deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-wpvx-26f7-65q3
Package: mayan-edms (PIP)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 0
Patched in: unpatched

Summary: Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities

Details:
Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a (1) tag or the (2) title of a source in a Staging folder, (3) Name field in a bootstrap setup, or Title field in a (4) smart link or (5) web form.
GitHub Security Advisory: GHSA-2c7w-v459-cwgf
Package: motioneye (PIP)
Severity: HIGH (CVSS 7.5)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: < 0.43.1b1
Patched in: 0.43.1b1

Summary: MotionEye allows attackers to access sensitive information

Details:
MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.
GitHub Security Advisory: GHSA-6875-ff47-r6p6
Package: ipsilon (PIP)
Severity: MODERATE (CVSS 0.0)
Vulnerable versions: >= 0.1.0, < 1.0.1
Patched in: 1.2.0

Summary: Ipsilon denial of service via a duplicate SP name

Details:
providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider (SP) owner, which allows remote authenticated users to cause a denial of service via a duplicate SP name.
GitHub Security Advisory: GHSA-9qp4-79q8-58pr
Package: ipsilon (PIP)
Severity: MODERATE (CVSS 0.0)
Vulnerable versions: >= 1.1.0, < 1.1.1
Patched in: 1.2.0

Summary: Ipsilon denial of service by deleting a SAML2 Service Provider (SP)

Details:
providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider (SP).
GitHub Security Advisory: GHSA-9qp4-79q8-58pr
Package: ipsilon (PIP)
Severity: MODERATE (CVSS 0.0)
Vulnerable versions: >= 0.1.0, < 1.0.2
Patched in: 1.0.2

Summary: Ipsilon denial of service by deleting a SAML2 Service Provider (SP)

Details:
providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider (SP).
GitHub Security Advisory: GHSA-vwp5-w4rq-g4cc
Package: koji (PIP)
Severity: HIGH (CVSS 7.5)
CWE: CWE-20: Improper Input Validation
Vulnerable versions: < 1.15.0
Patched in: 1.15.0

Summary: Koji blacklisted paths workaround

Details:
Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission.
GitHub Security Advisory: GHSA-xv7j-2v4w-cjvh
Package: glance (PIP)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: >= 2012.1, < 2012.2.3
Patched in: 2012.2.3

Summary: OpenStack Glance logs user name and password in cleartext 

Details:
store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.
GitHub Security Advisory: GHSA-vwxc-3cfr-37jq
Package: golismero (PIP)
Severity: LOW (CVSS 0.0)
CWE: CWE-59: Improper Link Resolution Before File Access ('Link Following')
Vulnerable versions: <= 0.6.3
Patched in: unpatched

Summary: GoLismero symlink attack

Details:
libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated using Admin/changes.dat.
GitHub Security Advisory: GHSA-f836-7jqw-3684
Package: extractor (PIP)
Severity: MODERATE (CVSS 0.0)
Vulnerable versions: = 0.5
Patched in: unpatched

Summary: Libextractor multiple heap-based buffer overflows

Details:
Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (plugins/qtextractor.c).
GitHub Security Advisory: GHSA-qqr6-vm23-m488
Package: galaxy-app (PIP)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 15.0, < 15.01
Patched in: 15.01

Summary: Galaxy cross-site scripting (XSS)

Details:
The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, which would allow for cross-site scripting (XSS) attacks. In this form of attack, a malicious person can create a URL which, when opened by a Galaxy user or administrator, would allow the malicious user to execute arbitrary Javascript. that can result in Arbitrary JavaScript code execution. This attack appear to be exploitable via The victim must interact with component on page witch contains injected JavaScript code.. This vulnerability appears to have been fixed in v14.10.1, v15.01.
GitHub Security Advisory: GHSA-qqr6-vm23-m488
Package: galaxy-app (PIP)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 14.10.1
Patched in: 14.10.1

Summary: Galaxy cross-site scripting (XSS)

