hitoshura25/cvefixes huggingface dataset:
CVE-2023-44393 (PHP, published 2023-10-09T15:15Z)
Description: value: Piwigo is an open source photo gallery application. Prior to version 14.0.0beta4, a reflected cross-site scripting (XSS) vulnerability is in the` /admin.php?page=plugins&tab=new&installstatus=ok&plugin_id=[here]` page. This vulnerability can be exploited by an attacker to inject malicious HTML and JS code into the HTML page, which could then be executed by admin users when they visit the URL with the payload. The vulnerability is caused by the insecure injection of the `plugin_id` value from the URL into the HTML page. An attacker can exploit this vulnerability by crafting a malicious URL that contains a specially crafted `plugin_id` value. When a victim who is logged in as an administrator visits this URL, the malicious code will be injected into the HTML page and executed. This vulnerability can be exploited by any attacker who has access to a malicious URL. However, only users who are logged in as administrators are affected. This is because the vulnerability is only present on the `/admin.php?page=plugins&tab=new&installstatus=ok&plugin_id=[here]` page, which is only accessible to administrators. Version 14.0.0.beta4 contains a patch for this issue.
Severity: nan (CVSS v3 base score: 6.1)
Weakness: CWE-80 \u2014 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages.
Repository: https://github.com/Piwigo/Piwigo
Files changed:
admin/plugins_new.php
Commit message: fixes GHSA-qg85-957m-7vgg providing plugin_id in URL is useless since Piwigo 12


Vulnerable code:
      $activate_url = get_root_url().'admin.php?page=plugins'
        . '&amp;plugin=' . $_GET['plugin_id']
        . '&amp;pwg_token=' . get_pwg_token()
        . '&amp;action=activate'
        . '&amp;filter=deactivated';

Fixed code:
      // since Piwigo 12, you need to be on the page of installed plugins to active a plugin with
      // a JS action, no need to provide plugin_id in URL, just link to the page of installed
      // plugins, filtered on deactivated plugins. The webmaster will have to find its newly
      // installed plugin and click on the activation switch.
      $activate_url = get_root_url().'admin.php?page=plugins&amp;filter=deactivated';
CVE-2021-25927 (JavaScript, published 2021-04-26T11:15Z)
Description: value: Prototype pollution vulnerability in 'safe-flat' versions 2.0.0 through 2.0.1 allows an attacker to cause a denial of service and may lead to remote code execution.
Severity: HIGH (CVSS v3 base score: 9.8)
Weakness: CWE-1321 \u2014 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.
Repository: https://github.com/jessie-codes/safe-flat
Files changed:
src/index.js
test/unflatten.spec.js
Commit message: fix(unflat): fix potential for prototype pollution


Vulnerable code:

Fixed code:
  const proto = ['__proto__', 'constructor', 'prototype']
        if (proto.includes(newKeys[i])) return o

test('it should not pollute the prototype', (t) => {
  const original = {
    '__proto__.polluted': 'Attempt to pollute the prototype',
    'a.prototype.polluted': 'Attempt to pollute the prototype',
    'a.b': 'This attribute is safe',
    'c.constructor.polluted': 'Attempt to pollute the prototype',
    'constructor.polluted': 'Attempt to pollute the prototype'
  }
  unflatten(original)
  t.assert({}.polluted == null)
})
CVE-2020-11074 (Unknown, published 2020-07-02T17:15Z)
Description: value: In PrestaShop from version 1.5.3.0 and before version 1.7.6.6, there is a stored XSS when using the name of a quick access item. The problem is fixed in 1.7.6.6.
Severity: LOW (CVSS v3 base score: 5.4)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-v4pg-q2cv-f7x4

Escape $confirm variable in smarty context

Vulnerable code:

