deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-0642
Published: 2021-08-17
Description: In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-185126149
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/2021-08-01; https://source.android.com/security/bulletin/2021-08-01
CVE: CVE-2021-0645
Published: 2021-08-17
Description: In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege, allowing an app to read private app directories in external storage, which should be restricted in Android 11, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157320644
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://source.android.com/security/bulletin/2021-08-01; https://source.android.com/security/bulletin/2021-08-01
CVE: CVE-2021-0646
Published: 2021-08-17
Description: In sqlite3_str_vappendf of sqlite3.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if the user can also inject a printf into a privileged process's SQL with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-153352319
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2021-08-01; https://source.android.com/security/bulletin/2021-08-01
CVE: CVE-2021-22156
Published: 2021-08-17
Description: An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software Development Platform (SDP) version(s) 6.5.0SP1 and earlier, QNX OS for Medical 1.1 and earlier, and QNX OS for Safety 1.0.1 and earlier that could allow an attacker to potentially perform a denial of service or execute arbitrary code.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-190, CWE-190
References: https://support.blackberry.com/kb/articleDetail?articleNumber=000082334; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-qnx-TOxjVPdL; https://support.blackberry.com/kb/articleDetail?articleNumber=000082334
CVE: CVE-2021-25263
Published: 2021-08-17
Description: Local privilege vulnerability in Yandex Browser for Windows prior to 21.9.0.390 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating files in directory with insecure permissions during Yandex Browser update process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://yandex.com/bugbounty/i/hall-of-fame-browser/; https://yandex.com/bugbounty/i/hall-of-fame-browser/
CVE: CVE-2021-29313
Published: 2021-08-17
Description: Cross Site Scripting (XSS) vulnerability exists in SeaCMS 12.6 via the (1) v_company and (2) v_tvs parameters in /admin_video.php,
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ciweiin/seacms/issues/14; https://github.com/ciweiin/seacms/issues/14
CVE: CVE-2021-39240
Published: 2021-08-17
Description: An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It does not ensure that the scheme and path portions of a URI have the expected characters. For example, the authority field (as observed on a target HTTP/2 server) might differ from what the routing rules were intended to achieve.
CVSS Score: 7.5 (HIGH)
References: https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=4b8852c70d8c4b7e225e24eb58258a15eb54c26e; https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=a495e0d94876c9d39763db319f609351907a31e8; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ALECUZDIMT5FYGP6V6PVSI4BKVZTZWN/
CVE: CVE-2021-39241
Published: 2021-08-17
Description: An issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. An HTTP method name may contain a space followed by the name of a protected resource. It is possible that a server would interpret this as a request for that protected resource, such as in the "GET /admin? HTTP/1.1 /static/images HTTP/1.1" example.
CVSS Score: 5.3 (MEDIUM)
References: https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=89265224d314a056d77d974284802c1b8a0dc97f; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ALECUZDIMT5FYGP6V6PVSI4BKVZTZWN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RPNY4WZIQUAUOCLIMUPC37AQWNXTWIQM/
CVE: CVE-2021-39242
Published: 2021-08-17
Description: An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situation with an attacker-controlled HTTP Host header, because a mismatch between Host and authority is mishandled.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=b5d2b9e154d78e4075db163826c5e0f6d31b2ab1; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ALECUZDIMT5FYGP6V6PVSI4BKVZTZWN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RPNY4WZIQUAUOCLIMUPC37AQWNXTWIQM/
CVE: CVE-2020-13588
Published: 2021-08-17
Description: An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The heading_field_id parameter in ‘‘entities/fields’ page is vulnerable to authenticated SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability, this can be done either with administrator credentials or through cross-site request forgery.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1199; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1199
CVE: CVE-2020-13589
Published: 2021-08-17
Description: An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The entities_id parameter in the 'entities/fields page (mulitple_edit or copy_selected or export function) is vulnerable to authenticated SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability, this can be done either with administrator credentials or through cross-site request forgery.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1199; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1199
CVE: CVE-2020-18164
Published: 2021-08-17
Description: SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://xz.aliyun.com/t/5095; https://xz.aliyun.com/t/5095
CVE: CVE-2020-28594
Published: 2021-08-17
Description: A use-after-free vulnerability exists in the _3MF_Importer::_handle_end_model() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1218; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1218
CVE: CVE-2021-21810
Published: 2021-08-17
Description: A memory corruption vulnerability exists in the XML-parsing ParseAttribs functionality of AT&T Labs’ Xmill 0.7. A specially crafted XML file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1278; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1278
CVE: CVE-2021-21832
Published: 2021-08-17
Description: A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools Pro 8.3.0.0767. A specially crafted malformed file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-680, CWE-190
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1295; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1295
CVE: CVE-2021-29980
Published: 2021-08-17
Description: Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.
