Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-43777 State: PUBLISHED Published: 2023-10-17T12:49:04.870Z Last Updated: 2024-09-13T16:26:39.078Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Eaton Products: easySoft Problem Types: CWE-256 Description: Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent relays. This software has a password protection functionality to secure the project file from unauthorized access. This password was being stored insecurely and could be retrieved by skilled adversaries. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
trieved by skilled adversaries. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2023-1011.pdf
CVE ID: CVE-2023-43782 State: PUBLISHED Published: 2023-09-22T00:00:00 Last Updated: 2024-09-24T18:19:55.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/.cadence-aloop-daemon.x Temporary File. The file is used even if it has been created by a local adversary before Cadence started. The adversary can then delete the file, disrupting Cadence. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1213983 - https://github.com/falkTX/Cadence - http://www.openwall.com/lists/oss-security/2023/10/05/4
CVE ID: CVE-2023-43783 State: PUBLISHED Published: 2023-09-22T00:00:00 Last Updated: 2024-09-24T18:18:51.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/cadence-wineasio.reg Temporary File. The filename is used even if it has been created by a local adversary before Cadence started. The adversary can leverage this to create or overwrite files via a symlink attack. In some kernel configurations, code injection into the Wine registry is possible. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/falkTX/Cadence - https://bugzilla.suse.com/show_bug.cgi?id=1213985 - ht
P Vulnrichment: References: - https://github.com/falkTX/Cadence - https://bugzilla.suse.com/show_bug.cgi?id=1213985 - http://www.openwall.com/lists/oss-security/2023/10/05/4
CVE ID: CVE-2023-43784 State: PUBLISHED Published: 2023-09-22T00:00:00 Last Updated: 2024-08-02T19:52:11.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talk.plesk.com/threads/why-in-plesk-firehouse-aws-keys-are-public.369925/ - https://docs.aws.amazon.com/IAM/latest/UserGuide/security-creds.html
CVE ID: CVE-2023-43785 State: PUBLISHED Published: 2023-10-10T12:26:02.015Z Last Updated: 2025-11-06T22:59:36.693Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-787 Description: A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/err
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:2145 - https://access.redhat.com/errata/RHSA-2024:2973 - https://access.redhat.com/security/cve/CVE-2023-43785 - https://bugzilla.redhat.com/show_bug.cgi?id=2242252
CVE ID: CVE-2023-43786 State: PUBLISHED Published: 2023-10-10T12:26:07.399Z Last Updated: 2025-11-06T22:59:38.283Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-400 Description: A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-20
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:2145 - https://access.redhat.com/errata/RHSA-2024:2973 - https://access.redhat.com/security/cve/CVE-2023-43786 - https://bugzilla.redhat.com/show_bug.cgi?id=2242253
CVE ID: CVE-2023-43787 State: PUBLISHED Published: 2023-10-10T12:26:08.102Z Last Updated: 2025-11-06T22:59:43.505Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-122 Description: A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:2145 - https://access.redhat.com/errata/RHSA-2024:2973 - https://access.redhat.com/security/cve/CVE-2023-43787 - https://bugzilla.redhat.com/show_bug.cgi?id=2242254
CVE ID: CVE-2023-43788 State: PUBLISHED Published: 2023-10-10T12:26:08.737Z Last Updated: 2025-11-06T22:59:44.085Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-125 Description: A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://acces
y on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:2146 - https://access.redhat.com/errata/RHSA-2024:2217 - https://access.redhat.com/errata/RHSA-2024:2974 - https://access.redhat.com/errata/RHSA-2024:3022 - https://access.redhat.com/security/cve/CVE-2023-43788 - https://bugzilla.redhat.com/show_bug.cgi?id=2242248
CVE ID: CVE-2023-43789 State: PUBLISHED Published: 2023-10-12T11:43:20.009Z Last Updated: 2025-11-06T22:59:47.494Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-125 Description: A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read contents of memory on the system. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:2146 - https://access.redhat.com/errata/
CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:2146 - https://access.redhat.com/errata/RHSA-2024:2217 - https://access.redhat.com/errata/RHSA-2024:2974 - https://access.redhat.com/errata/RHSA-2024:3022 - https://access.redhat.com/security/cve/CVE-2023-43789 - https://bugzilla.redhat.com/show_bug.cgi?id=2242249
CVE ID: CVE-2023-43790 State: PUBLISHED Published: 2024-04-15T17:10:39.144Z Last Updated: 2024-08-02T19:52:11.363Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Combodo Products: iTop Problem Types: CWE-79, CWE-80 Description: iTop is an IT service management platform. By manipulating HTTP queries, a user can inject malicious content in the fields used for the object friendlyname value. This vulnerability is fixed in 3.1.1 and 3.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Combodo/iTop/security/advisories/GHSA-96xm-p83r-hm97 - https://github.com/Combodo/iTop/commit/03c9ffc0334fd44f3f0e824
om/Combodo/iTop/security/advisories/GHSA-96xm-p83r-hm97 - https://github.com/Combodo/iTop/commit/03c9ffc0334fd44f3f0e82477264087064e1c732
CVE ID: CVE-2023-43791 State: PUBLISHED Published: 2023-11-09T14:42:40.750Z Last Updated: 2024-09-03T18:46:40.834Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HumanSignal Products: label-studio Problem Types: CWE-200 Description: Label Studio is a multi-type data labeling and annotation tool with standardized output format. There is a vulnerability that can be chained within the ORM Leak vulnerability to impersonate any account on Label Studio. An attacker could exploit these vulnerabilities to escalate their privileges from a low privilege user to a Django Super Administrator user. The vulnerability was found to affect versions before `1.8.2`, where a
vilege user to a Django Super Administrator user. The vulnerability was found to affect versions before `1.8.2`, where a patch was introduced. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HumanSignal/label-studio/security/advisories/GHSA-f475-x83m-rx5m - https://github.com/HumanSignal/label-studio/pull/4690 - https://github.com/HumanSignal/label-studio/commit/3d06c5131c15600621e08b06f07d976887cde81b - https://github.com/HumanSignal/label-studio/releases/tag/1.8.2
CVE ID: CVE-2023-43792 State: PUBLISHED Published: 2023-10-30T20:00:14.664Z Last Updated: 2024-09-05T20:20:41.513Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: baserproject Products: basercms Problem Types: CWE-94 Description: baserCMS is a website development framework. In versions 4.6.0 through 4.7.6, there is a Code Injection vulnerability in the mail form of baserCMS. As of time of publication, no known patched versions are available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/baserproject/basercms/security/advisories/GHSA-vrm6-c878-fpq6 - https://basercms.net/security/JVN_45547161
CVE ID: CVE-2023-43793 State: PUBLISHED Published: 2023-10-04T20:21:29.294Z Last Updated: 2024-09-20T14:57:07.819Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: misskey-dev Products: misskey Problem Types: CWE-287 Description: Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user can bypass the authentication of the Bull dashboard, which is the job queue management UI, and access it. Version 2023.9.0 contains a fix. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/misskey-dev/misskey/security/advisories/G
E Program Container: - CISA ADP Vulnrichment: References: - https://github.com/misskey-dev/misskey/security/advisories/GHSA-9fj2-gjcf-cqqc - https://github.com/nexryai/nexkey/security/advisories/GHSA-g8w5-568f-ffwf - https://github.com/misskey-dev/misskey/commit/c9aeccb2ab260ceedc126e6e366da8cd13ece4b2
CVE ID: CVE-2023-43794 State: PUBLISHED Published: 2023-10-17T20:02:28.981Z Last Updated: 2024-09-13T15:59:02.488Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: nocodb Products: nocodb Problem Types: CWE-89 Description: Nocodb is an open source Airtable alternative. Affected versions of nocodb contain a SQL injection vulnerability, that allows an authenticated attacker with creator access to query the underlying database. By supplying a specially crafted payload to the given an attacker can inject arbitrary SQL queries to be executed. Since this is a blind SQL injection, an attacker may need to use time-based payloads which would include a function to dela
