deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-7715
Published: 2020-09-01
Description: All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-DEEPGETSET-598666; https://snyk.io/vuln/SNYK-JS-DEEPGETSET-598666
CVE: CVE-2020-7716
Published: 2020-09-01
Description: All versions of package deeps are vulnerable to Prototype Pollution via the set function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-DEEPS-598667; https://snyk.io/vuln/SNYK-JS-DEEPS-598667
CVE: CVE-2020-7717
Published: 2020-09-01
Description: All versions of package dot-notes are vulnerable to Prototype Pollution via the create function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-DOTNOTES-598668; https://snyk.io/vuln/SNYK-JS-DOTNOTES-598668
CVE: CVE-2020-7718
Published: 2020-09-01
Description: All versions of package gammautils are vulnerable to Prototype Pollution via the deepSet and deepMerge functions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-GAMMAUTILS-598670; https://snyk.io/vuln/SNYK-JS-GAMMAUTILS-598670
CVE: CVE-2020-7719
Published: 2020-09-01
Description: Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/kvz/locutus/pull/418/; https://snyk.io/vuln/SNYK-JS-LOCUTUS-598675; https://github.com/kvz/locutus/pull/418/
CVE: CVE-2020-7720
Published: 2020-09-01
Description: The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/digitalbazaar/forge/blob/master/CHANGELOG.md; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-609293; https://snyk.io/vuln/SNYK-JS-NODEFORGE-598677
CVE: CVE-2020-7721
Published: 2020-09-01
Description: All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-NODEOOJS-598678; https://snyk.io/vuln/SNYK-JS-NODEOOJS-598678
CVE: CVE-2020-7722
Published: 2020-09-01
Description: All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-NODEEUTILS-598679; https://snyk.io/vuln/SNYK-JS-NODEEUTILS-598679
CVE: CVE-2020-7723
Published: 2020-09-01
Description: All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-PROMISEHELPERS-598686; https://snyk.io/vuln/SNYK-JS-PROMISEHELPERS-598686
CVE: CVE-2020-7724
Published: 2020-09-01
Description: All versions of package tiny-conf are vulnerable to Prototype Pollution via the set function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-TINYCONF-598792; https://snyk.io/vuln/SNYK-JS-TINYCONF-598792
CVE: CVE-2020-7725
Published: 2020-09-01
Description: All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-WORKSMITH-598798; https://snyk.io/vuln/SNYK-JS-WORKSMITH-598798
CVE: CVE-2020-7726
Published: 2020-09-01
Description: All versions of package safe-object2 are vulnerable to Prototype Pollution via the setter function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-SAFEOBJECT2-598801; https://snyk.io/vuln/SNYK-JS-SAFEOBJECT2-598801
CVE: CVE-2020-7727
Published: 2020-09-01
Description: All versions of package gedi are vulnerable to Prototype Pollution via the set function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-GEDI-598803; https://snyk.io/vuln/SNYK-JS-GEDI-598803
CVE: CVE-2018-12475
Published: 2020-09-01
Description: A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is exposed there. This issue affects: openSUSE Open Build Service .
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-610
References: https://bugzilla.suse.com/show_bug.cgi?id=1107821; https://bugzilla.suse.com/show_bug.cgi?id=1107821
CVE: CVE-2020-8023
Published: 2020-09-01
Description: A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enterprise Storage 5, SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Point of Sale 11-SP3, SUSE Linux Enterprise Server 11-SECURITY, SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 15, SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to escalate privileges from user ldap to root. This issue affects: SUSE Enterprise Storage 5 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Debuginfo 11-SP3 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Debuginfo 11-SP4 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Point of Sale 11-SP3 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Server 11-SECURITY openldap2-client-openssl1 versions prior to 2.4.26-0.74.13.1. SUSE Linux Enterprise Server 11-SP4-LTSS openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Server 12-SP2-BCL openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP2-LTSS openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP3-BCL openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP3-LTSS openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP4 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP5 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.31.1. SUSE Linux Enterprise Server for SAP 12-SP2 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server for SAP 12-SP3 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server for SAP 15 openldap2 versions prior to 2.4.46-9.31.1. SUSE OpenStack Cloud 7 openldap2 versions prior to 2.4.41-18.71.2. SUSE OpenStack Cloud 8 openldap2 versions prior to 2.4.41-18.71.2. SUSE OpenStack Cloud Crowbar 8 openldap2 versions prior to 2.4.41-18.71.2. openSUSE Leap 15.1 openldap2 versions prior to 2.4.46-lp151.10.12.1. openSUSE Leap 15.2 openldap2 versions prior to 2.4.46-lp152.14.3.1.
CVSS Score: 7.7 (HIGH)
CWE: CWE-349
References: https://bugzilla.suse.com/show_bug.cgi?id=1172698; https://bugzilla.suse.com/show_bug.cgi?id=1172698
CVE: CVE-2020-24583
Published: 2020-09-01
Description: An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). FILE_UPLOAD_DIRECTORY_PERMISSIONS mode was not applied to intermediate-level directories created in the process of uploading files. It was also not applied to intermediate-level collected static directories when using the collectstatic management command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://docs.djangoproject.com/en/dev/releases/security/; https://groups.google.com/forum/#%21topic/django-announce/Gdqn58RqIDM; https://groups.google.com/forum/#%21topic/django-announce/zFCMdgUnutU
CVE: CVE-2020-24584
Published: 2020-09-01
Description: An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). The intermediate-level directories of the filesystem cache had the system's standard umask rather than 0o077.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://docs.djangoproject.com/en/dev/releases/security/; https://groups.google.com/forum/#%21topic/django-announce/Gdqn58RqIDM; https://groups.google.com/forum/#%21topic/django-announce/zFCMdgUnutU
CVE: CVE-2020-14514
Published: 2020-09-01
Description: All trailer Power Line Communications are affected. PLC bus traffic can be sniffed reliably via an active antenna up to 6 feet away. Further distances are also possible, subject to environmental conditions and receiver improvements.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-201
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-219-01; https://us-cert.cisa.gov/ics/advisories/icsa-20-219-01
CVE: CVE-2020-24554
Published: 2020-09-01
Description: The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded, which allows remote attackers to perform a denial of service attack by making repeated requests for pages that do not exist.
CVSS Score: 7.5 (HIGH)
CWE: CWE-601
References: https://portal.liferay.dev/learn/security/known-vulnerabilities; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/119784956; https://portal.liferay.dev/learn/security/known-vulnerabilities
CVE: CVE-2020-2238
Published: 2020-09-01
Description: Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters' page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/01/3; https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1884; http://www.openwall.com/lists/oss-security/2020/09/01/3
CVE: CVE-2020-2239
Published: 2020-09-01
Description: Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2020/09/01/3; https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1625; http://www.openwall.com/lists/oss-security/2020/09/01/3
CVE: CVE-2020-2240
Published: 2020-09-01
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to execute arbitrary SQL scripts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2020/09/01/3; https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1023; http://www.openwall.com/lists/oss-security/2020/09/01/3
CVE: CVE-2020-2241
Published: 2020-09-01
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to connect to an attacker-specified database server using attacker-specified credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2020/09/01/3; https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1024; http://www.openwall.com/lists/oss-security/2020/09/01/3
CVE: CVE-2020-2242
Published: 2020-09-01
Description: A missing permission check in Jenkins database Plugin 1.6 and earlier allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified database server using attacker-specified credentials.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2020/09/01/3; https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1024; http://www.openwall.com/lists/oss-security/2020/09/01/3
CVE: CVE-2020-2243
Published: 2020-09-01
Description: Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/01/3; https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1936; http://www.openwall.com/lists/oss-security/2020/09/01/3
CVE: CVE-2020-2244
Published: 2020-09-01
Description: Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to provide console output for builds used to test build log indications.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/01/3; https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1770; http://www.openwall.com/lists/oss-security/2020/09/01/3
CVE: CVE-2020-2245
Published: 2020-09-01
Description: Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2020/09/01/3; https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1829; http://www.openwall.com/lists/oss-security/2020/09/01/3
CVE: CVE-2020-2246
Published: 2020-09-01
Description: Jenkins Valgrind Plugin 0.28 and earlier does not escape content in Valgrind XML reports, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control Valgrind XML report contents.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/01/3; https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1830; http://www.openwall.com/lists/oss-security/2020/09/01/3
CVE: CVE-2020-2247
Published: 2020-09-01
Description: Jenkins Klocwork Analysis Plugin 2020.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2020/09/01/3; https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1831; http://www.openwall.com/lists/oss-security/2020/09/01/3
CVE: CVE-2020-2248
Published: 2020-09-01
Description: Jenkins JSGames Plugin 0.2 and earlier evaluates part of a URL as code, resulting in a reflected cross-site scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/01/3; https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1905; http://www.openwall.com/lists/oss-security/2020/09/01/3
CVE: CVE-2020-2249
Published: 2020-09-01
Description: Jenkins Team Foundation Server Plugin 5.157.1 and earlier stores a webhook secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.
CVSS Score: 3.3 (LOW)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2020/09/01/3; https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1506; http://www.openwall.com/lists/oss-security/2020/09/01/3
CVE: CVE-2020-2250
Published: 2020-09-01
Description: Jenkins SoapUI Pro Functional Testing Plugin 1.3 and earlier stores project passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by attackers with Extended Read permission, or access to the Jenkins controller file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2020/09/01/3; https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1631%20%281%29; http://www.openwall.com/lists/oss-security/2020/09/01/3
CVE: CVE-2020-2251
Published: 2020-09-01
Description: Jenkins SoapUI Pro Functional Testing Plugin 1.5 and earlier transmits project passwords in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-319
References: http://www.openwall.com/lists/oss-security/2020/09/01/3; https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1631%20%282%29; http://www.openwall.com/lists/oss-security/2020/09/01/3
CVE: CVE-2020-6117
Published: 2020-09-01
Description: SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The bday parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1072; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1072
CVE: CVE-2020-6118
Published: 2020-09-01
Description: SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The bmonth parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1072; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1072
CVE: CVE-2020-6119
Published: 2020-09-01
Description: SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The byear parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1072; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1072
CVE: CVE-2020-6120
Published: 2020-09-01
Description: SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The fn parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1072; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1072
CVE: CVE-2020-6121
Published: 2020-09-01
Description: SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The ln parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1072; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1072
CVE: CVE-2020-6122
Published: 2020-09-01
Description: SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The mn parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1072; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1072
CVE: CVE-2020-6123
Published: 2020-09-01
Description: An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. The email parameter in the page EmailCheck.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1073; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1073
CVE: CVE-2020-6129
Published: 2020-09-01
Description: SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page CpSessionSet.php is vulnerable to SQL injection.An attacker can make an authenticated HTTP request to trigger these vulnerabilities.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1076; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1076
CVE: CVE-2020-6130
Published: 2020-09-01
Description: SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page MassDropSessionSet.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1076; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1076
CVE: CVE-2020-6131
Published: 2020-09-01
Description: SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page MassScheduleSessionSet.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1076; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1076
CVE: CVE-2020-7665
Published: 2020-09-01
Description: This affects all versions of package github.com/u-root/u-root/pkg/uzip. It is vulnerable to both leading and non-leading relative path traversal attacks in zip file extraction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/u-root/u-root/pull/1817; https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMUROOTUROOTPKGUZIP-570441; https://github.com/u-root/u-root/pull/1817
CVE: CVE-2020-7666
Published: 2020-09-01
Description: This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based (relative and absolute) path traversal attacks in cpio file extraction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/u-root/u-root/pull/1817; https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMUROOTUROOTPKGCPIO-570440; https://github.com/u-root/u-root/pull/1817
CVE: CVE-2020-7669
Published: 2020-09-01
Description: This affects all versions of package github.com/u-root/u-root/pkg/tarutil. It is vulnerable to both leading and non-leading relative path traversal attacks in tar file extraction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/u-root/u-root/pull/1817; https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMUROOTUROOTPKGTARUTIL-570428; https://github.com/u-root/u-root/pull/1817
CVE: CVE-2019-5645
Published: 2020-09-01
Description: By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on the Metasploit server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://github.com/rapid7/metasploit-framework/pull/12433; https://github.com/rapid7/metasploit-framework/pull/12433
CVE: CVE-2020-6124
Published: 2020-09-01
Description: An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. The email parameter in the page EmailCheckOthers.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1073; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1073