Fixed code:
CVE-2020-15079 (Unknown, published 2020-07-02T17:15Z)
Description: value: In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, there is improper access control in Carrier page, Module Manager and Module Positions. The problem is fixed in version 1.7.6.6
Severity: MEDIUM (CVSS v3 base score: 5.4)
Weakness: NVD-CWE-noinfo \u2014 Insufficient Information
There is insufficient information about the issue to classify it; details are unkown or unspecified.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-xp3x-3h8q-c386

Improper access control

Vulnerable code:

Fixed code:
CVE-2020-15080 (Unknown, published 2020-07-02T17:15Z)
Description: value: In PrestaShop from version 1.7.4.0 and before version 1.7.6.6, some files should not be in the release archive, and others should not be accessible. The problem is fixed in version 1.7.6.6 A possible workaround is to make sure `composer.json` and `docker-compose.yml` are not accessible on your server.
Severity: MEDIUM (CVSS v3 base score: 5.3)
Weakness: CWE-862 \u2014 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-492w-2pp5-xhvg

Protect the composer.lock file and remove docker-compose.yml in the zip archive

Vulnerable code:

Fixed code:
CVE-2020-15081 (Unknown, published 2020-07-02T17:15Z)
Description: value: In PrestaShop from version 1.5.0.0 and before 1.7.6.6, there is information exposure in the upload directory. The problem is fixed in version 1.7.6.6. A possible workaround is to add an empty index.php file in the upload directory.
Severity: MEDIUM (CVSS v3 base score: 5.3)
Weakness: CWE-200 \u2014 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-997j-f42g-x57c

Add missing index.php in upload directory

Vulnerable code:

Fixed code:
CVE-2020-15082 (Unknown, published 2020-07-02T17:15Z)
Description: value: In PrestaShop from version 1.6.0.1 and before version 1.7.6.6, the dashboard allows rewriting all configuration variables. The problem is fixed in 1.7.6.6
Severity: HIGH (CVSS v3 base score: 8.8)
Weakness: NVD-CWE-Other \u2014 Other
NVD is only using a subset of CWE for mapping instead of the entire CWE, and the weakness type is not covered by that subset.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-mc98-xjm3-c4fm

Remove unwanted update in dashboard controller

Vulnerable code:

Fixed code:
CVE-2020-15083 (Unknown, published 2020-07-02T17:15Z)
Description: value: In PrestaShop from version 1.7.0.0 and before version 1.7.6.6, if a target sends a corrupted file, it leads to a reflected XSS. The problem is fixed in 1.7.6.6
Severity: MEDIUM (CVSS v3 base score: 6.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-qgh4-95j7-p3vj

Do not append data as html, use text function instead

Vulnerable code:

Fixed code:
CVE-2020-15160 (Unknown, published 2020-09-24T23:15Z)
Description: value: PrestaShop from version 1.7.5.0 and before version 1.7.6.8 is vulnerable to a blind SQL Injection attack in the Catalog Product edition page with location parameter. The problem is fixed in 1.7.6.8
Severity: HIGH (CVSS v3 base score: 9.8)
Weakness: CWE-89 \u2014 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-fghq-8h87-826g

Escape location and ids when setting location

Vulnerable code:

Fixed code:
CVE-2020-15161 (Unknown, published 2020-09-24T22:15Z)
Description: value: In PrestaShop from version 1.6.0.4 and before version 1.7.6.8 an attacker is able to inject javascript while using the contact form. The problem is fixed in 1.7.6.8
Severity: MEDIUM (CVSS v3 base score: 6.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-5cp2-r794-w37w

Don't use htmlentitiesdecode when sending email

Vulnerable code:

Fixed code:
CVE-2020-15162 (Unknown, published 2020-09-24T23:15Z)
Description: value: In PrestaShop from version 1.5.0.0 and before version 1.7.6.8, users are allowed to send compromised files. These attachments allowed people to input malicious JavaScript which triggered an XSS payload. The problem is fixed in version 1.7.6.8.
Severity: LOW (CVSS v3 base score: 5.4)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-rc8c-v7rq-q392

