deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-20295
Published: 2022-04-01
Description: It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-2020:4676) erratum released as part of Red Hat Enterprise Linux 8.3 failed to include the fix for the qemu-kvm component issue CVE-2020-10756, which was previously corrected in virt:rhel/qemu-kvm via erratum RHSA-2020:4059 (https://access.redhat.com/errata/RHSA-2020:4059). CVE-2021-20295 was assigned to that Red Hat specific security regression. For more details about the original security issue CVE-2020-10756, refer to bug 1835986 or the CVE page: https://access.redhat.com/security/cve/CVE-2020-10756.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://access.redhat.com/security/cve/CVE-2020-10756; https://bugzilla.redhat.com/show_bug.cgi?id=1944075; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-22277
Published: 2022-04-01
Description: Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2021-23247
Published: 2022-04-01
Description: A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote attacke0rs to gain arbitrary code execution in quick game engine
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE[PII_REDACTED]614794240; https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE[PII_REDACTED]614794240
CVE: CVE-2021-23287
Published: 2022-04-01
Description: The vulnerability exists due to insufficient validation of input of certain resources within the IPM software. This issue affects: Intelligent Power Manager (IPM 1) versions prior to 1.70.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-Vulnerability-Advisory_1002a_V1.0.pdf; https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-Vulnerability-Advisory_1002a_V1.0.pdf
CVE: CVE-2021-23288
Published: 2022-04-01
Description: The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Protector-Vulnerability-Advisory_1002b_V1.0.pdf; https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Protector-Vulnerability-Advisory_1002b_V1.0.pdf
CVE: CVE-2021-26623
Published: 2022-04-01
Description: A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library. Remote attackers can induce exploit malicious code using this function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-787, CWE-125, CWE-787
References: https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66595; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66595
CVE: CVE-2021-26624
Published: 2022-04-01
Description: An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due to invalid arguments and insufficient execution conditions related to "runasroot" command. This vulnerability can induce remote attackers to exploit root privileges by manipulating parameter values.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66596; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66596
CVE: CVE-2021-27223
Published: 2022-04-01
Description: A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. A local user could cause Windows crash by running a specially crafted binary module. The fix was delivered automatically. Credits: (Straghkov Denis, Kurmangaleev Shamil, Fedotov Andrey, Kuts Daniil, Mishechkin Maxim, Akolzin Vitaliy) @ ISPRAS
CVSS Score: 5.5 (MEDIUM)
References: https://support.kaspersky.com/general/vulnerability.aspx?el=12430#310322_1; https://support.kaspersky.com/general/vulnerability.aspx?el=12430#310322_1
CVE: CVE-2021-27493
Published: 2022-04-01
Description: Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-707
References: http://www.philips.com/productsecurity; https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01; http://www.philips.com/productsecurity
CVE: CVE-2021-27497
Published: 2022-04-01
Description: Philips Vue PACS versions 12.2.x.x and prior does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-693
References: http://www.philips.com/productsecurity; https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01; http://www.philips.com/productsecurity
CVE: CVE-2021-27501
Published: 2022-04-01
Description: Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.
CVSS Score: 7.5 (HIGH)
CWE: CWE-710
References: http://www.philips.com/productsecurity; https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01; http://www.philips.com/productsecurity
CVE: CVE-2021-28504
Published: 2022-04-01
Description: On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as expected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284, CWE-863
References: https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073; https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073
CVE: CVE-2021-32503
Published: 2022-04-01
Description: Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users only. A malicious attacker could use this sensitive information’s to launch further attacks on the system.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-862, CWE-400
References: https://sick.com/psirt; https://sick.com/psirt
CVE: CVE-2021-32933
Published: 2022-04-01
Description: An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in MDT AutoSave versions prior to v6.02.06 and run a command line argument. This could then be leveraged to run a malicious process.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-77, CWE-78
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02; https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02
CVE: CVE-2021-32937
Published: 2022-04-01
Description: An attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in MDT AutoSave versions prior to v6.02.06. An attacker can leverage this knowledge to provide a malicious command to the working directory where the read and write activity can be initiated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-209, CWE-209
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02; https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02
CVE: CVE-2021-32945
Published: 2022-04-01
Description: An attacker could decipher the encryption and gain access to MDT AutoSave versions prior to v6.02.06.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326, CWE-326
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02; https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02
CVE: CVE-2021-32949
Published: 2022-04-01
Description: An attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path to another path and traversing the directory, allowing the replacement of an existing file with a malicious file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23, CWE-22
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02; https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02
CVE: CVE-2021-32953
Published: 2022-04-01
Description: An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02; https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02
CVE: CVE-2021-32957
Published: 2022-04-01
Description: A function in MDT AutoSave versions prior to v6.02.06 is used to retrieve system information for a specific process, and this information collection executes multiple commands and summarizes the information into an XML. This function and subsequent process gives full path to the executable and is therefore vulnerable to binary hijacking.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02; https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02
CVE: CVE-2021-32960
Published: 2022-04-01
Description: Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.
CVSS Score: 8.5 (HIGH)
CWE: CWE-863, CWE-693
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131785; https://www.cisa.gov/uscert/ics/advisories/icsa-21-161-01; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131785
CVE: CVE-2021-32961
Published: 2022-04-01
Description: A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting in the processing of a request in a special manner. This can result in the execution of an unzip command and place a malicious .exe file in one of the locations the function looks for and get execution capabilities.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434, CWE-434
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02; https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02
CVE: CVE-2021-32968
Published: 2022-04-01
Description: Two buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O Series firmware version 2.2 or earlier may allow a remote attacker to cause a denial-of-service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01; https://www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-serial-device-server-vulnerabilities; https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01
CVE: CVE-2021-32970
Published: 2022-04-01
Description: Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier, which may allow a remote attacker to cause denial-of-service conditions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01; https://www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-serial-device-server-vulnerabilities; https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01
CVE: CVE-2021-32974
Published: 2022-04-01
Description: Improper input validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to execute commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-78
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01; https://www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-serial-device-server-vulnerabilities; https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01
CVE: CVE-2021-32976
Published: 2022-04-01
Description: Five buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to initiate a denial-of-service attack and execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01; https://www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-serial-device-server-vulnerabilities; https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01
CVE: CVE-2021-33018
Published: 2022-04-01
Description: The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unnecessary risk that may result in the exposure of sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327, CWE-327
References: http://www.philips.com/productsecurity; https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01; http://www.philips.com/productsecurity
CVE: CVE-2021-33020
Published: 2022-04-01
Description: Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its expiration date, which diminishes its safety significantly by increasing the timing window for cracking attacks against that key.
CVSS Score: 8.2 (HIGH)
CWE: CWE-324, CWE-672
References: http://www.philips.com/productsecurity; https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01; http://www.philips.com/productsecurity
CVE: CVE-2021-33022
Published: 2022-04-01
Description: Philips Vue PACS versions 12.2.x.x and prior transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: http://www.philips.com/productsecurity; https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01; http://www.philips.com/productsecurity
CVE: CVE-2021-33024
Published: 2022-04-01
Description: Philips Vue PACS versions 12.2.x.x and prior transmits or stores authentication credentials, but it uses an insecure method susceptible to unauthorized interception and/or retrieval.
CVSS Score: 3.7 (LOW)
CWE: CWE-522, CWE-522
References: http://www.philips.com/productsecurity; https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01; http://www.philips.com/productsecurity
CVE: CVE-2021-33657
Published: 2022-04-01
Description: There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/libsdl-org/SDL/commit/8c91cf7dba5193f5ce12d06db[PII_REDACTED]c9ee9; https://lists.debian.org/debian-lts-announce/2023/02/msg00008.html; https://security.gentoo.org/glsa/202305-17
CVE: CVE-2021-39908
Published: 2022-04-01
Description: In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 certain Unicode characters can be abused to commit malicious code into projects without being noticed in merge request or source code viewer UI.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39908.json; https://gitlab.com/gitlab-org/gitlab/-/issues/337193; https://hackerone.com/reports/1280077
CVE: CVE-2021-3461
Published: 2022-04-01
Description: A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SAML identity provider and Principal Type is set to Attribute [Name].
