deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-51569
Published: 2025-07-31
Description: A cross-site scripting (XSS) vulnerability exists in the LB-Link BL-CPE300M 01.01.02P42U14_06 router's web interface. The /goform/goform_get_cmd_process endpoint fails to sanitize user input in the cmd parameter before reflecting it into a text/html response. This allows unauthenticated attackers to inject arbitrary JavaScript, which is executed in the context of the router's origin when the crafted URL is accessed. The issue requires user interaction to exploit.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.lb-link.com/CPE300M-AX300-4G-LTE-Router-pd502775568.html; https://www.zyenra.com/blog/xss-in-lb-link-lb-cpe300m.html
CVE: CVE-2025-52289
Published: 2025-07-31
Description: A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pending" to "active" without requiring administrator approval.
CVSS Score: 8.0 (HIGH)
CWE: CWE-269, CWE-284
References: https://github.com/Madhav-Bhardwaj/CVE-2025-52289; https://github.com/magnussolution/magnusbilling7/commit/f886330e9e9216a[PII_REDACTED]a4a83f970c08e8d
CVE: CVE-2025-8408
Published: 2025-07-31
Description: A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. Affected is an unknown function of the file /filter1.php. The manipulation of the argument vehicle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/wllovemy/cve/issues/2; https://vuldb.com/?ctiid.318396
CVE: CVE-2025-29556
Published: 2025-07-31
Description: ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control. Since version 6.3, ExaGrid enforces restrictions preventing users with the Admin role from creating or modifying users with the Security Officer role without approval. However, a flaw in the account creation process allows an attacker to bypass these restrictions via API request manipulation. An attacker with an Admin access can intercept and modify the API request during user creation, altering the parameters to assign the new account to the ExaGrid Security Officers group without the required approval.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://github.com/0xsu3ks/CVE-2025-29556; https://www.exagrid.com/
CVE: CVE-2025-46809
Published: 2025-07-31
Description: A Plaintext Storage of a Password vulnerability in SUSE exposes the credentials for the HTTP proxy in the log files. This issue affects Container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1: from ? before 4.3.33-150400.3.55.2; Container suse/manager/5.0/x86_64/proxy-httpd:5.0.5.7.23.1: from ? before 5.0.14-150600.4.17.1; Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from ? before 5.0.14-150600.4.17.1; Image SLES15-SP4-Manager-Proxy-4-3-BYOS: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE: from ? before 4.3.33-150400.3.55.2; SUSE Manager Proxy Module 4.3: from ? before 4.3.33-150400.3.55.2; SUSE Manager Server Module 4.3: from ? before 4.3.33-150400.3.55.2.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-256
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46809
CVE: CVE-2025-50847
Published: 2025-07-31
Description: Cross Site Request Forgery (CSRF) vulnerability in CS Cart 4.18.3, allows attackers to add products to a user's comparison list via a crafted HTTP request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://cs.com; https://github.com/hackerwahab/CS-Cart-Vulns/blob/main/CVE-2025-50847.md
CVE: CVE-2025-50848
Published: 2025-07-31
Description: A file upload vulnerability was discovered in CS Cart 4.18.3, allows attackers to execute arbitrary code. CS Cart 4.18.3 allows unrestricted upload of HTML files, which are rendered directly in the browser when accessed. This allows an attacker to upload a crafted HTML file containing malicious content, such as a fake login form for credential harvesting or scripts for Cross-Site Scripting (XSS) attacks. Since the content is served from a trusted domain, it significantly increases the likelihood of successful phishing or script execution against other users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://cs.com; https://github.com/hackerwahab/CS-Cart-Vulns/blob/main/CVE-2025-50848.md
CVE: CVE-2025-50850
Published: 2025-07-31
Description: An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verification and rate limiting. This allows an attacker to systematically attempt various combinations of usernames and passwords (brute-force attack) to gain unauthorized access to vendor accounts. The absence of any blocking mechanism makes the login endpoint susceptible to automated attacks.
CVSS Score: 8.6 (HIGH)
CWE: CWE-284, CWE-804
References: http://cs.com; https://github.com/hackerwahab/CS-Cart-Vulns/blob/main/CVE-2025-50850.md
CVE: CVE-2025-50867
Published: 2025-07-31
Description: A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter is directly embedded in SQL statements without sanitization.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/SacX-7/CVE-2025-50867
CVE: CVE-2025-52203
Published: 2025-07-31
Description: A stored cross-site scripting (XSS) vulnerability exists in DevaslanPHP project-management v1.2.4. The vulnerability resides in the Ticket Name field, which fails to properly sanitize user-supplied input. An authenticated attacker can inject malicious JavaScript payloads into this field, which are subsequently stored in the database. When a legitimate user logs in and is redirected to the Dashboard panel "automatically upon authentication the malicious script executes in the user's browser context.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://github.com/devaslanphp/project-management/releases; https://github.com/ischyr/research-and-development/tree/main/CVE-2025-52203
CVE: CVE-2025-8409
Published: 2025-07-31
Description: A vulnerability has been found in code-projects Vehicle Management 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /filter.php. The manipulation of the argument from leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/wllovemy/cve/issues/1; https://vuldb.com/?ctiid.318397
CVE: CVE-2024-34327
Published: 2025-07-31
Description: Sielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability via the email address field of the password reset form.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/0xsu3ks/CVE-2024-34327; https://sielox.com
CVE: CVE-2025-50866
Published: 2025-07-31
Description: CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading to session hijacking or phishing attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/SacX-7/CVE-2025-50866
CVE: CVE-2025-51383
Published: 2025-07-31
Description: D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_road_asp function via the host_ip parameter.
CVSS Score: 3.5 (LOW)
CWE: CWE-121
References: https://github.com/draw-hub/zMeedA/blob/master/CVE-2025-51383.md; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2025-51384
Published: 2025-07-31
Description: D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_net_asp function via the remot_ip parameter.
CVSS Score: 3.5 (LOW)
CWE: CWE-121
References: https://github.com/draw-hub/zMeedA/blob/master/CVE-2025-51384.md; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2025-51385
Published: 2025-07-31
Description: D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the yyxz_dlink_asp function via the id parameter.
CVSS Score: 3.5 (LOW)
CWE: CWE-121
References: https://github.com/draw-hub/zMeedA/blob/master/CVE-2025-51385.md; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2025-51503
Published: 2025-07-31
Description: A Stored Cross-Site Scripting (XSS) vulnerability in Microweber CMS 2.0 allows attackers to inject malicious scripts into user profile fields, leading to arbitrary JavaScript execution in admin browsers.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://github.com/progprnv/CVE-Reports; https://github.com/progprnv/CVE-Reports/blob/main/CVE-2025-51503; https://github.com/progprnv/CVE-Reports/blob/main/MICROWEBER%20%5BAdmin%20Panel%5D%20Stored%20XSS%20in%20profile%20path.md
CVE: CVE-2025-54832
Published: 2025-07-31
Description: OPEXUS FOIAXpress Public Access Link (PAL), version v11.1.0, allows an authenticated user to add entries to the list of states and territories.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-472
References: https://docs.opexustech.com/docs/foiaxpress/11.12.0/FOIAXpress_Release_notes_11.12.3.0.pdf; https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-174-01.json; https://www.cve.org/CVERecord?id=CVE-2025-54832
CVE: CVE-2025-54833
Published: 2025-07-31
Description: OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows attackers to bypass account-lockout and CAPTCHA protections. Unauthenticated remote attackers can more easily brute force passwords.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-307, CWE-602, CWE-307
References: https://docs.opexustech.com/docs/foiaxpress/11.12.0/FOIAXpress_Release_notes_11.12.3.0.pdf; https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-174-01.json; https://www.cve.org/CVERecord?id=CVE-2025-54833
CVE: CVE-2025-54834
Published: 2025-07-31
Description: OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows an unauthenticated, remote attacker to query the /App/CreateRequest.aspx endpoint to check for the existence of valid usernames. There are no rate-limiting mechanisms in place.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204
References: https://docs.opexustech.com/docs/foiaxpress/11.12.0/FOIAXpress_Release_notes_11.12.3.0.pdf; https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-174-01.json; https://www.cve.org/CVERecord?id=CVE-2025-54834
CVE: CVE-2025-8426
Published: 2025-07-31
Description: Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability. This vulnerability allows remote attackers to disclose sensitive information or to create a denial-of-service condition on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the implementation of the compressConfigFiles method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose sensitive information or to create a denial-of-service condition on the system. Was ZDI-CAN-24915.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-22
References: https://www.zerodayinitiative.com/advisories/ZDI-25-733/
CVE: CVE-2025-26062
Published: 2025-07-31
Description: An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to access the router's settings file and obtain potentially sensitive information from the current settings.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX1500.html; https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX3000.html; https://seclists.org/fulldisclosure/2025/Jul/14
CVE: CVE-2025-26063
Published: 2025-07-31
Description: An issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to execute arbitrary code via injecting a crafted payload into the ESSID name when creating a network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX1500.html; https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX3000.html; https://seclists.org/fulldisclosure/2025/Jul/14
CVE: CVE-2025-26064
Published: 2025-07-31
Description: A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name of a connnected device.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX1500.html; https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX3000.html; https://seclists.org/fulldisclosure/2025/Jul/14
CVE: CVE-2025-37108
Published: 2025-07-31
Description: Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04887en_us&docLocale=en_US
CVE: CVE-2025-37109
Published: 2025-07-31
Description: Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04887en_us&docLocale=en_US
CVE: CVE-2025-37110
Published: 2025-07-31
Description: A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-922
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04891en_us
CVE: CVE-2025-37111
Published: 2025-07-31
Description: A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-798
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04891en_us
CVE: CVE-2025-37112
Published: 2025-07-31
Description: A vulnerability was discovered in the storage policy for certain sets of encryption keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-798
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04891en_us
CVE: CVE-2025-45769
Published: 2025-07-31
Description: php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not meant to recommend an outcome for this CVE Record.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-326
References: https://gist.github.com/ZupeiNie/83756316c4c24fe97a50176a92608db3; https://github.com/advisories/GHSA-2x45-7fc3-mxwq; https://github.com/firebase
CVE: CVE-2025-45770
Published: 2025-07-31
Description: jwt v5.4.3 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not meant to recommend an outcome for this CVE Record.
CVSS Score: 7.0 (HIGH)
CWE: CWE-326
References: https://gist.github.com/ZupeiNie/cd88c827eef11a1618f8baacccd240fb; https://github.com/lcobucci; https://github.com/lcobucci/jwt
CVE: CVE-2025-50572
Published: 2025-07-31
Description: Archer 6.11.00204.10014 allows attackers to execute arbitrary code via crafted system inputs that would be exported into the CSV and be executed after the user opened the file with compatible applications. NOTE: the Supplier does not accept this as a valid vulnerability report against their product.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: http://archer.com; http://rsa.com; https://github.com/shorooq-hummdi/Archer-csv-injection-command-exec/blob/main/README.md
CVE: CVE-2025-8286
Published: 2025-07-31
Description: The affected products expose an unauthenticated Telnet-based command line interface that could allow an attacker to modify hardware configurations, manipulate data, or factory reset the device.
CWE: CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-212-01
CVE: CVE-2023-32251
Published: 2025-07-31
Description: A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the intended anti-brute-force protection, potentially allowing attackers to conduct dictionary attacks more efficiently against user credentials or other authentication mechanisms.
