deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-24799
Published: 2022-04-20
Description: wire-webapp is the web application interface for the wire messaging service. Insufficient escaping in markdown “code highlighting” in the wire-webapp resulted in the possibility of injecting and executing arbitrary HTML code and thus also JavaScript. If a user receives and views such a malicious message, arbitrary code is injected and executed in the context of the victim. This allows the attacker to fully control the user account. Wire-desktop clients that are connected to a vulnerable wire-webapp version are also vulnerable to this attack. The issue has been fixed in wire-webapp 2022-03-30-production.0 and is already deployed on all Wire managed services. On-premise instances of wire-webapp need to be updated to docker tag 2022-03-30-production.0-v0.29.2-0-d144552 or wire-server 2022-03-30 (chart/4.8.0), so that their applications are no longer affected. There are no known workarounds for this issue. ### Patches * The issue has been fixed in wire-webapp **2022-03-30-production.0** and is already deployed on all Wire managed services. * On-premise instances of wire-webapp need to be updated to docker tag **2022-03-30-production.0-v0.29.2-0-d144552** or wire-server **2022-03-30 (chart/4.8.0)**, so that their applications are no longer affected. ### Workarounds * No workarounds known ### For more information If you have any questions or comments about this advisory feel free to email us at [vulnerability-report@wire.com](mailto:vulnerability-report@wire.com) ### Credits We thank [Posix](https://twitter.com/po6ix) for reporting this vulnerability
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://github.com/wireapp/wire-webapp/commit/d14455252a949dc83f36d45e2babbdd9328af2a4; https://github.com/wireapp/wire-webapp/releases/tag/2022-03-30-production.0; https://github.com/wireapp/wire-webapp/security/advisories/GHSA-5568-rfh8-vmhq
CVE: CVE-2022-0540
Published: 2022-04-20
Description: A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also affects Atlassian Jira Service Management Server and Data Center versions before 4.13.18, versions 4.14.0 and later before 4.20.6, and versions 4.21.0 and later before 4.22.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://confluence.atlassian.com/display/JIRA/Jira+Security+Advisory+2022-04-20; https://jira.atlassian.com/browse/JRASERVER-73650; https://jira.atlassian.com/browse/JSDSERVER-11224
CVE: CVE-2022-24861
Published: 2022-04-20
Description: Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has remote code execution vulnerability. JDBC drivers are not validated prior to use and may be provided by users of the system. This can lead to code execution by any basic user who has access to the system. Users are advised to upgrade. There are no known workarounds to this issue.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-20, CWE-20
References: https://github.com/vran-dev/databasir/commit/ca22a8fef7a31c0235b0b2951260a7819b89993b; https://github.com/vran-dev/databasir/pull/103; https://github.com/vran-dev/databasir/security/advisories/GHSA-5r2v-wcwh-7xmp
CVE: CVE-2022-24862
Published: 2022-04-20
Description: Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Server-Side Request Forgery vulnerability. During the download verification process of a JDBC driver the corresponding JDBC driver download address will be downloaded first, but this address will return a response page with complete error information when accessing a non-existent URL. Attackers can take advantage of this feature for SSRF.
CVSS Score: 7.7 (HIGH)
CWE: CWE-918, CWE-918
References: https://github.com/vran-dev/databasir/releases/tag/v1.0.2; https://github.com/vran-dev/databasir/security/advisories/GHSA-r8m9-r74j-vc6m; https://github.com/vran-dev/databasir/releases/tag/v1.0.2
CVE: CVE-2022-24864
Published: 2022-04-20
Description: Origin Protocol is a blockchain based project. The Origin Protocol project website allows for malicious users to inject malicious Javascript via a POST request to `/presale/join`. User-controlled data is passed with no sanitization to SendGrid and injected into an email that is delivered to the founders@originprotocol.com. If the email recipient is using an email program that is susceptible to XSS, then that email recipient will receive an email that may contain malicious XSS. Regardless if the email recipient’s mail program has vulnerabilities or not, the hacker can at the very least inject malicious HTML that modifies the body content of the email. There are currently no known workarounds.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/OriginProtocol/origin-website/pull/617; https://github.com/OriginProtocol/origin-website/security/advisories/GHSA-v6fc-qwxx-m4h7; https://github.com/github/codeql/pull/7127
CVE: CVE-2022-24871
Published: 2022-04-20
Description: Shopware is an open commerce platform based on Symfony Framework and Vue. In affected versions an attacker can abuse the Admin SDK functionality on the server to read or update internal resources. Users are advised to update to the current version 6.4.10.1. For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. There are no known workarounds for this issue.
CVSS Score: 7.2 (HIGH)
CWE: CWE-918, CWE-918
References: https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-04-2022; https://github.com/shopware/platform/commit/083765e2d64a00315050c4891800c9e98ba0c77c; https://github.com/shopware/platform/security/advisories/GHSA-7gm7-8q8v-9gf2
CVE: CVE-2022-26133
Published: 2022-04-20
Description: SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4, 7.19.0 and later prior to 7.19.4, and 7.20.0 allow a remote, unauthenticated attacker to execute arbitrary code via Java deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://confluence.atlassian.com/security/multiple-products-security-advisory-hazelcast-vulnerable-to-remote-code-execution-cve-2016-10[PII_REDACTED]387.html; https://jira.atlassian.com/browse/BSERV-13173; https://confluence.atlassian.com/security/multiple-products-security-advisory-hazelcast-vulnerable-to-remote-code-execution-cve-2016-10[PII_REDACTED]387.html
CVE: CVE-2021-37740
Published: 2022-04-20
Description: A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the device unresponsive to all requests on the KNXnet/IP Secure layer, until the device is rebooted, via a SESSION_REQUEST frame with a modified total length field.
CVSS Score: 7.5 (HIGH)
References: https://github.com/robertguetzkow/CVE-2021-37740; https://www.mdt.de/EN_IP_Interface_Router.html; https://www.mdt.de/download/MDT_CL_SCN_IP_03_IP_Interface_Router.pdf
CVE: CVE-2021-43481
Published: 2022-04-20
Description: An SQL Injection vulnerability exists in Webtareas 2.4p3 and earlier via the $uq HTTP POST parameter in editapprovalstage.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/167026/WebTareas-2.4-SQL-Injection.html; https://behradtaher.dev/2021/11/05/Discovering-a-Blind-SQL-Injection-Whitebox-Approach/; https://sourceforge.net/projects/webtareas/
CVE: CVE-2022-24865
Published: 2022-04-20
Description: HumHub is an Open Source Enterprise Social Network. In affected versions users who are forced to change their password by an administrator may retrieve other users' data. This issue has been resolved by commit `eb83de20`. It is recommended that the HumHub is upgraded to 1.11.0, 1.10.4 or 1.9.4. There are no known workarounds for this issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-863
References: https://github.com/humhub/humhub/commit/eb83de20aaecc559ab77a44a6179646a99607e33; https://github.com/humhub/humhub/security/advisories/GHSA-2h35-f226-3f57; https://huntr.dev/bounties/89d996a2-de30-4261-8e3f-98e54cb25f76/
CVE: CVE-2022-24872
Published: 2022-04-20
Description: Shopware is an open commerce platform based on Symfony Framework and Vue. Permissions set to sales channel context by admin-api are still usable within normal user session. Users are advised to update to the current version 6.4.10.1. For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. There are no known workarounds for this issue.
CVSS Score: 8.1 (HIGH)
CWE: CWE-732, CWE-732
References: https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-04-2022; https://github.com/shopware/platform/commit/083765e2d64a00315050c4891800c9e98ba0c77c; https://github.com/shopware/platform/security/advisories/GHSA-9wrv-g75h-8ccc
CVE: CVE-2022-24874
Published: 2022-04-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-28820. Reason: This candidate is a reservation duplicate of CVE-2022-28820. Notes: All CVE users should reference CVE-2022-28820 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2022-29528
Published: 2022-04-20
Description: An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/MISP/MISP/commit/0108f1bde2117ac5c1e28d124128f60c8bb09a8e; https://github.com/MISP/MISP/commit/93821c0de6a7dd32262ce62212773f43136ca66e; https://github.com/MISP/MISP/compare/v2.4.157...v2.4.158
CVE: CVE-2022-29529
Published: 2022-04-20
Description: An issue was discovered in MISP before 2.4.158. There is stored XSS via the LinOTP login field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/9623de2f5cca011afc581d55cfa5ce87682894fd; https://github.com/MISP/MISP/compare/v2.4.157...v2.4.158; https://zigrin.com/advisories/misp-stored-xss-via-the-linotp-login-field/
CVE: CVE-2022-29530
Published: 2022-04-20
Description: An issue was discovered in MISP before 2.4.158. There is stored XSS in the galaxy clusters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/107e271d78c255d658ce998285fe6f6c4f291b41; https://github.com/MISP/MISP/compare/v2.4.157...v2.4.158; https://zigrin.com/advisories/misp-stored-xss-in-the-galaxy-clusters/
CVE: CVE-2022-29531
Published: 2022-04-20
Description: An issue was discovered in MISP before 2.4.158. There is stored XSS in the event graph via a tag name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/bb3b7a7e91862742cae228c43b3091bad476dcc0; https://github.com/MISP/MISP/compare/v2.4.157...v2.4.158; https://zigrin.com/advisories/misp-stored-xss-in-the-event-graph/
CVE: CVE-2022-29532
Published: 2022-04-20
Description: An issue was discovered in MISP before 2.4.158. There is XSS in the cerebrate view if one administrator puts a javascript: URL in the URL field, and another administrator clicks on it.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/60c85b80e3ab05c3ef015bca5630e95eddbb1436; https://github.com/MISP/MISP/compare/v2.4.157...v2.4.158; https://zigrin.com/advisories/misp-xss-in-the-cerebrate-view/
CVE: CVE-2022-29533
Published: 2022-04-20
Description: An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situation with a "weird single checkbox page."
