Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-2171 State: PUBLISHED Published: 2023-08-31T05:33:11.293Z Last Updated: 2025-02-05T19:32:54.826Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: learningtimes Products: BadgeOS Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The BadgeOS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including, 3.7.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrar
utes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/74a280e1-e4b6-4bd9-882b-d9f185332d61?source=cve - https://plugins.trac.wordpress.org/browser/badgeos/trunk/includes/shortcodes/badgeos_achievement.php#L125
CVE ID: CVE-2023-2172 State: PUBLISHED Published: 2023-08-31T05:33:08.078Z Last Updated: 2024-09-27T14:23:03.117Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: learningtimes Products: BadgeOS Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The BadgeOS plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.7.1.6. This is due to improper validation and authorization checks within the badgeos_update_steps_ajax_handler, badgeos_update_award_steps_ajax_handler, badgeos_update_deduct_steps_ajax_handler, and badgeos_update_ranks_req_steps_ajax_handler functions. This makes it
dler, badgeos_update_deduct_steps_ajax_handler, and badgeos_update_ranks_req_steps_ajax_handler functions. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to overwrite arbitrary post titles. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5dae8e82-e252-48d9-ae1f-62acfcd17e2b?source=cve - https://plugins.trac.wordpress.org/browser/badgeos/trunk/includes/points/award-steps-ui.php#L397 - https://plugins.trac.wordpress.org/browser/badgeos/trunk/includes/steps-ui.php#L396 - https://plugins.trac.wordpress.org/browser/badgeos/trunk/includes/points/dedu
badgeos/trunk/includes/steps-ui.php#L396 - https://plugins.trac.wordpress.org/browser/badgeos/trunk/includes/points/deduct-steps-ui.php#L454 - https://plugins.trac.wordpress.org/browser/badgeos/trunk/includes/ranks/rank-steps-ui.php#L388
CVE ID: CVE-2023-2173 State: PUBLISHED Published: 2023-08-31T05:33:14.047Z Last Updated: 2024-09-27T14:20:22.189Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: learningtimes Products: BadgeOS Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The BadgeOS plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.7.1.6. This is due to improper validation and authorization checks within the badgeos_delete_step_ajax_handler, badgeos_delete_award_step_ajax_handler, badgeos_delete_deduct_step_ajax_handler, and badgeos_delete_rank_req_step_ajax_handler functions. This makes it poss
er, badgeos_delete_deduct_step_ajax_handler, and badgeos_delete_rank_req_step_ajax_handler functions. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to delete arbitrary posts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ebb9e37c-9e8b-429b-b4ef-cd875351852c?source=cve - https://plugins.trac.wordpress.org/browser/badgeos/trunk/includes/steps-ui.php#L371 - https://plugins.trac.wordpress.org/browser/badgeos/trunk/includes/points/award-steps-ui.php#L384 - https://plugins.trac.wordpress.org/browser/badgeos/trunk/includes/points/deduct-steps-ui.ph
ts/award-steps-ui.php#L384 - https://plugins.trac.wordpress.org/browser/badgeos/trunk/includes/points/deduct-steps-ui.php#L441 - https://plugins.trac.wordpress.org/browser/badgeos/trunk/includes/ranks/rank-steps-ui.php#L375
CVE ID: CVE-2023-2174 State: PUBLISHED Published: 2023-08-31T05:33:08.533Z Last Updated: 2024-09-27T14:21:55.852Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: learningtimes Products: BadgeOS Problem Types: CWE-862 Missing Authorization Description: The BadgeOS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_badgeos_log_entries function in versions up to, and including, 3.7.1.6. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to delete the plugin's log entries. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
above, to delete the plugin's log entries. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/64e0adbc-c524-4f9d-9741-ce69edf888f7?source=cve - https://plugins.trac.wordpress.org/browser/badgeos/trunk/includes/ajax-functions.php#L999
CVE ID: CVE-2023-2176 State: PUBLISHED Published: 2023-04-20T00:00:00.000Z Last Updated: 2025-05-05T16:01:21.860Z Vendors: n/a Products: Kernel Problem Types: CWE-125 Description: A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.spinics.net/lists/linux-rdma/msg114749.html - https://security.netapp.com/advisory/ntap-20230609-0005/
CVE ID: CVE-2023-2177 State: PUBLISHED Published: 2023-04-20T00:00:00.000Z Last Updated: 2025-03-18T19:58:20.430Z Vendors: n/a Products: Linux Problem Types: CWE-476 Description: A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_out is freed which would further be accessed. A local user could use this flaw to crash the system or potentially cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=181d8d2066c0
CVE ID: CVE-2023-2178 State: PUBLISHED Published: 2023-06-27T13:17:09.127Z Last Updated: 2024-11-27T19:43:50.590Z Vendors: Unknown Products: Aajoda Testimonials Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e84b71f9-4208-4efb-90e8-1c778e7d2ebb
CVE ID: CVE-2023-2179 State: PUBLISHED Published: 2023-05-15T12:15:35.876Z Last Updated: 2025-01-24T20:47:15.118Z Vendors: Unknown Products: WooCommerce Order Status Change Notifier Problem Types: CWE-862 Missing Authorization, CWE-352 Cross-Site Request Forgery (CSRF) Description: The WooCommerce Order Status Change Notifier WordPress plugin through 1.1.0 does not have authorisation and CSRF when updating status orders via an AJAX action available to any authenticated users, which could allow low privilege users such as subscriber to update arbitrary order status, making them paid without actually paying for them for example Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
hem paid without actually paying for them for example Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fbc56973-4225-4f44-8c38-d488e57cd551
CVE ID: CVE-2023-2180 State: PUBLISHED Published: 2023-05-15T12:15:35.070Z Last Updated: 2025-01-24T20:44:08.757Z Vendors: Unknown Products: KIWIZ Invoices Certification & PDF System Problem Types: CWE-552 Files or Directories Accessible to External Parties Description: The KIWIZ Invoices Certification & PDF System WordPress plugin through 2.1.3 does not validate the path of files to be downloaded, which could allow unauthenticated attacker to read/downlaod arbitrary files, as well as perform PHAR unserialization (assuming they can upload a file on the server) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4d3b90d8-8
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4d3b90d8-8a6d-4b72-8bc7-21f861259a1b
CVE ID: CVE-2023-2181 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T15:47:03.675Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: An issue has been discovered in GitLab affecting all versions before 15.9.8, 15.10.0 before 15.10.7, and 15.11.0 before 15.11.3. A malicious developer could use a git feature called refs/replace to smuggle content into a merge request which would not be visible during review in the UI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/is
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/407859 - https://hackerone.com/reports/1938185 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2181.json
CVE ID: CVE-2023-2182 State: PUBLISHED Published: 2023-05-03T00:00:00.000Z Last Updated: 2025-01-30T20:51:04.176Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: An issue has been discovered in GitLab EE affecting all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Under certain conditions when OpenID Connect is enabled on an instance, it may allow users who are marked as 'external' to become 'regular' users thus leading to privilege escalation for those users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
us leading to privilege escalation for those users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/403012 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2182.json
CVE ID: CVE-2023-2183 State: PUBLISHED Published: 2023-06-06T18:04:26.485Z Last Updated: 2025-02-13T16:40:15.277Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: Grafana Products: Grafana, Grafana Enterprise Problem Types: CWE-284 Description: Grafana is an open-source platform for monitoring and observability. The option to send a test alert is not available from the user panel UI for users having the Viewer role. It is still possible for a user with the Viewer role to send a test alert using the API as the API does not check access to this function. This might enable malicious users to abuse the functionality by sending multiple alert messages to e-mail an
s function. This might enable malicious users to abuse the functionality by sending multiple alert messages to e-mail and Slack, spamming users, prepare Phishing attack or block SMTP server. Users may upgrade to version 9.5.3, 9.4.12, 9.3.15, 9.2.19 and 8.5.26 to receive a fix. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grafana.com/security/security-advisories/cve-2023-2183/ - https://github.com/grafana/bugbounty/security/advisories/GHSA-cvm3-pp2j-chr3 - https://security.netapp.com/advisory/ntap-20230706-0002/
CVE ID: CVE-2023-2184 State: PUBLISHED Published: 2023-06-09T05:33:39.767Z Last Updated: 2025-02-05T19:42:56.699Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: nik00726 Products: WP Responsive Tabs horizontal vertical and accordion Tabs Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP Responsive Tabs horizontal vertical and accordion Tabs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.1.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated at
luding, 1.1.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fe54c37f-1421-48aa-b502-045847d13ae3?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2825016%40responsive-horizontal-vertical-and-accordion-tabs%2Ftags%2F1.1.15&new=2900990%40responsive-horizontal-vertical-and-accordion-tabs%2Ftags%
ntal-vertical-and-accordion-tabs%2Ftags%2F1.1.15&new=2900990%40responsive-horizontal-vertical-and-accordion-tabs%2Ftags%2F1.1.16
CVE ID: CVE-2023-2185 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2023-2186 State: PUBLISHED Published: 2023-06-07T06:37:33.280Z Last Updated: 2025-01-06T20:10:28.548Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: Triangle MicroWorks Products: SCADA Data Gateway Problem Types: CWE-134 Description: On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format string characters to the SCADA Data Gateway to perform unrestricted memory reads.An unauthenticated user can use this format string vulnerability to repeatedly crash the GTWWebMonitor.exe process to DoS the Web Monitor. Furthermore, an authenticated user can levera
to repeatedly crash the GTWWebMonitor.exe process to DoS the Web Monitor. Furthermore, an authenticated user can leverage this vulnerability to leak memory from the GTWWebMonitor.exe process. This could be leveraged in an exploit chain to gain code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.trellix.com/en-us/about/newsroom/stories/research/industrial-and-manufacturing-cves.html
CVE ID: CVE-2023-2187 State: PUBLISHED Published: 2023-06-07T06:42:31.345Z Last Updated: 2025-01-06T21:08:41.518Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Triangle MicroWorks Products: SCADA Data Gateway Problem Types: CWE-306 Description: On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the WebMonitor.An unauthenticated user can use this vulnerability to forcefully log out of any currently logged-in user by sending a "password change event". Furthermore, an attacker could use this vulnerability to spam the logged-in user with false events. Additional Analyst Notes: -
