# Vulnerabilities published in 2021


- [CVE-2021-32720](https://insights.sbomify.com/CVE-2021-32720/): List of order ids, number, items total and token value exposed for unauthorized uses via new API (medium 5.3)
- [CVE-2021-3272](https://insights.sbomify.com/CVE-2021-3272/): Memory corruption in fedoraproject:fedora (medium 5.5)
- [CVE-2021-32719](https://insights.sbomify.com/CVE-2021-32719/): Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin (low 3.1)
- [CVE-2021-32718](https://insights.sbomify.com/CVE-2021-32718/): Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI (low 3.1)
- [CVE-2021-32717](https://insights.sbomify.com/CVE-2021-32717/): Private files publicly accessible with Cloud Storage providers (high 7.5)
- [CVE-2021-32716](https://insights.sbomify.com/CVE-2021-32716/): Internal hidden fields are visible on to many associations in admin api (medium 4.4)
- [CVE-2021-32715](https://insights.sbomify.com/CVE-2021-32715/): Lenient Parsing of Content-Length Header When Prefixed with Plus Sign (low 3.1)
- [CVE-2021-32714](https://insights.sbomify.com/CVE-2021-32714/): Integer Overflow in Chunked Transfer-Encoding (medium 5.9)
- [CVE-2021-32713](https://insights.sbomify.com/CVE-2021-32713/): Authenticated Stored XSS (medium 4.8)
- [CVE-2021-32712](https://insights.sbomify.com/CVE-2021-32712/): Information leakage in Error Handler (medium 5.3)
- [CVE-2021-32711](https://insights.sbomify.com/CVE-2021-32711/): Leak of information via Store-API (critical 9.1)
- [CVE-2021-32710](https://insights.sbomify.com/CVE-2021-32710/): Potential Session Hijacking in Shopware (medium 5.9)
- [CVE-2021-3271](https://insights.sbomify.com/CVE-2021-3271/): Stored cross-site scripting in PressBooks (medium 4.8)
- [CVE-2021-32709](https://insights.sbomify.com/CVE-2021-32709/): Creation of order credits was not validated by acl in admin orders (medium 4.9)
- [CVE-2021-32708](https://insights.sbomify.com/CVE-2021-32708/): Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem (critical 9.8)
- [CVE-2021-32707](https://insights.sbomify.com/CVE-2021-32707/): Bypass of image blocking in Nextcloud Mail (medium 4.3)
- [CVE-2021-32706](https://insights.sbomify.com/CVE-2021-32706/): (Authenticated) Remote Code Execution Possible in Web Interface 5.5 (high 7.6)
- [CVE-2021-32705](https://insights.sbomify.com/CVE-2021-32705/): Lack of ratelimit on public DAV endpoint (medium 5.3)
- [CVE-2021-32704](https://insights.sbomify.com/CVE-2021-32704/): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in dhis2-core (high 8.5)
- [CVE-2021-32703](https://insights.sbomify.com/CVE-2021-32703/): Lack of ratelimit on shareinfo endpoint (medium 5.3)
- [CVE-2021-32702](https://insights.sbomify.com/CVE-2021-32702/): Reflected XSS from the callback handler's error query parameter (high 8.0)
- [CVE-2021-32701](https://insights.sbomify.com/CVE-2021-32701/): Possible bypass of token claim validation when OAuth2 Introspection caching is enabled (high 7.5)
- [CVE-2021-32700](https://insights.sbomify.com/CVE-2021-32700/): Supply chain attack via MiTM against users (critical 9.1)
- [CVE-2021-32699](https://insights.sbomify.com/CVE-2021-32699/): Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings (medium 6.5)
- [CVE-2021-32698](https://insights.sbomify.com/CVE-2021-32698/): Blind Server-Side Request Forgery (SSRF) in eLabFTW (medium 6.8)
- [CVE-2021-32697](https://insights.sbomify.com/CVE-2021-32697/): Form validation can be skipped (medium 6.5)
- [CVE-2021-32696](https://insights.sbomify.com/CVE-2021-32696/): Passing in a non-string 'html' argument can lead to unsanitized output (low 3.7)
- [CVE-2021-32695](https://insights.sbomify.com/CVE-2021-32695/): Malicious Android app could access Shared Preferences of the Nextcloud Android client (low 3.9)
- [CVE-2021-32694](https://insights.sbomify.com/CVE-2021-32694/): Malicious Android application can crash the Nextcloud Android Client (medium 4.1)
- [CVE-2021-32693](https://insights.sbomify.com/CVE-2021-32693/): Authentication granted with multiple firewalls (medium 6.8)
- [CVE-2021-32692](https://insights.sbomify.com/CVE-2021-32692/): Activity Watch vulnerable to command execution on macOS via printAppTitle.scpt (critical 9.6)
- [CVE-2021-32691](https://insights.sbomify.com/CVE-2021-32691/): Auto-merging Person Records Compromised (high 8.8)
- [CVE-2021-32690](https://insights.sbomify.com/CVE-2021-32690/): Repository credentials passed to alternate domain (medium 6.8)
- [CVE-2021-32689](https://insights.sbomify.com/CVE-2021-32689/): Nextcloud Talk not properly disassociating users from chats after account deletion (high 8.1)
- [CVE-2021-32688](https://insights.sbomify.com/CVE-2021-32688/): Application specific tokens can change their own scope (high 8.8)
- [CVE-2021-32687](https://insights.sbomify.com/CVE-2021-32687/): Integer overflow issue with intsets in Redis (high 7.5)
- [CVE-2021-32686](https://insights.sbomify.com/CVE-2021-32686/): Denial of Service in PJSIP (medium 5.9)
- [CVE-2021-32685](https://insights.sbomify.com/CVE-2021-32685/): Improper Verification of Cryptographic Signature in tenvoy (critical 9.8)
- [CVE-2021-32684](https://insights.sbomify.com/CVE-2021-32684/): Missing Handler in @scandipwa/magento-scripts (medium 6.2)
- [CVE-2021-32683](https://insights.sbomify.com/CVE-2021-32683/): XSS through createObjectURL (high 8.8)
- [CVE-2021-32682](https://insights.sbomify.com/CVE-2021-32682/): Multiple vulnerabilities leading to RCE (critical 9.8)
- [CVE-2021-32681](https://insights.sbomify.com/CVE-2021-32681/): Improper escaping of HTML ('Cross-site Scripting') in Wagtail StreamField blocks (medium 5.4)
- [CVE-2021-32680](https://insights.sbomify.com/CVE-2021-32680/): Audit log is not properly logging unsetting of share expiration date (low 3.3)
- [CVE-2021-32679](https://insights.sbomify.com/CVE-2021-32679/): Filenames not escaped by default in controllers using DownloadResponse (low 3.5)
- [CVE-2021-32678](https://insights.sbomify.com/CVE-2021-32678/): Ratelimit not applied on OCS API responses (low 3.7)
- [CVE-2021-32677](https://insights.sbomify.com/CVE-2021-32677/): Cross-Site Request Forgery (CSRF) in FastAPI (high 8.2)
- [CVE-2021-32676](https://insights.sbomify.com/CVE-2021-32676/): Session Fixation in Nextcloud Talk (medium 6.5)
- [CVE-2021-32675](https://insights.sbomify.com/CVE-2021-32675/): DoS vulnerability in Redis (high 7.5)
- [CVE-2021-32674](https://insights.sbomify.com/CVE-2021-32674/): Remote Code Execution via traversal in TAL expressions (high 8.8)
- [CVE-2021-32673](https://insights.sbomify.com/CVE-2021-32673/): Remote Command Execution in reg-keygen-git-hash-plugin (high 8.8)
- [CVE-2021-32672](https://insights.sbomify.com/CVE-2021-32672/): Vulnerability in Lua Debugger in Redis (medium 5.3)
- [CVE-2021-32671](https://insights.sbomify.com/CVE-2021-32671/): XSS vulnerability with translator (critical 10.0)
- [CVE-2021-32670](https://insights.sbomify.com/CVE-2021-32670/): Reflected cross-site scripting issue in Datasette (high 7.2)
- [CVE-2021-3267](https://insights.sbomify.com/CVE-2021-3267/): File upload in kitesky:kitecms (high 7.2)
- [CVE-2021-32669](https://insights.sbomify.com/CVE-2021-32669/): Cross-Site Scripting in Backend Grid View (medium 6.4)
- [CVE-2021-32668](https://insights.sbomify.com/CVE-2021-32668/): Cross-Site Scripting in Query Generator & Query View (medium 6.4)
- [CVE-2021-32667](https://insights.sbomify.com/CVE-2021-32667/): Cross-Site Scripting in Page Preview (medium 6.4)
- [CVE-2021-32666](https://insights.sbomify.com/CVE-2021-32666/): Asset DoS vulnerability (medium 6.5)
- [CVE-2021-32665](https://insights.sbomify.com/CVE-2021-32665/): Verified groups not reliable (high 8.8)
- [CVE-2021-32664](https://insights.sbomify.com/CVE-2021-32664/): Reflected XSS in Combodo/iTop (high 8.1)
- [CVE-2021-32663](https://insights.sbomify.com/CVE-2021-32663/): Unauthorized setup leads to SSRF in Combodo/iTop (high 8.7)
- [CVE-2021-32662](https://insights.sbomify.com/CVE-2021-32662/): TechDocs mkdocs.yml path traversal (medium 6.5)
- [CVE-2021-32661](https://insights.sbomify.com/CVE-2021-32661/): TechDocs object element script injection (medium 6.8)
- [CVE-2021-32660](https://insights.sbomify.com/CVE-2021-32660/): TechDocs content sanitization bypass (medium 6.8)
- [CVE-2021-32659](https://insights.sbomify.com/CVE-2021-32659/): Automatic room upgrade handling can be used maliciously to bridge a room non-consentually (medium 6.5)
- [CVE-2021-32658](https://insights.sbomify.com/CVE-2021-32658/): Sensitive data may not be removed from storage on account removal (medium 4.7)
- [CVE-2021-32657](https://insights.sbomify.com/CVE-2021-32657/): Malicious user could break user administration page (medium 4.3)
- [CVE-2021-32656](https://insights.sbomify.com/CVE-2021-32656/): Trusted servers exchange can be triggered by attacker (high 8.6)
- [CVE-2021-32655](https://insights.sbomify.com/CVE-2021-32655/): Files Drop public link can be added as federated share (low 3.5)
- [CVE-2021-32654](https://insights.sbomify.com/CVE-2021-32654/): Attacker can obtain write access to any federated share/public link (high 8.1)
- [CVE-2021-32653](https://insights.sbomify.com/CVE-2021-32653/): Default settings leak federated cloud ID to lookup server of all users (low 2.7)
- [CVE-2021-32652](https://insights.sbomify.com/CVE-2021-32652/): Missing permission check on email metadata retrieval (high 8.8)
- [CVE-2021-32651](https://insights.sbomify.com/CVE-2021-32651/): LDAP injection via OneDev may leak some LDAP directory information (low 3.1)
- [CVE-2021-32650](https://insights.sbomify.com/CVE-2021-32650/): Arbitrary code execution in october/system (high 8.8)
- [CVE-2021-32649](https://insights.sbomify.com/CVE-2021-32649/): Authenticated file write leads to remote code execution in october/system (high 8.8)
- [CVE-2021-32648](https://insights.sbomify.com/CVE-2021-32648/): October CMS Improper Authentication (high 8.2, exploited in the wild)
- [CVE-2021-32647](https://insights.sbomify.com/CVE-2021-32647/): Post-authentication Remote Code Execution (RCE) in emissary:emissary (high 8.0)
- [CVE-2021-32646](https://insights.sbomify.com/CVE-2021-32646/): Escalation of permissions in roomer (medium 5.3)
- [CVE-2021-32645](https://insights.sbomify.com/CVE-2021-32645/): Open Redirect in tenancy (medium 4.3)
- [CVE-2021-32644](https://insights.sbomify.com/CVE-2021-32644/): Cross-site Scripting in Random.php (medium 6.4)
- [CVE-2021-32643](https://insights.sbomify.com/CVE-2021-32643/): StaticFile.fromUrl can leak presence of a directory (medium 5.8)
- [CVE-2021-32642](https://insights.sbomify.com/CVE-2021-32642/): Missing input validation in dynamic discovery example scripts. (high 7.0)
- [CVE-2021-32641](https://insights.sbomify.com/CVE-2021-32641/): Reflected XSS when using flashMessages (high 8.1)
- [CVE-2021-32640](https://insights.sbomify.com/CVE-2021-32640/): ReDoS in Sec-Websocket-Protocol header (medium 5.3)
- [CVE-2021-3264](https://insights.sbomify.com/CVE-2021-3264/): SQL injection in cxuu:cxuucms (high 7.2)
- [CVE-2021-32639](https://insights.sbomify.com/CVE-2021-32639/): Server-Side Request Forgery (SSRF) in emissary:emissary (high 7.2)
- [CVE-2021-32638](https://insights.sbomify.com/CVE-2021-32638/): CodeQL runner: Command-line options that make GitHub access tokens visible to other processes are now deprecated (medium 4.4)
- [CVE-2021-32637](https://insights.sbomify.com/CVE-2021-32637/): Authentication bypassed with malformed request URI (critical 10.0)
- [CVE-2021-32635](https://insights.sbomify.com/CVE-2021-32635/): Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint (medium 6.3)
- [CVE-2021-32634](https://insights.sbomify.com/CVE-2021-32634/): Deserialization of Untrusted Data in Emissary (high 7.2)
- [CVE-2021-32633](https://insights.sbomify.com/CVE-2021-32633/): Remote Code Execution via traversal in TAL expressions (medium 6.8)
- [CVE-2021-32632](https://insights.sbomify.com/CVE-2021-32632/): CSRF allowing modification of commands, modules, banphrases through hidden iFrames (low 2.4)
- [CVE-2021-32631](https://insights.sbomify.com/CVE-2021-32631/): JSON Web Tokens not properly verified (medium 6.5)
- [CVE-2021-32630](https://insights.sbomify.com/CVE-2021-32630/): Various (critical 9.6)
- [CVE-2021-32629](https://insights.sbomify.com/CVE-2021-32629/): Memory access due to code generation flaw in Cranelift module (high 7.2)
- [CVE-2021-32628](https://insights.sbomify.com/CVE-2021-32628/): Vulnerability in handling large ziplists (high 7.5)
- [CVE-2021-32627](https://insights.sbomify.com/CVE-2021-32627/): Integer overflow issue with Streams in Redis (high 7.5)
- [CVE-2021-32626](https://insights.sbomify.com/CVE-2021-32626/): Lua scripts can overflow the heap-based Lua stack in Redis (high 7.5)
- [CVE-2021-32625](https://insights.sbomify.com/CVE-2021-32625/): Redis vulnerability in STRALGO LCS on 32-bit systems (high 7.5)
- [CVE-2021-32624](https://insights.sbomify.com/CVE-2021-32624/): Private Field data leak (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/155/