CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-45049 – Nix Hydra Missing authentication when triggering evaluations
https://notcve.org/view.php?id=CVE-2024-45049
27 Aug 2024 — Hydra is a Continuous Integration service for Nix based projects. It is possible to trigger evaluations in Hydra without any authentication. Depending on the size of evaluations, this can impact the availability of systems. The problem can be fixed by applying https://github.com/NixOS/hydra/commit/f73043378907c2c7e44f633ad764c8bdd1c947d5 to any Hydra package. Users are advised to upgrade. • https://github.com/NixOS/hydra/security/advisories/GHSA-xv29-v93r-2f5v • CWE-306: Missing Authentication for Critical Function •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2024-32657 – Hydra has persistent XSS vulnerability serving HTML build outputs
https://notcve.org/view.php?id=CVE-2024-32657
22 Apr 2024 — Hydra is a Continuous Integration service for Nix based projects. Attackers can execute arbitrary code in the browser context of Hydra and execute authenticated HTTP requests. The abused feature allows Nix builds to specify files that Hydra serves to clients. One use of this functionality is serving NixOS `.iso` files. The issue is only with html files served by Hydra. • https://github.com/NixOS/hydra/commit/b72528be5074f3e62e9ae2c2ae8ef9c07a0b4dd3 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •