CVE Vulnerability Catalog

A vulnerability in the bc-csharp library (Bouncy Castle for .NET) in Pkcs12Store.GetCertificateChain involves a loop with an unreachable exit condition. An attacker can supply a crafted PKCS#12 file where the certificate chain forms a cycle (e.g., two certificates whose AuthorityKeyIdentifier extensions reference each other's public key), causing the application to hang and exhaust memory until an OutOfMemoryException occurs.

A side-channel vulnerability exists in the NTRU implementation of Bouncy Castle for Java before version 1.86. The reduction of secret values using the % operator in three helper functions causes execution time to depend on the secret operand (division by a variable), potentially allowing an attacker to recover information about the NTRU private key through timing measurements.

In the MLS implementation (RFC 9420) of Bouncy Castle for Java before 1.86, the uint32 leaf_index is stored as a signed int, allowing a wire value with the top bit set to decode as a negative number. Incorrect comparison in GroupKeySet.SecretTree.hasLeaf and Group.validateRemove allows bypassing membership checks, potentially leading to a DoS attack via unbounded growth of the node list and JVM heap exhaustion.

Inefficient algorithmic complexity in X.509 distinguished name string conversion (X509Name.ToString and IetfUtilities.ValueToString) in Bouncy Castle for .NET (bc-csharp) before 2.7.0 allows a remote unauthenticated attacker to cause a denial of service through CPU exhaustion via a certificate, CRL, certification request, or other structure whose name contains a long attribute value requiring escaping (e.g., commas, leading/trailing spaces), causing quadratic growth in processing time.

Memory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyParameters, HssSignature) in Bouncy Castle for .NET (bc-csharp) before 2.7.0 allows a remote unauthenticated attacker to cause a denial of service through memory exhaustion via a public key encoding with an excessive level count (L), leading to allocation of an array of size L-1 and memory exhaustion (up to ~17 GB) or OutOfMemoryException.

Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCipher) AEAD modes in Bouncy Castle for .NET (bc-csharp) before 2.7.0 allows a remote attacker to obtain decryptions of chosen ciphertexts via forged messages sent to an application that lets the output buffer of a failed decryption be observed (e.g., through buffer reuse or logging), because decryption writes recovered plaintext into the caller-supplied output buffer before checking the authentication tag and leaves it there on failure.

Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1StreamParser) in Bouncy Castle for .NET (bc-csharp) before 2.7.0 allows a remote unauthenticated attacker to cause a denial of service via crafted ASN.1 encoding of deeply nested constructed elements (e.g., SEQUENCE inside SEQUENCE), because each nesting level is parsed by a further recursive call with no depth bound. About 2,000 levels (8 KB DER) are enough to exhaust a 1.5 MB thread stack and raise a StackOverflowException, which .NET cannot catch and which terminates the whole process.

The Relevanssi Premium plugin for WordPress in versions up to and including 2.31.4 is vulnerable to stored cross-site scripting (XSS) via the '_rt' parameter due to insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbitrary scripts into pages that execute when a user visits the injected page. This requires the click-tracking and logging feature to be enabled, and exploitation is trivial because a valid '_rt_nonce' is publicly emitted on every search-results page.

The CMB2 plugin for WordPress in versions up to and including 2.13.1 is vulnerable to stored cross-site scripting (XSS) via the '<textarea_code field id>' parameter (e.g., kl_code, kl_post_code) due to insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbitrary scripts into pages that execute when a user visits the injected page. The front-end save path requires only a CMB2 box nonce, which is emitted to all visitors including unauthenticated guests via a simple GET request, making the attack trivially reachable without credentials on sites exposing a public CMB2 form writing a textarea_code field.

The Download Monitor plugin for WordPress is vulnerable to stored XSS via postMessage to the admin editor. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject scripts that execute when a user accesses an injected page.

The Kubio AI Page Builder plugin for WordPress is vulnerable to stored XSS via the 'comment' parameter. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject scripts that execute when a user accesses an injected page.

In bc-csharp before 2.7.0, the CMP/CRMF password-based MAC verifier (PKMacBuilder) does not limit iteration count unless an explicit maximum is provided. A remote attacker can send a CMP message or CRMF request with a very large iteration count, causing CPU exhaustion and denial of service.

In bc-csharp before 2.7.0, IesEngine.DecryptBlock shows an observable discrepancy between padding errors and MAC errors. An attacker who captured an IES/ECIES ciphertext can use a padding-oracle attack to recover plaintext.

In bc-csharp before 2.7.0, the DTLS handshake reassembly allocates memory based on the 24-bit length from the fragment header without checking the maximum handshake message size. A remote attacker can send crafted fragments, causing memory exhaustion and denial of service.

In bc-csharp before 2.7.0, in stream mode of IesEngine, the MAC key is derived directly after a keystream that depends only on the static key pair and fixed parameters. An attacker who knows the plaintext of one message can forge shorter messages that are accepted as authentic.

In bc-csharp before 2.7.0, the DSTU 7624 CCM mode implementation (KCcmBlockCipher) processes the G1 block only when associated data is present. An attacker who observes encrypted messages of known or chosen content can forge ciphertexts with valid authentication tags.

In bc-csharp before 2.7.0, the AES-CCM implementation (CcmParameters and CcmBlockCipher) improperly validates the authentication tag length. An attacker can modify CCM-encrypted content without detection by using an AlgorithmIdentifier with a zero-length or out-of-range tag.

The BA Book Everything plugin for WordPress is vulnerable to stored XSS via the 'booking_service_qty' parameter. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject scripts that execute when a user accesses an injected page.

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in versions up to 3.3.34 via the external (Amazon S3) upload flow. The plugin trusts an attacker-supplied file path, allowing arbitrary file read, write, or deletion on the server.

The SiteOrigin Widgets Bundle plugin for WordPress (versions up to and including 1.73.2) is vulnerable to Local File Inclusion via the 'theme' parameter. An authenticated attacker with contributor-level access or higher can include and execute arbitrary .php files on the server, leading to PHP code execution. Exploitation requires sending a malicious widgetData payload with a legacy top-level theme key to the /wp-json/sowb/v1/widgets/previews REST endpoint.