CVE Vulnerability Catalog

Apache Answer through 2.0.2 has an exposure of sensitive information through data queries vulnerability. An improper authorization check in the similar-question search allowed authenticated users to view metadata of non-public questions.

In Apache Answer through 2.0.2, unauthenticated attackers could access comments associated with non-public content through public user profiles. The flaw stems from insufficient visibility checks on comments.

In Apache Answer through 2.0.2, an authorization flaw in the MCP answer retrieval tool allows holders of a global API key to access answer content associated with hidden, deleted, or pending-review questions.

In Apache Answer through 2.0.2, an unauthenticated or unauthorized user can retrieve the invited-user list associated with a non-public question due to missing visibility authorization checks.

In Apache Answer through 2.0.2, a verification code issued for one email-based workflow could be accepted by another sensitive workflow because the code purpose was not properly enforced.

In Apache Answer through 2.0.2, the importer stores imported question bodies as raw HTML without passing them through the normal Markdown-to-HTML sanitization path. Attacker-controlled HTML embedded in an imported data source is persisted and rendered to all viewers, including privileged users, as stored XSS.

MISP contains a vulnerability in the handling of module plugin settings. When rebuilding module-supplied settings for API consumption, the server drops the redacted and cli_only flags declared in the module's configuration metadata, potentially exposing sensitive credentials and bypassing access restrictions.

MISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interface. Parameter names returned by the misp-modules service are rendered as raw HTML form labels without output encoding, allowing injection of arbitrary HTML or JavaScript.

MISP contains a CSS injection vulnerability in the remote event preview feature. The colour value associated with each remote tag is written directly into an inline CSS style attribute without sufficient validation, allowing injection of arbitrary CSS declarations.

A vulnerability was detected in NLP.js 4.27.0 affecting the Evaluator.walkFunction function in packages/evaluator/src/evaluator.js within the Condition Expression Pipeline component. Manipulating the condition argument results in code injection, and the attack can be launched remotely. The exploit is now public and the project has not yet responded to the issue report.

A vulnerability was determined in pi-agent-dashboard up to 0.8.0 in the WebSocket Gateway component, where manipulating the cwd argument leads to an origin validation error. The attack can be executed remotely and the exploit has been publicly disclosed. Upgrading to version 0.9.0 (patch 48fd0bad5adfe76af9736599699d51a5f60019f6) fixes the issue.

A vulnerability was determined in DeepPavlov up to 1.7.0 affecting the MultiTaskPipelinePreprocessor.__init__ function in deeppavlov/models/preprocessors/multitask_preprocessor.py. Manipulating the preprocessor argument causes code injection, and the attack can be carried out remotely. The exploit has been publicly disclosed and the project has not yet responded to the issue report.

The Tutor LMS plugin up to version 4.1.2 contains a Cross-site Scripting (Stored XSS) vulnerability due to improper neutralization of input during web page generation. This allows a malicious script to be stored and executed in a user's browser.

The Essential Addons for Elementor plugin up to version 6.8.5 contains an Incorrect Privilege Assignment vulnerability that allows Privilege Escalation. The issue stems from flawed privilege checks within the plugin component.

A potential JDBC source configuration validation vulnerability in Apache Kylin. It affects versions 4.0.0 through 5.0.4 and has minor impact unless Kylin backend services are open to the public network.

An SQL Injection vulnerability in Apache Kylin due to improper neutralization of special elements used in SQL commands. It affects versions 4.0.0 through 5.0.4 and has moderate impact in the default query-only mode.

A vulnerability in Apache Kylin involving missing authorization on JDBC source configuration updates. It affects versions 4.0.0 through 5.0.4 and impacts mainly services directly exposed to the public network.

A Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. It affects versions 4.0.0 through 5.0.4 and impacts mainly the Kylin job service directly exposed to the public network.

MISP versions below 2.5.48 contain a data integrity flaw in event deletion logic where associated records (report tags, graph entries, proposal correlations, ssdeep chunks, attachment scan results) are not removed and remain orphaned. These records may contain sensitive threat intelligence data and could be exposed through other access paths.

In MISP versions below 2.5.48, the event synchronization process contains a logic error in preparing event reports for remote push — filtering of non-exportable tags is applied only once after iterating over all reports rather than to each report. As a result, all reports except the last are pushed with non-exportable tags intact, disclosing restricted information, and when the last report is empty, a null report is pushed causing the remote instance to fail saving the event.