CVSS Score: 3.7 (LOW)
CWE: CWE-307
References: https://access.redhat.com/security/cve/CVE-2023-32251; https://bugzilla.redhat.com/show_bug.cgi?id=2385852; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b096d97f47326b1e2dbdef1c91fab69ffda54d17
CVE: CVE-2025-23289
Published: 2025-07-31
Description: NVIDIA Omniverse Launcher for Windows and Linux contains a vulnerability in the launcher logs, where a user could cause sensitive information to be written to the log files through proxy servers. A successful exploit of this vulnerability might lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5679
CVE: CVE-2025-45768
Published: 2025-07-31
Description: pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).
CVSS Score: 7.0 (HIGH)
CWE: CWE-311
References: https://gist.github.com/ZupeiNie/6f65e564f2067b876321d3dfdbb76569; https://github.com/jpadilla; https://github.com/jpadilla/pyjwt
CVE: CVE-2025-48071
Published: 2025-07-31
Description: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.2 through 3.3.0, there is a heap-based buffer overflow during a write operation when decompressing ZIPS-packed deep scan-line EXR files with a maliciously forged chunk header. This is fixed in version 3.3.3.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://github.com/AcademySoftwareFoundation/openexr/commit/916cc729e24aa16b86d82813f6e136340ab2876f; https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.3.3; https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-h45x-qhg2-q375
CVE: CVE-2025-48072
Published: 2025-07-31
Description: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. Version 3.3.2 is vulnerable to a heap-based buffer overflow during a read operation due to bad pointer math when decompressing DWAA-packed scan-line EXR files with a maliciously forged chunk. This is fixed in version 3.3.3.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/AcademySoftwareFoundation/openexr/commit/2d09449427b13a05f7c31a98ab2c4347c23db361; https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.3.3; https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-4r7w-q3jg-ff43
CVE: CVE-2025-48073
Published: 2025-07-31
Description: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, when reading a deep scanline image with a large sample count in reduceMemory mode, it is possible to crash a target application with a NULL pointer dereference in a write operation. This is fixed in version 3.3.3.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-476
References: https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-qhpm-86v7-phmm; https://github.com/ShielderSec/poc/tree/main/CVE-2025-48073
CVE: CVE-2025-8431
Published: 2025-08-01
Description: A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/add-boat.php. The manipulation of the argument boatname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/shiqumeng/myCVE/issues/3; https://phpgurukul.com/; https://vuldb.com/?ctiid.318460
CVE: CVE-2025-5954
Published: 2025-08-01
Description: The Service Finder SMS System plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.0.0. This is due to the plugin not restricting user role selection at the time of registration through the aonesms_fn_savedata_after_signup() function. This makes it possible for unauthenticated attackers to register as an administrator user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://themeforest.net/item/service-finder-service-and-business-listing-wordpress-theme/15208793; https://www.wordfence.com/threat-intel/vulnerabilities/id/520c1e8b-d0c1-4201-90bf-0cefab9af7e0?source=cve
CVE: CVE-2019-19145
Published: 2025-08-01
Description: Quantum SuperLoader 3 V94.0 005E.0h devices allow attackers to access the hardcoded fa account because there are only 65536 possible passwords.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-521
References: https://github.com/atredispartners/advisories/blob/master/ATREDIS-2019-0005.md; https://www.dell.com/community/PowerVault/PowerVault-124T-Username-Password/td-p/3004075; https://www.quantum.com/en/products/tape-storage/superloader-3/
CVE: CVE-2025-53399
Published: 2025-08-01
Description: In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets (except when the relay is configured for strict source and learning disabled). Version 13.4.1.1 fixes the heuristic mode by limiting exposure to the first five packets, and introduces a recrypt flag that fully prevents SRTP attacks when both mitigations are enabled.
CWE: CWE-346
References: https://github.com/EnableSecurity/advisories/tree/master/ES2025-01-rtpengine-improper-behavior-bleed-inject; https://github.com/sipwise/rtpengine/commits/rfuchs/security/; https://github.com/sipwise/rtpengine/releases/tag/mr13.4.1.1