Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1203 State: PUBLISHED Published: 2023-03-06T16:38:52.008Z Last Updated: 2025-03-06T14:55:36.915Z Vendors: Devolutions Products: Remote Desktop Manager PowerShell Module Problem Types: n/a Description: Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Manager PowerShell Module 2022.3.1.5 and earlier allows an authenticated user to access sensitive data on entries that were edited using the affected submodule. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2023-0004
CVE ID: CVE-2023-1204 State: PUBLISHED Published: 2023-05-03T00:00:00.000Z Last Updated: 2025-01-30T15:23:14.205Z Vendors: GitLab Products: GitLab Problem Types: Vulnerability in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A user could use an unverified email as a public email and commit email by sending a specifically crafted request on user update settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/394745 - https://hackerone.
tainer: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/394745 - https://hackerone.com/reports/1881598 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1204.json
CVE ID: CVE-2023-1205 State: PUBLISHED Published: 2023-03-10T00:00:00.000Z Last Updated: 2025-02-28T16:21:39.723Z Vendors: n/a Products: NETGEAR Nighthawk WiFi6 Router Problem Types: Cross Site Request Forgery Description: NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tenable.com/security/research/tra-2023-9
CVE ID: CVE-2023-1206 State: PUBLISHED Published: 2023-06-30T00:00:00 Last Updated: 2024-10-15T17:11:50.947Z Vendors: n/a Products: Kernel Problem Types: CWE-400 Description: A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2175903 - https://www.debian.org/security/2023/dsa-5480 - https://www.debian.o
tps://bugzilla.redhat.com/show_bug.cgi?id=2175903 - https://www.debian.org/security/2023/dsa-5480 - https://www.debian.org/security/2023/dsa-5492 - https://security.netapp.com/advisory/ntap-20230929-0006/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
CVE ID: CVE-2023-1207 State: PUBLISHED Published: 2023-05-15T12:15:30.045Z Last Updated: 2025-01-24T20:14:30.794Z Vendors: Unknown Products: HTTP Headers Problem Types: CWE-89 SQL Injection Description: This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6f3f460b-542a-4d32-8feb-afa1aef57e37
CVE ID: CVE-2023-1208 State: PUBLISHED Published: 2023-07-10T12:41:23.248Z Last Updated: 2024-11-08T17:47:14.903Z Vendors: Unknown Products: HTTP Headers Problem Types: CWE-284 Improper Access Control Description: This HTTP Headers WordPress plugin before 1.18.11 allows arbitrary data to be written to arbitrary files, leading to a Remote Code Execution vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e0cc6740-866a-4a81-a93d-ff486b79b7f7
CVE ID: CVE-2023-1209 State: PUBLISHED Published: 2023-05-23T16:41:28.194Z Last Updated: 2025-01-17T17:45:49.612Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: ServiceNow Products: ServiceNow Records Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1262967 - https://www.linkedin.com/in/osamay/
CVE ID: CVE-2023-1210 State: PUBLISHED Published: 2023-08-01T23:36:25.668Z Last Updated: 2025-11-20T04:06:13.263Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-209 Description: An issue has been discovered in GitLab affecting all versions starting from 12.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible to leak a user's email via an error message for groups that restrict membership by email domain. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/394775 -
: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/394775 - https://hackerone.com/reports/1884672
CVE ID: CVE-2023-1211 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-03-06T19:27:01.683Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: phpipam Products: phpipam/phpipam Problem Types: CWE-89 Description: SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/ed569124-2aeb-4b0d-a312-435460892afd - https://github.com/phpipam/phpipam/commit/16e7a94fb69412e569ccf6f2fe0a1f847309c922
CVE ID: CVE-2023-1212 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-03-06T18:32:30.084Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: phpipam Products: phpipam/phpipam Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository phpipam/phpipam prior to v1.5.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/3d5199d6-9bb2-4f7b-bd81-bded704da499 - https://github.com/phpipam/phpipam/commit/78e0470100a6cb143fe9af2e336dce80e4620960
CVE ID: CVE-2023-1213 State: PUBLISHED Published: 2023-03-07T21:42:15.723Z Last Updated: 2024-10-17T19:25:52.336Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1411210
CVE ID: CVE-2023-1214 State: PUBLISHED Published: 2023-03-07T21:42:15.917Z Last Updated: 2024-10-17T19:28:30.376Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1412487
CVE ID: CVE-2023-1215 State: PUBLISHED Published: 2023-03-07T21:42:16.203Z Last Updated: 2024-10-17T19:53:48.128Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1417176
CVE ID: CVE-2023-1216 State: PUBLISHED Published: 2023-03-07T21:42:16.442Z Last Updated: 2024-10-15T14:56:00.118Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1417649
