Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ed remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227795. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227795 - https://vuldb.com/?ctiid.227795 - https://github.com/ShellHunTerAndyLABA/bug_report/blob/main/SQLi-1.md
CVE ID: CVE-2023-2452 State: PUBLISHED Published: 2023-06-09T05:33:15.448Z Last Updated: 2024-12-20T23:44:43.302Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: mihail-barinov Products: Advanced Woo Search Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Advanced Woo Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.77 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts
it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4278e9d7-aa1e-47a5-b715-09dae5156303?source=cve - https://plugins.trac.wordpress.org/browser/advanced-woo-search/tags/2.77/includes/admin/class-aws-admin-options.php#L473 - https://plugins.trac.wordpress.org/browser/advanced-woo-search/tags/2.77/includes/admi
lass-aws-admin-options.php#L473 - https://plugins.trac.wordpress.org/browser/advanced-woo-search/tags/2.77/includes/admin/class-aws-admin-options.php#L481
CVE ID: CVE-2023-2453 State: PUBLISHED Published: 2023-09-05T14:39:10.011Z Last Updated: 2024-09-27T13:52:08.560Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: PHPFusion Products: PHPFusion Problem Types: CWE-829 Description: There is insufficient sanitization of tainted file names that are directly concatenated with a path that is subsequently passed to a ‘require_once’ statement. This allows arbitrary files with the ‘.php’ extension for which the absolute path is known to be included and executed. There are no known means in PHPFusion through which an attacker can upload and target a ‘.php’ file payload. Additional Analyst Notes: - CVE Program Container: -
ough which an attacker can upload and target a ‘.php’ file payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synopsys.com/blogs/software-security/cyrc-vulnerability-advisory-cve-2023-2453/
CVE ID: CVE-2023-2454 State: PUBLISHED Published: 2023-06-09T00:00:00.000Z Last Updated: 2025-06-04T03:56:06.743Z Vendors: n/a Products: postgresql Problem Types: CWE-20 Description: schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-2454 - https://www.postgresql.org/support/security/CVE-2023-2454/ - https://security.netapp.com/advisory/ntap-20230706-0006/
CVE ID: CVE-2023-2455 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T17:13:23.297Z Vendors: n/a Products: postgresql Problem Types: CWE-20 Description: Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and a given query is planned under one role and then executed under other roles. This scenario can happen under security definer functions or when a common user and query is planned initially and then re-used across multiple SET ROLEs. Applying an incorrect policy may permit a user to complete otherwise-forbidden reads and modifications. This a
ET ROLEs. Applying an incorrect policy may permit a user to complete otherwise-forbidden reads and modifications. This affects only databases that have used CREATE POLICY to define a row security policy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-2455 - https://www.postgresql.org/support/security/CVE-2023-2455/ - https://security.netapp.com/advisory/ntap-20230706-0006/
CVE ID: CVE-2023-2457 State: PUBLISHED Published: 2023-05-12T17:36:05.679Z Last Updated: 2024-10-03T19:20:13.954Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Out of bounds write in ChromeOS Audio Server in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker to potentially exploit heap corruption via crafted audio file. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-chromeos.html - https://crbug.com/1420790
CVE ID: CVE-2023-2458 State: PUBLISHED Published: 2023-05-12T17:36:05.999Z Last Updated: 2024-10-03T19:47:18.145Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in ChromeOS Camera in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via UI interaction. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-chromeos.html - https://crbug.com/1430692
CVE ID: CVE-2023-2459 State: PUBLISHED Published: 2023-05-02T23:47:57.424Z Last Updated: 2025-02-13T16:44:20.329Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop.html - https://crbug.com/1423304 - https://www.debian.org/security/2023/dsa-5398 - https://lists.fedoraproject.org/archives/
- https://crbug.com/1423304 - https://www.debian.org/security/2023/dsa-5398 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6P5RJ6UD37IPBWU3GPQNMIUFVOVCGSLY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z4JI552XDFD6DYFU6WNCRBCAXWOFOOSF/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3V6GPGMY6ZWVWPECMQGGOKQVATXJ5BA/ - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-2460 State: PUBLISHED Published: 2023-05-02T23:47:57.740Z Last Updated: 2025-02-13T16:44:20.954Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to bypass file access checks via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop.html - https://crbug.com/1419732 - https://www.deb
romereleases.googleblog.com/2023/05/stable-channel-update-for-desktop.html - https://crbug.com/1419732 - https://www.debian.org/security/2023/dsa-5398 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6P5RJ6UD37IPBWU3GPQNMIUFVOVCGSLY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z4JI552XDFD6DYFU6WNCRBCAXWOFOOSF/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3V6GPGMY6ZWVWPECMQGGOKQVATXJ5BA/ - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-2461 State: PUBLISHED Published: 2023-05-02T23:47:58.104Z Last Updated: 2025-02-13T16:44:21.454Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop.html - https://crbug.com/1350561 - https://www.debian.org/security/2023/d
.com/2023/05/stable-channel-update-for-desktop.html - https://crbug.com/1350561 - https://www.debian.org/security/2023/dsa-5398 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6P5RJ6UD37IPBWU3GPQNMIUFVOVCGSLY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z4JI552XDFD6DYFU6WNCRBCAXWOFOOSF/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3V6GPGMY6ZWVWPECMQGGOKQVATXJ5BA/ - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-2462 State: PUBLISHED Published: 2023-05-02T23:47:58.271Z Last Updated: 2025-02-13T16:44:22.071Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop.html - https://crbug.com/1375133 - https://www.debian.org/security/2023/dsa-5398 - https://lists.fedoraproject.org/archives/list
ttps://crbug.com/1375133 - https://www.debian.org/security/2023/dsa-5398 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6P5RJ6UD37IPBWU3GPQNMIUFVOVCGSLY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z4JI552XDFD6DYFU6WNCRBCAXWOFOOSF/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3V6GPGMY6ZWVWPECMQGGOKQVATXJ5BA/ - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-2463 State: PUBLISHED Published: 2023-05-02T23:47:58.576Z Last Updated: 2025-02-13T16:44:22.619Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop.html - https://crbug.com/1406120 - https://www.debian.org/security/2023/dsa-5398 - https://l
-channel-update-for-desktop.html - https://crbug.com/1406120 - https://www.debian.org/security/2023/dsa-5398 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6P5RJ6UD37IPBWU3GPQNMIUFVOVCGSLY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z4JI552XDFD6DYFU6WNCRBCAXWOFOOSF/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3V6GPGMY6ZWVWPECMQGGOKQVATXJ5BA/ - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-2464 State: PUBLISHED Published: 2023-05-02T23:47:58.918Z Last Updated: 2025-02-13T16:44:23.139Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to perform an origin spoof in the security UI via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop.html - https://crbug.com/1418549 - https://www.debian.o
eleases.googleblog.com/2023/05/stable-channel-update-for-desktop.html - https://crbug.com/1418549 - https://www.debian.org/security/2023/dsa-5398 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6P5RJ6UD37IPBWU3GPQNMIUFVOVCGSLY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z4JI552XDFD6DYFU6WNCRBCAXWOFOOSF/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3V6GPGMY6ZWVWPECMQGGOKQVATXJ5BA/ - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-2465 State: PUBLISHED Published: 2023-05-02T23:47:59.069Z Last Updated: 2025-02-13T16:44:23.655Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in CORS in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop.html - https://crbug.com/1399862 - https://www.debian.org/security/2023/dsa-5398 - https://lists.fedoraproject.org/archives/list/packag
crbug.com/1399862 - https://www.debian.org/security/2023/dsa-5398 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6P5RJ6UD37IPBWU3GPQNMIUFVOVCGSLY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z4JI552XDFD6DYFU6WNCRBCAXWOFOOSF/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3V6GPGMY6ZWVWPECMQGGOKQVATXJ5BA/ - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-2466 State: PUBLISHED Published: 2023-05-02T23:47:59.220Z Last Updated: 2025-02-13T16:44:24.193Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop.html - https://crbug.com/1385714 - https://www.debian.org/security/2023/dsa-5398 - https://lists.fedoraproject.org/archi
html - https://crbug.com/1385714 - https://www.debian.org/security/2023/dsa-5398 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6P5RJ6UD37IPBWU3GPQNMIUFVOVCGSLY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z4JI552XDFD6DYFU6WNCRBCAXWOFOOSF/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3V6GPGMY6ZWVWPECMQGGOKQVATXJ5BA/ - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-2467 State: PUBLISHED Published: 2023-05-02T23:47:59.444Z Last Updated: 2025-02-13T16:44:24.742Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Prompts in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to bypass permissions restrictions via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop.html - https://crbug.com/1413586 - https://www.debian.org/security/2023/dsa-5398 - https://lists.fedoraproject.org/
ktop.html - https://crbug.com/1413586 - https://www.debian.org/security/2023/dsa-5398 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6P5RJ6UD37IPBWU3GPQNMIUFVOVCGSLY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z4JI552XDFD6DYFU6WNCRBCAXWOFOOSF/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3V6GPGMY6ZWVWPECMQGGOKQVATXJ5BA/ - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-2468 State: PUBLISHED Published: 2023-05-02T23:47:59.692Z Last Updated: 2025-02-13T16:44:25.291Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the renderer process to obfuscate the security UI via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop.html - https://crbug.com/1416380 - https://www.debian.org/security/2023/dsa-5398 -
/05/stable-channel-update-for-desktop.html - https://crbug.com/1416380 - https://www.debian.org/security/2023/dsa-5398 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6P5RJ6UD37IPBWU3GPQNMIUFVOVCGSLY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z4JI552XDFD6DYFU6WNCRBCAXWOFOOSF/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3V6GPGMY6ZWVWPECMQGGOKQVATXJ5BA/ - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-2469 State: REJECTED Published: N/A Last Updated: 2023-05-17T07:35:35.479Z Description: No description available.
CVE ID: CVE-2023-2470 State: PUBLISHED Published: 2023-05-30T07:49:09.868Z Last Updated: 2025-01-10T17:37:01.076Z Vendors: Unknown Products: Add to Feedly Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Add to Feedly WordPress plugin through 1.2.11 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/de0adf26-8a0b-4b90-96d5-4bec6e770e04
CVE ID: CVE-2023-2472 State: PUBLISHED Published: 2023-06-05T13:39:02.869Z Last Updated: 2025-01-08T15:37:01.843Z Vendors: Unknown Products: Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.61 does not sanitise and escape a parameter before outputting it back in the admin dashboard when the WPML plugin is also active and configured, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b0e7665a-c8c3-4132-b8d7-8677a90118df
CVE ID: CVE-2023-2473 State: PUBLISHED Published: 2023-05-02T12:00:09.669Z Last Updated: 2025-01-30T14:16:41.817Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Dreamer CMS Problem Types: CWE-407 Description: A vulnerability was found in Dreamer CMS up to 4.1.3. It has been declared as problematic. This vulnerability affects the function updatePwd of the file UserController.java of the component Password Hash Calculation. The manipulation leads to inefficient algorithmic complexity. The attack can be initiated remotely. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-227860. Additional Analyst N
recommended to upgrade the affected component. The identifier of this vulnerability is VDB-227860. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.227860 - https://vuldb.com/?ctiid.227860 - https://gitee.com/isoftforce/dreamer_cms/issues/I6WHO7
CVE ID: CVE-2023-2474 State: PUBLISHED Published: 2023-05-02T12:31:03.658Z Last Updated: 2024-08-02T06:26:08.712Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: n/a Products: Rebuild Problem Types: CWE-352 Description: A vulnerability has been found in Rebuild 3.2 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. VDB-227866 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.c
ntifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227866 - https://vuldb.com/?ctiid.227866 - https://gitee.com/getrebuild/rebuild/issues/I6W4M2
CVE ID: CVE-2023-2475 State: PUBLISHED Published: 2023-05-02T13:00:04.852Z Last Updated: 2025-01-30T16:16:35.444Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Dromara Products: J2eeFAST Problem Types: CWE-79 Description: A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic. This issue affects some unknown processing of the component System Message Handler. The manipulation of the argument 主题 leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named 7a9e1a00e3329fdc0ae05f7a8257cce77037134d. It is recommended to apply a patch to fix this issue. The associ
atch is named 7a9e1a00e3329fdc0ae05f7a8257cce77037134d. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-227867. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.227867 - https://vuldb.com/?ctiid.227867 - https://gitee.com/dromara/J2EEFAST/issues/I6W390 - https://gitee.com/dromara/J2EEFAST/commit/7a9e1a00e3329fdc0ae05f7a8257cce77037134d
CVE ID: CVE-2023-2476 State: PUBLISHED Published: 2023-05-02T13:31:03.477Z Last Updated: 2024-08-02T06:26:08.853Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Dromara Products: J2eeFAST Problem Types: CWE-79 Description: A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument 系统工具/公告管理 leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 7a9e1a00e3329fdc0ae05f7a8257cce77037134d. It is recommended to apply a patch to fix this
used. The name of the patch is 7a9e1a00e3329fdc0ae05f7a8257cce77037134d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-227868. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227868 - https://vuldb.com/?ctiid.227868 - https://gitee.com/dromara/J2EEFAST/issues/I6W380 - https://gitee.com/dromara/J2EEFAST/commit/7a9e1a00e3329fdc0ae05f7a8257cce77037134d