Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-30785 State: PUBLISHED Published: 2023-08-16T09:48:01.671Z Last Updated: 2024-09-25T15:01:53.933Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: I Thirteen Web Solution Products: Video Grid Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Video Grid plugin <= 1.21 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/video-grid/wordpress-video-grid-plugin-1-21-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30786 State: PUBLISHED Published: 2023-08-16T09:38:46.457Z Last Updated: 2024-09-25T15:02:14.576Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Benjamin Guy Products: Captcha Them All Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Benjamin Guy Captcha Them All plugin <= 1.3.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/captcha-them-all/wordpress-captcha-them-all-plugin-1-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30787 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-02-03T19:05:57.976Z Vendors: n/a Products: MonicaHQ Problem Types: Stored cross-site scripting (XSS) Description: MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/introductions` endpoint and first_met_additional_info parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/napoli - https://www.monicahq.com/
CVE ID: CVE-2023-30788 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-02-04T19:11:04.109Z Vendors: n/a Products: MonicaHQ Problem Types: Stored cross-site scripting (XSS) Description: MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people/add` endpoint and nickName, description, lastName, middleName and firstName parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/napoli - https://www.monicahq.com/
CVE ID: CVE-2023-30789 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-02-03T19:55:01.931Z Vendors: n/a Products: MonicaHQ Problem Types: Stored cross-site scripting (XSS) Description: MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/work` endpoint and job and company parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/napoli - https://www.monicahq.com/
CVE ID: CVE-2023-30790 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-02-03T19:59:00.510Z Vendors: n/a Products: MonicaHQ Problem Types: Stored cross-site scripting (XSS) Description: MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/relationships` endpoint and first_name and last_name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/napoli - https://www.monicahq.com/
CVE ID: CVE-2023-30791 State: PUBLISHED Published: 2023-07-15T18:41:21.703Z Last Updated: 2024-10-30T15:19:28.239Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Plane Products: Plane Problem Types: CWE-434 Description: Plane version 0.7.1-dev allows an attacker to change the avatar of his profile, which allows uploading files with HTML extension that interprets both HTML and JavaScript. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/indio/ - https://github.com/makeplane/plane
CVE ID: CVE-2023-30792 State: PUBLISHED Published: 2023-04-29T02:21:49.696Z Last Updated: 2025-01-30T17:07:21.811Z Vendors: Meta Platforms, Inc Products: Lexical Problem Types: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks in cases where input was being parsed from untrusted sources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/facebook/lexical/releases/tag/v0.10.0
CVE ID: CVE-2023-30795 State: PUBLISHED Published: 2023-08-08T09:20:19.964Z Last Updated: 2024-10-11T22:16:31.109Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: JT Open, JT Utilities, Parasolid V34.0, Parasolid V34.1, Parasolid V35.0, Parasolid V35.1 Problem Types: CWE-125 Description: A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4), Parasolid V34.0 (All versions < V34.0.253), Parasolid V34.1 (All versions < V34.1.243), Parasolid V35.0 (All versions < V35.0.177), Parasolid V35.1 (All versions < V35.1.073). The affected applications contain an out of bounds read past th
V35.0.177), Parasolid V35.1 (All versions < V35.1.073). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-001569.pdf
CVE ID: CVE-2023-30796 State: PUBLISHED Published: 2023-08-08T09:20:21.061Z Last Updated: 2024-10-11T22:14:44.670Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: JT Open, JT Utilities Problem Types: CWE-125 Description: A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
e context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-001569.pdf
CVE ID: CVE-2023-30797 State: PUBLISHED Published: 2023-04-19T19:10:12.523Z Last Updated: 2025-11-21T16:10:24.442Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Netflix Products: Lemur Problem Types: CWE-330 Description: Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2023-001.md - https://github.com/Netflix/lemur/c
tps://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2023-001.md - https://github.com/Netflix/lemur/commit/666d853212174ee7f4e6f8b3b4b389ede1872238 - https://github.com/Netflix/lemur/security/advisories/GHSA-5fqv-mpj8-h7gm - https://vulncheck.com/advisories/netflix-lemur-weak-rng
CVE ID: CVE-2023-30798 State: PUBLISHED Published: 2023-04-21T15:27:47.358Z Last Updated: 2025-11-21T16:11:35.735Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Encode Products: Starlette Problem Types: CWE-400 Description: There MultipartParser usage in Encode's Starlette python framework before versions 0.25.0 allows an unauthenticated and remote attacker to specify any number of form fields or files which can cause excessive memory usage resulting in denial of service of the HTTP service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/encode/starlette/security/advisories/GHSA-74m5-2c7w-9w3x - h
: - CISA ADP Vulnrichment: References: - https://github.com/encode/starlette/security/advisories/GHSA-74m5-2c7w-9w3x - https://github.com/encode/starlette/commit/8c74c2c8dba7030154f8af18e016136bea1938fa - https://vulncheck.com/advisories/starlette-multipartparser-dos
CVE ID: CVE-2023-30799 State: PUBLISHED Published: 2023-07-19T14:56:17.362Z Last Updated: 2025-11-21T16:13:26.803Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: MikroTik Products: RouterOS Problem Types: CWE-269 Description: MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vulncheck.com/advisor
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vulncheck.com/advisories/mikrotik-foisted - https://github.com/MarginResearch/FOISted
CVE ID: CVE-2023-30800 State: PUBLISHED Published: 2023-09-07T15:43:54.429Z Last Updated: 2025-11-21T16:14:51.409Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: MikroTik Products: RouterOS Problem Types: CWE-787 Description: The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immediately restarted. The issue was fixed in RouterOS 6.49.10 stable. RouterOS version 7 is not affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
le. RouterOS version 7 is not affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vulncheck.com/advisories/mikrotik-jsproxy-dos
CVE ID: CVE-2023-30801 State: PUBLISHED Published: 2023-10-10T13:46:46.775Z Last Updated: 2025-11-21T16:15:48.956Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: qBittorrent Products: qBittorrent client Problem Types: CWE-1392 Description: All versions of the qBittorrent client through 4.5.5 use default credentials when the web user interface is enabled. The administrator is not forced to change the default credentials. As of 4.5.5, this issue has not been fixed. A remote attacker can use the default credentials to authenticate and execute arbitrary operating system commands using the "external program" feature in the web user interface. This was reported
te arbitrary operating system commands using the "external program" feature in the web user interface. This was reportedly exploited in the wild in March 2023. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qbittorrent/qBittorrent/issues/18731 - https://vulncheck.com/advisories/qbittorrent-default-creds - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T5WXBKELVZFZNIDONIJESOCSRPIQNCGI/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U4BNFJR3ZWVLE2YSYIQYBWVDQBBZOLEL/
CVE ID: CVE-2023-30802 State: PUBLISHED Published: 2023-10-10T14:07:17.732Z Last Updated: 2024-09-19T13:31:49.684Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Sangfor Products: Net-Gen Application Firewall Problem Types: CWE-540 Description: The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to a source code disclosure vulnerability. A remote and unauthenticated attacker can obtain PHP source code by sending an HTTP request with an invalid Content-Length field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.watchtowr.com/yet-more-unauth-remote-command-execution-vulns-in-firew
CISA ADP Vulnrichment: References: - https://labs.watchtowr.com/yet-more-unauth-remote-command-execution-vulns-in-firewalls-sangfor-edition/ - https://vulncheck.com/advisories/sangfor-ngaf-source - https://aws.amazon.com/marketplace/pp/prodview-uujwjffddxzp4
CVE ID: CVE-2023-30803 State: PUBLISHED Published: 2023-10-10T14:14:04.657Z Last Updated: 2024-09-19T14:23:03.981Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sangfor Products: Net-Gen Application Firewall Problem Types: CWE-290 Description: The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can bypass authentication and access administrative functionality by sending HTTP requests using a crafted Y-forwarded-for header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.watchtowr.com/yet-more-unaut
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.watchtowr.com/yet-more-unauth-remote-command-execution-vulns-in-firewalls-sangfor-edition/ - https://vulncheck.com/advisories/sangfor-ngaf-auth-bypass - https://aws.amazon.com/marketplace/pp/prodview-uujwjffddxzp4
CVE ID: CVE-2023-30804 State: PUBLISHED Published: 2023-10-10T14:21:29.577Z Last Updated: 2024-09-19T14:22:25.662Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Sangfor Products: Net-Gen Application Firewall Problem Types: CWE-200 Description: The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and authenticated attacker can read arbitrary system files using the svpn_html/loadfile.php endpoint. This issue is exploitable by a remote and unauthenticated attacker when paired with CVE-2023-30803. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
ker when paired with CVE-2023-30803. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.watchtowr.com/yet-more-unauth-remote-command-execution-vulns-in-firewalls-sangfor-edition/ - https://vulncheck.com/advisories/sangfor-ngaf-auth-file-disclosure - https://aws.amazon.com/marketplace/pp/prodview-uujwjffddxzp4
CVE ID: CVE-2023-30805 State: PUBLISHED Published: 2023-10-10T14:25:16.222Z Last Updated: 2024-09-18T18:22:33.675Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sangfor Products: Net-Gen Application Firewall Problem Types: CWE-78 Description: The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /LogInOut.php endpoint. This is due to mishandling of shell meta-characters in the "un" parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
shell meta-characters in the "un" parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.watchtowr.com/yet-more-unauth-remote-command-execution-vulns-in-firewalls-sangfor-edition/ - https://vulncheck.com/advisories/sangfor-ngaf-username-rce - https://aws.amazon.com/marketplace/pp/prodview-uujwjffddxzp4
CVE ID: CVE-2023-30806 State: PUBLISHED Published: 2023-10-10T14:27:42.771Z Last Updated: 2025-11-22T14:16:22.540Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sangfor Products: Net-Gen Application Firewall Problem Types: CWE-78 Description: The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /cgi-bin/login.cgi endpoint. This is due to mishandling of shell meta-characters in the PHPSESSID cookie. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
ng of shell meta-characters in the PHPSESSID cookie. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.watchtowr.com/yet-more-unauth-remote-command-execution-vulns-in-firewalls-sangfor-edition/ - https://vulncheck.com/advisories/sangfor-ngaf-sessid-rce - https://aws.amazon.com/marketplace/pp/prodview-uujwjffddxzp4
CVE ID: CVE-2023-30837 State: PUBLISHED Published: 2023-05-08T16:03:06.162Z Last Updated: 2025-01-29T15:27:39.451Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: vyperlang Products: vyper Problem Types: CWE-789 Description: Vyper is a pythonic smart contract language for the EVM. The storage allocator does not guard against allocation overflows in versions prior to 0.3.8. An attacker can overwrite the owner variable. This issue was fixed in version 0.3.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vyperlang/vyper/security/advisories/GHSA-mgv8-gggw-mrg6 - https://github.com/vyperlang/vyper/commi
- https://github.com/vyperlang/vyper/security/advisories/GHSA-mgv8-gggw-mrg6 - https://github.com/vyperlang/vyper/commit/0bb7203b584e771b23536ba065a6efda457161bb
CVE ID: CVE-2023-30838 State: PUBLISHED Published: 2023-04-25T18:22:54.521Z Last Updated: 2025-02-03T19:34:54.511Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: PrestaShop Products: PrestaShop Problem Types: CWE-79 Description: PrestaShop is an Open Source e-commerce web application. Prior to versions 8.0.4 and 1.7.8.9, the `ValidateCore::isCleanHTML()` method of Prestashop misses hijackable events which can lead to cross-site scripting (XSS) injection, allowed by the presence of pre-setup `@keyframes` methods. This XSS, which hijacks HTML attributes, can be triggered without any interaction by the visitor/administrator, which makes it as dangerous as a triv
attributes, can be triggered without any interaction by the visitor/administrator, which makes it as dangerous as a trivial XSS attack. Contrary to other attacks which target HTML attributes and are triggered without user interaction (such as onload / onerror which suffer from a very limited scope), this one can hijack every HTML element, which increases the danger due to a complete HTML elements scope. Versions 8.0.4 and 1.7.8.9 contain a fix for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-fh7r-996q-gvcp - https://github.com/PrestaShop/PrestaShop/commit/46408ae4b02f3b8
hop/PrestaShop/security/advisories/GHSA-fh7r-996q-gvcp - https://github.com/PrestaShop/PrestaShop/commit/46408ae4b02f3b8b1bb6e9dc63af5bcd858abd9c - https://github.com/PrestaShop/PrestaShop/commit/dc682192df0e4b0d656a8e645b29ca1b9dbe3693
CVE ID: CVE-2023-30839 State: PUBLISHED Published: 2023-04-25T18:41:38.777Z Last Updated: 2025-02-03T18:08:09.963Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: PrestaShop Products: PrestaShop Problem Types: CWE-89 Description: PrestaShop is an Open Source e-commerce web application. Versions prior to 8.0.4 and 1.7.8.9 contain a SQL filtering vulnerability. A BO user can write, update, and delete in the database, even without having specific rights. PrestaShop 8.0.4 and 1.7.8.9 contain a patch for this issue. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PrestaS
ds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-p379-cxqh-q822 - https://github.com/PrestaShop/PrestaShop/commit/0f2a9b7fdd42d1dd3b21d4fad586a849642f3c30 - https://github.com/PrestaShop/PrestaShop/commit/d1d27dc371599713c912b71bc2a455cacd7f2149
CVE ID: CVE-2023-30840 State: PUBLISHED Published: 2023-05-08T17:45:46.519Z Last Updated: 2025-01-29T15:26:50.673Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L) Vendors: fluid-cloudnative Products: fluid Problem Types: CWE-863 Description: Fluid is an open source Kubernetes-native distributed dataset orchestrator and accelerator for data-intensive applications. Starting in version 0.7.0 and prior to version 0.8.6, if a malicious user gains control of a Kubernetes node running fluid csi pod (controlled by the `csi-nodeplugin-fluid` node-daemonset), they can leverage the fluid-csi service account to modify specs of all the nodes in the cluster. However, since this se
they can leverage the fluid-csi service account to modify specs of all the nodes in the cluster. However, since this service account lacks `list node` permissions, the attacker may need to use other techniques to identify vulnerable nodes. Once the attacker identifies and modifies the node specs, they can manipulate system-level-privileged components to access all secrets in the cluster or execute pods on other nodes. This allows them to elevate privileges beyond the compromised node and potentially gain full privileged access to the whole cluster. To exploit this vulnerability, the attacker can make all other nodes unschedulable (for example, patch node with taints) and wait for system-cri
ility, the attacker can make all other nodes unschedulable (for example, patch node with taints) and wait for system-critical components with high privilege to appear on the compromised node. However, this attack requires two prerequisites: a compromised node and identifying all vulnerable nodes through other means. Version 0.8.6 contains a patch for this issue. As a workaround, delete the `csi-nodeplugin-fluid` daemonset in `fluid-system` namespace and avoid using CSI mode to mount FUSE file systems. Alternatively, using sidecar mode to mount FUSE file systems is recommended. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fluid-c
ed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fluid-cloudnative/fluid/security/advisories/GHSA-93xx-cvmc-9w3v - https://github.com/fluid-cloudnative/fluid/commit/77c8110a3d1ec077ae2bce6bd88d296505db1550 - https://github.com/fluid-cloudnative/fluid/commit/91c05c32db131997b5ca065e869c9918a125c149 - https://github.com/fluid-cloudnative/fluid/releases/tag/v0.8.6
CVE ID: CVE-2023-30841 State: PUBLISHED Published: 2023-04-26T18:24:04.479Z Last Updated: 2025-01-30T21:30:50.655Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: metal3-io Products: baremetal-operator Problem Types: CWE-200 Description: Baremetal Operator (BMO) is a bare metal host provisioning integration for Kubernetes. Prior to version 0.3.0, ironic and ironic-inspector deployed within Baremetal Operator using the included `deploy.sh` store their `.htpasswd` files as ConfigMaps instead of Secrets. This causes the plain-text username and hashed password to be readable by anyone having a cluster-wide read-access to the management cluster, or access to the ma
ashed password to be readable by anyone having a cluster-wide read-access to the management cluster, or access to the management cluster's Etcd storage. This issue is patched in baremetal-operator PR#1241, and is included in BMO release 0.3.0 onwards. As a workaround, users may modify the kustomizations and redeploy the BMO, or recreate the required ConfigMaps as Secrets per instructions in baremetal-operator PR#1241. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/metal3-io/baremetal-operator/security/advisories/GHSA-9wh7-397j-722m - https://github.com/metal3-io/baremetal-operator/pull/1241