rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-55516 
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90. The component affected by this issue is /upload_sysconfig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-17T00:00:00.000Z
CVE-2024-55517 
An issue was discovered in the Interllect Core Search in Polaris FT Intellect Core Banking 9.5. Input passed through the groupType parameter in /SCGController is mishandled before being used in SQL queries, allowing SQL injection in an authenticated session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-08T00:00:00.000Z
CVE-2024-55529 
Z-BlogPHP 1.7.3 is vulnerable to arbitrary code execution via \zb_users\theme\shell\template.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-06T00:00:00.000Z
CVE-2024-55532 Apache Ranger: Improper Neutralization of Formula Elements in a CSV File
Improper Neutralization of Formula Elements in Export CSV feature of Apache Ranger in Apache Ranger Version < 2.6.0.
Users are recommended to upgrade to version 2.6.0, which fixes this issue.
Problem types: cwe_id: CWE-1236
description: CWE-1236 Improper Neutralization of Formula Elements in a CSV File
Affected products: vendor: Apache Software Foundation
product: Apache Ranger
default_status: unaffected
Credits: lang: en
value: "김도균"<a2256014@naver.com>
Published: 2025-03-03T16:04:54.856Z
CVE-2024-55538 
Sensitive information disclosure due to missing authentication. The following products are affected: Acronis True Image (macOS) before build 41725, Acronis True Image (Windows) before build 41736, Acronis True Image OEM (macOS) before build 42571, Acronis True Image OEM (Windows) before build 42575.
Problem types: cwe_id: CWE-306
description: CWE-306
Affected products: vendor: Acronis
product: Acronis True Image
default_status: unaffected
vendor: Acronis
product: Acronis True Image
default_status: unaffected
vendor: Acronis
product: Acronis True Image OEM
default_status: unaffected
vendor: Acronis
product: Acronis True Image OEM
default_status: unaffected
Published: 2025-01-02T14:14:20.929Z
CVE-2024-55539 
Weak algorithm used to sign RPM package. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux) before build 39185, Acronis Cyber Protect 16 (Linux) before build 39938.
Problem types: cwe_id: CWE-327
description: CWE-327
Affected products: vendor: Acronis
product: Acronis Cyber Protect Cloud Agent
default_status: unaffected
vendor: Acronis
product: Acronis Cyber Protect 16
default_status: unaffected
Published: 2024-12-23T14:05:20.298Z
CVE-2024-55540 
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.
Problem types: cwe_id: CWE-427
description: CWE-427
Affected products: vendor: Acronis
product: Acronis Cyber Protect 16
default_status: unaffected
Credits: lang: en
value: @vanitas (https://hackerone.com/vanitas)
Published: 2025-01-02T15:25:48.887Z
CVE-2024-55541 
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39169.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Acronis
product: Acronis Cyber Protect 16
default_status: unaffected
Published: 2025-01-02T15:26:55.281Z
CVE-2024-55542 
Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895.
Problem types: cwe_id: CWE-266
description: CWE-266
Affected products: vendor: Acronis
product: Acronis Cyber Protect 16
default_status: unaffected
vendor: Acronis
product: Acronis Cyber Protect Cloud Agent
default_status: unaffected
Published: 2025-01-02T15:26:40.928Z
CVE-2024-55543 
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.
Problem types: cwe_id: CWE-427
description: CWE-427
Affected products: vendor: Acronis
product: Acronis Cyber Protect 16
default_status: unaffected
Credits: lang: en
value: @jtonner14 (https://hackerone.com/jtonner14)
Published: 2025-01-02T15:24:26.589Z
CVE-2024-55544 Authenticated Command Injection
Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below.
Problem types: cwe_id: CWE-77
description: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products: vendor: ORing
product: IAP-420
default_status: unaffected
Credits: lang: en
value: P. Chistè
lang: en
value: A. Falb
lang: en
value: M. Selinger
lang: en
value: M. Suchy
lang: en
value: P. Oberndorfer
lang: en
value: P. Maluenda
lang: en
value: D. Sagl
lang: en
value: M. Narbeshuber-Spletzer
lang: en
value: J. Springer
lang: en
value: P. Riedl
lang: en
value: C. Hierzer
lang: en
value: M. Pammer
Published: 2024-12-10T16:04:34.147Z
CVE-2024-55545 Reflected Cross-Site Scripting
Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
Affected products: vendor: ORing
product: IAP-420
default_status: unaffected
Credits: lang: en
value: P. Chistè
lang: en
value: A. Falb
lang: en
value: M. Selinger
lang: en
value: M. Suchy
lang: en
value: P. Oberndorfer
lang: en
value: P. Maluenda
lang: en
value: D. Sagl
lang: en
value: M. Narbeshuber-Spletzer
lang: en
value: J. Springer
lang: en
value: P. Riedl
lang: en
value: C. Hierzer
lang: en
value: M. Pammer
Published: 2024-12-10T16:14:17.299Z
CVE-2024-55546 Stored Cross-Site Scripting
Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
Affected products: vendor: ORing
product: IAP-420
default_status: unaffected
Credits: lang: en
value: P. Chistè
lang: en
value: A. Falb
lang: en
value: M. Selinger
lang: en
value: M. Suchy
lang: en
value: P. Oberndorfer
lang: en
value: P. Maluenda
lang: en
value: D. Sagl
lang: en
value: M. Narbeshuber-Spletzer
lang: en
value: J. Springer
lang: en
value: P. Riedl
lang: en
value: C. Hierzer
lang: en
value: M. Pammer
Published: 2024-12-10T16:21:33.244Z
CVE-2024-55547 Remote Command Execution via SNMP
SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e.
