CVE Vulnerability Catalog

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/image_resource_loader.py forwards headers configured through the HTMLBackendOptions.headers setting to every remote image URL named by an untrusted document when enable_remote_fetch=True and fetch_images=True. The loader does not restrict those credentials to the source document's origin, allowing requests that carry custom headers such as API keys and cookies to follow cross-origin redirects and expose the caller's configured credentials to a document author. The default configuration is not affected because remote fetching and configured headers are required.

Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy (edu) from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the project_id or storage_bucket inputs to execute arbitrary shell commands on the GitHub Actions runner, because the inputs are interpolated directly into Bash gcloud storage cp commands in several steps via ${{ inputs.* }} expressions. The only in-repository caller passed repository secrets and ran only on trusted triggers, so no untrusted input was known to reach the vulnerable steps.

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy (edu) from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify documentation content served to a victim via an HTTPS request for a slashless directory path, because TLS terminates at the load balancer in front of Nginx and the resulting 301 response redirects the client to a plaintext http:// URL. Browsers that ship the HSTS preload list are not affected, because the .dev top-level domain is preloaded; clients that do not enforce HSTS, such as command-line HTTP clients and scripts that follow redirects, are affected.

Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0.

Ghost is a Node.js content management system. From 1.18.0 until 6.27.0, an SSRF vulnerability in the webhooks feature allowed staff users to probe internal hosts from the Ghost server. This issue is fixed in version 6.27.0.

Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the relative ordering of other staff users' hashed passwords. This does not directly disclose password hashes, and does not provide a practical path to recovering a password. This issue is fixed in version 6.64.0.

A flaw was found in SSSD where improper buffer offset calculation during request parsing in the autofs responder UNIX socket leads to an out-of-bounds memory read. A local attacker can send a specially crafted request to trigger this issue. This causes the autofs responder process to crash, resulting in a denial of service (DoS).

In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, a missing bounds check allows a possible out-of-bounds read. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not required for exploitation.

gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory (-C) into an existing directory containing a pre-existing symlink, gpgtar can follow that symlink and create or overwrite a file outside the selected extraction directory. The write is limited by the extraction user's filesystem permissions.

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot be interpreted as command-line options. A remote attacker who can reach the CUPS service could supply a crafted recipient value starting with "-" to influence sendmail behavior.

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, front-end request desynchronization is possible in the proxy request forwarding component. A request containing both Content-Length and Transfer-Encoding headers is forwarded with both headers present, while Fiddler frames the body using Transfer-Encoding only. The remaining bytes on the reused client connection are then parsed as a separate pipelined request, so a local threat actor with low privileges can cause a single malformed request to be split into two requests forwarded to the origin server and receive an additional smuggled response, without requiring a vulnerable server.

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input, leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database.

A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected is the htmlspecialchars_decode function of the file App/Feelcrm/Common/Model/CrmDefineFormModel.class.php of the Create Customer Endpoint component. Manipulation of the customer_form[remark] argument results in cross site scripting, and the attack can be initiated remotely. The exploit has been made public and could be used; the project has not responded to the issue report.

DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resulting in a denial-of-service condition within the web application. The flaw exists within the web portal on TCP port 443, under Configuration → Users → Users List, in the “Microsoft Exchange mailbox” field, which fails to properly validate or sanitize user-supplied input before storing and rendering it.

DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content into the web application. The flaw exists within the web portal on TCP port 443, under Configuration → Domains, specifically in the “Description” field, which fails to properly validate or sanitize user-supplied input before storing and rendering it.

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the server_info function of the file python/sglang/srt/entrypoints/http_server.py of the HTTP Endpoint component. Manipulation of the api_key argument leads to cleartext transmission of sensitive information. The attack can be launched remotely, though it is highly complex and difficult to exploit. The exploit has been disclosed to the public and the pull request to fix this issue awaits acceptance.

A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminAuthController.java of the Login Endpoint component. The manipulation results in improper restriction of excessive authentication attempts. The attack may be performed remotely, though it is highly complex and difficult to exploit. The exploit is now public and may be used; the project has not responded to the issue report.

A cross-site scripting vulnerability was found in code-projects Human Resource Management System 1.0 in an unknown functionality of /views/admin/liveEventHistory.php (Live Event History component). Manipulating the eventSubject argument results in cross-site scripting. The attack may be launched remotely and the exploit has been made public.

A weakness was identified in SourceCodester Drug Recommendation System 1.0 in an unknown function of Admin/add_user.php (Password Handler component). Manipulating the Password argument can lead to missing encryption of sensitive data. The attack can be launched remotely and the exploit has been made available to the public.

A cross-site scripting vulnerability was found in code-projects Human Resource Management 1.0 in an unknown part of /humanresourcemanagementsystem/src/store/EventStore.php (Event Creation component). Manipulating the eventSubject argument leads to cross-site scripting. The attack may be launched remotely and the exploit has been published.