more, an attacker could use this vulnerability to spam the logged-in user with false events. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.trellix.com/en-us/about/newsroom/stories/research/industrial-and-manufacturing-cves.html
CVE ID: CVE-2023-2188 State: PUBLISHED Published: 2023-08-31T05:33:13.128Z Last Updated: 2024-10-01T18:00:19.192Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: extendthemes Products: Colibri Page Builder Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Colibri Page Builder for WordPress is vulnerable to SQL Injection via the ‘post_id’ parameter in versions up to, and including, 1.0.227 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with administrator-level priv
preparation on the existing SQL query. This makes it possible for authenticated attackers with administrator-level privileges to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c73d4b78-72aa-409a-a787-898179773b82?source=cve - https://plugins.trac.wordpress.org/browser/colibri-page-builder/trunk/extend-builder/utils.php#L556 - https://plugins.trac.wordpress.org/changeset/2922722/
CVE ID: CVE-2023-2189 State: PUBLISHED Published: 2023-06-09T05:33:24.777Z Last Updated: 2024-12-20T23:39:53.787Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: staxwp Products: Elementor Addons, Widgets and Enhancements – Stax Problem Types: CWE-862 Missing Authorization Description: The Elementor Addons, Widgets and Enhancements – Stax plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the toggle_widget function in versions up to, and including, 1.4.3. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to enable or disable Elementor widgets. Additional
uthenticated attackers, with subscriber-level permissions and above, to enable or disable Elementor widgets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/926550bb-265d-4811-a375-10c47e9fb4d6?source=cve - https://plugins.trac.wordpress.org/browser/stax-addons-for-elementor/trunk/core/admin/pages/Widgets.php#L31
CVE ID: CVE-2023-2190 State: PUBLISHED Published: 2023-07-13T02:00:02.797Z Last Updated: 2024-10-30T19:53:19.973Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-639 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.10 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1. It may be possible for users to view new commits to private projects in a fork created while the project was public. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/408137 - https://hackerone.com/reports/1944500
CVE ID: CVE-2023-2191 State: PUBLISHED Published: 2023-04-20T00:00:00.000Z Last Updated: 2025-02-05T14:24:44.414Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: azuracast Products: azuracast/azuracast Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository azuracast/azuracast prior to 0.18. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/0814f5f9-8b58-40e5-b08c-7c488947cf31 - https://github.com/azuracast/azuracast/commit/24276cb4166b2057de73569ec33046a80a8bb437
CVE ID: CVE-2023-2193 State: PUBLISHED Published: 2023-04-20T08:17:04.731Z Last Updated: 2024-12-06T23:04:57.399Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-862 Description: Mattermost fails to invalidate existing authorization codes when deauthorizing an OAuth2 app, allowing an attacker possessing an authorization code to generate an access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2023-2194 State: PUBLISHED Published: 2023-04-20T00:00:00.000Z Last Updated: 2025-04-23T16:22:08.141Z Vendors: n/a Products: Linux kernel: i2c: xgene-slimpro Problem Types: CWE-787 Description: An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->block[0]" variable was not capped to a number between 0-255 and was used as the size of a memcpy, possibly writing beyond the end of dma_buffer. This flaw could allow a local privileged user to crash the system or potentially achieve code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2188396 - https://github.com/torvalds/linux/commit/92fbb6d1296f - https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
CVE ID: CVE-2023-2195 State: PUBLISHED Published: 2023-05-16T18:02:33.898Z Last Updated: 2025-01-22T20:34:01.402Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Jenkins Products: Jenkins Code Dx Plugin Problem Types: CWE-352 Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3118
CVE ID: CVE-2023-2196 State: PUBLISHED Published: 2023-05-16T17:46:59.742Z Last Updated: 2025-01-22T20:35:00.678Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Jenkins Products: Jenkins Code Dx Plugin Problem Types: CWE-22 Description: A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Item/Read permission to check for the existence of an attacker-specified file path on an agent file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3145
CVE ID: CVE-2023-2197 State: PUBLISHED Published: 2023-05-01T19:41:17.600Z Last Updated: 2025-02-13T16:40:36.424Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: HashiCorp Products: Vault Enterprise Problem Types: CWE-326 Description: HashiCorp Vault Enterprise 1.13.0 up to 1.13.1 is vulnerable to a padding oracle attack when using an HSM in conjunction with the CKM_AES_CBC_PAD or CKM_AES_CBC encryption mechanisms. An attacker with privileges to modify storage and restart Vault may be able to intercept or modify cipher text in order to derive Vault’s root key. Fixed in 1.13.2 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
Vault’s root key. Fixed in 1.13.2 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2023-14-vault-enterprise-vulnerable-to-padding-oracle-attacks-when-using-a-cbc-based-encryption-mechanism-with-a-hsm/53322 - https://security.netapp.com/advisory/ntap-20230609-0007/