Problem types: cwe_id: CWE-77
description: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products: vendor: ORing
product: IAP-420
default_status: unaffected
Credits: lang: en
value: P. Chistè
lang: en
value: A. Falb
lang: en
value: M. Selinger
lang: en
value: M. Suchy
lang: en
value: P. Oberndorfer
lang: en
value: P. Maluenda
lang: en
value: D. Sagl
lang: en
value: M. Narbeshuber-Spletzer
lang: en
value: J. Springer
lang: en
value: P. Riedl
lang: en
value: C. Hierzer
lang: en
value: M. Pammer
Published: 2024-12-10T16:27:07.033Z
CVE-2024-55548 Denial of Service
Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e.
Problem types: cwe_id: CWE-703
description: CWE-703: Improper Check or Handling of Exceptional Conditions
Affected products: vendor: ORing
product: IAP-420
default_status: unaffected
Credits: lang: en
value: P. Chistè
lang: en
value: A. Falb
lang: en
value: M. Selinger
lang: en
value: M. Suchy
lang: en
value: P. Oberndorfer
lang: en
value: P. Maluenda
lang: en
value: D. Sagl
lang: en
value: M. Narbeshuber-Spletzer
lang: en
value: J. Springer
lang: en
value: P. Riedl
lang: en
value: C. Hierzer
lang: en
value: M. Pammer
Published: 2024-12-10T16:34:02.230Z
CVE-2024-55549 
xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.
Problem types: cwe_id: CWE-416
description: CWE-416 Use After Free
Affected products: vendor: xmlsoft
product: libxslt
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 7.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Published: 2025-03-14T00:00:00.000Z
CVE-2024-55550 
Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-10T00:00:00.000Z
CVE-2024-55551 
An issue was discovered in Exasol JDBC driver before 24.2.1 (2024-12-10). Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This can further lead to remote code execution.
Problem types: cwe_id: CWE-471
description: CWE-471 Modification of Assumed-Immutable Data (MAID)
Affected products: vendor: Exasol
product: JDBC driver
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 8.3
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Published: 2025-03-19T00:00:00.000Z
CVE-2024-55553 
In FRRouting (FRR) before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size, default 4K on most OSes. An attacker can use this to trigger re-parsing of the RIB for FRR routers using RTR by causing more than this number of updates during an update interval (usually 30 minutes). Additionally, this effect regularly occurs organically. Furthermore, an attacker can use this to trigger route validation continuously. Given that routers with large full tables may need more than 30 minutes to fully re-validate the table, continuous issuance/withdrawal of large numbers of ROA may be used to impact the route handling performance of all FRR instances using RPKI globally. Additionally, the re-validation will cause heightened BMP traffic to ingestors. Fixed Versions: 10.0.3, 10.1.2, 10.2.1, >= 10.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-06T00:00:00.000Z
CVE-2024-55554 
Intrexx Portal Server before 12.0.2 allows XSS via a user-defined portlet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-16T00:00:00.000Z
CVE-2024-55555 
Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APP_KEY. This is exacerbated by .env files, available from the product's repository, that have default APP_KEY values. The route/{hash} route defined in the invoiceninja/routes/client.php file can be accessed without authentication. The parameter {hash} is passed to the function decrypt that expects a Laravel ciphered value containing a serialized object. (Furthermore, Laravel contains several gadget chains usable to trigger remote command execution from arbitrary deserialization.) Therefore, an attacker in possession of the APP_KEY is able to fully control a string passed to an unserialize function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-07T00:00:00.000Z
CVE-2024-55556 
A vulnerability in Crater Invoice allows an unauthenticated attacker with knowledge of the APP_KEY to achieve remote command execution on the server by manipulating the laravel_session cookie, exploiting arbitrary deserialization through the encrypted session data. The exploitation vector of this vulnerability relies on an attacker obtaining Laravel's secret APP_KEY, which would allow them to decrypt and manipulate session cookies (laravel_session) containing serialized data. By altering this data and re-encrypting it with the APP_KEY, the attacker could trigger arbitrary deserialization on the server, potentially leading to remote command execution (RCE). The vulnerability is primarily exploited by accessing an exposed cookie and manipulating it using the secret key to gain malicious access to the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-07T00:00:00.000Z
CVE-2024-55557 
ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key for symmetric encryption of proxy credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-16T00:00:00.000Z
CVE-2024-55560 
MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persist after installation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-08T00:00:00.000Z
CVE-2024-55563 
Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024-52913. For example, the outcome of an HTLC (Hashed Timelock Contract) can be changed because a flood of transaction traffic prevents propagation of certain Lightning channel transactions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-09T00:00:00.000Z
CVE-2024-55564 
The POSIX::2008 package before 0.24 for Perl has a potential _execve50c env buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-09T00:00:00.000Z
CVE-2024-55565 
nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-09T00:00:00.000Z
CVE-2024-55566 
ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG). The impact can be overwriting files or making ColPack graphing unavailable to other users.