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/ce6bc88e330f5ef50666b149d86c0d94f545f24e; https://github.com/MISP/MISP/compare/v2.4.157...v2.4.158; https://zigrin.com/advisories/misp-xss-in-app-controller-organisationscontroller-php/
CVE: CVE-2022-29534
Published: 2022-04-20
Description: An issue was discovered in MISP before 2.4.158. In UsersController.php, password confirmation can be bypassed via vectors involving an "Accept: application/json" header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://github.com/MISP/MISP/commit/01120163a6b4d905029d416e7305575df31df8af; https://github.com/MISP/MISP/compare/v2.4.157...v2.4.158; https://zigrin.com/advisories/misp-password-confirmation-can-be-bypassed/
CVE: CVE-2022-29536
Published: 2022-04-20
Description: In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1106; https://lists.debian.org/debian-lts-announce/2022/08/msg00006.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLLDMY4JYDZTMZSCPSY23K5YW3SQYUR6/
CVE: CVE-2022-29537
Published: 2022-04-20
Description: gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/gpac/gpac/issues/2173; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/2173
CVE: CVE-2022-27924
Published: 2022-04-21
Description: Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74, CWE-74
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2022-27925
Published: 2022-04-21
Description: Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22, CWE-22
References: http://packetstormsecurity.com/files/168146/Zimbra-Zip-Path-Traversal.html; https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24
CVE: CVE-2022-27926
Published: 2022-04-21
Description: A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2022-29547
Published: 2022-04-21
Description: The CreateRedirect extension before 2022-04-14 for MediaWiki does not properly check whether the user has permissions to edit the target page. This could lead to an unauthorised (or blocked) user being able to edit a page.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CreateRedirect/+/780567; https://phabricator.miraheze.org/T9061; https://phabricator.wikimedia.org/T306174
CVE: CVE-2022-29548
Published: 2022-04-21
Description: A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0, 6.5.0, and 6.6.0; IS as Key Manager 5.5.0, 5.6.0, 5.7.0, 5.9.0, and 5.10.0; Identity Server 5.5.0, 5.6.0, 5.7.0, 5.9.0, 5.10.0, and 5.11.0; Identity Server Analytics 5.5.0 and 5.6.0; and WSO2 Micro Integrator 1.0.0.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/167587/WSO2-Management-Console-Cross-Site-Scripting.html; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1603; https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2022/WSO2-2021-1603/
CVE: CVE-2016-20014
Published: 2022-04-21
Description: In pam_tacplus.c in pam_tacplus before 1.4.1, pam_sm_acct_mgmt does not zero out the arep data structure.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/kravietz/pam_tacplus/commit/e4c00eba70a0f72c4de77b5f072c69708ec2beab; https://github.com/kravietz/pam_tacplus/commit/e4c00eba70a0f72c4de77b5f072c69708ec2beab
CVE: CVE-2022-27237
Published: 2022-04-21
Description: There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Depending on the product(s) in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install G Web Development 2022 R1 or later, or install Static Test Software Suite version 1.2 or later.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.ni.com/en-us/support/documentation/supplemental/22/cross-site-scripting-vulnerability--in-ni-web-server-component.html; https://www.ni.com/en-us/support/documentation/supplemental/22/cross-site-scripting-vulnerability--in-ni-web-server-component.html
CVE: CVE-2022-29498
Published: 2022-04-21
Description: Blazer before 2.6.0 allows SQL Injection. In certain circumstances, an attacker could get a user to run a query they would not have normally run.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/ankane/blazer/issues/392; https://github.com/ankane/blazer/issues/392
CVE: CVE-2022-1420
Published: 2022-04-21
Description: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-823, CWE-119
