deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-15330
Published: 2019-08-22
Description: The webp-express plugin before 0.14.11 for WordPress has insufficient protection against arbitrary file reading.
CVSS Score: 7.5 (HIGH)
References: https://wordpress.org/plugins/webp-express/#developers; https://wordpress.org/plugins/webp-express/#developers
CVE: CVE-2019-15331
Published: 2019-08-22
Description: The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers; https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
CVE: CVE-2013-7483
Published: 2019-08-22
Description: The slidedeck2 plugin before 2.3.5 for WordPress has file inclusion.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://wordpress.org/plugins/slidedeck2/#developers; https://wordpress.org/plugins/slidedeck2/#developers
CVE: CVE-2014-10382
Published: 2019-08-22
Description: The feature-comments plugin before 1.2.5 for WordPress has CSRF for featuring or burying a comment.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wordpress.org/plugins/feature-comments/#developers; https://wordpress.org/plugins/feature-comments/#developers
CVE: CVE-2014-10386
Published: 2019-08-22
Description: The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74
References: https://wordpress.org/plugins/wp-live-chat-support/#developers; https://wordpress.org/plugins/wp-live-chat-support/#developers
CVE: CVE-2014-10393
Published: 2019-08-22
Description: The cforms2 plugin before 10.5 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/cforms2/#developers; https://wordpress.org/plugins/cforms2/#developers
CVE: CVE-2015-9334
Published: 2019-08-22
Description: The email-newsletter plugin through 20.15 for WordPress has SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wordpress.org/plugins/email-newsletter/#developers; https://wordpress.org/plugins/email-newsletter/advanced/; https://wordpress.org/support/topic/susceptible-to-sql-injection-attack/
CVE: CVE-2015-9338
Published: 2019-08-22
Description: The wp-file-upload plugin before 2.5.0 for WordPress has insufficient restrictions on upload of .php files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://wordpress.org/plugins/wp-file-upload/#developers; https://wordpress.org/plugins/wp-file-upload/#developers
CVE: CVE-2015-9339
Published: 2019-08-22
Description: The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://wordpress.org/plugins/wp-file-upload/#developers; https://wordpress.org/plugins/wp-file-upload/#developers
CVE: CVE-2015-9340
Published: 2019-08-22
Description: The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://wordpress.org/plugins/wp-file-upload/#developers; https://wordpress.org/plugins/wp-file-upload/#developers
CVE: CVE-2016-10928
Published: 2019-08-22
Description: The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://github.com/onelogin/wordpress-saml/commit/fbe808e2fd8fde8cb7e6bf365c5334b5702262da; https://wordpress.org/plugins/onelogin-saml-sso/#developers; https://github.com/onelogin/wordpress-saml/commit/fbe808e2fd8fde8cb7e6bf365c5334b5702262da
CVE: CVE-2016-10929
Published: 2019-08-22
Description: The advanced-ajax-page-loader plugin before 2.7.7 for WordPress has no protection against the reading of uploaded files when not logged in.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-264
References: https://wordpress.org/plugins/advanced-ajax-page-loader/#developers; https://wordpress.org/plugins/advanced-ajax-page-loader/#developers
CVE: CVE-2017-18578
Published: 2019-08-22
Description: The crafty-social-buttons plugin before 1.5.8 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/crafty-social-buttons/#developers; https://wordpress.org/plugins/crafty-social-buttons/#developers
CVE: CVE-2017-18579
Published: 2019-08-22
Description: The corner-ad plugin before 1.0.8 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/corner-ad/#developers; https://wordpress.org/plugins/corner-ad/#developers
CVE: CVE-2017-18585
Published: 2019-08-22
Description: The posts-in-page plugin before 1.3.0 for WordPress has ic_add_posts template='../ directory traversal.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://wordpress.org/plugins/posts-in-page/#developers; https://www.pluginvulnerabilities.com/2017/02/13/authenticated-local-file-inclusion-lfi-vulnerability-in-posts-in-page/; https://wordpress.org/plugins/posts-in-page/#developers
CVE: CVE-2018-20986
Published: 2019-08-22
Description: The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/advanced-custom-fields/#developers; https://www.advancedcustomfields.com/blog/acf-5-7-8-release/; https://www.advancedcustomfields.com/changelog/
CVE: CVE-2018-20987
Published: 2019-08-22
Description: The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://wordpress.org/plugins/newsletters-lite/#developers; https://wpvulndb.com/vulnerabilities/9627; https://wordpress.org/plugins/newsletters-lite/#developers
CVE: CVE-2019-13139
Published: 2019-08-22
Description: In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the "docker build" command would be able to gain command execution. An issue exists in the way "docker build" processes remote git URLs, and results in command injection into the underlying "git clone" command, leading to code execution in the context of the user executing the "docker build" command. This occurs because git ref can be misinterpreted as a flag.
CVSS Score: 8.4 (HIGH)
CWE: CWE-78
References: https://access.redhat.com/errata/RHBA-2019:3092; https://docs.docker.com/engine/release-notes/#18094; https://github.com/moby/moby/pull/38944
CVE: CVE-2019-15325
Published: 2019-08-22
Description: In GalliumOS 3.0, CONFIG_SECURITY_YAMA is disabled but /etc/sysctl.d/10-ptrace.conf tries to set /proc/sys/kernel/yama/ptrace_scope to 1, which might increase risk because of the appearance that a protection mechanism is present when actually it is not.
CVSS Score: 7.5 (HIGH)
References: https://github.com/GalliumOS/galliumos-distro/issues/514; https://www.kernel.org/doc/Documentation/security/Yama.txt; https://github.com/GalliumOS/galliumos-distro/issues/514
CVE: CVE-2019-15326
Published: 2019-08-22
Description: The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://wordpress.org/plugins/import-users-from-csv-with-meta/#developers; https://wpvulndb.com/vulnerabilities/9392; https://wordpress.org/plugins/import-users-from-csv-with-meta/#developers
CVE: CVE-2019-15327
Published: 2019-08-22
Description: The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/import-users-from-csv-with-meta/#developers; https://wordpress.org/plugins/import-users-from-csv-with-meta/#developers
CVE: CVE-2019-15328
Published: 2019-08-22
Description: The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta?rev=2050450; https://wordpress.org/plugins/import-users-from-csv-with-meta/#developers; https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta?rev=2050450
CVE: CVE-2019-15329
Published: 2019-08-22
Description: The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta?rev=2050450; https://wordpress.org/plugins/import-users-from-csv-with-meta/#developers; https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta?rev=2050450
CVE: CVE-2019-15498
Published: 2019-08-23
Description: cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --output argument injection in the username parameter to /cgi-bin/cmh/webcam.sh.
CVSS Score: 8.8 (HIGH)
CWE: CWE-88
References: https://distributedcompute.com/2019/08/22/vera-edge-home-controller-remote-shell-via-unauthenticated-command-injection/; https://distributedcompute.com/2019/08/22/vera-edge-home-controller-remote-shell-via-unauthenticated-command-injection/
CVE: CVE-2019-15499
Published: 2019-08-23
Description: CodiMD 1.3.1, when Safari is used, allows XSS via an IFRAME element with allow-top-navigation in the sandbox attribute, in conjunction with a data: URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/hackmdio/codimd/issues/1263; https://github.com/hackmdio/codimd/issues/1263
CVE: CVE-2019-15504
Published: 2019-08-23
Description: drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/; https://lore.kernel.org/lkml/[PII_REDACTED]0230.10597-1-benquike%40gmail.com/
CVE: CVE-2019-15505
Published: 2019-08-23
Description: drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html; https://git.linuxtv.org/media_tree.git/commit/?id=0c4df39e504bf925ab666132ac3c98d6cbbe380b; https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
CVE: CVE-2019-15507
Published: 2019-08-23
Description: In Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured, an authenticated user (in certain limited special-characters circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is fixed in 2019.7.7. The fix was back-ported to LTS 2019.6.7 as well as LTS 2019.3.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312, CWE-532
References: https://github.com/OctopusDeploy/Issues/issues/5761; https://github.com/OctopusDeploy/Issues/issues/5761
CVE: CVE-2019-15508
Published: 2019-08-23
Description: In Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an authenticated user (in certain limited OctopusPrintVariables circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is fixed in 5.0.1. The fix was back-ported to 4.0.7.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312, CWE-532
References: https://github.com/OctopusDeploy/Issues/issues/5750; https://github.com/OctopusDeploy/Issues/issues/5750
CVE: CVE-2019-15513
Published: 2019-08-23
Description: An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR03 1.01 devices. /tmp/.uci/network locking is mishandled after reception of a long SetWanSettings command, leading to a device hang.
CVSS Score: 7.5 (HIGH)
CWE: CWE-667
References: https://git.openwrt.org/?p=project/uci.git%3Ba=commitdiff%3Bh=19e29ffc15dbd958e8e6a648ee0982c68353516f; https://github.com/TeamSeri0us/pocs/blob/master/iot/morouter/motorola%E8%B7%AF%E7%94%B1%E5%99%A8%E6%96%87%E4%BB%B6%E8%A7%A3%E9%94%81%E6%BC%8F%E6%B4%9E.pdf; https://lists.infradead.org/pipermail/openwrt-devel/2019-November/019736.html
CVE: CVE-2019-15476
Published: 2019-08-23
Description: Former before 4.2.1 has XSS via a checkbox value.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/formers/former/pull/584; https://github.com/formers/former/releases/tag/4.2.1; https://github.com/formers/former/pull/584
CVE: CVE-2019-15477
Published: 2019-08-23
Description: Jooby before 1.6.4 has XSS via the default error handler.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jooby-project/jooby/pull/1368; https://github.com/jooby-project/jooby/pull/1368
CVE: CVE-2019-15480
Published: 2019-08-23
Description: Domoticz 4.10717 has XSS via item.Name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/domoticz/domoticz/issues/3367; https://github.com/domoticz/domoticz/pull/3368; https://github.com/domoticz/domoticz/issues/3367
CVE: CVE-2019-15481
Published: 2019-08-23
Description: Kimai v2 before 1.1 has XSS via a timesheet description.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kevinpapst/kimai2/pull/962; https://github.com/kevinpapst/kimai2/releases/tag/1.1; https://github.com/kevinpapst/kimai2/pull/962
CVE: CVE-2019-15482
Published: 2019-08-23
Description: selectize-plugin-a11y before 1.1.0 has XSS via the msg field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/SLMNBJ/selectize-plugin-a11y/pull/9; https://www.npmjs.com/package/selectize-plugin-a11y/v/1.1.0; https://github.com/SLMNBJ/selectize-plugin-a11y/pull/9
CVE: CVE-2019-15483
Published: 2019-08-23
Description: Bolt before 3.6.10 has XSS via a title that is mishandled in the system log.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bolt/bolt/pull/7802; https://github.com/bolt/bolt/releases/tag/v3.6.10; https://github.com/bolt/bolt/pull/7802
CVE: CVE-2019-15484
Published: 2019-08-23
Description: Bolt before 3.6.10 has XSS via an image's alt or title field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bolt/bolt/pull/7801; https://github.com/bolt/bolt/releases/tag/v3.6.10; https://github.com/bolt/bolt/pull/7801
CVE: CVE-2019-15485
Published: 2019-08-23
Description: Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bolt/bolt/pull/7800; https://github.com/bolt/bolt/releases/tag/v3.6.10; https://github.com/bolt/bolt/pull/7800
CVE: CVE-2019-15486
Published: 2019-08-23
Description: django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_reverse_inline.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ierror/django-js-reverse/compare/v0.9.0...v0.9.1; https://github.com/ierror/django-js-reverse/pull/81; https://github.com/ierror/django-js-reverse/compare/v0.9.0...v0.9.1
CVE: CVE-2019-15487
Published: 2019-08-23
Description: DfE School Experience before v16333-GA has XSS via a teacher training URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/DFE-Digital/schools-experience/pull/769; https://github.com/DFE-Digital/schools-experience/releases/tag/v16333-GA; https://github.com/DFE-Digital/schools-experience/pull/769
CVE: CVE-2019-15488
Published: 2019-08-23
Description: Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/igniterealtime/Openfire/compare/cd0a573...5e5d9e5; https://github.com/igniterealtime/Openfire/pull/1441; https://github.com/igniterealtime/Openfire/compare/cd0a573...5e5d9e5
CVE: CVE-2019-15490
Published: 2019-08-23
Description: openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.7.1; https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.7.1
CVE: CVE-2019-15491
Published: 2019-08-23
Description: openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.7.1; https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.7.1
CVE: CVE-2019-15492
Published: 2019-08-23
Description: openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.7.1; https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.7.1
CVE: CVE-2019-15493
Published: 2019-08-23
Description: openITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21.
CVSS Score: 7.5 (HIGH)
References: https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.7.1; https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.7.1
CVE: CVE-2019-15494
Published: 2019-08-23
Description: openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.7.1; https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.7.1
CVE: CVE-2019-15514
Published: 2019-08-23
Description: The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Group Info feature, e.g., by adding a significant fraction of a region's assigned phone numbers.
CVSS Score: 5.3 (MEDIUM)
References: https://docs.google.com/document/d/e/2PACX-1vRx2wO2kj0axlQtv2CDSjPGlRKJOHtucvpOKGFKybh2eVVGZqvt_JJv-2Q11NHn5Y4um_F4-bgA6q5v/pub; https://docs.google.com/document/d/e/2PACX-1vRx2wO2kj0axlQtv2CDSjPGlRKJOHtucvpOKGFKybh2eVVGZqvt_JJv-2Q11NHn5Y4um_F4-bgA6q5v/pub
CVE: CVE-2019-11584
Published: 2019-08-23
Description: The MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the priority icon url of an issue priority.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jira.atlassian.com/browse/JRASERVER-69785; https://jira.atlassian.com/browse/JRASERVER-69785
CVE: CVE-2019-11585
Published: 2019-08-23
Description: The startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://jira.atlassian.com/browse/JRASERVER-69784; https://jira.atlassian.com/browse/JRASERVER-69784
CVE: CVE-2019-11586
Published: 2019-08-23
Description: The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to create new resolutions via a Cross-site request forgery (CSRF) vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://jira.atlassian.com/browse/JRASERVER-69783; https://jira.atlassian.com/browse/JRASERVER-69783
CVE: CVE-2019-11587
Published: 2019-08-23
Description: Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allow remote attackers to modify various settings via Cross-site request forgery (CSRF).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://jira.atlassian.com/browse/JRASERVER-69782; https://jira.atlassian.com/browse/JRASERVER-69782
CVE: CVE-2019-11588
Published: 2019-08-23
Description: The ViewSystemInfo class doGarbageCollection method in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to trigger garbage collection via a Cross-site request forgery (CSRF) vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://jira.atlassian.com/browse/JRASERVER-69781; https://jira.atlassian.com/browse/JRASERVER-69781
CVE: CVE-2019-11589
Published: 2019-08-23
Description: The ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to attack users, in some cases be able to obtain a user's Cross-site request forgery (CSRF) token, via a open redirect vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://jira.atlassian.com/browse/JRASERVER-69780; https://jira.atlassian.com/browse/JRASERVER-69780
CVE: CVE-2019-13421
Published: 2019-08-23
Description: Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal user database.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-522, CWE-200
References: https://docs.search-guard.com/6.x-23/changelog-searchguard-6-x-23_1; https://search-guard.com/cve-advisory/; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SySS-2018-025.txt
CVE: CVE-2019-13422
Published: 2019-08-23
Description: Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon Kibana login.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-601, CWE-601
References: https://docs.search-guard.com/6.x-25/changelog-kibana-6.x-12; https://search-guard.com/cve-advisory/; https://docs.search-guard.com/6.x-25/changelog-kibana-6.x-12
CVE: CVE-2019-13423
Published: 2019-08-23
Description: Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kibanaserver user when providing wrong credentials when all of the following conditions a-c are true: a) Kibana is configured to use Single-Sign-On as authentication method, one of Kerberos, JWT, Proxy, Client certificate. b) The kibanaserver user is configured to use HTTP Basic as the authentication method. c) Search Guard is configured to use an SSO authentication domain and HTTP Basic at the same time
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://docs.search-guard.com/6.x-25/changelog-kibana-6.x-12; https://search-guard.com/cve-advisory/; https://docs.search-guard.com/6.x-25/changelog-kibana-6.x-12
CVE: CVE-2019-14999
Published: 2019-08-23
Description: The Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from version 3.0.0 before version 3.0.3 and from version 4.0.0 before version 4.0.3 allows remote attackers to uninstall plugins using a Cross-Site Request Forgery (CSRF) vulnerability on an authenticated administrator.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://ecosystem.atlassian.net/browse/UPM-6044; https://ecosystem.atlassian.net/browse/UPM-6044
CVE: CVE-2019-8444
Published: 2019-08-23
Description: The wikirenderer component in Jira before version 7.13.6, and from version 8.0.0 before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in image attribute specification.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jira.atlassian.com/browse/JRASERVER-69779; https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0833; https://jira.atlassian.com/browse/JRASERVER-69779