Details:
The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, which would allow for cross-site scripting (XSS) attacks. In this form of attack, a malicious person can create a URL which, when opened by a Galaxy user or administrator, would allow the malicious user to execute arbitrary Javascript. that can result in Arbitrary JavaScript code execution. This attack appear to be exploitable via The victim must interact with component on page witch contains injected JavaScript code.. This vulnerability appears to have been fixed in v14.10.1, v15.01.
GitHub Security Advisory: GHSA-v5hv-4pw3-q6h9
Package: admesh (PIP)
Severity: HIGH (CVSS 8.8)
CWE: CWE-118: Incorrect Access of Indexable Resource ('Range Error'), CWE-129: Improper Validation of Array Index
Vulnerable versions: < 0.98.5
Patched in: 0.98.5

Summary: ADMesh improper array index validation

Details:
An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
GitHub Security Advisory: GHSA-8823-xphr-qw9v
Package: portage (PIP)
Severity: HIGH (CVSS 0.0)
Vulnerable versions: < 2.1.12.2
Patched in: 2.1.12.2

Summary: Gentoo Portage does not verify X.509 certificates from SSL servers

Details:
The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify binary package lists via a crafted certificate.
GitHub Security Advisory: GHSA-8rhc-48pp-52gr
Package: pyspark (PIP)
Severity: HIGH (CVSS 7.8)
CWE: CWE-502: Deserialization of Untrusted Data
Vulnerable versions: < 2.1.2
Patched in: 2.1.2

Summary: Apache Spark Deserialization of Untrusted Data vulnerability

Details:
In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This makes applications launched programmatically using the launcher API potentially vulnerable to arbitrary code execution by an attacker with access to any user account on the local machine. It does not affect apps run by spark-submit or spark-shell. The attacker would be able to execute code as the user that ran the Spark application. Users are encouraged to update to version 2.1.2, 2.2.0 or later.
GitHub Security Advisory: GHSA-ffw3-6378-cqgp
Package: mlflow (PIP)
Severity: HIGH (CVSS 8.8)
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: < 2.6.0
Patched in: 2.6.0

Summary: mlflow vulnerable to OS Command Injection

Details:
OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0.
GitHub Security Advisory: GHSA-v9gj-5rgp-w33r
Package: modoboa (PIP)
Severity: MODERATE (CVSS 6.3)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: <= 2.0.3
Patched in: 2.0.4

Summary: Modoboa is vulnerable to Cross-Site Request Forgery

Details:
Modoboa 2.0.3 and prior is vulnerable to Cross-Site Request Forgery. A patch is available and anticipated to be part of version 2.0.4.
GitHub Security Advisory: GHSA-5r4x-qc7q-vj27
Package: Zope2 (PIP)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 2.12.5
Patched in: 2.12.5

Summary: Zope Cross-site scripting (XSS) vulnerability in ZMI pages

Details:
Cross-site scripting (XSS) vulnerability in ZMI pages that use the manage_tabs_message in Zope 2.11.4, 2.11.2, 2.10.9, 2.10.7, 2.10.6, 2.10.5, 2.10.4, 2.10.2, 2.10.1, 2.12.
GitHub Security Advisory: GHSA-hm8g-jxjj-gfm3
Package: zope2 (PIP)
Severity: MODERATE (CVSS 0.0)
Vulnerable versions: >= 2.8.0, < 2.8.9
Patched in: 2.8.9

Summary: Zope allows remote attackers to read arbitrary files

Details:
The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulnerability than CVE-2006-3458.
GitHub Security Advisory: GHSA-hm8g-jxjj-gfm3
Package: zope2 (PIP)
Severity: MODERATE (CVSS 0.0)
Vulnerable versions: >= 2.7.0, <= 2.7.9
Patched in: unpatched

Summary: Zope allows remote attackers to read arbitrary files

Details:
The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulnerability than CVE-2006-3458.
GitHub Security Advisory: GHSA-v62p-cjv8-35xh
Package: tahoe-lafs (PIP)
Severity: MODERATE (CVSS 0.0)
Vulnerable versions: = 1.9.0
Patched in: unpatched

Summary: Tahoe-LAFS fails to ensure integrity

Details:
Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval.
GitHub Security Advisory: GHSA-rmxg-6qqf-x8mr
Package: geonode (PIP)
Severity: HIGH (CVSS 7.5)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: >= 3.2.0, < 4.2.0
Patched in: 4.2.0

Summary: GeoNode Server Side Request forgery

Details:
### Summary
A server side request forgery vuln was found within geonode when testing on a bug bounty program. Server side request forgery allows a user to request information on the internal service/services.