Stored XSS in upload files

Vulnerable code:

Fixed code:
CVE-2020-26224 (Unknown, published 2020-11-16T22:15Z)
Description: value: In PrestaShop before version 1.7.6.9 an attacker is able to list all the orders placed on the website without being logged by abusing the function that allows a shopping cart to be recreated from an order already placed. The problem is fixed in 1.7.6.9.
Severity: MEDIUM (CVSS v3 base score: 7.5)
Weakness: NVD-CWE-noinfo \u2014 Insufficient Information
There is insufficient information about the issue to classify it; details are unkown or unspecified.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-frf2-c9q3-qg9m

Make sure the user is connected before submit reorder

Vulnerable code:

Fixed code:
CVE-2020-4074 (Unknown, published 2020-07-02T17:15Z)
Description: value: In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, the authentication system is malformed and an attacker is able to forge requests and execute admin commands. The problem is fixed in 1.7.6.6.
Severity: HIGH (CVSS v3 base score: 9.8)
Weakness: CWE-287 \u2014 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-ccvh-jh5x-mpg4

Improper authentication

Vulnerable code:

Fixed code:
CVE-2020-5250 (Unknown, published 2020-03-05T17:15Z)
Description: value: In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the form, and thus steal someone else's address. It is the same with CustomerForm, you are able to change the id_customer and change all information of all accounts. The problem is patched in version 1.7.6.4.
Severity: MEDIUM (CVSS v3 base score: 6.3)
Weakness: CWE-552 \u2014 Files or Directories Accessible to External Parties
The product makes files or directories accessible to unauthorized actors, even though they should not be.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-mhfc-6rhg-fxp3

Fix possible personal data leak

Vulnerable code:

Fixed code:
CVE-2020-5264 (Unknown, published 2020-04-20T17:15Z)
Description: value: In PrestaShop before version 1.7.6.5, there is a reflected XSS while running the security compromised page. It allows anyone to execute arbitrary action. The problem is patched in the 1.7.6.5.
Severity: MEDIUM (CVSS v3 base score: 6.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-48vj-vvr6-jj4f

The url must be tested before used as a button link

Vulnerable code:

Fixed code:
CVE-2020-5265 (Unknown, published 2020-04-20T17:15Z)
Description: value: In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminAttributesGroups page. The problem is patched in 1.7.6.5.
Severity: MEDIUM (CVSS v3 base score: 6.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-7fmr-5vcc-329j

Always cast integer when it's related to ids on AdminAttributesGroupsController

Vulnerable code:

Fixed code:
CVE-2020-5269 (Unknown, published 2020-04-20T17:15Z)
Description: value: In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminFeatures page by using the `id_feature` parameter. The problem is fixed in 1.7.6.5
Severity: MEDIUM (CVSS v3 base score: 6.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-87jh-7xpg-6v93

Escape the document.location link and always cast ids

Vulnerable code:

Fixed code:
CVE-2020-5270 (Unknown, published 2020-04-20T17:15Z)
Description: value: In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is an open redirection when using back parameter. The impacts can be many, and vary from the theft of information and credentials to the redirection to malicious websites containing attacker-controlled content, which in some cases even cause XSS attacks. So even though an open redirection might sound harmless at first, the impacts of it can be severe should it be exploitable. The problem is fixed in 1.7.6.5
Severity: MEDIUM (CVSS v3 base score: 6.1)
Weakness: CWE-601 \u2014 URL Redirection to Untrusted Site ('Open Redirect')
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-375w-q56h-h7qc

Check if the user is connected before using the back parameter

Vulnerable code:

Fixed code:
CVE-2020-5271 (Unknown, published 2020-04-20T17:15Z)
Description: value: In PrestaShop between versions 1.6.0.0 and 1.7.6.5, there is a reflected XSS with `date_from` and `date_to` parameters in the dashboard page This problem is fixed in 1.7.6.5
Severity: MEDIUM (CVSS v3 base score: 6.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-m2x6-c2c6-pjrx

Make sure date_from and date_to are dates

Vulnerable code:

Fixed code:
CVE-2020-5272 (Unknown, published 2020-04-20T17:15Z)
Description: value: In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is a reflected XSS on Search page with `alias` and `search` parameters. The problem is patched in 1.7.6.5
Severity: MEDIUM (CVSS v3 base score: 6.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-rpg3-f23r-jmqv

Escape alias and search for safe output

Vulnerable code:

Fixed code:
CVE-2020-5276 (Unknown, published 2020-04-20T17:15Z)
Description: value: In PrestaShop between versions 1.7.1.0 and 1.7.6.5, there is a reflected XSS on AdminCarts page with `cartBox` parameter The problem is fixed in 1.7.6.5
Severity: MEDIUM (CVSS v3 base score: 6.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-q6pr-42v5-v97q

Id must be cast in integer

Vulnerable code:

Fixed code:
CVE-2020-5278 (Unknown, published 2020-04-20T17:15Z)
Description: value: In PrestaShop between versions 1.5.4.0 and 1.7.6.5, there is a reflected XSS on Exception page The problem is fixed in 1.7.6.5
Severity: MEDIUM (CVSS v3 base score: 6.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-mrpj-67mq-3fr5

Escape exception message when rendering PrestaShopException

Vulnerable code:

Fixed code:
CVE-2020-5279 (Unknown, published 2020-04-20T17:15Z)
Description: value: In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for legacy controllers. - admin-dev/index.php/configure/shop/customer-preferences/ - admin-dev/index.php/improve/international/translations/ - admin-dev/index.php/improve/international/geolocation/ - admin-dev/index.php/improve/international/localization - admin-dev/index.php/configure/advanced/performance - admin-dev/index.php/sell/orders/delivery-slips/ - admin-dev/index.php?controller=AdminStatuses The problem is fixed in 1.7.6.5
Severity: MEDIUM (CVSS v3 base score: 6.5)
Weakness: CWE-863 \u2014 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-74vp-ww64-w2gm

Improper access control for controllers

Vulnerable code:

Fixed code:
CVE-2020-5285 (Unknown, published 2020-04-20T17:15Z)
Description: value: In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is a reflected XSS with `back` parameter. The problem is fixed in 1.7.6.5
Severity: MEDIUM (CVSS v3 base score: 6.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-j3r6-33hf-m8wh

Do not use useless is_safe_callback option, auto escape the extension's result

Vulnerable code:

Fixed code:
CVE-2020-5286 (Unknown, published 2020-04-20T17:15Z)
Description: value: In PrestaShop between versions 1.7.4.0 and 1.7.6.5, there is a reflected XSS when uploading a wrong file. The problem is fixed in 1.7.6.5
Severity: MEDIUM (CVSS v3 base score: 6.1)
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-98j8-hvjv-x47j

Use .text instead of .html to render messages

Vulnerable code:

Fixed code:
CVE-2020-5287 (Unknown, published 2020-04-20T17:15Z)
Description: value: In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is improper access control on customers search. The problem is fixed in 1.7.6.5.
Severity: MEDIUM (CVSS v3 base score: 6.5)
Weakness: CWE-863 \u2014 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-r6rp-6gv6-r9hq

Do not return sensitives data in the search customers handler

Vulnerable code:

Fixed code:
CVE-2020-5288 (Unknown, published 2020-04-20T17:15Z)
Description: value: "In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there is improper access controls on product attributes page. The problem is fixed in 1.7.6.5.
Severity: MEDIUM (CVSS v3 base score: 6.5)
Weakness: CWE-863 \u2014 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
Repository: https://github.com/PrestaShop/PrestaShop
Files changed:
Commit message: Merge pull request from GHSA-4wxg-33h3-3w5r

Add @AdminSecurity annotation on AttributeController

Vulnerable code:

Fixed code: