2021-01-25

CVE-2021-23901 Jan 25, 10:16 CRITICAL PATCH Act Now

An XML external entity (XXE) injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions < 1.18. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

CVE-2021-21272 Jan 25, 19:15 HIGH PATCH This Week

ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

CVE-2021-21275 Jan 25, 23:15 MEDIUM PATCH This Month

The MediaWiki "Report" extension has a Cross-Site Request Forgery (CSRF) vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.