Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-4201 State: PUBLISHED Published: 2023-08-07T19:31:03.649Z Last Updated: 2024-08-02T07:17:12.054Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Inventory Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file ex_catagory_data.php. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-236291. Additional Analyst
closed to the public and may be used. The associated identifier of this vulnerability is VDB-236291. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236291 - https://vuldb.com/?ctiid.236291 - https://github.com/Yesec/Inventory-Management-System/blob/main/SQL%20Injection%20in%20ex_catagory_data.php/vuln.md
CVE ID: CVE-2023-4202 State: PUBLISHED Published: 2023-08-08T10:24:40.086Z Last Updated: 2025-02-13T17:09:15.500Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Advantech Products: EKI-1524, EKI-1522, EKI-1521 Problem Types: CWE-79 Description: Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the device name field of the web-interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyberdanube.com/en/en-st-polten-uas-multiple-vulnerabilities-in-advantech-eki-15xx-series/ - http://seclists
: - https://cyberdanube.com/en/en-st-polten-uas-multiple-vulnerabilities-in-advantech-eki-15xx-series/ - http://seclists.org/fulldisclosure/2023/Aug/13 - http://packetstormsecurity.com/files/174153/Advantech-EKI-1524-CE-EKI-1522-EKI-1521-Cross-Site-Scripting.html
CVE ID: CVE-2023-4203 State: PUBLISHED Published: 2023-08-08T10:29:21.163Z Last Updated: 2025-02-13T17:09:16.094Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Advantech Products: EKI-1524, EKI-1522, EKI-1521 Problem Types: CWE-79 Description: Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the ping tool of the web-interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyberdanube.com/en/en-st-polten-uas-multiple-vulnerabilities-in-advantech-eki-15xx-series/ - http://seclists.org/ful
s://cyberdanube.com/en/en-st-polten-uas-multiple-vulnerabilities-in-advantech-eki-15xx-series/ - http://seclists.org/fulldisclosure/2023/Aug/13 - http://packetstormsecurity.com/files/174153/Advantech-EKI-1524-CE-EKI-1522-EKI-1521-Cross-Site-Scripting.html
CVE ID: CVE-2023-4204 State: PUBLISHED Published: 2023-08-16T15:12:01.169Z Last Updated: 2024-10-01T18:25:33.218Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Moxa Products: NPort IAW5000A-I/O Series Problem Types: CWE-798 Description: NPort IAW5000A-I/O Series firmware version v2.2 and prior is affected by a hardcoded credential vulnerabilitywhich poses a potential risk to the security and integrity of the affected device. This vulnerability is attributed to the presence of a hardcoded key, which could potentially facilitate firmware manipulation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.moxa.c
nipulation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230304-nport-iaw5000a-i-o-series-hardcoded-credential-vulnerability
CVE ID: CVE-2023-4205 State: REJECTED Published: 2023-08-07T13:19:44.820Z Last Updated: 2023-08-10T18:19:42.729Z Description: No description available.
CVE ID: CVE-2023-4206 State: PUBLISHED Published: 2023-09-06T13:53:05.197Z Last Updated: 2025-02-13T17:09:16.643Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: Kernel Problem Types: CWE-416 Description: A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation. When route4_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of th
to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free. We recommend upgrading past commit b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8 - https://kernel.dance/b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8 - https://www.debian.org/security/2023/dsa-5492 - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
CVE ID: CVE-2023-4207 State: PUBLISHED Published: 2023-09-06T13:53:22.834Z Last Updated: 2025-02-13T17:09:17.204Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: Kernel Problem Types: CWE-416 Description: A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. When fw_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still
ass, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free. We recommend upgrading past commit 76e42ae831991c828cffa8c37736ebfb831ad5ec. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=76e42ae831991c828cffa8c37736ebfb831ad5ec - https://kernel.dance/76e42ae831991c828cffa8c37736ebfb831ad5ec - https://www.debian.org/security/2023/dsa-5492 - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
CVE ID: CVE-2023-4208 State: PUBLISHED Published: 2023-09-06T13:53:23.843Z Last Updated: 2025-02-13T17:09:17.757Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: Kernel Problem Types: CWE-416 Description: A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the sti
class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free. We recommend upgrading past commit 3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81 - https://kernel.dance/3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81 - https://www.debian.org/security/2023/dsa-5492 - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
CVE ID: CVE-2023-4209 State: PUBLISHED Published: 2023-08-30T14:22:05.165Z Last Updated: 2025-04-23T16:18:32.799Z Vendors: Unknown Products: POEditor Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The POEditor WordPress plugin before 0.9.8 does not have CSRF checks in various places, which could allow attackers to make logged in admins perform unwanted actions, such as reset the plugin's settings and update its API key via CSRF attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b2c6fa7d-1b0f-444b-8ca5-8c1c06cea1d9
CVE ID: CVE-2023-4210 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:06:20.764Z Description: No description available.
CVE ID: CVE-2023-4211 State: PUBLISHED Published: 2023-10-01T17:00:27.113Z Last Updated: 2025-10-21T23:05:36.029Z Vendors: Arm Ltd Products: Midgard GPU Kernel Driver, Bifrost GPU Kernel Driver, Valhall GPU Kernel Driver, Arm 5th Gen GPU Architecture Kernel Driver Problem Types: CWE-416 Description: A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
CVE ID: CVE-2023-4212 State: PUBLISHED Published: 2023-08-22T17:34:12.059Z Last Updated: 2025-01-16T21:30:56.530Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ​Trane Technologies, Trane Technologies Products: XL824 Thermostat, XL850 Thermostat, XL1050 Thermostat, Pivot Thermostat Problem Types: CWE-74 Description: ​A command injection vulnerability exists in Trane XL824, XL850, XL1050, and Pivot thermostats allowing an attacker to execute arbitrary commands as root using a specially crafted filename. The vulnerability requires physical access to the device via a USB stick. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
ccess to the device via a USB stick. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.cisa.gov/news-events/ics-advisories/icsa-23-234-02 - https://hub.tranetechnologies.com/docs/DOC-216377 - https://www.trane.com/commercial/north-america/us/en/contact-us/locate-sales-offices.html
CVE ID: CVE-2023-4213 State: PUBLISHED Published: 2023-09-13T02:54:11.287Z Last Updated: 2025-02-05T19:29:36.660Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: mpvanwinkle77 Products: Simplr Registration Form Plus+ Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The Simplr Registration Form Plus+ plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 2.4.5. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for authenticated attackers with subscriber-level permissio
rization and access system resources. This makes it possible for authenticated attackers with subscriber-level permissions or above to change user passwords and potentially take over administrator accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6ddf0452-3afe-4ada-bccc-30c818968a81?source=cve - https://plugins.trac.wordpress.org/browser/simplr-registration-form/trunk/lib/profile.php#L148
CVE ID: CVE-2023-4214 State: PUBLISHED Published: 2023-11-18T01:54:34.583Z Last Updated: 2024-11-19T18:48:41.682Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: scottopolis Products: AppPresser – Mobile App Framework Problem Types: CWE-620 Unverified Password Change Description: The AppPresser plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 4.2.5. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulner
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4c44c36a-c4c7-49c2-b750-1589e7840dde?source=cve - https://plugins.trac.wordpress.org/browser/apppresser/trunk/inc/AppPresser_WPAPI_Mods.php#L567 - https://plugins.trac.wordpress.org/changeset/2997160/apppresser - https://plugins.trac.wordpress.org/browser/apppresser/trunk/inc/AppPresser_API_Limit.php?rev=2997182
CVE ID: CVE-2023-4215 State: PUBLISHED Published: 2023-10-16T23:40:37.761Z Last Updated: 2025-01-16T21:29:28.472Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Advantech Products: WebAccess Problem Types: CWE-1295 Description: Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an unauthorized actor vulnerability that could leak user credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-285-15
CVE ID: CVE-2023-4216 State: PUBLISHED Published: 2023-09-04T11:27:03.270Z Last Updated: 2025-04-23T16:17:49.990Z Vendors: Unknown Products: Orders Tracking for WooCommerce Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The Orders Tracking for WooCommerce WordPress plugin before 1.2.6 doesn't validate the file_url parameter when importing a CSV file, allowing high privilege users with the manage_woocommerce capability to access any file on the web server via a Traversal attack. The content retrieved is however limited to the first line of the file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
er limited to the first line of the file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8189afc4-17b3-4696-89e1-731011cb9e2b
CVE ID: CVE-2023-4217 State: PUBLISHED Published: 2023-11-02T16:04:29.681Z Last Updated: 2024-09-05T14:35:58.070Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Moxa Products: PT-G503 Series Problem Types: CWE-1004 Description: A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advi
Program Container: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230203-pt-g503-series-multiple-vulnerabilities
CVE ID: CVE-2023-4218 State: PUBLISHED Published: 2023-11-09T08:26:51.567Z Last Updated: 2024-09-03T19:26:14.225Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Eclipse Foundation Products: Eclipse IDE, org.eclipse.core.runtime, org.eclipse.pde Problem Types: CWE-611 Description: In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.eclips
patch). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/8 - https://github.com/eclipse-pde/eclipse.pde/pull/632/ - https://github.com/eclipse-pde/eclipse.pde/pull/667/ - https://github.com/eclipse-platform/eclipse.platform/pull/761 - https://github.com/eclipse-platform/eclipse.platform.releng.buildtools/pull/45 - https://github.com/eclipse-platform/eclipse.platform.ui/commit/f243cf0a28785b89b7c50bf4e1cce48a917d89bd - https://github.com/eclipse-jdt/eclipse.jdt.ui/commit/13675b1f8a74f47de4da89ed0ded6af7c21dfbec - https://github.com/eclipse-jdt/eclipse.jdt.core/commit/38dd2a878f45cdb3d8
mit/13675b1f8a74f47de4da89ed0ded6af7c21dfbec - https://github.com/eclipse-jdt/eclipse.jdt.core/commit/38dd2a878f45cdb3d8d52090f1d6d1b532fd4c4d - https://github.com/eclipse-emf/org.eclipse.emf/issues/10 - https://github.com/eclipse-platform/eclipse.platform.swt/commit/bf71db5ddcb967c0863dad4745367b54f49e06ba - https://github.com/eclipse-cdt/cdt/commit/c7169b3186d2fef20f97467c3e2ad78e2943ed1b
CVE ID: CVE-2023-4219 State: PUBLISHED Published: 2023-08-08T13:00:06.214Z Last Updated: 2024-08-02T07:17:12.162Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Doctors Appointment System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument useremail leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-236365 was assigned to this vulnerability. Additional Analyst
isclosed to the public and may be used. The identifier VDB-236365 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236365 - https://vuldb.com/?ctiid.236365 - https://github.com/Yesec/-Doctor-s-Appointment-System/blob/main/SQL%20Injection%20in%20login.php/vuln.md
CVE ID: CVE-2023-4220 State: PUBLISHED Published: 2023-11-28T07:11:47.830Z Last Updated: 2024-08-02T07:17:12.155Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Chamilo Products: Chamilo Problem Types: CWE-434 Description: Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell. Additional Analyst Notes: - CVE Program Container: References: - https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-130-2023-09-04-Criti
Container: References: - https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-130-2023-09-04-Critical-impact-High-risk-Unauthenticated-users-may-gain-XSS-and-unauthenticated-RCE-CVE-2023-4220 - https://starlabs.sg/advisories/23/23-4220 - https://github.com/chamilo/chamilo-lms/commit/3b487a55076fb06f96809b790a35dcdd42f8ec49
CVE ID: CVE-2023-4221 State: PUBLISHED Published: 2023-11-28T07:13:51.191Z Last Updated: 2024-08-02T07:17:12.372Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Chamilo Products: Chamilo Problem Types: CWE-78 Description: Command injection in `main/lp/openoffice_presentation.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters. Additional Analyst Notes: - CVE Program Container: References: - https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-128-2023-09-04-Critical-impact-Moderate-risk-Authenticated-users-may-gain-unauthen
chamilo-18/wiki/security_issues#Issue-128-2023-09-04-Critical-impact-Moderate-risk-Authenticated-users-may-gain-unauthenticated-RCE-CVE-2023-4221CVE-2023-4222 - https://starlabs.sg/advisories/23/23-4221 - https://github.com/chamilo/chamilo-lms/commit/ed72914608d2a07ee2eb587c1a654480d08201db - https://github.com/chamilo/chamilo-lms/commit/841a07396fed0ef27c5db13a1b700eac02754fc7
CVE ID: CVE-2023-4222 State: PUBLISHED Published: 2023-11-28T07:15:36.819Z Last Updated: 2024-08-02T07:17:12.194Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Chamilo Products: Chamilo Problem Types: CWE-78 Description: Command injection in `main/lp/openoffice_text_document.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters. Additional Analyst Notes: - CVE Program Container: References: - https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-128-2023-09-04-Critical-impact-Moderate-risk-Authenticated-users-may-gain-unauthe
/chamilo-18/wiki/security_issues#Issue-128-2023-09-04-Critical-impact-Moderate-risk-Authenticated-users-may-gain-unauthenticated-RCE-CVE-2023-4221CVE-2023-4222 - https://starlabs.sg/advisories/23/23-4222 - https://github.com/chamilo/chamilo-lms/commit/ed72914608d2a07ee2eb587c1a654480d08201db - https://github.com/chamilo/chamilo-lms/commit/841a07396fed0ef27c5db13a1b700eac02754fc7
CVE ID: CVE-2023-4223 State: PUBLISHED Published: 2023-11-28T07:18:16.724Z Last Updated: 2024-12-02T19:31:06.802Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Chamilo Products: Chamilo Problem Types: CWE-434 Description: Unrestricted file upload in `/main/inc/ajax/document.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-129-2023-09-04-Critical-impact-Moderate-risk-Authenticated-users-may-gain-unauth
s/chamilo-18/wiki/security_issues#Issue-129-2023-09-04-Critical-impact-Moderate-risk-Authenticated-users-may-gain-unauthenticated-RCE-CVE-2023-4223CVE-2023-4224CVE-2023-4225CVE-2023-4226 - https://starlabs.sg/advisories/23/23-4223 - https://github.com/chamilo/chamilo-lms/commit/6f32625a012d5de2dfe8edbccb4ed14a85e310d4 - https://github.com/chamilo/chamilo-lms/commit/3d74fb7d99bd2e287730552f7a66562417a55047 - https://github.com/chamilo/chamilo-lms/commit/e864127a440c2cab0eb62c113a04e2e904543a1f
CVE ID: CVE-2023-4224 State: PUBLISHED Published: 2023-11-28T07:19:31.720Z Last Updated: 2024-08-02T07:17:12.200Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Chamilo Products: Chamilo Problem Types: CWE-434 Description: Unrestricted file upload in `/main/inc/ajax/dropbox.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files. Additional Analyst Notes: - CVE Program Container: References: - https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-129-2023-09-04-Critical-impact-Moderate-risk-Authenticated-users-may-gain-unauthenticated-RCE-CVE-2023-422
_issues#Issue-129-2023-09-04-Critical-impact-Moderate-risk-Authenticated-users-may-gain-unauthenticated-RCE-CVE-2023-4223CVE-2023-4224CVE-2023-4225CVE-2023-4226 - https://starlabs.sg/advisories/23/23-4224 - https://github.com/chamilo/chamilo-lms/commit/6f32625a012d5de2dfe8edbccb4ed14a85e310d4 - https://github.com/chamilo/chamilo-lms/commit/f3d62b65ad60d68096c2674d5695339f04de0b8a - https://github.com/chamilo/chamilo-lms/commit/e864127a440c2cab0eb62c113a04e2e904543a1f
CVE ID: CVE-2023-4225 State: PUBLISHED Published: 2023-11-28T07:22:04.207Z Last Updated: 2025-06-05T13:54:07.400Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Chamilo Products: Chamilo Problem Types: CWE-434 Description: Unrestricted file upload in `/main/inc/ajax/exercise.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-129-2023-09-04-Critical-impact-Moderate-risk-Authenticated-users-may-gain-unauth