Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-23888 State: PUBLISHED Published: 2024-05-17T06:32:50.689Z Last Updated: 2024-08-02T10:42:26.877Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Rank Math Products: Rank Math SEO Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rank Math Rank Math SEO allows Path Traversal.This issue affects Rank Math SEO: from n/a through 1.0.107.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/seo-by-rank-math/wordpress-rank-math-seo-plugin-1-0-107-2-local-file-inclusion-vulnerability?_s_
/database/vulnerability/seo-by-rank-math/wordpress-rank-math-seo-plugin-1-0-107-2-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2023-23889 State: PUBLISHED Published: 2023-04-25T19:24:44.213Z Last Updated: 2025-01-09T15:33:25.826Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Fullworks Products: Quick Paypal Payments Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/quick-paypal-payments/wordpress-quick-paypal-payments-plugin-5-7-25-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-23890 State: PUBLISHED Published: 2023-05-20T22:30:03.750Z Last Updated: 2025-01-09T15:12:51.793Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H) Vendors: LJ Apps Products: WP Airbnb Review Slider Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in LJ Apps WP Airbnb Review Slider plugin <= 3.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-airbnb-review-slider/wordpress-wp-airbnb-review-slider-plugin-3-2-cross-site-request-forgery-csrf-leading-to-reviews-removal-vulnerability?_s_id=cve
CVE ID: CVE-2023-23891 State: PUBLISHED Published: 2023-04-06T13:54:38.217Z Last Updated: 2025-01-10T19:06:17.536Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: OceanWP Products: Ocean Extra Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in OceanWP Ocean Extra plugin <= 2.1.1 versions. Needs the OceanWP theme installed and activated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ocean-extra/wordpress-ocean-extra-plugin-2-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-23892 State: PUBLISHED Published: 2023-04-24T13:48:37.981Z Last Updated: 2025-01-09T15:36:09.772Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Jamie Poitra Products: M Chart Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Jamie Poitra M Chart plugin <= 1.9.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/m-chart/wordpress-m-chart-plugin-1-9-4-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-23893 State: PUBLISHED Published: 2024-12-09T11:31:44.810Z Last Updated: 2024-12-09T18:41:37.639Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Igor Benic Products: Simple Giveaways Problem Types: CWE-862 Description: Missing Authorization vulnerability in Igor Benic Simple Giveaways allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Giveaways: from n/a through 2.48.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/giveasap/vulnerability/wordpress-simple-giveaways-plugin-2-45-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-23894 State: PUBLISHED Published: 2023-05-08T21:57:06.278Z Last Updated: 2025-01-09T15:23:59.350Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Surbma Products: Surbma | GDPR Proof Cookie Consent & Notice Bar Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Surbma Surbma | GDPR Proof Cookie Consent & Notice Bar plugin <= 17.5.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/surbma-gdpr-proof-google-analytics/wordpress-surbma-gdpr-proof-cookie-consent-notice-bar-plugin-17-5-3-cross-site
bility/surbma-gdpr-proof-google-analytics/wordpress-surbma-gdpr-proof-cookie-consent-notice-bar-plugin-17-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-23895 State: PUBLISHED Published: 2024-12-09T11:31:43.952Z Last Updated: 2024-12-09T18:41:44.736Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: CodePeople Products: WP Time Slots Booking Form Problem Types: CWE-862 Description: Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through 1.1.82. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-time-slots-booking-form/vulnerability/wordpress-wp-time-slots-booking-form-plugin
stack.com/database/wordpress/plugin/wp-time-slots-booking-form/vulnerability/wordpress-wp-time-slots-booking-form-plugin-1-1-82-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-23896 State: PUBLISHED Published: 2024-01-17T16:36:50.549Z Last Updated: 2025-06-17T21:19:17.462Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: MyThemeShop Products: URL Shortener by MyThemeShop Problem Types: CWE-862 Description: Missing Authorization vulnerability in MyThemeShop URL Shortener by MyThemeShop.This issue affects URL Shortener by MyThemeShop: from n/a through 1.0.17. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mts-url-shortener/wordpress-url-shortener-by-mythemeshop-plugin-1-0-16-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-23897 State: PUBLISHED Published: 2023-07-10T12:14:48.188Z Last Updated: 2024-08-02T14:48:34.423Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Ozette Plugins Products: Simple Mobile URL Redirect Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ozette Plugins Simple Mobile URL Redirect plugin <= 1.7.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simple-mobile-url-redirect/wordpress-simple-mobile-url-redirect-plugin-1-7-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-23898 State: PUBLISHED Published: 2023-04-06T10:08:16.587Z Last Updated: 2025-01-10T19:08:17.613Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: CreativeThemes Products: Blocksy Companion Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeThemes Blocksy Companion plugin <= 1.8.67 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/blocksy-companion/wordpress-blocksy-companion-plugin-1-8-67-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-23899 State: PUBLISHED Published: 2023-02-17T14:14:10.889Z Last Updated: 2025-01-13T15:56:36.977Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: HasThemes Products: Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Extensions For CF7 plugin <= 2.0.8 versions leads to arbitrary plugin activation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/extensions-for-cf7/wordpress-extensions-for-cf7-contact-form-7-database-conditional-fie
stack.com/database/vulnerability/extensions-for-cf7/wordpress-extensions-for-cf7-contact-form-7-database-conditional-fields-and-redirection-plugin-2-0-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-23900 State: PUBLISHED Published: 2023-08-10T11:30:36.912Z Last Updated: 2024-09-25T15:08:42.108Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: YIKES, Inc. Products: Easy Forms for Mailchimp Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in YIKES, Inc. Easy Forms for Mailchimp plugin <= 6.8.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/yikes-inc-easy-mailchimp-extender/wordpress-easy-forms-for-mailchimp-plugin-6-8-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-23901 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-28T14:51:04.065Z Vendors: Seiko Solutions Inc. Products: SkyBridge MB-A200 and SkyBridge BASIC MB-A130 Problem Types: Improper following of a certificate's chain of trust Description: Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, which may allow a remote unauthenticated attacker to eavesdrop on or alter the communication sent to the WebUI of the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.seiko-sol.c
oduct. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.seiko-sol.co.jp/archives/73969/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/ - https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/ - https://jvn.jp/en/jp/JVN40604023/
CVE ID: CVE-2023-23902 State: PUBLISHED Published: 2023-07-06T14:53:34.384Z Last Updated: 2024-11-14T14:20:29.418Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Milesight Products: UR32L Problem Types: CWE-121 Description: A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to remote code execution. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1697
CVE ID: CVE-2023-23903 State: PUBLISHED Published: 2023-08-09T09:12:24.994Z Last Updated: 2024-09-20T12:09:31.800Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Nozomi Networks Products: Guardian, CMC Problem Types: CWE-1286 Description: An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error. The whole application in rendered unusable until a console intervention. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.nozominetworks.com/NN-2023:7-01
CVE ID: CVE-2023-23904 State: PUBLISHED Published: 2024-09-16T16:38:44.985Z Last Updated: 2025-11-03T21:47:18.368Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L) Vendors: n/a Products: UEFI firmware for some Intel(R) Processors Problem Types: escalation of privilege, CWE-395 Description: NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01071.html
CVE ID: CVE-2023-23906 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-28T16:35:14.592Z Vendors: Seiko Solutions Inc. Products: SkyBridge MB-A100/110 Problem Types: Missing authentication for critical function Description: Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unauthenticated attacker to execute some critical functions without authentication, e.g., rebooting the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.seiko-sol.co.jp/archives/73969/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/
nces: - https://www.seiko-sol.co.jp/archives/73969/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/ - https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/ - https://jvn.jp/en/jp/JVN40604023/
CVE ID: CVE-2023-23907 State: PUBLISHED Published: 2023-07-06T14:53:32.531Z Last Updated: 2024-08-02T10:42:27.095Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Milesight Products: MilesightVPN Problem Types: CWE-22 Description: A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to arbitrary file read. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1702
CVE ID: CVE-2023-23908 State: PUBLISHED Published: 2023-08-11T02:37:07.578Z Last Updated: 2025-02-13T16:44:11.220Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: 3rd Generation Intel(R) Xeon(R) Scalable processors Problem Types: information disclosure, CWE-284 Description: Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html - https://www.debian.org/secur
es: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html - https://www.debian.org/security/2023/dsa-5474 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OL7WI2TJCWSZIQP2RIOLWHOKLM25M44J/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/ - https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html - https://security.netapp.com/advisory/ntap-20230824-0003/
CVE ID: CVE-2023-23909 State: PUBLISHED Published: 2023-05-10T13:16:43.722Z Last Updated: 2025-01-27T18:10:13.519Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) Trace Analyzer and Collector software Problem Types: information disclosure, CWE-125 Description: Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00805.ht
CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00805.html
CVE ID: CVE-2023-23910 State: PUBLISHED Published: 2023-05-10T13:16:42.583Z Last Updated: 2025-01-27T18:10:34.479Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: n/a Products: Intel(R) Trace Analyzer and Collector software Problem Types: escalation of privilege, CWE-787 Description: Out-of-bounds write for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00805.html
CVE ID: CVE-2023-23911 State: PUBLISHED Published: 2023-03-10T00:00:00.000Z Last Updated: 2025-02-28T17:04:35.204Z Vendors: n/a Products: Rocket.Chat Problem Types: CWE-284 Description: An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1757663
CVE ID: CVE-2023-23912 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T19:02:10.197Z Vendors: n/a Products: Ubiquiti EdgeRouter(s) and USG(s) Problem Types: CWE-75 Description: A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code execution vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-B
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-028-028/696e4e3b-718c-4da4-9a21-965a85633b5f
CVE ID: CVE-2023-23913 State: PUBLISHED Published: 2025-01-09T00:33:47.769Z Last Updated: 2025-01-09T17:09:39.091Z Vendors: Rails Products: rails-ujs Description: There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method, data-remote or data-disable-with attribute. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033263 - https://discuss.rubyonrails.org/t/cve-2023-23913-dom-based-cross-site-scri
ebian.org/cgi-bin/bugreport.cgi?bug=1033263 - https://discuss.rubyonrails.org/t/cve-2023-23913-dom-based-cross-site-scripting-in-rails-ujs-for-contenteditable-html-elements/82468 - https://github.com/rails/rails/commit/5037a13614d71727af8a175063bcf6ba1a74bdbd - https://security.netapp.com/advisory/ntap-20240605-0007/ - https://www.debian.org/security/2023/dsa-5389
CVE ID: CVE-2023-23914 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-12T18:52:09.064Z Vendors: n/a Products: https://github.com/curl/curl Problem Types: CWE-319 Description: A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on. Additional
by subsequent transferswhen done on the same command line because the state would not be properlycarried on. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1813864 - https://security.netapp.com/advisory/ntap-20230309-0006/ - https://security.gentoo.org/glsa/202310-12
CVE ID: CVE-2023-23915 State: PUBLISHED Published: 2023-02-23T00:00:00 Last Updated: 2024-08-02T10:42:27.101Z Vendors: n/a Products: https://github.com/curl/curl Problem Types: CWE-319 Description: A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycomp
ingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1826048 - https://security.netapp.com/advisory/ntap-20230309-0006/ - https://security.gentoo.org/glsa/202310-12
CVE ID: CVE-2023-23916 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-12T18:25:23.845Z Vendors: n/a Products: https://github.com/curl/curl Problem Types: CWE-770 Description: An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable "links" in this "decompression chain" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The u
llowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a "malloc bomb", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1826048 - https://lists.debian.org/debian-lts-announce/2023/02/msg00035.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO/ - https://www.debian.org/security/2023/dsa-5365 - https://securi
raproject.org/message/BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO/ - https://www.debian.org/security/2023/dsa-5365 - https://security.netapp.com/advisory/ntap-20230309-0006/ - https://security.gentoo.org/glsa/202310-12
CVE ID: CVE-2023-23917 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-12T17:56:37.878Z Vendors: n/a Products: Rocket.chat Problem Types: CWE-77 Description: A prototype pollution vulnerability exists in Rocket.Chat server <5.2.0 that could allow an attacker to a RCE under the admin account. Any user can create their own server in your cloud and become an admin so this vulnerability could affect the cloud infrastructure. This attack vector also may increase the impact of XSS to RCE which is dangerous for self-hosted users as well. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1631258