Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e ReactPHP HTTP server to filter out any excessive HTTP request bodies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/reactphp/http/security/advisories/GHSA-95x4-j7vc-h8mf - https://github.com/reactphp/http/commit/9681f764b80c45ebfb5fe2ea7da5bd3babfcdcfd
CVE ID: CVE-2023-26045 State: PUBLISHED Published: 2023-07-24T21:08:47.413Z Last Updated: 2025-02-13T16:44:43.667Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: NodeBB Products: NodeBB Problem Types: CWE-22 Description: NodeBB is Node.js based forum software. Starting in version 2.5.0 and prior to version 2.8.7, due to the use of the object destructuring assignment syntax in the user export code path, combined with a path traversal vulnerability, a specially crafted payload could invoke the user export logic to arbitrarily execute javascript files on the local disk. This issue is patched in version 2.8.7. As a workaround, site maintainers can cherry pick
ript files on the local disk. This issue is patched in version 2.8.7. As a workaround, site maintainers can cherry pick the fix into their codebase to patch the exploit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/NodeBB/NodeBB/security/advisories/GHSA-vh2g-6c4x-5hmp - https://github.com/NodeBB/NodeBB/commit/ec58700f6dff8e5b4af1544f6205ec362b593092 - https://security.netapp.com/advisory/ntap-20230831-0004/
CVE ID: CVE-2023-26046 State: PUBLISHED Published: 2023-03-02T00:14:57.196Z Last Updated: 2025-03-05T21:30:47.218Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: kitabisa Products: teler-waf Problem Types: CWE-80 Description: teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version 0.1.1 is vulnerable to bypassing common web attack rules when a specific HTML entities payload is used. This vulnerability allows an attacker to execute arbitrary JavaScript code on the victim's browser and compromise the security of the web application. The vulnerability exists due to teler-waf fa
on the victim's browser and compromise the security of the web application. The vulnerability exists due to teler-waf failure to properly sanitize and filter HTML entities in user input. An attacker can exploit this vulnerability to bypass common web attack threat rules in teler-waf and launch cross-site scripting (XSS) attacks. The attacker can execute arbitrary JavaScript code on the victim's browser and steal sensitive information, such as login credentials and session tokens, or take control of the victim's browser and perform malicious actions. This issue has been fixed in version 0.1.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gi
d in version 0.1.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kitabisa/teler-waf/security/advisories/GHSA-9f95-hhg4-pg4f - https://github.com/kitabisa/teler-waf/commit/d1d49cfddfa3ec2adad962870f14b85cd1aaf739 - https://github.com/kitabisa/teler-waf/releases/tag/v0.1.1
CVE ID: CVE-2023-26047 State: PUBLISHED Published: 2023-03-03T22:44:16.538Z Last Updated: 2025-02-25T15:02:13.606Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: kitabisa Products: teler-waf Problem Types: CWE-80, CWE-692, CWE-79 Description: teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version v0.2.0 is vulnerable to a bypass attack when a specific case-sensitive hex entities payload with special characters such as CR/LF and horizontal tab is used. This vulnerability allows an attacker to execute arbitrary JavaScript code on the victim's browser and compromise the securi
vulnerability allows an attacker to execute arbitrary JavaScript code on the victim's browser and compromise the security of the web application. An attacker can exploit this vulnerability to bypass common web attack threat rules in teler-waf and launch cross-site scripting (XSS) attacks. The attacker can execute arbitrary JavaScript code on the victim's browser and steal sensitive information, such as login credentials and session tokens, or take control of the victim's browser and perform malicious actions. This issue has been patched in version 0.2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kitabisa/teler-waf/security/a
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kitabisa/teler-waf/security/advisories/GHSA-p2pf-g8cq-3gq5 - https://github.com/dwisiswant0/cwa-filter-rules/commit/d818d1645832d1a02cd210c7680e692d2bf4313b - https://github.com/kitabisa/teler-waf/releases/tag/v0.2.0
CVE ID: CVE-2023-26048 State: PUBLISHED Published: 2023-04-18T20:30:20.420Z Last Updated: 2025-02-13T16:44:44.177Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: eclipse Products: jetty.project Problem Types: CWE-400 Description: Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` when the client sends a multipart request with a part that has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0`
has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0` which should stream the whole part content to disk. An attacker client may send a large multipart request and cause the server to throw `OutOfMemoryError`. However, the server may be able to recover after the `OutOfMemoryError` and continue its service -- although it may take some time. This issue has been patched in versions 9.4.51, 10.0.14, and 11.0.14. Users are advised to upgrade. Users unable to upgrade may set the multipart parameter `maxRequestSize` which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory)
` which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eclipse/jetty.project/security/advisories/GHSA-qw69-rqj8-6qw8 - https://github.com/eclipse/jetty.project/issues/9076 - https://github.com/eclipse/jetty.project/pull/9344 - https://github.com/eclipse/jetty.project/pull/9345 - https://github.com/jakartaee/servlet/blob/6.0.0/spec/src/main/asciidoc/servlet-spec-body.adoc#32-file-upload - https://security.netapp.com/advisory/ntap-20230526-0001/ - https://www.debian.org/security/2023/dsa-5507 - https://lists.debian.org/d
ity.netapp.com/advisory/ntap-20230526-0001/ - https://www.debian.org/security/2023/dsa-5507 - https://lists.debian.org/debian-lts-announce/2023/09/msg00039.html
CVE ID: CVE-2023-26049 State: PUBLISHED Published: 2023-04-18T20:35:36.506Z Last Updated: 2025-02-13T16:44:44.710Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: eclipse Products: jetty.project Problem Types: CWE-200 Description: Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header
tinue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE="b; JSESSIONID=1337; c=d"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be see
n an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eclipse/jetty.project/security/advisories/GHSA-p26g-97m4-6q7c - https://github.com/eclipse/jetty.project/pull/9339 - https://github.com/eclipse/jetty.project/pull/9352 - https://www.rfc-editor.org/rfc/rfc2965 - https://www.rfc-editor.org/rfc/rfc6265 - https://security.netapp.com/advis
52 - https://www.rfc-editor.org/rfc/rfc2965 - https://www.rfc-editor.org/rfc/rfc6265 - https://security.netapp.com/advisory/ntap-20230526-0001/ - https://www.debian.org/security/2023/dsa-5507 - https://lists.debian.org/debian-lts-announce/2023/09/msg00039.html
CVE ID: CVE-2023-26051 State: PUBLISHED Published: 2023-03-02T18:29:48.611Z Last Updated: 2025-03-05T20:41:26.937Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: saleor Products: saleor Problem Types: CWE-209 Description: Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like user email address in staff-authenticated requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/saleor/saleor/security/advis
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/saleor/saleor/security/advisories/GHSA-r8qr-wwg3-2r85 - https://github.com/saleor/saleor/commit/31bce881ccccf0d79a9b14ecb6ca3138d1edeec1 - https://github.com/saleor/saleor/releases/tag/3.1.48 - https://github.com/saleor/saleor/releases/tag/3.10.14 - https://github.com/saleor/saleor/releases/tag/3.11.12 - https://github.com/saleor/saleor/releases/tag/3.7.59 - https://github.com/saleor/saleor/releases/tag/3.8.30 - https://github.com/saleor/saleor/releases/tag/3.9.27
CVE ID: CVE-2023-26052 State: PUBLISHED Published: 2023-03-02T18:54:33.030Z Last Updated: 2025-03-05T16:10:59.226Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: saleor Products: saleor Problem Types: CWE-209 Description: Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like infrastructure details in unauthenticated requests. This issue has been patched in versions 3.1.48, 3.7.59, 3.8.0, 3.9.27, 3.10.14 and 3.11.12. Additional Analyst Notes: - CVE Program Containe
patched in versions 3.1.48, 3.7.59, 3.8.0, 3.9.27, 3.10.14 and 3.11.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/saleor/saleor/security/advisories/GHSA-3hvj-3cg9-v242 - https://github.com/saleor/saleor/releases/tag/3.1.48 - https://github.com/saleor/saleor/releases/tag/3.10.14 - https://github.com/saleor/saleor/releases/tag/3.11.12 - https://github.com/saleor/saleor/releases/tag/3.7.59 - https://github.com/saleor/saleor/releases/tag/3.8.30 - https://github.com/saleor/saleor/releases/tag/3.9.27
CVE ID: CVE-2023-26053 State: PUBLISHED Published: 2023-03-02T03:11:31.488Z Last Updated: 2025-03-05T21:15:36.343Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: gradle Products: gradle Problem Types: CWE-829 Description: Gradle is a build tool with a focus on build automation and support for multi-language development. This is a collision attack on long IDs (64bits) for PGP keys. Users of dependency verification in Gradle are vulnerable if they use long IDs for PGP keys in a `trusted-key` or `pgp` element in their dependency verification metadata file. The fix is to fail dependency verification if anything but a fingerprint is used in a trust element in de
metadata file. The fix is to fail dependency verification if anything but a fingerprint is used in a trust element in dependency verification metadata. The problem is fixed in Gradle 8.0 and above. The problem is also patched in Gradle 6.9.4 and 7.6.1. As a workaround, use only full fingerprint IDs for `trusted-key` or `pgp` element in the metadata is a protection against this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gradle/gradle/security/advisories/GHSA-c724-3xg7-g3hf - https://github.com/gradle/gradle/commit/bf3cc0f2b463033037e67aaacda31291643ea1a9 - https://security.netapp.com/advisory/ntap-20230413-0002/
CVE ID: CVE-2023-26054 State: PUBLISHED Published: 2023-03-06T18:05:07.602Z Last Updated: 2025-02-25T15:01:11.167Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: moby Products: buildkit Problem Types: CWE-200 Description: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In affected versions when the user sends a build request that contains a Git URL that contains credentials and the build creates a provenance attestation describing that build, these credentials could be visible from the provenance attestation. Git URL can be passed in two ways: 1) Invoking build directly from a URL with c
visible from the provenance attestation. Git URL can be passed in two ways: 1) Invoking build directly from a URL with credentials. 2) If the client sends additional version control system (VCS) info hint parameters on builds from a local source. Usually, that would mean reading the origin URL from `.git/config` file. When a build is performed under specific conditions where credentials were passed to BuildKit they may be visible to everyone who has access to provenance attestation. Provenance attestations and VCS info hints were added in version v0.11.0. Previous versions are not vulnerable. In v0.10, when building directly from Git URL, the same URL could be visible in `BuildInfo` structur
are not vulnerable. In v0.10, when building directly from Git URL, the same URL could be visible in `BuildInfo` structure that is a predecessor of Provenance attestations. Previous versions are not vulnerable. This bug has been fixed in v0.11.4. Users are advised to upgrade. Users unable to upgrade may disable VCS info hints by setting `BUILDX_GIT_INFO=0`. `buildctl` does not set VCS hints based on `.git` directory, and values would need to be passed manually with `--opt`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc - https://github.com/moby/buildkit/commit/75123c696506bdbca
ub.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc - https://github.com/moby/buildkit/commit/75123c696506bdbca1ed69906479e200f1b62604 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/
CVE ID: CVE-2023-26055 State: PUBLISHED Published: 2023-03-02T18:48:16.053Z Last Updated: 2025-03-05T20:39:15.118Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-commons Problem Types: CWE-150 Description: XWiki Commons are technical libraries common to several other top level XWiki projects. Starting in version 3.1-milestone-1, any user can edit their own profile and inject code, which is going to be executed with programming right. The same vulnerability can also be exploited in all other places where short text properties are displayed, e.g., in apps created using Apps Within Minutes that use a short text field. The problem has bee
operties are displayed, e.g., in apps created using Apps Within Minutes that use a short text field. The problem has been patched on versions 13.10.9, 14.4.4, 14.7RC1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-commons/security/advisories/GHSA-8cw6-4r32-6r3h - https://jira.xwiki.org/browse/XCOMMONS-2498 - https://jira.xwiki.org/browse/XWIKI-19793 - https://jira.xwiki.org/browse/XWIKI-19794
CVE ID: CVE-2023-26056 State: PUBLISHED Published: 2023-03-02T18:44:00.363Z Last Updated: 2025-03-05T20:40:21.509Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-863 Description: XWiki Platform is a generic wiki platform. Starting in version 3.0-milestone-1, it's possible to execute a script with the right of another user, provided the target user does not have programming right. The problem has been patched in XWiki 14.8-rc-1, 14.4.5, and 13.10.10. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki
ssue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-859x-p6jp-rc2w - https://github.com/xwiki/xwiki-platform/commit/4b75f212c2dd2dfc5fb5726c7830c6dbc9a425c6 - https://github.com/xwiki/xwiki-platform/commit/bd34ad6710ed72304304a3d5fec38b7cc050ef3b - https://github.com/xwiki/xwiki-platform/commit/dd3f4735b41971b3afc3f3aedf6664b4e8be4894 - https://jira.xwiki.org/browse/XWIKI-19856
CVE ID: CVE-2023-26057 State: PUBLISHED Published: 2023-04-25T00:00:00.000Z Last Updated: 2025-02-04T15:27:21.865Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to the Configuration Dashboard page. Input validation and a proper XML parser configuration are missing. For an external attacker, it is very difficult to exploit this, because a few dynamically created parameters such as Jsession-id, a CSRF token, and an Nxsrf token would be needed. The attack can realistically only be performed by an internal user. Additional Analyst
an Nxsrf token would be needed. The attack can realistically only be performed by an internal user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nokia.com - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2022-01/
CVE ID: CVE-2023-26058 State: PUBLISHED Published: 2023-04-25T00:00:00.000Z Last Updated: 2025-02-04T15:25:56.848Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to a Performance Manager page. Input validation and a proper XML parser configuration are missing. For an external attacker, it is very difficult to exploit this, because a few dynamically created parameters such as Jsession-id, a CSRF token, and an Nxsrf token would be needed. The attack can realistically only be performed by an internal user. Additional Analyst Notes:
srf token would be needed. The attack can realistically only be performed by an internal user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nokia.com - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2022-02/
CVE ID: CVE-2023-26059 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T16:33:22.262Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Nokia NetAct before 22 SP1037. On the Site Configuration Tool tab, attackers can upload a ZIP file which, when processed, exploits Stored XSS. The upload option of the Site Configuration tool does not validate the file contents. The application is in a demilitarised zone behind a perimeter firewall and without exposure to the internet. The attack can only be performed by an internal user. Additional Analyst Notes: - CVE Pr
thout exposure to the internet. The attack can only be performed by an internal user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nokia.com - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2022-03/
CVE ID: CVE-2023-26060 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T16:32:14.972Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Nokia NetAct before 22 FP2211. On the Working Set Manager page, users can create a Working Set with a name that has a client-side template injection payload. Input validation is missing during creation of the working set. For an external attacker, it is very difficult to exploit this, because a few dynamically created parameters such as Jsession-id, a CSRF token, and an Nxsrf token would be needed. The attack can realistic
cally created parameters such as Jsession-id, a CSRF token, and an Nxsrf token would be needed. The attack can realistically only be performed by an internal user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nokia.com - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2022-04/
CVE ID: CVE-2023-26061 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T16:29:37.535Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Nokia NetAct before 22 FP2211. On the Scheduled Search tab under the Alarm Reports Dashboard page, users can create a script to inject XSS. Input validation was missing during creation of a scheduled task. For an external attacker, it is very difficult to exploit this, because a few dynamically created parameters such as Jsession-id, a CSRF token, and an Nxsrf token would be needed. The attack can realistically only be per
rameters such as Jsession-id, a CSRF token, and an Nxsrf token would be needed. The attack can realistically only be performed by an internal user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nokia.com - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2022-05/
CVE ID: CVE-2023-26062 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-06T16:21:45.387Z Severity: HIGH (CVSS 7 CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A mobile network solution internal fault is found in Nokia Web Element Manager before 22 R1, in which an authenticated, unprivileged user can execute administrative functions. Exploitation is not possible from outside of mobile network solution architecture. This means that exploit is not possible from mobile network user UEs, from roaming networks, or from the Internet. Exploitation is possible only from a CSP (Communication Service Provider) mobile network