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://github.com/vim/vim/commit/8b91e71441069b1dde9ac9ff9d9a829b1b4aecca
CVE: CVE-2022-24272
Published: 2022-04-21
Description: An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617, CWE-617
References: https://jira.mongodb.org/browse/SERVER-63968; https://jira.mongodb.org/browse/SERVER-63968
CVE: CVE-2022-1022
Published: 2022-04-21
Description: Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/chatwoot/chatwoot/commit/27ddd77a1b621f503fe89a436a49f44b0b1204b5; https://huntr.dev/bounties/2e4ac6b5-7357-415d-9633-65c636b20e94; https://github.com/chatwoot/chatwoot/commit/27ddd77a1b621f503fe89a436a49f44b0b1204b5
CVE: CVE-2021-41161
Published: 2022-04-21
Description: Combodo iTop is a web based IT Service Management tool. In versions prior to 3.0.0-beta6 the export CSV page don't properly escape the user supplied parameters, allowing for javascript injection into rendered csv files. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://github.com/Combodo/iTop/commit/c8f3d23d30c018bc44189b38fa34a5fffb4edb22; https://github.com/Combodo/iTop/security/advisories/GHSA-788f-g6g9-f8fc; https://github.com/Combodo/iTop/commit/c8f3d23d30c018bc44189b38fa34a5fffb4edb22
CVE: CVE-2021-41162
Published: 2022-04-21
Description: Combodo iTop is a web based IT Service Management tool. In 3.0.0 beta releases prior to beta6 the `ajax.render.php?operation=wizard_helper` page did not properly escape the user supplied parameters, allowing for a cross site scripting attack vector. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://github.com/Combodo/iTop/commit/83125d9ae16cfb2527b9d0ab0805a68b863244a0; https://github.com/Combodo/iTop/security/advisories/GHSA-w5jw-hfvp-gx95; https://github.com/Combodo/iTop/commit/83125d9ae16cfb2527b9d0ab0805a68b863244a0
CVE: CVE-2022-0272
Published: 2022-04-21
Description: Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611, CWE-611
References: https://github.com/detekt/detekt/commit/c965a8d2a6bbdb9bcfc6acfa7bbffd3da81f5395; https://huntr.dev/bounties/23e37ba7-96d5-4037-a90a-8c8f4a70ce44; https://github.com/detekt/detekt/commit/c965a8d2a6bbdb9bcfc6acfa7bbffd3da81f5395
CVE: CVE-2022-22435
Published: 2022-04-21
Description: IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/224162; https://www.ibm.com/support/pages/node/6573669; https://exchange.xforce.ibmcloud.com/vulnerabilities/224162
CVE: CVE-2022-22436
Published: 2022-04-21
Description: IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 224164.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/224164; https://www.ibm.com/support/pages/node/6573667; https://exchange.xforce.ibmcloud.com/vulnerabilities/224164
CVE: CVE-2022-24867
Published: 2022-04-21
Description: GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you pass the config to the javascript, some entries are filtered out. The variable ldap_pass is not filtered and when you look at the source code of the rendered page, we can see the password for the root dn. Users are advised to upgrade. There is no known workaround for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-522
References: https://github.com/glpi-project/glpi/commit/26f0a20810db11641afdcf671bac7a309acbb94e; https://github.com/glpi-project/glpi/security/advisories/GHSA-4r49-52q9-5fgr; https://github.com/glpi-project/glpi/commit/26f0a20810db11641afdcf671bac7a309acbb94e
CVE: CVE-2022-24868
Published: 2022-04-21
Description: GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions prior to 10.0.0 one can exploit a lack of sanitization on SVG file uploads and inject javascript into their user avatar. As a result any user viewing the avatar will be subject to a cross site scripting attack. Users of GLPI are advised to upgrade. Users unable to upgrade should disallow SVG avatars.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/glpi-project/glpi/commit/1aa9fcc4741a46fa5a9f11d71b409b911ffc190f; https://github.com/glpi-project/glpi/security/advisories/GHSA-9hg4-fpwv-gx78; https://github.com/glpi-project/glpi/commit/1aa9fcc4741a46fa5a9f11d71b409b911ffc190f