Automattic: Stored XSS on app.crowdsignal.com + your-subdomain.survey.fm via Embed Media

Hello there, I found a stored xss vulnerability. Steps: 1. Go to https://app.crowdsignal.com/dashboard 2. Create a quiz. 3. Go to https://app.crowdsignal.com/quizzes/your-quiz-id/question 4. Add Multiple Choice 5. Put a name to answer 1. 6. Click Add media button. F901543 7. Select Embed Media 8...

PT-2020-14570

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 78 Firefox versions prior to 78.0.2 Description The issue allows framing of other websites using object or embed tags, despite those websites disallowing framing with the X-Frame-Options header. Recommendations Fo...

Spoofing

"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +3973 more potentially affected by CVE-2020-11996 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.54)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2020-11996 Source...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +4084 more potentially affected by CVE-2020-11996 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.34)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 and more Source cves: CVE-2020-11996 Source...

nz.net.osnz.composite:composite-spring-boot-tomcat (5.22), org.apache.tomcat.embed:tomcat-embed-jasper (>=10.0.0-m1, <=10.0.0-m4) +1 more potentially affected by CVE-2020-11996 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.0-m4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m4 Source cves: CVE-2020-11996 Source advisory: MEND:CVE-2020-11996...

OSV-2020-54 Heap-buffer-overflow in OT::HintingDevice* hb_serialize_context_t::embed<OT::HintingDevice>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20211 Crash type: Heap-buffer-overflow READ Crash state: OT::HintingDevice hbserializecontextt::embed OT::HintingDevice::copy OT::Device::copy...

PT-2020-22386

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is reported, with a crash type indicating a problem in the hb serialize context t::embed function, specifically when...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +3363 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.30)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =4.4.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 - ai.ylyue:yue-library-web 2.1.0 and more Source cves: CVE-2020-1938 Source...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +285 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-1938 Source advisory: GHSA-C9HW-WF7X-JP9J...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +285 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-1938 Source advisory: OSV:GHSA-C9HW-WF7X-JP9J...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +3363 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.30)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =4.4.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 - ai.ylyue:yue-library-web 2.1.0 and more Source cves: CVE-2020-1938 Source...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4541 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =10 and more Source cves: CVE-2020-1938 Source advisory: GHSA-C9HW-WF7X-JP9J...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4541 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =10 and more Source cves: CVE-2020-1938 Source advisory: OSV:GHSA-C9HW-WF7X-JP9J...

ai.ylyue:yue-library-base (finchley.sr2.sr1), ai.ylyue:yue-library-data-jdbc (finchley.sr2.sr1) +4013 more potentially affected by CVE-2019-0199 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.37)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =0.0.6, =0.0.7 and more Source cves: CVE-2019-0199 Source advisory: GHSA-QCXH-W3J9-58QR...

am.ik.servicebroker:cloud-karafka-service-broker (0.1.0), ca.pjer:iam-spring-boot-starter (>=1.0.0, <=1.5.2) +900 more potentially affected by CVE-2019-0199 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.14)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =1.0.0, =0.0.31, =0.0.31, =0.0.31, =0.0.31, =0.1.32, =0.1.31, =0.1.31, =0.1.31, =2.0.10, =2.0.11 and more Source cves: CVE-2019-0199 Source advisory: OSV:GHSA-QCXH-W3J9-58QR...

am.ik.servicebroker:cloud-karafka-service-broker (0.1.0), ca.pjer:iam-spring-boot-starter (>=1.0.0, <=1.5.2) +900 more potentially affected by CVE-2019-0199 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.14)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =1.0.0, =0.0.31, =0.0.31, =0.0.31, =0.0.31, =0.1.32, =0.1.31, =0.1.31, =0.1.31, =2.0.10, =2.0.11 and more Source cves: CVE-2019-0199 Source advisory: GHSA-QCXH-W3J9-58QR...

DEBIAN-CVE-2020-4046

In affected versions of WordPress, users with low privileges like contributors and authors can use the embed block in a certain way to inject unfiltered HTML in the block editor. When affected posts are viewed by a higher privileged user, this could lead to script execution in the editor/wp-admin...

Hardcoded credentials

In affected versions of WordPress, users with low privileges like contributors and authors can use the embed block in a certain way to inject unfiltered HTML in the block editor. When affected posts are viewed by a higher privileged user, this could lead to script execution in the editor/wp-admin...

UBUNTU-CVE-2020-4046

In affected versions of WordPress, users with low privileges like contributors and authors can use the embed block in a certain way to inject unfiltered HTML in the block editor. When affected posts are viewed by a higher privileged user, this could lead to script execution in the editor/wp-admin...