CVE ID: CVE-2023-1217 State: PUBLISHED Published: 2023-03-07T21:42:16.676Z Last Updated: 2024-10-15T15:20:03.706Z Vendors: Google Products: Chrome Problem Types: Stack buffer overflow Description: Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1412658
CVE ID: CVE-2023-1218 State: PUBLISHED Published: 2023-03-07T21:42:16.848Z Last Updated: 2024-10-15T15:55:48.500Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1413628
CVE ID: CVE-2023-1219 State: PUBLISHED Published: 2023-03-07T21:42:16.971Z Last Updated: 2025-02-13T16:39:17.739Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1415328 - http://packetstormsecurity.com/files/171795/Chrome-base-debug
nnel-update-for-desktop.html - https://crbug.com/1415328 - http://packetstormsecurity.com/files/171795/Chrome-base-debug-ActivityUserData-ActivityUserData-Heap-Buffer-Overflow.html
CVE ID: CVE-2023-1220 State: PUBLISHED Published: 2023-03-07T21:42:17.093Z Last Updated: 2025-02-13T16:39:18.443Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1417185 - http://packetstormsecurity.com/files/171796/Chrome-base-SampleVec
-update-for-desktop.html - https://crbug.com/1417185 - http://packetstormsecurity.com/files/171796/Chrome-base-SampleVectorBase-MoveSingleSampleToCounts-Heap-Buffer-Overflow.html
CVE ID: CVE-2023-1221 State: PUBLISHED Published: 2023-03-07T21:42:17.215Z Last Updated: 2024-10-15T16:00:07.576Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1385343
CVE ID: CVE-2023-1222 State: PUBLISHED Published: 2023-03-07T21:42:17.341Z Last Updated: 2024-10-10T18:09:53.887Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1403515
CVE ID: CVE-2023-1223 State: PUBLISHED Published: 2023-03-07T21:42:17.468Z Last Updated: 2024-10-10T18:10:59.567Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1398579
CVE ID: CVE-2023-1224 State: PUBLISHED Published: 2023-03-07T21:42:17.668Z Last Updated: 2024-10-10T18:13:11.264Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1403539
CVE ID: CVE-2023-1225 State: PUBLISHED Published: 2023-03-07T21:42:17.836Z Last Updated: 2024-10-10T18:19:01.567Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1408799
CVE ID: CVE-2023-1226 State: PUBLISHED Published: 2023-03-07T21:42:17.961Z Last Updated: 2024-10-10T18:28:51.855Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1013080
CVE ID: CVE-2023-1227 State: PUBLISHED Published: 2023-03-07T21:42:18.106Z Last Updated: 2024-10-10T18:36:37.229Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1348791
CVE ID: CVE-2023-1228 State: PUBLISHED Published: 2023-03-07T21:42:18.300Z Last Updated: 2024-10-10T18:43:28.118Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1365100
CVE ID: CVE-2023-1229 State: PUBLISHED Published: 2023-03-07T21:42:18.478Z Last Updated: 2024-10-09T17:01:57.112Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1160485
CVE ID: CVE-2023-1230 State: PUBLISHED Published: 2023-03-07T21:42:18.627Z Last Updated: 2024-10-09T17:02:49.349Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious WebApp to spoof the contents of the PWA installer via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1404230
CVE ID: CVE-2023-1231 State: PUBLISHED Published: 2023-03-07T21:42:18.762Z Last Updated: 2024-10-09T17:03:47.940Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the omnibox via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1274887
CVE ID: CVE-2023-1232 State: PUBLISHED Published: 2023-03-07T21:42:18.890Z Last Updated: 2024-10-10T19:18:23.449Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive information from API via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1346924
CVE ID: CVE-2023-1233 State: PUBLISHED Published: 2023-03-07T21:42:19.013Z Last Updated: 2024-10-10T19:21:53.808Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from API via a crafted Chrome Extension. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1045681
CVE ID: CVE-2023-1234 State: PUBLISHED Published: 2023-03-07T21:42:19.132Z Last Updated: 2024-10-10T19:22:34.513Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1404621
CVE ID: CVE-2023-1235 State: PUBLISHED Published: 2023-03-07T21:42:19.250Z Last Updated: 2024-10-09T19:46:53.687Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1404704
CVE ID: CVE-2023-1236 State: PUBLISHED Published: 2023-03-07T21:42:19.373Z Last Updated: 2024-10-09T19:48:18.134Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html - https://crbug.com/1374518
CVE ID: CVE-2023-1237 State: PUBLISHED Published: 2023-03-07T00:00:00.000Z Last Updated: 2025-03-06T14:51:17.663Z Severity: LOW (CVSS 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/answerdev/answer/commit/0566894a2c0e13cf07d877f41467e2e21529fee8 - https://huntr.dev/bounties/cc2aa618-05da-495d-a5cd-51c40557d481
CVE ID: CVE-2023-1238 State: PUBLISHED Published: 2023-03-07T00:00:00.000Z Last Updated: 2025-03-06T14:49:16.974Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/52f97267-1439-4bb6-862b-89b8fafce50d - https://github.com/answerdev/answer/commit/0566894a2c0e13cf07d877f41467e2e21529fee8
CVE ID: CVE-2023-1239 State: PUBLISHED Published: 2023-03-07T00:00:00.000Z Last Updated: 2025-03-06T14:46:24.066Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/3a22c609-d2d8-4613-815d-58f5990b8bd8 - https://github.com/answerdev/answer/commit/9870ed87fb24ed468aaf1e169c2d028e0f375106