CVSS Score: 7.1 (HIGH)
CWE: CWE-613, CWE-613
References: https://bugzilla.redhat.com/show_bug.cgi?id=1941565; https://bugzilla.redhat.com/show_bug.cgi?id=1941565
CVE: CVE-2021-3847
Published: 2022-04-01
Description: An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a capable file from a nosuid mount into another mount. A local user could use this flaw to escalate their privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-281, CWE-281
References: https://bugzilla.redhat.com/show_bug.cgi?id=2009704; https://www.openwall.com/lists/oss-security/2021/10/14/3; https://bugzilla.redhat.com/show_bug.cgi?id=2009704
CVE: CVE-2022-0373
Published: 2022-04-01
Description: Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-members to retrieve the service desk email address
CVSS Score: 4.3 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0373.json; https://gitlab.com/gitlab-org/gitlab/-/issues/349881; https://hackerone.com/reports/1439254
CVE: CVE-2022-0390
Published: 2022-04-01
Description: Improper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1 allowed for project non-members to retrieve issue details when it was linked to an item from the vulnerability dashboard.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0390.json; https://gitlab.com/gitlab-org/gitlab/-/issues/330030; https://hackerone.com/reports/1179733
CVE: CVE-2022-0425
Published: 2022-04-01
Description: A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to trigger Server Side Request Forgery (SSRF) attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0425.json; https://gitlab.com/gitlab-org/gitlab/-/issues/22350; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0425.json
CVE: CVE-2022-0489
Published: 2022-04-01
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DOS by using the math feature with a specific formula in issue comments.
CVSS Score: 3.5 (LOW)
CWE: CWE-400
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0489.json; https://gitlab.com/gitlab-org/gitlab/-/issues/341832; https://hackerone.com/reports/1350793
CVE: CVE-2022-0741
Published: 2022-04-01
Description: Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal environment variables via specially crafted email addresses.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-116
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0741.json; https://gitlab.com/gitlab-org/gitlab/-/issues/337601; https://hackerone.com/reports/1286317
CVE: CVE-2022-0922
Published: 2022-04-01
Description: The software does not perform any authentication for critical system functionality.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsma-22-088-01; https://www.cisa.gov/uscert/ics/advisories/icsma-22-088-01
CVE: CVE-2022-1018
Published: 2022-04-01
Description: When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within a dynamic link library file. An attacker could exploit this to pass data from local files to a remote web server, leading to a loss of confidentiality.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-01
CVE: CVE-2022-1068
Published: 2022-04-01
Description: Modbus Tools Modbus Slave (versions 7.4.2 and prior) is vulnerable to a stack-based buffer overflow in the registration field. This may cause the program to crash when a long character string is used.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-04; https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-04
CVE: CVE-2022-1098
Published: 2022-04-01
Description: Delta Electronics DIAEnergie (all versions prior to 1.8.02.004) are vulnerable to a DLL hijacking condition. When combined with the Incorrect Default Permissions vulnerability of 4.2.2 above, this makes it possible for an attacker to escalate privileges
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01
CVE: CVE-2022-1159
Published: 2022-04-01
Description: Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user.
CVSS Score: 7.7 (HIGH)
CWE: CWE-94, CWE-94
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-07; https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-07
CVE: CVE-2022-21830
Published: 2022-04-01
Description: A blind self XSS vulnerability exists in RocketChat LiveChat <v1.9 that could allow an attacker to trick a victim pasting malicious code in their chat instance.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/1091118; https://hackerone.com/reports/1091118
CVE: CVE-2022-22570
Published: 2022-04-01
Description: A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://community.ui.com/releases/Security-Advisory-Bulletin-024-024/22725557-0f72-4f5d-83b0-f16252fcd4b7; https://community.ui.com/releases/Security-Advisory-Bulletin-024-024/22725557-0f72-4f5d-83b0-f16252fcd4b7
CVE: CVE-2022-22950
Published: 2022-04-01
Description: n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://tanzu.vmware.com/security/cve-2022-22950; https://tanzu.vmware.com/security/cve-2022-22950
CVE: CVE-2022-22963
Published: 2022-04-01
Description: In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-917
References: http://packetstormsecurity.com/files/173430/Spring-Cloud-3.2.2-Remote-Command-Execution.html; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005; https://tanzu.vmware.com/security/cve-2022-22963