944d1f3b7d3627ae059eae21ca
CVE: CVE-2022-0367
Published: 2022-08-29
Description: A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=2045571; https://github.com/stephane/libmodbus/commit/b4ef4c17d618eba0adccc4c7d9e9a1ef809fc9b6; https://github.com/stephane/libmodbus/issues/614
CVE: CVE-2022-0400
Published: 2022-08-29
Description: An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://access.redhat.com/security/cve/CVE-2022-0400; https://bugzilla.redhat.com/show_bug.cgi?id=2040604; https://bugzilla.redhat.com/show_bug.cgi?id=2044575
CVE: CVE-2022-0480
Published: 2022-08-29
Description: A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX) file locks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://access.redhat.com/security/cve/CVE-2022-0480; https://bugzilla.redhat.com/show_bug.cgi?id=2049700; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0f12156dff2862ac54235fc72703f[PII_REDACTED]
CVE: CVE-2022-0485
Published: 2022-08-29
Description: A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as successful, rather than checking the *error parameter. This could result in the silent creation of a corrupted destination image.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-252, CWE-252
References: https://access.redhat.com/security/cve/CVE-2022-0485; https://bugzilla.redhat.com/show_bug.cgi?id=2046194; https://bugzilla.redhat.com/show_bug.cgi?id=2050324
CVE: CVE-2022-0496
Published: 2022-08-29
Description: A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) properties may cause an out-of-bounds memory access when imported using import().
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=2050695; https://github.com/openscad/openscad/commit/00a4692989c4e2f191525f73f24ad8727bacdf41; https://github.com/openscad/openscad/commit/770e3234cbfe66edbc0333f796b46d36a74aa652
CVE: CVE-2022-0497
Published: 2022-08-29
Description: A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bounds read during parsing of annotations.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=2050699; https://github.com/openscad/openscad/issues/4043; https://github.com/openscad/openscad/pull/4044
CVE: CVE-2022-0644
Published: 2022-08-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-0669
Published: 2022-08-29
Description: A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not closed by the vhost-user slave. By sending such messages continuously, the vhost-user master exhausts available fd in the vhost-user slave process, leading to a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://access.redhat.com/security/cve/CVE-2022-0669; https://bugs.dpdk.org/show_bug.cgi?id=922; https://bugzilla.redhat.com/show_bug.cgi?id=2055793
CVE: CVE-2022-0718
Published: 2022-08-29
Description: A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-522, CWE-532
References: https://access.redhat.com/security/cve/CVE-2022-0718; https://bugs.launchpad.net/oslo.utils/+bug/1949623; https://bugzilla.redhat.com/show_bug.cgi?id=2056850
CVE: CVE-2022-0812
Published: 2022-08-29
Description: An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c in the Linux Kernel. This flaw allows an attacker with normal user privileges to leak kernel information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://access.redhat.com/security/cve/CVE-2022-0812; https://bugzilla.redhat.com/show_bug.cgi?id=2058361; https://bugzilla.redhat.com/show_bug.cgi?id=2058955
CVE: CVE-2022-0850
Published: 2022-08-29
Description: A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: https://access.redhat.com/security/cve/CVE-2022-0850; https://bugzilla.redhat.com/show_bug.cgi?id=2060606; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ce3aba43599f0b50adbebff133df8d08a3d5fffe
CVE: CVE-2022-0851
Published: 2022-08-29
Description: There is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the activation key is subsequently passed to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the activation key via the process command line via e.g. htop or ps. The specific impact varies upon the subscription, but generally this would allow an attacker to register systems purchased by the victim until discovered; a form of fraud. This could occur regardless of how the activation key is supplied to convert2rhel because it involves how convert2rhel provides it to subscription-manager.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://access.redhat.com/security/cve/CVE-2022-0851; https://bugzilla.redhat.com/show_bug.cgi?id=2060217; https://access.redhat.com/security/cve/CVE-2022-0851
CVE: CVE-2022-0852
Published: 2022-08-29
Description: There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the password via the process command line via e.g. htop or ps. The specific impact varies upon the privileges of the Red Hat account in question, but it could affect the integrity, availability, and/or data confidentiality of other systems that are administered by that account. This occurs regardless of how the password is supplied to convert2rhel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-359, CWE-668
