Security update for rust1.55 (moderate)

openSUSE Security Update: Security update for rust1.55 Announcement ID: openSUSE-SU-2022:0171-1 Rating: moderate References: 1194767 Cross-References: CVE-2022-21658 CVSS scores: CVE-2022-21658 SUSE: 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 An update...

High-Severity Rust Programming Bug Could Lead to File, Directory Deletion

The maintainers of the Rust programming language have released a security update for a high-severity vulnerability that could be abused by a malicious party to purge files and directories from a vulnerable system in an unauthorized manner. "An attacker could use this security issue to trick a...

SUSE SLED15 / SLES15 Security Update : rust1.56 (SUSE-SU-2022:0149-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0149-1 advisory. - CVE-2022-21658: Fixed race condition in std::fs::removedirall bsc1194767. Tenable has extracted the preceding...

SUSE: Security Advisory (SUSE-SU-2022:0149-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-21658

creationtimestamp| type| source ---|---|--- 2022-01-20 20:12:03+00:00| seen| https://t.me/cibsecurity/35941 2022-01-24 07:55:51+00:00| seen| https://t.me/thehackernews/1819 2022-01-24 11:03:01+00:00| seen| https://t.me/CyberSecurityTechnologies/5263 2022-01-24 18:43:46+00:00| seen|...

AZL-8337 CVE-2022-21658 affecting package rust for versions less than 1.59.0-1

Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the std::fs::removedirall standard library function is vulnerable a race condition enabling symlink following CWE-363. A...

CVE-2022-21658

CVE-2022-21658 affects Rust’s std::fs::remove_dir_all, due to a race condition (CWE-363) that could allow an attacker to trick a privileged process into deleting files/directories outside the target. Affected Rust releases: 1.0.0–1.58.0; patch released in 1.58.1. Impact can be significant for pri...

CVE-2022-21658 Race condition in std::fs::remove_dir_all in rustlang

Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the std::fs::removedirall standard library function is vulnerable a race condition enabling symlink following CWE-363. A...

CVE-2022-21658 Race condition in std::fs::remove_dir_all in rustlang

Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the std::fs::removedirall standard library function is vulnerable a race condition enabling symlink following CWE-363. A...

CVE-2020-21658

The CVE-2020-21658 entry describes a CSRF vulnerability in WDJA CMS v1.5.2 that allows an attacker to arbitrarily add administrator accounts via a crafted URL. Affected product/version: WDJA CMS 1.5.2. Root cause: insufficient CSRF protection on account-creation/administrator-adding functionality...

CVE-2020-21658

A Cross-Site Request Forgery CSRF in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL...

CVE-2021-21658

Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2021-21658

Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2021-21658

Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2021-21658

Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2021-21658

CVE-2021-21658 affects Jenkins Nuget Plugin 1.0 and earlier. The issue is an XML External Entity (XXE) vulnerability due to the plugin’s XML parser not preventing XXE attacks. Impact is described as potential exposure of secrets via crafted XML; remediation is available in Jenkins Nuget Plugin 1....