Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-48702 State: PUBLISHED Published: 2023-12-13T20:53:28.786Z Last Updated: 2024-08-02T21:37:54.384Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: jellyfin Products: jellyfin Problem Types: CWE-77 Description: Jellyfin is a system for managing and streaming media. Prior to version 10.8.13, the `/System/MediaEncoder/Path` endpoint executes an arbitrary file using `ProcessStartInfo` via the `ValidateVersion` function. A malicious administrator can setup a network share and supply a UNC path to `/System/MediaEncoder/Path` which points to an executable on the network share, causing Jellyfin server to run the executable in the local context. The end
oints to an executable on the network share, causing Jellyfin server to run the executable in the local context. The endpoint was removed in version 10.8.13. Additional Analyst Notes: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2023-028_jellyfin/ - https://github.com/jellyfin/jellyfin/security/advisories/GHSA-rr9h-w522-cvmr - https://github.com/jellyfin/jellyfin/commit/83d2c69516471e2db72d9273c6a04247d0f37c86
CVE ID: CVE-2023-48703 State: PUBLISHED Published: 2024-03-06T19:18:39.542Z Last Updated: 2024-08-02T21:37:54.599Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: RobotsAndPencils Products: go-saml Problem Types: CWE-287 Description: RobotsAndPencils go-saml, a SAML client library written in Go, contains an authentication bypass vulnerability in all known versions. This is due to how the `xmlsec1` command line tool is called internally to verify the signature of SAML assertions. When `xmlsec1` is used without defining the enabled key data, the origin of the public key for the signature verification is, unfortunately, not restricted. That means an attacker can
e origin of the public key for the signature verification is, unfortunately, not restricted. That means an attacker can sign the SAML assertions themselves and provide the required public key (e.g. an RSA key) directly embedded in the SAML token. Projects still using RobotsAndPencils/go-saml should move to another SAML library or alternatively remove support for SAML from their projects. The vulnerability can likely temporarily be fixed by forking the go-saml project and adding the command line argument `--enabled-key-data` and specifying a value such as `x509` or `raw-x509-cert` when calling the `xmlsec1` binary in the verify function. Please note that this workaround must be carefully test
-cert` when calling the `xmlsec1` binary in the verify function. Please note that this workaround must be carefully tested before it can be used. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2023-121_go-saml__archived_/
CVE ID: CVE-2023-48704 State: PUBLISHED Published: 2023-12-22T15:18:12.846Z Last Updated: 2024-08-02T21:37:54.582Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: ClickHouse Products: ClickHouse Problem Types: CWE-122, CWE-120 Description: ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on port 9000/tcp, triggering a bug in the decompression logic of Gorilla codec that crashes the ClickHouse server process. This attack do
triggering a bug in the decompression logic of Gorilla codec that crashes the ClickHouse server process. This attack does not require authentication. This issue has been addressed in ClickHouse Cloud version 23.9.2.47551 and ClickHouse versions 23.10.5.20, 23.3.18.15, 23.8.8.20, and 23.9.6.20. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ClickHouse/ClickHouse/security/advisories/GHSA-5rmf-5g48-xv63 - https://github.com/ClickHouse/ClickHouse/pull/57107
CVE ID: CVE-2023-48705 State: PUBLISHED Published: 2023-11-22T15:15:06.189Z Last Updated: 2024-08-02T21:37:54.639Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L) Vendors: nautobot Products: nautobot Problem Types: CWE-79 Description: Nautobot is a Network Source of Truth and Network Automation Platform built as a web application All users of Nautobot versions earlier than 1.6.6 or 2.0.5 are potentially affected by a cross-site scripting vulnerability. Due to incorrect usage of Django's `mark_safe()` API when rendering certain types of user-authored content; including custom links, job buttons, and computed fields; it is possible that users with permission to create or
ontent; including custom links, job buttons, and computed fields; it is possible that users with permission to create or edit these types of content could craft a malicious payload (such as JavaScript code) that would be executed when rendering pages containing this content. The maintainers have fixed the incorrect uses of `mark_safe()` (generally by replacing them with appropriate use of `format_html()` instead) to prevent such malicious data from being executed. Users on Nautobot 1.6.x LTM should upgrade to v1.6.6 and users on Nautobot 2.0.x should upgrade to v2.0.5. Appropriate object permissions can and should be applied to restrict which users are permitted to create or edit the aforeme
opriate object permissions can and should be applied to restrict which users are permitted to create or edit the aforementioned types of user-authored content. Other than that, there is no direct workaround available. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nautobot/nautobot/security/advisories/GHSA-cf9f-wmhp-v4pr - https://github.com/nautobot/nautobot/pull/4832 - https://github.com/nautobot/nautobot/pull/4833 - https://github.com/nautobot/nautobot/commit/362850f5a94689a4c75e3188bf6de826c3b012b2 - https://github.com/nautobot/nautobot/commit/54abe23331b6c3d0d82bf1b028c679b1d200920d - https://docs.djangoproject.com/en/3.2/ref/utils/#django.utils.html
bot/commit/54abe23331b6c3d0d82bf1b028c679b1d200920d - https://docs.djangoproject.com/en/3.2/ref/utils/#django.utils.html.format_html - https://docs.djangoproject.com/en/3.2/ref/utils/#django.utils.safestring.mark_safe
CVE ID: CVE-2023-48706 State: PUBLISHED Published: 2023-11-22T22:03:39.503Z Last Updated: 2025-02-13T17:18:19.931Z Severity: LOW (CVSS 3.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: vim Products: vim Problem Types: CWE-416 Description: Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive `:s` call causes free-ing of memory which may later then be accessed by the initial `:s` command. The user must intentionally execute the payload and the whole process is a bit tricky to do since it see
l `:s` command. The user must intentionally execute the payload and the whole process is a bit tricky to do since it seems to work only reliably for the very first :s command. It may also cause a crash of Vim. Version 9.0.2121 contains a fix for this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vim/vim/security/advisories/GHSA-c8qm-x72m-q53q - https://github.com/vim/vim/pull/13552 - https://github.com/vim/vim/commit/26c11c56888d01e298cd8044caf860f3c26f57bb - https://github.com/gandalf4a/crash_report/blob/main/vim/vim_huaf - http://www.openwall.com/lists/oss-security/2023/11/22/3 - https://lists.fedoraproject.org/archives/list/package-announce@lis
://www.openwall.com/lists/oss-security/2023/11/22/3 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DNMFS3IH74KEMMESOA3EOB6MZ56TWGFF/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IVA7K73WHQH4KVFDJQ7ELIUD2WK5ZT5E/ - https://security.netapp.com/advisory/ntap-20240105-0001/
CVE ID: CVE-2023-48707 State: PUBLISHED Published: 2023-11-24T17:23:34.798Z Last Updated: 2024-08-02T21:37:54.651Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N) Vendors: codeigniter4 Products: shield Problem Types: CWE-312 Description: CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. The `secretKey` value is an important key for HMAC SHA256 authentication and in affected versions was stored in the database in cleartext form. If a malicious person somehow had access to the data in the database, they could use the key and secretKey for HMAC SHA256 authentication to send requests impersonating that corresponding user. This issue has
key and secretKey for HMAC SHA256 authentication to send requests impersonating that corresponding user. This issue has been addressed in version 1.0.0-beta.8. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/codeigniter4/shield/security/advisories/GHSA-v427-c49j-8w6x - https://github.com/codeigniter4/shield/commit/f77c6ae20275ac1245330a2b9a523bf7e6f6202f
CVE ID: CVE-2023-48708 State: PUBLISHED Published: 2023-11-24T17:16:15.732Z Last Updated: 2024-08-02T21:37:54.644Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N) Vendors: codeigniter4 Products: shield Problem Types: CWE-532 Description: CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. In affected versions successful login attempts are recorded with the raw tokens stored in the log table. If a malicious person somehow views the data in the log table they can obtain a raw token which can then be used to send a request with that user's authority. This issue has been addressed in version 1.0.0-beta.8. Users are advised to upgrade. User
st with that user's authority. This issue has been addressed in version 1.0.0-beta.8. Users are advised to upgrade. Users unable to upgrade should disable logging for successful login attempts by the configuration files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/codeigniter4/shield/security/advisories/GHSA-j72f-h752-mx4w - https://github.com/codeigniter4/shield/commit/7e84c3fb3411294f70890819bfe51781bb9dc8e4 - https://codeigniter4.github.io/shield/getting_started/authenticators/
CVE ID: CVE-2023-48709 State: PUBLISHED Published: 2024-04-15T17:43:05.871Z Last Updated: 2024-08-02T21:37:54.693Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Combodo Products: iTop Problem Types: CWE-1236, CWE-74 Description: iTop is an IT service management platform. When exporting data from backoffice or portal in CSV or Excel files, users' inputs may include malicious formulas that may be imported into Excel. As Excel 2016 does **not** prevent Remote Code Execution by default, uninformed users may become victims. This vulnerability is fixed in 2.7.9, 3.0.4, 3.1.1, and 3.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refe
ixed in 2.7.9, 3.0.4, 3.1.1, and 3.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Combodo/iTop/security/advisories/GHSA-9q3x-9987-53x9 - https://github.com/Combodo/iTop/commit/083a0b79bfa2c106735b5c10eddb35a05ec7f04a - https://github.com/Combodo/iTop/commit/b10bcb976dfe8e55aa0f659bfbcdd18334a1b17c
CVE ID: CVE-2023-48710 State: PUBLISHED Published: 2024-04-15T17:47:51.113Z Last Updated: 2024-08-02T21:37:54.644Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Combodo Products: iTop Problem Types: CWE-552 Description: iTop is an IT service management platform. Files from the `env-production` folder can be retrieved even though they should have restricted access. Hopefully, there is no sensitive files stored in that folder natively, but there could be from a third-party module. The `pages/exec.php` script as been fixed to limit execution of PHP files only. Other file types won't be retrieved and exposed. The vulnerability is fixed in 2.7.10, 3.0.4, 3.1.
on of PHP files only. Other file types won't be retrieved and exposed. The vulnerability is fixed in 2.7.10, 3.0.4, 3.1.1, and 3.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfc - https://github.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26
CVE ID: CVE-2023-48711 State: PUBLISHED Published: 2023-11-24T17:06:15.019Z Last Updated: 2024-08-02T21:37:54.659Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: cjvnjde Products: google-translate-api-browser Problem Types: CWE-918 Description: google-translate-api-browser is an npm package which interfaces with the google translate web api. A Server-Side Request Forgery (SSRF) Vulnerability is present in applications utilizing the `google-translate-api-browser` package and exposing the `translateOptions` to the end user. An attacker can set a malicious `tld`, causing the application to return unsafe URLs pointing towards local resources. The `translateOptions
a malicious `tld`, causing the application to return unsafe URLs pointing towards local resources. The `translateOptions.tld` field is not properly sanitized before being placed in the Google translate URL. This can allow an attacker with control over the `translateOptions` to set the `tld` to a payload such as `@127.0.0.1`. This causes the full URL to become `https://translate.google.@127.0.0.1/...`, where `translate.google.` is the username used to connect to localhost. An attacker can send requests within internal networks and the local host. Should any HTTPS application be present on the internal network with a vulnerability exploitable via a GET call, then it would be possible to exploi
be present on the internal network with a vulnerability exploitable via a GET call, then it would be possible to exploit this using this vulnerability. This issue has been addressed in release version 4.1.3. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cjvnjde/google-translate-api-browser/security/advisories/GHSA-4233-7q5q-m7p6 - https://github.com/cjvnjde/google-translate-api-browser/commit/33c2eac4a21c6504409e7b06dd16e6346f93d34b
CVE ID: CVE-2023-48712 State: PUBLISHED Published: 2023-11-24T17:02:59.929Z Last Updated: 2024-08-02T21:37:54.649Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: warp-tech Products: warpgate Problem Types: CWE-863 Description: Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. In affected versions there is a privilege escalation vulnerability through a non-admin user's account. Limited users can impersonate another user's account if only single-factor authentication is configured. If a user knows an admin username, opens the login screen and attempts to authenticate with an incorrect password they can subsequently enter a valid non-admin
the login screen and attempts to authenticate with an incorrect password they can subsequently enter a valid non-admin username and password they will be logged in as the admin user. All installations prior to version 0.9.0 are affected. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/warp-tech/warpgate/security/advisories/GHSA-c94j-vqr5-3mxr - https://github.com/warp-tech/warpgate/commit/e3b26b2699257b9482dce2e9157bd9b5e05d9c76
CVE ID: CVE-2023-48713 State: PUBLISHED Published: 2023-11-28T03:44:59.538Z Last Updated: 2024-10-11T17:58:05.682Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: knative Products: serving Problem Types: CWE-400 Description: Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound memory allocation bug. This is a DoS vulnerability, where a non-privileged Knative user can cause a DoS for the cluster. This issue has been patch
s is a DoS vulnerability, where a non-privileged Knative user can cause a DoS for the cluster. This issue has been patched in version 0.39.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/knative/serving/security/advisories/GHSA-qmvj-4qr9-v547 - https://github.com/knative/serving/commit/012ee2509231b80b7842139bfabc30516d3026ca - https://github.com/knative/serving/commit/101f814112b9ca0767f457e7e616b46205551cf1 - https://github.com/knative/serving/commit/fff40ef7bac9be8380ec3d1c70fc15b57093382a
CVE ID: CVE-2023-48714 State: PUBLISHED Published: 2024-01-23T13:49:27.350Z Last Updated: 2025-06-17T21:19:26.348Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: silverstripe Products: silverstripe-framework Problem Types: CWE-200 Description: Silverstripe Framework is the framework that forms the base of the Silverstripe content management system. Prior to versions 4.13.39 and 5.1.11, if a user should not be able to see a record, but that record can be added to a `GridField` using the `GridFieldAddExistingAutocompleter` component, the record's title can be accessed by that user. Versions 4.13.39 and 5.1.11 contain a fix for this issue. Additional Analyst N
ord's title can be accessed by that user. Versions 4.13.39 and 5.1.11 contain a fix for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-qm2j-qvq3-j29v - https://www.silverstripe.org/download/security-releases/CVE-2023-48714
CVE ID: CVE-2023-48715 State: PUBLISHED Published: 2023-12-11T18:40:10.936Z Last Updated: 2024-10-09T13:32:48.167Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Enalean Products: tuleap Problem Types: CWE-79 Description: Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.2.99.103 of Tuleap Community Edition and prior to versions 15.2-4 and 15.1-8 of Tuleap Enterprise Edition, the name of the releases are not properly escaped on the edition page of a release. A malicious user with the ability to create a FRS release could force a victim having write permissions in the FRS to execute uncontrol
r with the ability to create a FRS release could force a victim having write permissions in the FRS to execute uncontrolled code. Tuleap Community Edition 15.2.99.103, Tuleap Enterprise Edition 15.2-4, and Tuleap Enterprise Edition 15.1-8 contain a fix for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Enalean/tuleap/security/advisories/GHSA-3m7g-7787-wc68 - https://github.com/Enalean/tuleap/commit/ea71ec7ee062aae8d1fa7a7325aaa759205c17d8 - https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=ea71ec7ee062aae8d1fa7a7325aaa759205c17d8 - https://tuleap.net/plugins/tracker/?aid=35143
CVE ID: CVE-2023-48716 State: PUBLISHED Published: 2023-12-21T20:53:11.923Z Last Updated: 2024-08-02T21:37:54.671Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Projectworlds Pvt. Limited Products: Student Result Management System Problem Types: CWE-89 Description: Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_id' parameter of the add_classes.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: References: - https://fluidattacks.com/advisories/gilels/ - https://projectworlds.in/
CVE ID: CVE-2023-48717 State: REJECTED Published: 2023-12-21T20:56:36.253Z Last Updated: 2024-01-02T15:30:06.226Z Description: No description available.
CVE ID: CVE-2023-48718 State: PUBLISHED Published: 2023-12-21T20:57:24.817Z Last Updated: 2024-11-27T18:32:57.885Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Projectworlds Pvt. Limited Products: Student Result Management System Problem Types: CWE-89 Description: Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_name' parameter of the add_students.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/gilels/ - h
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/gilels/ - https://projectworlds.in/
CVE ID: CVE-2023-48719 State: REJECTED Published: 2023-12-21T20:59:43.778Z Last Updated: 2024-01-02T15:31:22.094Z Description: No description available.
CVE ID: CVE-2023-48720 State: PUBLISHED Published: 2023-12-21T21:00:42.981Z Last Updated: 2024-08-02T21:37:54.653Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Projectworlds Pvt. Limited Products: Student Result Management System Problem Types: CWE-89 Description: Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: References: - https://fluidattacks.com/advisories/gilels/ - https://projectworlds.in/
CVE ID: CVE-2023-48721 State: REJECTED Published: N/A Last Updated: 2024-01-02T15:34:54.561Z Description: No description available.
CVE ID: CVE-2023-48722 State: PUBLISHED Published: 2023-12-21T21:06:15.284Z Last Updated: 2024-08-02T21:37:54.664Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Projectworlds Pvt. Limited Products: Student Result Management System Problem Types: CWE-89 Description: Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_name' parameter of the add_results.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: References: - https://fluidattacks.com/advisories/gilels/ - https://projectworlds.in/
CVE ID: CVE-2023-48723 State: REJECTED Published: 2023-12-21T21:09:34.912Z Last Updated: 2024-01-02T15:41:58.721Z Description: No description available.
CVE ID: CVE-2023-48724 State: PUBLISHED Published: 2024-04-09T14:12:47.393Z Last Updated: 2025-11-04T18:19:15.967Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Tp-Link Products: AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) Problem Types: CWE-121 Description: A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted HTTP POST request can lead to denial of service of the device's web interface. An attacker can send an unauthenticated HTTP POST request to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vu
ker can send an unauthenticated HTTP POST request to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1864