References: https://access.redhat.com/security/cve/CVE-2022-0852; https://bugzilla.redhat.com/show_bug.cgi?id=2060129; https://github.com/oamg/convert2rhel/commit/8d72fb030ed31116fdb256b327d299337b000af4
CVE: CVE-2022-0934
Published: 2022-08-29
Description: A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/security/cve/CVE-2022-0934; https://bugzilla.redhat.com/show_bug.cgi?id=2057075; https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016272.html
CVE: CVE-2022-1016
Published: 2022-08-29
Description: A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged attacker.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-824, CWE-909
References: http://blog.dbouman.nl/2022/04/02/How-The-Tables-Have-Turned-CVE-2022-1015-1016/; https://access.redhat.com/security/cve/CVE-2022-1016; https://bugzilla.redhat.com/show_bug.cgi?id=2066614
CVE: CVE-2022-1024
Published: 2022-08-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-1043
Published: 2022-08-29
Description: A flaw was found in the Linux kernel’s io_uring implementation. This flaw allows an attacker with a local account to corrupt system memory, crash the system or escalate privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://packetstormsecurity.com/files/170834/io_uring-Same-Type-Object-Reuse-Privilege-Escalation.html; https://access.redhat.com/security/cve/CVE-2022-1043; https://bugzilla.redhat.com/show_bug.cgi?id=1997328
CVE: CVE-2022-1115
Published: 2022-08-29
Description: A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file to ImageMagick for conversion, potentially leading to a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://access.redhat.com/security/cve/CVE-2022-1115; https://bugzilla.redhat.com/show_bug.cgi?id=2067022; https://github.com/ImageMagick/ImageMagick/commit/c8718305f120293d8bf13724f12eed885d830b09
CVE: CVE-2022-1117
Published: 2022-08-29
Description: A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker may fail to detect the pattern and allow execution.
CVSS Score: 8.4 (HIGH)
CWE: CWE-552, CWE-552
References: https://access.redhat.com/security/cve/CVE-2022-1117; https://bugzilla.redhat.com/show_bug.cgi?id=2066904; https://bugzilla.redhat.com/show_bug.cgi?id=2068171
CVE: CVE-2022-1184
Published: 2022-08-29
Description: A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/security/cve/CVE-2022-1184; https://bugzilla.redhat.com/show_bug.cgi?id=2070205; https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
CVE: CVE-2022-1198
Published: 2022-08-29
Description: A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device using 6pack driver from user space.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/security/cve/CVE-2022-1198; https://bugzilla.redhat.com/show_bug.cgi?id=2070689; https://github.com/torvalds/linux/commit/efe4186e6a1b54bf38b9e05450d43b0da1fd7739
CVE: CVE-2022-1199
Published: 2022-08-29
Description: A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a null-ptr-deref vulnerability and a use-after-free vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416, CWE-476
References: https://access.redhat.com/security/cve/CVE-2022-1199; https://bugzilla.redhat.com/show_bug.cgi?id=2070694; https://github.com/torvalds/linux/commit/4e0f718daf97d47cf7dec122da1be970f145c809
CVE: CVE-2022-1204
Published: 2022-08-29
Description: A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/security/cve/CVE-2022-1204; https://bugzilla.redhat.com/show_bug.cgi?id=2071051; https://security-tracker.debian.org/tracker/CVE-2022-1204
CVE: CVE-2022-2953
Published: 2022-08-29
Description: LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 48d6ece8.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2953.json; https://gitlab.com/libtiff/libtiff/-/commit/48d6ece8389b01129e7d357f0985c8f938ce3da3; https://gitlab.com/libtiff/libtiff/-/issues/414
CVE: CVE-2022-2961
Published: 2022-08-29
Description: A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously triggering the rose_bind() function. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416, CWE-362
References: https://access.redhat.com/security/cve/CVE-2022-2961; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://access.redhat.com/security/cve/CVE-2022-2961
CVE: CVE-2022-31677
Published: 2022-08-29
Description: An Insufficient Session Expiration issue was discovered in the Pinniped Supervisor (before v0.19.0). A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially use their access token to continue their session beyond what proper use of their refresh token might allow.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-613
References: https://github.com/vmware-tanzu/pinniped/security/advisories/GHSA-rp4v-hhm6-rcv9; https://github.com/vmware-tanzu/pinniped/security/advisories/GHSA-rp4v-hhm6-rcv9
CVE: CVE-2022-35962
Published: 2022-08-29
Description: Zulip is an open source team chat and Zulip Mobile is an app for iOS and Andriod users. In Zulip Mobile through version 27.189, a crafted link in a message sent by an authenticated user could lead to credential disclosure if a user follows the link. A patch was released in version 27.190.
CVSS Score: 8.0 (HIGH)
CWE: CWE-184, CWE-436, CWE-697
References: https://blog.zulip.com/2022/08/24/zulip-server-5-6-security-release/; https://github.com/zulip/zulip-mobile/releases/tag/v27.190; https://github.com/zulip/zulip-mobile/security/advisories/GHSA-4gj2-j32x-4wg5
CVE: CVE-2022-36200
Published: 2022-08-29
Description: In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in URL, which can be logged/sniffed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://github.com/afaq1337/CVE-2022-36200; https://youtu.be/nHgstvq0rr8; https://github.com/afaq1337/CVE-2022-36200
CVE: CVE-2022-27546
Published: 2022-08-29
Description: HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser within the security context of the hosting web site and/or steal the victim's cookie-based authentication credentials.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79, CWE-79
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100216; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100216
CVE: CVE-2022-27547
Published: 2022-08-29
Description: HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100212; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100212
CVE: CVE-2022-27558
Published: 2022-08-29
Description: HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-521, CWE-521
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100217; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100217
CVE: CVE-2022-36033
Published: 2022-08-29
Description: jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which could allow XSS attacks when a reader subsequently clicks that link. If the non-default `SafeList.preserveRelativeLinks` option is enabled, HTML including `javascript:` URLs that have been crafted with control characters will not be sanitized. If the site that this HTML is published on does not set a Content Security Policy, an XSS attack is then possible. This issue is patched in jsoup 1.15.3. Users should upgrade to this version. Additionally, as the unsanitized input may have been persisted, old content should be cleaned again using the updated version. To remediate this issue without immediately upgrading: - disable `SafeList.preserveRelativeLinks`, which will rewrite input URLs as absolute URLs - ensure an appropriate [Content Security Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP) is defined. (This should be used regardless of upgrading, as a defence-in-depth best practice.)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-87, CWE-79
References: https://github.com/jhy/jsoup/releases/tag/jsoup-1.15.3; https://github.com/jhy/jsoup/security/advisories/GHSA-gp7f-rwcx-9369; https://jsoup.org/news/release-1.15.3
CVE: CVE-2022-36034
Published: 2022-08-29
Description: nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of `{{` and with many repetitions of `{{|`. This issue has been patched in all versions above `0.2.5`. There are currently no known workarounds.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-1333, CWE-1333
References: https://github.com/cainthebest/nitrado.js/blob/v0.2.5/CHANGELOG.md; https://github.com/cainthebest/nitrado.js/security/advisories/GHSA-vqc4-v8hc-h2jg; https://github.com/cainthebest/nitrado.js/blob/v0.2.5/CHANGELOG.md
CVE: CVE-2022-1123
Published: 2022-08-29
Description: The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/03e0d4d5-0184-4a15-b8ac-fdc2010e4812; https://wpscan.com/vulnerability/03e0d4d5-0184-4a15-b8ac-fdc2010e4812
CVE: CVE-2022-1663
Published: 2022-08-29
Description: The Stop Spam Comments WordPress plugin through 0.2.1.2 does not properly generate the Javascript access token for preventing abuse of comment section, allowing threat authors to easily collect the value and add it to the request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://wpscan.com/vulnerability/30820be1-e96a-4ff6-b1ec-efda14069e70; https://wpscan.com/vulnerability/30820be1-e96a-4ff6-b1ec-efda14069e70
CVE: CVE-2022-2034
Published: 2022-08-29
Description: The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated users to access private messages sent to teachers
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639
References: https://hackerone.com/reports/1590237; https://wpscan.com/vulnerability/aba3dd58-7a8e-4129-add5-4dd5972c0426; https://hackerone.com/reports/1590237
CVE: CVE-2022-2080
Published: 2022-08-29
Description: The Sensei LMS WordPress plugin before 4.5.2 does not ensure that the sender of a private message is either the teacher or the original sender, allowing any authenticated user to send messages to arbitrary private conversation via a IDOR attack. Note: Attackers are not able to see responses/messages between the teacher and student
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://hackerone.com/reports/1592596; https://wpscan.com/vulnerability/5395d196-a39a-4a58-913e-5b5b9d6123a5; https://hackerone.com/reports/1592596