Search
Find a vulnerability
Search criteria
4 vulnerabilities by rstudio
CVE-2022-38131 (GCVE-0-2022-38131)
Vulnerability from nvd – Published: 2022-09-06 00:00 – Updated: 2024-08-03 10:45
VLAI
Summary
RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious websites.
Severity
No CVSS data available.
CWE
- Open Redirect
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | RStudio Connect |
Affected:
All versions
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T10:45:52.681Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://tenable.com/security/research/tra-2022-30"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.posit.co/hc/en-us/articles/10983374992023"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "RStudio Connect",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious websites."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Open Redirect",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-06-14T00:00:00.000Z",
"orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
"shortName": "tenable"
},
"references": [
{
"url": "https://tenable.com/security/research/tra-2022-30"
},
{
"url": "https://support.posit.co/hc/en-us/articles/10983374992023"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
"assignerShortName": "tenable",
"cveId": "CVE-2022-38131",
"datePublished": "2022-09-06T00:00:00.000Z",
"dateReserved": "2022-08-10T00:00:00.000Z",
"dateUpdated": "2024-08-03T10:45:52.681Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-3374 (GCVE-0-2021-3374)
Vulnerability from nvd – Published: 2021-04-02 18:13 – Updated: 2024-08-03 16:53
VLAI
Summary
Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/colemanjp/shinyserver-director… | x_refsource_MISC |
| https://blog.rstudio.com/2021/01/13/shiny-server-… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T16:53:17.317Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/colemanjp/shinyserver-directory-traversal-source-code-leak"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://blog.rstudio.com/2021/01/13/shiny-server-1-5-16-update/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-02T18:13:44.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/colemanjp/shinyserver-directory-traversal-source-code-leak"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://blog.rstudio.com/2021/01/13/shiny-server-1-5-16-update/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2021-3374",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/colemanjp/shinyserver-directory-traversal-source-code-leak",
"refsource": "MISC",
"url": "https://github.com/colemanjp/shinyserver-directory-traversal-source-code-leak"
},
{
"name": "https://blog.rstudio.com/2021/01/13/shiny-server-1-5-16-update/",
"refsource": "MISC",
"url": "https://blog.rstudio.com/2021/01/13/shiny-server-1-5-16-update/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2021-3374",
"datePublished": "2021-04-02T18:13:44.000Z",
"dateReserved": "2021-02-01T00:00:00.000Z",
"dateUpdated": "2024-08-03T16:53:17.317Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-38131 (GCVE-0-2022-38131)
Vulnerability from cvelistv5 – Published: 2022-09-06 00:00 – Updated: 2024-08-03 10:45
VLAI
Summary
RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious websites.
Severity
No CVSS data available.
CWE
- Open Redirect
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | RStudio Connect |
Affected:
All versions
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T10:45:52.681Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://tenable.com/security/research/tra-2022-30"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.posit.co/hc/en-us/articles/10983374992023"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "RStudio Connect",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious websites."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Open Redirect",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-06-14T00:00:00.000Z",
"orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
"shortName": "tenable"
},
"references": [
{
"url": "https://tenable.com/security/research/tra-2022-30"
},
{
"url": "https://support.posit.co/hc/en-us/articles/10983374992023"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
"assignerShortName": "tenable",
"cveId": "CVE-2022-38131",
"datePublished": "2022-09-06T00:00:00.000Z",
"dateReserved": "2022-08-10T00:00:00.000Z",
"dateUpdated": "2024-08-03T10:45:52.681Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-3374 (GCVE-0-2021-3374)
Vulnerability from cvelistv5 – Published: 2021-04-02 18:13 – Updated: 2024-08-03 16:53
VLAI
Summary
Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/colemanjp/shinyserver-director… | x_refsource_MISC |
| https://blog.rstudio.com/2021/01/13/shiny-server-… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T16:53:17.317Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/colemanjp/shinyserver-directory-traversal-source-code-leak"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://blog.rstudio.com/2021/01/13/shiny-server-1-5-16-update/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-02T18:13:44.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/colemanjp/shinyserver-directory-traversal-source-code-leak"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://blog.rstudio.com/2021/01/13/shiny-server-1-5-16-update/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2021-3374",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/colemanjp/shinyserver-directory-traversal-source-code-leak",
"refsource": "MISC",
"url": "https://github.com/colemanjp/shinyserver-directory-traversal-source-code-leak"
},
{
"name": "https://blog.rstudio.com/2021/01/13/shiny-server-1-5-16-update/",
"refsource": "MISC",
"url": "https://blog.rstudio.com/2021/01/13/shiny-server-1-5-16-update/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2021-3374",
"datePublished": "2021-04-02T18:13:44.000Z",
"dateReserved": "2021-02-01T00:00:00.000Z",
"dateUpdated": "2024-08-03T16:53:17.317Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}