Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-52085 State: PUBLISHED Published: 2023-12-29T00:00:03.968Z Last Updated: 2024-08-02T22:48:12.111Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: wintercms Products: winter Problem Types: CWE-22 Description: Winter is a free, open-source content management system. Users with access to backend forms that include a ColorPicker FormWidget can provide a value that would then be included without further processing in the compilation of custom stylesheets via LESS. This had the potential to lead to a Local File Inclusion vulnerability. This issue has been patched in v1.2.4. Additional Analyst Notes: - CVE Program Container: References: - https://gith
ty. This issue has been patched in v1.2.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wintercms/winter/security/advisories/GHSA-2x7r-93ww-cxrq - https://github.com/wintercms/winter/commit/5bc9257fe2bc47d8b786a1b1bf96bafad23d8ddd
CVE ID: CVE-2023-52086 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-08-02T22:48:12.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: resumable.php (aka PHP backend for resumable.js) 0.1.4 before 3c6dbf5 allows arbitrary file upload anywhere in the filesystem via ../ in multipart/form-data content to upload.php. (File overwrite hasn't been possible with the code available in GitHub in recent years, however.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dilab/resumable.php/issues/34 - https://github.com/dilab/resumable.php/pull/39/commits/d3552efd403e2d87407934477eee642836cab3b4 - https://github.com/dilab/resumable.php/
m/dilab/resumable.php/pull/39/commits/d3552efd403e2d87407934477eee642836cab3b4 - https://github.com/dilab/resumable.php/pull/27/commits/3e3c94d0302bb399a7611b4738a5a4dd0832a926 - https://github.com/dilab/resumable.php/pull/39/commits/408f54dff10e48befa44d417933787232a64304b - https://github.com/dilab/resumable.php/commit/3c6dbf5170b01cbb712013c7d0a83f5aac45653b
CVE ID: CVE-2023-52090 State: PUBLISHED Published: 2024-01-23T20:39:38.067Z Last Updated: 2025-06-20T18:54:22.218Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296151?language=en_US - https://www.zerodayi
ulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296151?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-24-026/
CVE ID: CVE-2023-52091 State: PUBLISHED Published: 2024-01-23T20:39:50.527Z Last Updated: 2025-06-20T18:55:01.618Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296151?language=en_US - https://www.ze
ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296151?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-24-027/
CVE ID: CVE-2023-52092 State: PUBLISHED Published: 2024-01-23T20:40:04.083Z Last Updated: 2025-06-20T18:55:46.189Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296151?language=en_US - https://www.zerodayi
ulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296151?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-24-025/
CVE ID: CVE-2023-52093 State: PUBLISHED Published: 2024-01-23T20:40:17.347Z Last Updated: 2024-08-29T19:58:22.570Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296151?language=en_US - https://www.
SA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296151?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-24-029/
CVE ID: CVE-2023-52094 State: PUBLISHED Published: 2024-01-23T20:40:30.228Z Last Updated: 2025-06-20T18:56:24.284Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the updater to delete an arbitrary folder, leading for a local privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.tre
erability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296151?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-24-028/
CVE ID: CVE-2023-52096 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-08-02T22:48:12.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an application receives a StartTransaction Open Charge Point Protocol message with a timestamp parameter of 1000000). This may lead to a SQL exception in applications, and may undermine the integrity of transaction records. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/steve-community/steve/issues/1292 - https://github.com/steve-community/ocpp-jaxb/issues/13 -
ences: - https://github.com/steve-community/steve/issues/1292 - https://github.com/steve-community/ocpp-jaxb/issues/13 - https://github.com/steve-community/ocpp-jaxb/compare/0.0.7...0.0.8
CVE ID: CVE-2023-52097 State: PUBLISHED Published: 2024-02-18T02:54:08.330Z Last Updated: 2025-03-12T19:15:41.930Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-200 Description: Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/2/ - https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405
CVE ID: CVE-2023-52098 State: PUBLISHED Published: 2024-01-16T09:08:10.154Z Last Updated: 2025-06-11T16:55:34.548Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-400 Description: Denial of Service (DoS) vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52099 State: PUBLISHED Published: 2024-01-16T09:13:24.417Z Last Updated: 2025-06-17T15:18:54.024Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of foreground service restrictions being bypassed in the NMS module. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52100 State: PUBLISHED Published: 2024-01-16T09:15:58.942Z Last Updated: 2025-06-02T15:11:43.383Z Vendors: Huawei Products: HarmonyOS Problem Types: Improper Access Control Description: The Celia Keyboard module has a vulnerability in access control. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52101 State: PUBLISHED Published: 2024-01-16T09:17:44.624Z Last Updated: 2025-06-20T17:13:20.758Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Incomplete List of Disallowed Inputs Description: Component exposure vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service availability and integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52102 State: PUBLISHED Published: 2024-01-16T09:18:53.963Z Last Updated: 2025-06-11T16:53:05.284Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper Access Control Description: Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52103 State: PUBLISHED Published: 2024-01-16T09:20:52.658Z Last Updated: 2024-08-29T14:35:16.766Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-120 Description: Buffer overflow vulnerability in the FLP module. Successful exploitation of this vulnerability may cause out-of-bounds read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52104 State: PUBLISHED Published: 2024-01-16T09:23:14.259Z Last Updated: 2025-06-02T15:11:37.540Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper Access Control Description: Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52105 State: PUBLISHED Published: 2024-01-16T09:24:52.058Z Last Updated: 2024-08-27T15:23:13.538Z Vendors: Huawei Products: HarmonyOS Problem Types: Permissions, Privileges, and Access Controls Description: The nearby module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52106 State: PUBLISHED Published: 2024-01-16T09:26:20.061Z Last Updated: 2025-06-17T14:20:29.603Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-264 Description: Vulnerability of permission verification for APIs in the DownloadProviderMain module. Impact: Successful exploitation of this vulnerability will affect integrity and availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/9/ - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/up
tin/2024/9/ - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52107 State: PUBLISHED Published: 2024-01-16T08:25:30.312Z Last Updated: 2024-08-29T14:36:28.905Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-269 Description: Vulnerability of permissions being not strictly verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52108 State: PUBLISHED Published: 2024-01-16T08:43:08.695Z Last Updated: 2025-06-02T15:11:48.793Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Business Logic Errors Description: Vulnerability of process priorities being raised in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52109 State: PUBLISHED Published: 2024-01-16T07:53:43.467Z Last Updated: 2025-06-02T15:12:07.159Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-345 Description: Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52110 State: PUBLISHED Published: 2024-01-16T07:54:39.422Z Last Updated: 2025-06-20T17:18:42.847Z Vendors: Huawei Products: HarmonyOS Problem Types: Improper Handling of Length Parameter Inconsistency Description: The sensor module has an out-of-bounds access vulnerability.Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52111 State: PUBLISHED Published: 2024-01-16T07:55:41.863Z Last Updated: 2025-06-11T16:53:54.174Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-287 Description: Authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52112 State: PUBLISHED Published: 2024-01-16T07:57:06.023Z Last Updated: 2025-06-20T17:19:28.707Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Unauthorized file access vulnerability in the wallpaper service module. Successful exploitation of this vulnerability may cause features to perform abnormally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52113 State: PUBLISHED Published: 2024-01-16T07:58:43.439Z Last Updated: 2025-06-20T17:20:27.978Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Uncaught Exception Description: launchAnyWhere vulnerability in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52114 State: PUBLISHED Published: 2024-01-16T08:21:37.633Z Last Updated: 2024-08-27T15:27:35.761Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Data confidentiality vulnerability in the ScreenReader module. Successful exploitation of this vulnerability may affect service integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52115 State: PUBLISHED Published: 2024-01-16T08:22:31.324Z Last Updated: 2025-06-13T16:10:42.713Z Vendors: Huawei Products: HarmonyOS Problem Types: CWE-416 Description: The iaware module has a Use-After-Free (UAF) vulnerability. Successful exploitation of this vulnerability may affect the system functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52116 State: PUBLISHED Published: 2024-01-16T08:24:07.748Z Last Updated: 2025-06-02T15:11:54.209Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-269 Description: Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-52117 State: PUBLISHED Published: 2024-06-12T08:44:06.317Z Last Updated: 2024-08-02T22:48:12.469Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Metagauss Products: ProfileGrid Problem Types: CWE-862 Description: Missing Authorization vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid: from n/a through 5.6.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/profilegrid-user-profiles-groups-and-communities/wordpress-profilegrid-plugin-5-6-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-52118 State: PUBLISHED Published: 2024-02-01T10:08:07.291Z Last Updated: 2024-08-02T22:48:12.461Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Event Manager Products: WP User Profile Avatar Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Event Manager WP User Profile Avatar allows Stored XSS.This issue affects WP User Profile Avatar: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-user-profile-avatar/wordpress-wp-user-profile-avatar-p
r: References: - https://patchstack.com/database/vulnerability/wp-user-profile-avatar/wordpress-wp-user-profile-avatar-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-52119 State: PUBLISHED Published: 2024-01-05T09:28:10.115Z Last Updated: 2025-05-23T16:03:25.681Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Icegram Products: Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Icegram Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building.This issue affects Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building: from n/a through 3.1.18. Additional Analyst Notes: - CVE Program Container: - CISA AD
A, Optins and Email List Building: from n/a through 3.1.18. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/icegram/wordpress-icegram-engage-plugin-3-1-18-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-52120 State: PUBLISHED Published: 2024-01-05T09:25:36.560Z Last Updated: 2024-09-04T19:54:19.207Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Basix Products: NEX-Forms – Ultimate Form Builder – Contact forms and much more Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Basix NEX-Forms – Ultimate Form Builder – Contact forms and much more.This issue affects NEX-Forms – Ultimate Form Builder – Contact forms and much more: from n/a through 8.5.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/nex-forms-express-wp-f
m Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/nex-forms-express-wp-form-builder/wordpress-nex-forms-plugin-8-5-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-52121 State: PUBLISHED Published: 2024-01-05T09:22:33.176Z Last Updated: 2025-05-23T16:03:32.096Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: NitroPack Inc. Products: NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in NitroPack Inc. NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images.This issue affects NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images: from n/a through 1.10.2. Additional Analyst Notes: -
ion for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images: from n/a through 1.10.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/nitropack/wordpress-nitropack-plugin-1-10-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve