Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-37431 State: PUBLISHED Published: 2023-08-22T18:08:04.472Z Last Updated: 2024-10-03T14:25:32.604Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive dat
CVE ID: CVE-2023-37432 State: PUBLISHED Published: 2023-08-22T18:08:07.446Z Last Updated: 2024-10-04T16:03:15.265Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive dat
CVE ID: CVE-2023-37433 State: PUBLISHED Published: 2023-08-22T18:08:11.685Z Last Updated: 2024-10-04T15:59:29.442Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive dat
CVE ID: CVE-2023-37434 State: PUBLISHED Published: 2023-08-22T18:08:17.910Z Last Updated: 2024-10-04T15:56:14.997Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive dat
CVE ID: CVE-2023-37435 State: PUBLISHED Published: 2023-08-22T18:08:21.918Z Last Updated: 2024-10-04T15:51:02.673Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive dat
CVE ID: CVE-2023-37436 State: PUBLISHED Published: 2023-08-22T18:08:25.585Z Last Updated: 2024-10-04T15:48:23.055Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive dat
CVE ID: CVE-2023-37437 State: PUBLISHED Published: 2023-08-22T18:08:28.560Z Last Updated: 2024-10-03T14:21:24.724Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive dat
CVE ID: CVE-2023-37438 State: PUBLISHED Published: 2023-08-22T18:08:32.465Z Last Updated: 2024-10-03T14:16:57.194Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive dat
CVE ID: CVE-2023-37439 State: PUBLISHED Published: 2023-08-22T18:09:38.208Z Last Updated: 2024-10-29T19:16:16.550Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive dat
CVE ID: CVE-2023-37440 State: PUBLISHED Published: 2023-08-22T18:10:43.522Z Last Updated: 2024-10-29T19:17:30.370Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to conduct a server-side request forgery (SSRF) attack. A successful exploit allows an attacker to enumerate information about the internal structure of the EdgeConnect SD-WAN Orchestrator host leading to potential disclosure of sensitive information. Additional Analyst Notes: -
geConnect SD-WAN Orchestrator host leading to potential disclosure of sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txt
CVE ID: CVE-2023-37442 State: PUBLISHED Published: 2024-01-08T14:47:52.311Z Last Updated: 2025-11-04T18:15:33.572Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-119 Description: Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds read when triggered via the GUI's default VCD parsing code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
ggered via the GUI's default VCD parsing code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE ID: CVE-2023-37443 State: PUBLISHED Published: 2024-01-08T14:47:52.401Z Last Updated: 2025-11-04T18:15:34.774Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-119 Description: Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds read when triggered via the GUI's legacy VCD parsing code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
ggered via the GUI's legacy VCD parsing code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE ID: CVE-2023-37444 State: PUBLISHED Published: 2024-01-08T14:47:52.484Z Last Updated: 2025-11-04T18:15:36.008Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-119 Description: Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds read when triggered via the GUI's interactive VCD parsing code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
ggered via the GUI's interactive VCD parsing code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE ID: CVE-2023-37445 State: PUBLISHED Published: 2024-01-08T14:47:52.576Z Last Updated: 2025-11-04T18:15:37.275Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-119 Description: Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2vzt conversion utility. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
iggered via the vcd2vzt conversion utility. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE ID: CVE-2023-37446 State: PUBLISHED Published: 2024-01-08T14:47:52.666Z Last Updated: 2025-11-04T18:15:38.476Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-119 Description: Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2lxt2 conversion utility. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
iggered via the vcd2lxt2 conversion utility. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE ID: CVE-2023-37447 State: PUBLISHED Published: 2024-01-08T14:47:52.758Z Last Updated: 2025-11-04T18:15:39.694Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-119 Description: Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2lxt conversion utility. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
iggered via the vcd2lxt conversion utility. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE ID: CVE-2023-37448 State: PUBLISHED Published: 2023-09-26T20:14:41.567Z Last Updated: 2025-11-04T19:17:15.880Z Vendors: Apple Products: macOS Problem Types: A user may be able to view restricted content from the lock screen Description: A lock screen issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. A user may be able to view restricted content from the lock screen. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213940 - http://seclists.org/fulldisclosure/2023/Oct/3
CVE ID: CVE-2023-37450 State: PUBLISHED Published: 2023-07-26T23:21:56.324Z Last Updated: 2025-10-21T23:05:42.193Z Vendors: Apple Products: Safari, tvOS, iOS and iPadOS, macOS, watchOS Problem Types: Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Additional Analyst Notes: - CVE Program Container: - CISA
of a report that this issue may have been actively exploited. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213826 - https://support.apple.com/en-us/HT213846 - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213848 - https://security.gentoo.org/glsa/202401-04
CVE ID: CVE-2023-37453 State: PUBLISHED Published: 2023-07-06T00:00:00.000Z Last Updated: 2025-05-05T15:56:39.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://syzkaller.appspot.com/bug?extid=18996170f8096c6174d0 - https://lore.kernel.org/all/000000000000c0ffe505fe86c9ca%40google.com/T/ - https://lore.kernel.org/all/000000000000e56434059580f86e%40google.com/T/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linu
kernel.org/all/000000000000e56434059580f86e%40google.com/T/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e4c574225cc5a0553115e5eb5787d1474db5b0f - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=85d07c55621676d47d873d2749b88f783cd4d5a1 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=de28e469da75359a2bb8cd8778b78aa64b1be1f4 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ff33299ec8bb80cdcc073ad9c506bd79bb2ed20b
CVE ID: CVE-2023-37454 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-20T19:45:54.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-free write operation in the udf_put_super and udf_close_lvid functions in fs/udf/super.c. NOTE: the suse.com reference has a different perspective about this. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/all/00000000000056e02f05dfb6e11a%40google.com/T/ - https://syzkaller.appspot.com/bug?extid=60864ed35b1073540d57 - https://syzkaller.appspot.com/bug?e
11a%40google.com/T/ - https://syzkaller.appspot.com/bug?extid=60864ed35b1073540d57 - https://syzkaller.appspot.com/bug?extid=61564e5023b7229ec85d - https://syzkaller.appspot.com/bug?extid=26873a72980f8fa8bc55 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-37454 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6f861765464f43a71462d52026fbddfc858239a5
CVE ID: CVE-2023-37455 State: PUBLISHED Published: 2023-07-12T13:46:07.164Z Last Updated: 2024-11-07T15:04:41.964Z Vendors: Mozilla Products: Firefox for iOS Problem Types: Media permission request prompt showing from background tab Description: The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab. This vulnerability affects Firefox for iOS < 115. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1786934 - https://www.mozilla.org/security/advisories/mfsa2023-25/
CVE ID: CVE-2023-37456 State: PUBLISHED Published: 2023-07-12T13:46:28.648Z Last Updated: 2024-11-07T16:46:15.963Z Vendors: Mozilla Products: Firefox for iOS Problem Types: Browser crashed when session restore was called with an empty body Description: The session restore helper crashed whenever there was no parameter sent to the message handler. This vulnerability affects Firefox for iOS < 115. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1795496 - https://www.mozilla.org/security/advisories/mfsa2023-25/
CVE ID: CVE-2023-37457 State: PUBLISHED Published: 2023-12-14T19:43:30.945Z Last Updated: 2025-02-13T17:01:26.636Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: asterisk Products: asterisk Problem Types: CWE-120 Description: Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk versions 18.20.0 and prior, 20.5.0 and prior, and 21.0.0; as well as ceritifed-asterisk 18.9-cert5 and prior, the 'update' functionality of the PJSIP_HEADER dialplan function can exceed the available buffer space for storing the new value of a header. By doing so this can overwrite memory or cause a crash. This is not externally exploitable, unless dial
lue of a header. By doing so this can overwrite memory or cause a crash. This is not externally exploitable, unless dialplan is explicitly written to update a header based on data from an outside source. If the 'update' functionality is not used the vulnerability does not occur. A patch is available at commit a1ca0268254374b515fa5992f01340f7717113fa. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/asterisk/asterisk/security/advisories/GHSA-98rc-4j27-74hh - https://github.com/asterisk/asterisk/commit/a1ca0268254374b515fa5992f01340f7717113fa - https://lists.debian.org/debian-lts-announce/2023/12/msg00019.html
CVE ID: CVE-2023-37459 State: PUBLISHED Published: 2023-09-15T19:19:30.232Z Last Updated: 2024-09-25T18:04:01.248Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: contiki-ng Products: contiki-ng Problem Types: CWE-125 Description: Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when a packet is received, the Contiki-NG network stack attempts to start the periodic TCP timer if it is a TCP packet with the SYN flag set. But the implementation does not first verify that a full TCP header has been received. Specifically, the implementation attempts to access the flags field from the TCP buffer in the following conditio
eived. Specifically, the implementation attempts to access the flags field from the TCP buffer in the following conditional expression in the `check_for_tcp_syn` function. For this reason, an attacker can inject a truncated TCP packet, which will lead to an out-of-bound read from the packet buffer. As of time of publication, a patched version is not available. As a workaround, one can apply the changes in Contiki-NG pull request #2510 to patch the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-6648-m23r-hq8c - https://github.com/contiki-ng/contiki-ng/pull/2510
CVE ID: CVE-2023-37460 State: PUBLISHED Published: 2023-07-25T19:41:46.096Z Last Updated: 2024-10-03T19:09:55.667Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: codehaus-plexus Products: plexus-archiver Problem Types: CWE-22, CWE-61 Description: Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. Prior to version 4.8.0, using AbstractUnArchiver for extracting an archive might lead to an arbitrary file creation and possibly remote code execution. When extracting an archive with an entry that already exists in the destination directory as a symbolic link whose ta
n. When extracting an archive with an entry that already exists in the destination directory as a symbolic link whose target does not exist - the `resolveFile()` function will return the symlink's source instead of its target, which will pass the verification that ensures the file will not be extracted outside of the destination directory. Later `Files.newOutputStream()`, that follows symlinks by default, will actually write the entry's content to the symlink's target. Whoever uses plexus archiver to extract an untrusted archive is vulnerable to an arbitrary file creation and possibly remote code execution. Version 4.8.0 contains a patch for this issue. Additional Analyst Notes: - CVE Progra
nd possibly remote code execution. Version 4.8.0 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/codehaus-plexus/plexus-archiver/security/advisories/GHSA-wh3p-fphp-9h2m - https://github.com/codehaus-plexus/plexus-archiver/commit/54759839fbdf85caf8442076f001d5fd64e0dcb2 - https://github.com/codehaus-plexus/plexus-archiver/releases/tag/plexus-archiver-4.8.0
CVE ID: CVE-2023-37461 State: PUBLISHED Published: 2023-07-17T19:51:19.438Z Last Updated: 2024-10-10T19:23:43.542Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: metersphere Products: metersphere Problem Types: CWE-22 Description: Metersphere is an opensource testing framework. Files uploaded to Metersphere may define a `belongType` value with a relative path like `../../../../` which may cause metersphere to attempt to overwrite an existing file in the defined location or to create a new file. Attackers would be limited to overwriting files that the metersphere process has access to. This issue has been addressed in version 2.10.3. Users are advised to upg
es that the metersphere process has access to. This issue has been addressed in version 2.10.3. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/metersphere/metersphere/security/advisories/GHSA-xfr9-jgfp-fx3v