ce this is a blind SQL injection, an attacker may need to use time-based payloads which would include a function to delay execution for a given number of seconds. The response time indicates, whether the result of the query execution was true or false. Depending on the result, the HTTP response will be returned after a given number of seconds, indicating TRUE, or immediately, indicating FALSE. In that way, an attacker can reveal the data present in the database. This vulnerability has been addressed in version 0.111.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. This issue is also tracked as `GHSL-2023-141`. Additional Analyst Notes: - CVE Program Con
ounds for this vulnerability. This issue is also tracked as `GHSL-2023-141`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nocodb/nocodb/security/advisories/GHSA-3m5q-q39v-xf8f
CVE ID: CVE-2023-43795 State: PUBLISHED Published: 2023-10-24T22:14:30.956Z Last Updated: 2024-09-17T14:15:26.074Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: geoserver Products: geoserver Problem Types: CWE-918 Description: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The OGC Web Processing Service (WPS) specification is designed to process information from any server using GET and POST requests. This presents the opportunity for Server Side Request Forgery. This vulnerability has been patched in version 2.22.5 and 2.23.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
bility has been patched in version 2.22.5 and 2.23.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/geoserver/geoserver/security/advisories/GHSA-5pr3-m5hm-9956
CVE ID: CVE-2023-43796 State: PUBLISHED Published: 2023-10-31T16:52:48.505Z Last Updated: 2025-02-13T17:13:30.615Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: matrix-org Products: synapse Problem Types: CWE-200 Description: Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver. System administrators are encouraged to upgrade to Synapse 1.95.1 or 1.96.0rc1 to receive a patch. As a workaround, the `federation_domain_whitelist` can be used to limit federation traffic with a homeserver. Addi
atch. As a workaround, the `federation_domain_whitelist` can be used to limit federation traffic with a homeserver. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrix-org/synapse/security/advisories/GHSA-mp92-3jfm-3575 - https://github.com/matrix-org/synapse/commit/daec55e1fe120c564240c5386e77941372bf458f - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VH3RNC5ZPQZ4OKPSL4E6BBJSZOQLGDEY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2IDEEZMFJBDLTFHQUTZRJJNCOZGQ2ZVS/ - https://security.gentoo.org/glsa/202401-12
CVE ID: CVE-2023-43797 State: PUBLISHED Published: 2023-10-30T22:18:11.821Z Last Updated: 2024-09-05T20:20:01.467Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: bigbluebutton Products: bigbluebutton Problem Types: CWE-79 Description: BigBlueButton is an open-source virtual classroom. Prior to versions 2.6.11 and 2.7.0-beta.3, Guest Lobby was vulnerable to cross-site scripting when users wait to enter the meeting due to inserting unsanitized messages to the element using unsafe innerHTML. Text sanitizing was added for lobby messages starting in versions 2.6.11 and 2.7.0-beta.3. There are no known workarounds. Additional Analyst Notes: - CVE Program Containe
ng in versions 2.6.11 and 2.7.0-beta.3. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-v6wg-q866-h73x - https://github.com/bigbluebutton/bigbluebutton/pull/18392 - https://github.com/bigbluebutton/bigbluebutton/commit/304bc851a00558f99a908880f4ac44234a074c9d
CVE ID: CVE-2023-43798 State: PUBLISHED Published: 2023-10-30T22:24:59.109Z Last Updated: 2024-09-05T20:19:17.331Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: bigbluebutton Products: bigbluebutton Problem Types: CWE-918 Description: BigBlueButton is an open-source virtual classroom. BigBlueButton prior to versions 2.6.12 and 2.7.0-rc.1 is vulnerable to Server-Side Request Forgery (SSRF). This issue is a bypass of CVE-2023-33176. A patch in versions 2.6.12 and 2.7.0-rc.1 disabled follow redirect at `httpclient.execute` since the software no longer has to follow it when using `finalUrl`. There are no known workarounds. We recommend upgrading to a patched v
no longer has to follow it when using `finalUrl`. There are no known workarounds. We recommend upgrading to a patched version of BigBlueButton. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-h98v-2h8w-99c4 - https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-3q22-hph2-cff7 - https://github.com/bigbluebutton/bigbluebutton/pull/18494 - https://github.com/bigbluebutton/bigbluebutton/pull/18580
CVE ID: CVE-2023-43799 State: PUBLISHED Published: 2023-10-04T20:37:54.610Z Last Updated: 2024-09-20T14:53:13.165Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: altair-graphql Products: altair Problem Types: CWE-20 Description: Altair is a GraphQL Client. Prior to version 5.2.5, the Altair GraphQL Client Desktop Application does not sanitize external URLs before passing them to the underlying system. Moreover, Altair GraphQL Client also does not isolate the context of the renderer process. This affects versions of the software running on MacOS, Windows, and Linux. Version 5.2.5 fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
cOS, Windows, and Linux. Version 5.2.5 fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/altair-graphql/altair/security/advisories/GHSA-9m5v-vrf6-fmvm - https://github.com/altair-graphql/altair/releases/tag/v5.2.5
CVE ID: CVE-2023-43800 State: PUBLISHED Published: 2023-10-18T21:07:21.601Z Last Updated: 2024-09-12T20:04:21.852Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: arduino Products: arduino-create-agent Problem Types: CWE-345 Description: Arduino Create Agent is a package to help manage Arduino development. The vulnerability affects the endpoint `/v2/pkgs/tools/installed`. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuration, can escalate his privileges to those of the user running the Arduino Create Agent service via a crafted HTTP POST request. This issue has been addressed in version `1.3
running the Arduino Create Agent service via a crafted HTTP POST request. This issue has been addressed in version `1.3.3`. Users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/arduino/arduino-create-agent/security/advisories/GHSA-4x5q-q7wc-q22p - https://github.com/arduino/arduino-create-agent/releases/tag/1.3.3 - https://www.nozominetworks.com/blog/security-flaws-affect-a-component-of-the-arduino-create-cloud-ide
CVE ID: CVE-2023-43801 State: PUBLISHED Published: 2023-10-18T21:06:12.775Z Last Updated: 2024-09-12T20:04:35.655Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L) Vendors: arduino Products: arduino-create-agent Problem Types: CWE-22 Description: Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/tools/installed` and the way it handles plugin names supplied as user input. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuration, can delete arbitrary files or folders belonging to the user that runs the Arduino Create Agent via a crafte
nfiguration, can delete arbitrary files or folders belonging to the user that runs the Arduino Create Agent via a crafted HTTP DELETE request. This issue has been addressed in version `1.3.3`. Users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/arduino/arduino-create-agent/security/advisories/GHSA-mjq6-pv9c-qppq - https://github.com/arduino/arduino-create-agent/releases/tag/1.3.3 - https://www.nozominetworks.com/blog/security-flaws-affect-a-component-of-the-arduino-create-cloud-ide
CVE ID: CVE-2023-43802 State: PUBLISHED Published: 2023-10-18T20:39:09.518Z Last Updated: 2024-09-12T20:04:49.780Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: arduino Products: arduino-create-agent Problem Types: CWE-22 Description: Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/upload` which handles request with the `filename` parameter. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuration, can escalate their privileges to those of the user running the Arduino Create Agent service via a crafted HTTP POST request. This iss
their privileges to those of the user running the Arduino Create Agent service via a crafted HTTP POST request. This issue has been addressed in version `1.3.3`. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/arduino/arduino-create-agent/security/advisories/GHSA-75j7-w798-cwwx - https://github.com/arduino/arduino-create-agent/releases/tag/1.3.3 - https://www.nozominetworks.com/blog/security-flaws-affect-a-component-of-the-arduino-create-cloud-ide
CVE ID: CVE-2023-43803 State: PUBLISHED Published: 2023-10-18T20:36:29.697Z Last Updated: 2025-02-13T17:13:31.137Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L) Vendors: arduino Products: arduino-create-agent Problem Types: CWE-22 Description: Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/tools/installed` and the way it handles plugin names supplied as user input. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuration, can delete arbitrary files or folders belonging to the user that runs the Arduino Create Agent via a crafte