rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-40163 
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component.
Problem types: description: Memory Corruption
Affected products: vendor: n/a
product: Revit, Inventor, Infraworks, Navisworks, Fusion, Infrastructure Parts Editors, Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
Published: 2022-10-07T00:00:00.000Z
CVE-2021-40164 
A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.
Problem types: description: Heap-based Overflow
Affected products: vendor: n/a
product: Revit, Inventor, Infraworks, Navisworks, Fusion, Infrastructure Parts Editors, Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
Published: 2022-10-07T00:00:00.000Z
CVE-2021-40165 
A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.
Problem types: description: Buffer Overflow
Affected products: vendor: n/a
product: Revit, Inventor, Infraworks, Navisworks, Fusion, Infrastructure Parts Editors, Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
Published: 2022-10-07T00:00:00.000Z
CVE-2021-40166 
A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code.
Problem types: description: Use-After-Free
Affected products: vendor: n/a
product: Revit, Inventor, Infraworks, Navisworks, Fusion, Infrastructure Parts Editors, Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
Published: 2022-10-07T00:00:00.000Z
CVE-2021-40167 
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Problem types: description: Memory Corruption
Affected products: vendor: n/a
product: Autodesk® Design Review
Published: 2022-01-25T19:11:06.000Z
CVE-2021-40170 
An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117, allows an attacker to trigger arbitrary system functionality by replaying previously recorded signals. This lets an adversary, among other things, disarm an armed system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-15T06:47:03.000Z
CVE-2021-40171 
The absence of notifications regarding an ongoing RF jamming attack in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117, allows an attacker to block legitimate traffic while not alerting the owner of the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-15T06:45:38.000Z
CVE-2021-40172 
Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-29T19:18:22.000Z
CVE-2021-40173 
Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-29T19:18:10.000Z
CVE-2021-40174 
Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-29T19:17:59.000Z
CVE-2021-40175 
Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-29T19:17:47.000Z
CVE-2021-40176 
Zoho ManageEngine Log360 before Build 5225 allows stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-29T19:17:35.000Z
CVE-2021-40177 
Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-29T19:17:25.000Z
CVE-2021-40178 
Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-29T19:17:14.000Z
CVE-2021-40180 
In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-26T22:36:45.000Z
CVE-2021-40186 DNN CMS Server-Side Request Forgery (SSRF)
The AppCheck research team identified a Server-Side Request Forgery (SSRF) vulnerability within the DNN CMS platform, formerly known as DotNetNuke. SSRF vulnerabilities allow the attacker to exploit the target system to make network requests on their behalf, allowing a range of possible attacks. In the most common scenario, the attacker exploits SSRF vulnerabilities to attack systems behind the firewall and access sensitive information from Cloud Provider metadata services.
Problem types: cwe_id: CWE-918
description: CWE-918 Server-Side Request Forgery (SSRF)
Affected products: vendor: DNNSoftware
product: DNN Platform
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2022-05-31T18:09:43.000Z
CVE-2021-40188 
PHPFusion 9.03.110 is affected by an arbitrary file upload vulnerability. The File Manager function in admin panel does not filter all PHP extensions such as ".php, .php7, .phtml, .php5, ...". An attacker can upload a malicious file and execute code on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-11T18:41:31.000Z
CVE-2021-40189 
PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will extract a file to "webroot/themes/{Theme Folder], where an attacker can access and execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-11T18:27:33.000Z
CVE-2021-40191 
Dzzoffice Version 2.02.1 is affected by cross-site scripting (XSS) due to a lack of sanitization of input data at all upload functions in webroot/dzz/attach/Uploader.class.php and return a wrong response in content-type of output data in webroot/dzz/attach/controller.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-11T13:34:42.000Z
CVE-2021-40211 
An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2021-40212 
An exploitable out-of-bounds write vulnerability in PotPlayer 1.7.21523 build 210729 may lead to code execution, information disclosure, and denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T10:13:07.000Z
CVE-2021-40214 
Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-13T11:30:57.000Z
CVE-2021-40219 
Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject server-side template injection that leads to remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-11T16:45:54.000Z
CVE-2021-40222 