Problem types: cwe_id: CWE-335
description: CWE-335 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
Affected products: vendor: n/a
product: n/a
default_status: unknown
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.6
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
version: 3.1
Published: 2024-12-09T00:00:00.000Z
CVE-2024-55567 
Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 before 05.55.01, 5.6 before 05.62.01, and 5.7 before 05.71.01. The SMM module has an SMM call out vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SMM level.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:H/S:C/UI:N
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: HIGH
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
Published: 2025-06-12T00:00:00.000Z
CVE-2024-55568 
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The absence of a NULL check leads to a Denial of Service when an attacker sends malformed MM packets to the target.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-20T00:00:00.000Z
CVE-2024-55569 
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-14T00:00:00.000Z
CVE-2024-55570 
/api/user/users in the web GUI for the Cubro EXA48200 network packet broker (build 20231025055018) fixed in V5.0R14.5P4-V3.3R1 allows remote authenticated users of the application to increase their privileges by sending a single HTTP PUT request with rolename=Administrator, aka incorrect access control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-03-03T00:00:00.000Z
CVE-2024-55573 
An issue was discovered in Centreon centreon-web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with high privileges is able to inject SQL into the form used to create virtual metrics.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 9.1
baseSeverity: CRITICAL
Published: 2025-01-23T00:00:00.000Z
CVE-2024-55577 
Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable.
Problem types: cwe_id: CWE-121
description: Stack-based buffer overflow
Affected products: vendor: The Dimensional Gate Co.
product: Linux Ratfor
Published: 2025-01-15T05:17:04.115Z
CVE-2024-55578 
Zammad before 6.4.1 places sensitive data (such as auth_microsoft_office365_credentials and application_secret) in log files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-09T00:00:00.000Z
CVE-2024-55579 
An issue was discovered in Qlik Sense Enterprise for Windows before November 2024 IR. An unprivileged user with network access may be able to create connection objects that trigger execution of arbitrary EXE files. This is fixed in November 2024 IR, May 2024 Patch 10, February 2024 Patch 14, November 2023 Patch 16, August 2023 Patch 16, May 2023 Patch 18, and February 2023 Patch 15.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
Published: 2024-12-09T00:00:00.000Z
CVE-2024-55580 
An issue was discovered in Qlik Sense Enterprise for Windows before November 2024 IR. Unprivileged users with network access may be able to execute remote commands that could cause high availability damages, including high integrity and confidentiality risks. This is fixed in November 2024 IR, May 2024 Patch 10, February 2024 Patch 14, November 2023 Patch 16, August 2023 Patch 16, May 2023 Patch 18, and February 2023 Patch 15.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
Published: 2024-12-09T00:00:00.000Z
CVE-2024-55581 
When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of verification of an HTTPS server's certificate (unless the using program specifies a TLS configuration).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-02-26T00:00:00.000Z
CVE-2024-55582 
Oxide before 6 has unencrypted Control Plane datastores.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:H/AV:P/A:N/C:H/I:H/PR:N/S:U/UI:N
attackVector: PHYSICAL
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
baseScore: 5.7
baseSeverity: MEDIUM
Published: 2024-12-09T00:00:00.000Z
CVE-2024-55585 
In the moPS App through 1.8.618, all users can access administrative API endpoints without additional authentication, resulting in unrestricted read and write access, as demonstrated by /api/v1/users/resetpassword.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: MOPS
product: moPS
default_status: unaffected
Published: 2025-06-07T00:00:00.000Z
CVE-2024-55586 
Nette Database through 3.2.4 allows SQL injection in certain situations involving an untrusted filter that is directly passed to the where method. NOTE: the vendor's position is that this is intended behavior.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-10T00:00:00.000Z
CVE-2024-55587 
python-libarchive through 4.2.1 allows directory traversal (to create files) in extract in zip.py for ZipFile.extractall and ZipFile.extract.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-11T00:00:00.000Z
CVE-2024-55590 
Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiIsolator version 2.4.0 through 2.4.5 allows an authenticated attacker with at least read-only admin permission and CLI access to execute unauthorized code via specifically crafted CLI commands.
Problem types: cwe_id: CWE-78
description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: FortiIsolator
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.6
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C
Published: 2025-03-11T14:54:34.932Z