### Details
The endpoint /proxy/?url= does not properly protect against SSRF. when using the following format you can request internal hosts and display data. /proxy/?url=http://169.254.169.254\@whitelistedIPhere. This will state wether the AWS internal IP is alive. If you get a 404, the host is alive. A non alive host will not display a response. To display metadata, use a hashfrag on the url /proxy/?url=http://169.254.169.254\@#whitelisteddomain.com or try   /proxy/?url=http://169.254.169.254\@%23whitelisteddomain.com

### Impact
Port scan internal hosts, and request information from internal hosts.
GitHub Security Advisory: GHSA-gx3v-wxfj-8h24
Package: org.eclipse.basyx:basyx.sdk (MAVEN)
Severity: HIGH (CVSS 8.6)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: < 2.0.0-milestone-10
Patched in: 2.0.0-milestone-10

Summary: Eclipse BaSyx Java Server SDK vulnerable to Server-Side Request Forgery

Details:
In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthenticated remote attacker can exploit this design flaw to force the BaSyx server to execute blind HTTP POST requests to arbitrary internal or external targets. This allows an attacker to bypass network segmentation and pivot into isolated internal IT/OT infrastructure or target Cloud Metadata services (IMDS).
GitHub Security Advisory: GHSA-8gpm-h2mh-36qc
Package: org.eclipse.basyx:basyx.sdk (MAVEN)
Severity: CRITICAL (CVSS 10.0)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: < 2.0.0-milestone-10
Patched in: 2.0.0-milestone-10

Summary: Eclipse BaSyx Java Server SDK vulnerable to Path Traversal

Details:
In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauthenticated remote attacker to perform a path traversal attack. By supplying a maliciously crafted fileName parameter during a file upload operation, an attacker can bypass intended storage boundaries and write arbitrary files to any location on the host filesystem accessible by the Java process. This can lead to Remote Code Execution (RCE) and complete system compromise.
GitHub Security Advisory: GHSA-j6hh-h3cf-c2hf
Package: org.springframework.cloud:spring-cloud-config-server (MAVEN)
Severity: MODERATE (CVSS 4.4)
CWE: CWE-532: Insertion of Sensitive Information into Log File
Vulnerable versions: >= 5.0.0, <= 5.0.2
Patched in: 5.0.3

Summary: Spring Cloud Config Server Logged Sensitive Information

Details:
When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs.
Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclusive); upgrade to 3.1.14 or greater (Enterprise Support Only). Spring Cloud Config 4.1.x: affected from 4.1.0 through 4.1.9 (inclusive); upgrade to 4.1.10 or greater (Enterprise Support Only). Spring Cloud Config 4.2.x: affected from 4.2.0 through 4.2.6 (inclusive); upgrade to 4.2.7 or greater (Enterprise Support Only). Spring Cloud Config 4.3.x: affected from 4.3.0 through 4.3.2 (inclusive); upgrade to 4.3.3 or greater. Spring Cloud Config 5.0.x: affected from 5.0.0 through 5.0.2 (inclusive); upgrade to 5.0.3 or greater.
GitHub Security Advisory: GHSA-j6hh-h3cf-c2hf
Package: org.springframework.cloud:spring-cloud-config-server (MAVEN)
Severity: MODERATE (CVSS 4.4)
CWE: CWE-532: Insertion of Sensitive Information into Log File
Vulnerable versions: >= 4.3.0, <= 4.3.2
Patched in: 4.3.3

Summary: Spring Cloud Config Server Logged Sensitive Information

Details:
When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs.
Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclusive); upgrade to 3.1.14 or greater (Enterprise Support Only). Spring Cloud Config 4.1.x: affected from 4.1.0 through 4.1.9 (inclusive); upgrade to 4.1.10 or greater (Enterprise Support Only). Spring Cloud Config 4.2.x: affected from 4.2.0 through 4.2.6 (inclusive); upgrade to 4.2.7 or greater (Enterprise Support Only). Spring Cloud Config 4.3.x: affected from 4.3.0 through 4.3.2 (inclusive); upgrade to 4.3.3 or greater. Spring Cloud Config 5.0.x: affected from 5.0.0 through 5.0.2 (inclusive); upgrade to 5.0.3 or greater.
GitHub Security Advisory: GHSA-j6hh-h3cf-c2hf
Package: org.springframework.cloud:spring-cloud-config-server (MAVEN)
Severity: MODERATE (CVSS 4.4)
CWE: CWE-532: Insertion of Sensitive Information into Log File
Vulnerable versions: >= 4.2.0, <= 4.2.6
Patched in: unpatched

Summary: Spring Cloud Config Server Logged Sensitive Information

Details:
When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs.
Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclusive); upgrade to 3.1.14 or greater (Enterprise Support Only). Spring Cloud Config 4.1.x: affected from 4.1.0 through 4.1.9 (inclusive); upgrade to 4.1.10 or greater (Enterprise Support Only). Spring Cloud Config 4.2.x: affected from 4.2.0 through 4.2.6 (inclusive); upgrade to 4.2.7 or greater (Enterprise Support Only). Spring Cloud Config 4.3.x: affected from 4.3.0 through 4.3.2 (inclusive); upgrade to 4.3.3 or greater. Spring Cloud Config 5.0.x: affected from 5.0.0 through 5.0.2 (inclusive); upgrade to 5.0.3 or greater.
GitHub Security Advisory: GHSA-j6hh-h3cf-c2hf
Package: org.springframework.cloud:spring-cloud-config-server (MAVEN)
Severity: MODERATE (CVSS 4.4)
CWE: CWE-532: Insertion of Sensitive Information into Log File
Vulnerable versions: >= 4.1.0, <= 4.1.9
Patched in: unpatched

Summary: Spring Cloud Config Server Logged Sensitive Information

Details:
When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs.
Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclusive); upgrade to 3.1.14 or greater (Enterprise Support Only). Spring Cloud Config 4.1.x: affected from 4.1.0 through 4.1.9 (inclusive); upgrade to 4.1.10 or greater (Enterprise Support Only). Spring Cloud Config 4.2.x: affected from 4.2.0 through 4.2.6 (inclusive); upgrade to 4.2.7 or greater (Enterprise Support Only). Spring Cloud Config 4.3.x: affected from 4.3.0 through 4.3.2 (inclusive); upgrade to 4.3.3 or greater. Spring Cloud Config 5.0.x: affected from 5.0.0 through 5.0.2 (inclusive); upgrade to 5.0.3 or greater.
GitHub Security Advisory: GHSA-j6hh-h3cf-c2hf
Package: org.springframework.cloud:spring-cloud-config-server (MAVEN)
Severity: MODERATE (CVSS 4.4)
CWE: CWE-532: Insertion of Sensitive Information into Log File
Vulnerable versions: >= 3.1.0, <= 3.1.13
Patched in: unpatched

Summary: Spring Cloud Config Server Logged Sensitive Information

Details:
When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs.
Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclusive); upgrade to 3.1.14 or greater (Enterprise Support Only). Spring Cloud Config 4.1.x: affected from 4.1.0 through 4.1.9 (inclusive); upgrade to 4.1.10 or greater (Enterprise Support Only). Spring Cloud Config 4.2.x: affected from 4.2.0 through 4.2.6 (inclusive); upgrade to 4.2.7 or greater (Enterprise Support Only). Spring Cloud Config 4.3.x: affected from 4.3.0 through 4.3.2 (inclusive); upgrade to 4.3.3 or greater. Spring Cloud Config 5.0.x: affected from 5.0.0 through 5.0.2 (inclusive); upgrade to 5.0.3 or greater.
GitHub Security Advisory: GHSA-86wq-234q-r6wg
Package: org.springframework.cloud:spring-cloud-config-server (MAVEN)
Severity: HIGH (CVSS 7.2)
CWE: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
Vulnerable versions: >= 5.0.0, <= 5.0.2
Patched in: 5.0.3

Summary: Spring Cloud Config Server Susceptible To TOCTOU Attack

Details:
The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.
Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclusive); upgrade to 3.1.14 or greater (Enterprise Support Only). Spring Cloud Config 4.1.x: affected from 4.1.0 through 4.1.9 (inclusive); upgrade to 4.1.10 or greater (Enterprise Support Only). Spring Cloud Config 4.2.x: affected from 4.2.0 through 4.2.6 (inclusive); upgrade to 4.2.7 or greater (Enterprise Support Only). Spring Cloud Config 4.3.x: affected from 4.3.0 through 4.3.2 (inclusive); upgrade to 4.3.3 or greater. Spring Cloud Config 5.0.x: affected from 5.0.0 through 5.0.2 (inclusive); upgrade to 5.0.3 or greater.
GitHub Security Advisory: GHSA-86wq-234q-r6wg
Package: org.springframework.cloud:spring-cloud-config-server (MAVEN)
Severity: HIGH (CVSS 7.2)
CWE: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
Vulnerable versions: >= 4.3.0, <= 4.3.2
Patched in: 4.3.3

Summary: Spring Cloud Config Server Susceptible To TOCTOU Attack

Details:
The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.
Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclusive); upgrade to 3.1.14 or greater (Enterprise Support Only). Spring Cloud Config 4.1.x: affected from 4.1.0 through 4.1.9 (inclusive); upgrade to 4.1.10 or greater (Enterprise Support Only). Spring Cloud Config 4.2.x: affected from 4.2.0 through 4.2.6 (inclusive); upgrade to 4.2.7 or greater (Enterprise Support Only). Spring Cloud Config 4.3.x: affected from 4.3.0 through 4.3.2 (inclusive); upgrade to 4.3.3 or greater. Spring Cloud Config 5.0.x: affected from 5.0.0 through 5.0.2 (inclusive); upgrade to 5.0.3 or greater.
GitHub Security Advisory: GHSA-86wq-234q-r6wg
Package: org.springframework.cloud:spring-cloud-config-server (MAVEN)
Severity: HIGH (CVSS 7.2)
CWE: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
Vulnerable versions: >= 4.2.0, <= 4.2.6
Patched in: unpatched

Summary: Spring Cloud Config Server Susceptible To TOCTOU Attack

Details:
The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.
Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclusive); upgrade to 3.1.14 or greater (Enterprise Support Only). Spring Cloud Config 4.1.x: affected from 4.1.0 through 4.1.9 (inclusive); upgrade to 4.1.10 or greater (Enterprise Support Only). Spring Cloud Config 4.2.x: affected from 4.2.0 through 4.2.6 (inclusive); upgrade to 4.2.7 or greater (Enterprise Support Only). Spring Cloud Config 4.3.x: affected from 4.3.0 through 4.3.2 (inclusive); upgrade to 4.3.3 or greater. Spring Cloud Config 5.0.x: affected from 5.0.0 through 5.0.2 (inclusive); upgrade to 5.0.3 or greater.
GitHub Security Advisory: GHSA-86wq-234q-r6wg
Package: org.springframework.cloud:spring-cloud-config-server (MAVEN)
Severity: HIGH (CVSS 7.2)
CWE: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
Vulnerable versions: >= 4.1.0, <= 4.1.9
Patched in: unpatched

Summary: Spring Cloud Config Server Susceptible To TOCTOU Attack

Details:
The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.
Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclusive); upgrade to 3.1.14 or greater (Enterprise Support Only). Spring Cloud Config 4.1.x: affected from 4.1.0 through 4.1.9 (inclusive); upgrade to 4.1.10 or greater (Enterprise Support Only). Spring Cloud Config 4.2.x: affected from 4.2.0 through 4.2.6 (inclusive); upgrade to 4.2.7 or greater (Enterprise Support Only). Spring Cloud Config 4.3.x: affected from 4.3.0 through 4.3.2 (inclusive); upgrade to 4.3.3 or greater. Spring Cloud Config 5.0.x: affected from 5.0.0 through 5.0.2 (inclusive); upgrade to 5.0.3 or greater.