CVSS Score: 8.8 (HIGH)
CWE: CWE-909
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1722204; https://security.gentoo.org/glsa/202202-03; https://security.gentoo.org/glsa/202208-14
CVE: CVE-2021-29981
Published: 2021-08-17
Description: An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures in JITted code that would lead to a potentially exploitable crash. This vulnerability affects Firefox < 91 and Thunderbird < 91.
CVSS Score: 8.8 (HIGH)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1707774; https://security.gentoo.org/glsa/202202-03; https://www.mozilla.org/security/advisories/mfsa2021-33/
CVE: CVE-2021-29982
Published: 2021-08-17
Description: Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the potential leak of a single bit of memory. This vulnerability affects Firefox < 91 and Thunderbird < 91.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1715318; https://security.gentoo.org/glsa/202202-03; https://www.mozilla.org/security/advisories/mfsa2021-33/
CVE: CVE-2021-29983
Published: 2021-08-17
Description: Firefox for Android could get stuck in fullscreen mode and not exit it even after normal interactions that should cause it to exit. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 91.
CVSS Score: 6.5 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1719088; https://www.mozilla.org/security/advisories/mfsa2021-33/; https://bugzilla.mozilla.org/show_bug.cgi?id=1719088
CVE: CVE-2021-29984
Published: 2021-08-17
Description: Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection. This led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1720031; https://security.gentoo.org/glsa/202202-03; https://security.gentoo.org/glsa/202208-14
CVE: CVE-2021-29985
Published: 2021-08-17
Description: A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1722083; https://security.gentoo.org/glsa/202202-03; https://security.gentoo.org/glsa/202208-14
CVE: CVE-2021-29986
Published: 2021-08-17
Description: A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. *Note: This issue only affected Linux operating systems. Other operating systems are unaffected.* This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1696138; https://security.gentoo.org/glsa/202202-03; https://security.gentoo.org/glsa/202208-14
CVE: CVE-2021-29987
Published: 2021-08-17
Description: After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be displayed in a different position but still record a click in the default location, making it possible to trick a user into accepting a permission they did not want to. *This bug only affects Firefox on Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox < 91 and Thunderbird < 91.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-307
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1716129; https://security.gentoo.org/glsa/202202-03; https://www.mozilla.org/security/advisories/mfsa2021-33/
CVE: CVE-2021-29988
Published: 2021-08-17
Description: Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-787
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1717922; https://security.gentoo.org/glsa/202202-03; https://security.gentoo.org/glsa/202208-14
CVE: CVE-2021-29989
Published: 2021-08-17
Description: Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.13, Firefox ESR < 78.13, and Firefox < 91.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1662676%2C1666184%2C1719178%2C1719998%2C1720568; https://security.gentoo.org/glsa/202202-03; https://security.gentoo.org/glsa/202208-14
CVE: CVE-2021-29990
Published: 2021-08-17
Description: Mozilla developers and community members reported memory safety bugs present in Firefox 90. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 91.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1544190%2C1716481%2C1717778%2C1719319%2C1722073; https://security.gentoo.org/glsa/202202-03; https://www.mozilla.org/security/advisories/mfsa2021-33/
CVE: CVE-2021-38702
Published: 2021-08-17
Description: Cyberoam NetGenie C0101B1-20141120-NG11VO devices through 2021-08-14 allow tweb/ft.php?u=[XSS] attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/163859/Cyberoam-NetGenie-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2021/Aug/20; http://www.cyberoamworks.com/NetGenie-Home.asp
CVE: CVE-2021-39247
Published: 2021-08-17
Description: Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to is_last_single_ascii in code1.c, and rs_encode_uint in reedsol.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://sourceforge.net/p/zint/code/ci/9b02cd52214e80f945bff41fc94bc1e17e15810c/; https://sourceforge.net/p/zint/tickets/232/; https://sourceforge.net/p/zint/code/ci/9b02cd52214e80f945bff41fc94bc1e17e15810c/
CVE: CVE-2021-39248
Published: 2021-08-17
Description: Open edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted LaTeX content within a discussion.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/edx/edx-platform/pull/28379; https://github.com/edx/edx-platform/pull/28379
CVE: CVE-2020-23330
Published: 2021-08-17
Description: An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4_Stz2Atom::GetSampleSize component located in /Core/Ap4Stz2Atom.cpp. It allows an attacker to cause a denial of service (DOS).
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/axiomatic-systems/Bento4/issues/511; https://github.com/axiomatic-systems/Bento4/issues/511
CVE: CVE-2020-23331
Published: 2021-08-17
Description: An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4_DescriptorListWriter::Action component located in /Core/Ap4Descriptor.h. It allows an attacker to cause a denial of service (DOS).
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/axiomatic-systems/Bento4/issues/509; https://github.com/axiomatic-systems/Bento4/issues/509
CVE: CVE-2020-23332
Published: 2021-08-17
Description: A heap-based buffer overflow exists in the AP4_StdcFileByteStream::ReadPartial component located in /StdC/Ap4StdCFileByteStream.cpp of Bento4 version 06c39d9. This issue can lead to a denial of service (DOS).
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://cwe.mitre.org/data/definitions/122.html; https://github.com/axiomatic-systems/Bento4/issues/510; https://cwe.mitre.org/data/definitions/122.html
CVE: CVE-2020-23333
Published: 2021-08-17
Description: A heap-based buffer overflow exists in the AP4_CttsAtom::AP4_CttsAtom component located in /Core/Ap4Utils.h of Bento4 version 06c39d9. This can lead to a denial of service (DOS).
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/axiomatic-systems/Bento4/issues/507; https://github.com/axiomatic-systems/Bento4/issues/507
CVE: CVE-2020-23334
Published: 2021-08-17
Description: A WRITE memory access in the AP4_NullTerminatedStringAtom::AP4_NullTerminatedStringAtom component of Bento4 version 06c39d9 can lead to a segmentation fault.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/axiomatic-systems/Bento4/issues/508; https://github.com/axiomatic-systems/Bento4/issues/508
CVE: CVE-2020-23341
Published: 2021-08-17
Description: A reflected cross site scripting (XSS) vulnerability in the /header.tmpl.php component of ATutor 2.2.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://minhtuanact.github.io/post/reflected-xss-in-atutor-2.2.4/; https://minhtuanact.github.io/post/reflected-xss-in-atutor-2.2.4/
CVE: CVE-2021-28372
Published: 2021-08-17
Description: ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquely assigned identifier (UID). This could result in an attacker hijacking a victim's connection and forcing them into supplying credentials needed to access the victim TUTK device.
CVSS Score: 8.3 (HIGH)
CWE: CWE-290
References: https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0020/FEYE-2021-0020.md; https://www.fireeye.com/blog/threat-research/2021/08/mandiant-discloses-critical-vulnerability-affecting-iot-devices.html; https://www.throughtek.com/kalay_overview.html
CVE: CVE-2021-0284
Published: 2021-08-17
Description: A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific sequences of packets to the device thereby causing a Denial of Service (DoS). By repeatedly sending these sequences of packets to the device, an attacker can sustain the Denial of Service (DoS) condition. The device will abnormally shut down as a result of these sent packets. A potential indicator of compromise will be the following message in the log files: "eventd[13955]: SYSTEM_ABNORMAL_SHUTDOWN: System abnormally shut down" This issue is only triggered by traffic destined to the device. Transit traffic will not trigger this issue. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S19; 15.1 versions prior to 15.1R7-S10; 17.3 versions prior to 17.3R3-S12; 18.4 versions prior to 18.4R2-S9, 18.4R3-S9; 19.1 versions prior to 19.1R3-S7; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S7, 19.3R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R2-S2, 20.4R3; 21.1 versions prior to 21.1R2; 21.2 versions prior to 21.2R1-S1, 21.2R2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://kb.juniper.net/JSA11200; https://kb.juniper.net/JSA11200
CVE: CVE-2021-39131
Published: 2021-08-17
Description: ced detects character encoding using Google’s compact_enc_det library. In ced v0.1.0, passing data types other than `Buffer` causes the Node.js process to crash. The problem has been patched in ced v1.0.0. As a workaround, before passing an argument to ced, verify it’s a `Buffer` using `Buffer.isBuffer(obj)`.
CVSS Score: 7.5 (HIGH)
CWE: CWE-241, CWE-755
References: https://github.com/sonicdoe/ced/commit/a4d9f10b6bf1cd468d1a5b9a283cdf437f8bb7b3; https://github.com/sonicdoe/ced/releases/tag/v1.0.0; https://github.com/sonicdoe/ced/security/advisories/GHSA-27wq-qx3q-fxm9
CVE: CVE-2021-39249
Published: 2021-08-17
Description: Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows reflected XSS because the filenames of uploaded files become predictable through a brute-force attack against the PHP mt_rand function.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-330
References: https://invisioncommunity.com/release-notes/4651-r102/; https://ssd-disclosure.com/ssd-advisory-ip-board-stored-xss-to-rce-chain/; https://invisioncommunity.com/release-notes/4651-r102/
CVE: CVE-2021-39250
Published: 2021-08-17
Description: Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows stored XSS, with resultant code execution, because an uploaded file can be placed in an IFRAME element within user-generated content. For code execution, the attacker can rely on the ability of an admin to install widgets, disclosure of the admin session ID in a Referer header, and the ability of an admin to use the templating engine (e.g., Edit HTML).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://invisioncommunity.com/release-notes/4651-r102/; https://ssd-disclosure.com/ssd-advisory-ip-board-stored-xss-to-rce-chain/; https://invisioncommunity.com/release-notes/4651-r102/
CVE: CVE-2021-39267
Published: 2021-08-18
Description: Persistent cross-site scripting (XSS) in the web interface of SuiteCRM before 7.11.19 allows a remote attacker to introduce arbitrary JavaScript via a Content-Type Filter bypass to upload malicious files. This occurs because text/html is blocked, but other types that allow JavaScript execution (such as text/xml) are not blocked.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_19; https://github.com/salesagility/SuiteCRM; https://thanhlocpanda.wordpress.com/2021/07/31/file-upload-bypass-suitecrm-7-11-18/
CVE: CVE-2021-39268
Published: 2021-08-18
Description: Persistent cross-site scripting (XSS) in the web interface of SuiteCRM before 7.11.19 allows a remote attacker to introduce arbitrary JavaScript via malicious SVG files. This occurs because the clean_file_output protection mechanism can be bypassed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_19; https://github.com/salesagility/SuiteCRM; https://thanhlocpanda.wordpress.com/2021/07/31/stored-xss-via-svg-on-suitecrm/
CVE: CVE-2021-20753
Published: 2021-08-18
Description: Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cs.cybozu.co.jp/2021/007206.html; https://jvn.jp/en/jp/JVN54794245/index.html; https://cs.cybozu.co.jp/2021/007206.html