Rittal CMC PU III Web management Version affected: V3.11.00_2. Version fixed: V3.17.10 is affected by a remote code execution vulnerablity. It is possible to introduce shell code to create a reverse shell in the PU-Hostname field of the TCP/IP Configuration dialog. Web application fails to sanitize user input on Network TCP/IP configuration page. This allows the attacker to inject commands as root on the device which will be executed once the data is received.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T11:04:43.000Z
CVE-2021-40223 
Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configuration (User Configuration dialog, Task Configuration dialog and set logging filter dialog). This allows an attacker to backdoor the device with HTML and browser-interpreted content (such as JavaScript or other client-side scripts). The XSS payload will be triggered when the user accesses some specific sections of the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T11:04:50.000Z
CVE-2021-40226 
xpdfreader 4.03 is vulnerable to Buffer Overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-10T00:00:00.000Z
CVE-2021-40238 
A Cross Site Scriptiong (XSS) vulnerability exists in the admin panel in Webuzo < 2.9.0 via an HTTP request to a non-existent page, which is activated by administrators viewing the "Error Log" page. An attacker can leverage this to achieve Unauthenticated Remote Code Execution via the "Cron Jobs" functionality of Webuzo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T16:19:57.000Z
CVE-2021-40239 
A Buffer Overflow vulnerability exists in the latest version of Miniftpd in the do_retr function in ftpproto.c
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-11T18:20:34.000Z
CVE-2021-40241 
xfig 3.2.7 is vulnerable to Buffer Overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-31T00:00:00.000Z
CVE-2021-40247 
SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-21T18:58:35.000Z
CVE-2021-40260 
Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester Tailor Management 1.0 via the (1) eid parameter in (a) partedit.php and (b) customeredit.php, the (2) id parameter in (a) editmeasurement.php and (b) addpayment.php, and the (3) error parameter in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-08T20:14:01.000Z
CVE-2021-40261 
Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester CASAP Automated Enrollment System 1.0 via the (1) user_username and (2) category parameters in save_class.php, the (3) firstname, (4) class, and (5) status parameters in student_table.php, the (6) category and (7) class_name parameters in add_class1.php, the (8) fname, (9) mname,(10) lname, (11) address, (12) class, (13) gfname, (14) gmname, (15) glname, (16) rship, (17) status, (18) transport, and (19) route parameters in add_student.php, the (20) fname, (21) mname, (22) lname, (23) address, (24) class, (25) fgname, (26) gmname, (27) glname, (28) rship, (29) status, (30) transport, and (31) route parameters in save_stud.php,the (32) status, (33) fname, and (34) lname parameters in add_user.php, the (35) username, (36) firstname, and (37) status parameters in users.php, the (38) fname, (39) lname, and (40) status parameters in save_user.php, and the (41) activity_log, (42) aprjun, (43) class, (44) janmar, (45) Julsep,(46) octdec, (47) Students and (48) users parameters in table_name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-08T20:42:39.000Z
CVE-2021-40262 
A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2021-40263 
A heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad function in PluginTIFF.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2021-40264 
NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage_CloneTag function inFreeImageTag.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2021-40265 
A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2021-40266 
FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2021-40272 
OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-14T00:00:00.000Z
CVE-2021-40279 
An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-09T15:54:43.000Z
CVE-2021-40280 
An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dl_sendmail.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-09T15:58:56.000Z
CVE-2021-40281 
An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 in dl/dl_print.php when registering ordinary users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-09T16:18:51.000Z
CVE-2021-40282 
An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dl_download.php. when registering ordinary users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-09T16:27:28.000Z
CVE-2021-40284 
D-Link DSL-3782 EU v1.01:EU v1.03 is affected by a buffer overflow which can cause a denial of service. This vulnerability exists in the web interface "/cgi-bin/New_GUI/Igmp.asp". Authenticated remote attackers can trigger this vulnerability by sending a long string in parameter 'igmpsnoopEnable' via an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T16:18:25.000Z
CVE-2021-40285 
htmly v2.8.1 was discovered to contain an arbitrary file deletion vulnerability via the component \views\backup.html.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T12:50:32.000Z
CVE-2021-40288 
A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1_211014, allows a remote unauthenticated attacker to disconnect an already connected wireless client via sending with a wireless adapter specific spoofed authentication frames
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-07T19:13:36.000Z
CVE-2021-40289 
mm-wki v0.2.1 is vulnerable to Cross Site Scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-10T00:00:00.000Z
CVE-2021-40292 
A Stored Cross Site Sripting (XSS) vulnerability exists in DzzOffice 2.02.1 via the settingnew parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-12T17:31:05.000Z
CVE-2021-40303 
perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-08T00:00:00.000Z
CVE-2021-40309 
A SQL injection vulnerability exists in the Take Attendance functionality of OS4Ed's OpenSIS 8.0. allows an attacker to inject their own SQL query. The cp_id_miss_attn parameter from TakeAttendance.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request as a user with access to "Take Attendance" functionality to trigger this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-24T15:09:59.000Z
CVE-2021-40310 
OpenSIS Community Edition version 8.0 is affected by a cross-site scripting (XSS) vulnerability in the TakeAttendance.php via the cp_id_miss_attn parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-24T15:07:24.000Z
CVE-2021-40313 
Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwg_token in /admin/batch_manager_global.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-06T20:22:58.000Z
CVE-2021-40317 
Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-26T12:04:52.000Z
CVE-2021-40323 
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T05:37:50.000Z
CVE-2021-40324 
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T05:39:51.000Z
CVE-2021-40325 
Cobbler before 3.3.0 allows authorization bypass for modification of settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T05:43:54.000Z
CVE-2021-40326 
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents. An attacker can write to an arbitrary file, and display controlled contents, during signature verification.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-29T04:54:36.000Z
CVE-2021-40327 
Trusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key (held by the Crypto service) based solely on knowledge of its key ID. For example, there is no authorization check associated with the relationship between a caller and a key owner.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-13T15:31:35.000Z
CVE-2021-40329 
The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management.
Problem types: description: Incorrect Access Control
Affected products: vendor: Ping Identity
product: PingFederate
vendor: Ping Identity
product: PingFederate
vendor: Ping Identity
product: PingFederate
vendor: Ping Identity
product: PingFederate
vendor: Ping Identity
product: PingFederate
Published: 2021-09-27T16:22:11.000Z
CVE-2021-40330 
git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-31T00:00:00.000Z
CVE-2021-40331 Permissions problem in the Apache Ranger Hive Plugin
An Incorrect Permission Assignment for Critical Resource vulnerability was found in the Apache Ranger Hive Plugin. Any user with SELECT privilege on a database can alter the ownership of the table in Hive when Apache Ranger Hive Plugin is enabled
This issue affects Apache Ranger Hive Plugin: from 2.0.0 through 2.3.0. Users are recommended to upgrade to version 2.4.0 or later.



Problem types: cwe_id: CWE-732
description: CWE-732 Incorrect Permission Assignment for Critical Resource
Affected products: vendor: Apache Software Foundation
product: Apache Ranger Hive Plugin
default_status: unaffected
Published: 2023-05-05T07:55:06.554Z
CVE-2021-40333 Weak default credential associated with TCP port 26
Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.
Problem types: cwe_id: CWE-521
description: CWE-521 Weak Password Requirements
Affected products: vendor: Hitachi Energy
product: FOX61x
vendor: Hitachi Energy
product: XCM20
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9
baseSeverity: CRITICAL
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
version: 3.1
Published: 2021-12-02T18:29:36.828Z
CVE-2021-40334 SSH activation problem in the proprietary management protocol (port TCP 5558)
Missing Handler vulnerability in the proprietary management protocol (port TCP 5558) of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.
Problem types: cwe_id: CWE-431
description: CWE-431 Missing Handler
Affected products: vendor: Hitachi Energy
product: FOX61x
vendor: Hitachi Energy
product: XCM20
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.6
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
version: 3.1
Published: 2021-12-02T18:28:18.525Z
CVE-2021-40335 Cross Site Request Forgery (CSRF) in Hitachi Energy’s MSM Product
A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This cause a Cross Site Request Forgery (CSRF), which if exploited could lead an attacker to gain unauthorized access to the web application and perform an unwanted operation on it without the knowledge of the legitimate user. An attacker, who successfully makes an MSM user who has already established a session to MSM web interface clicks a forged link to the MSM web interface, e.g., link is sent per E-Mail, could perform harmful command on MSM through its web server interface. This issue affects: Hitachi Energy MSM V2.2 and prior versions.
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Hitachi Energy
product: MSM
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Published: 2022-07-25T14:32:14.467Z