Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ve information and impersonate other users with higher privileges than themselves. The issue has been patched in v3.3.1. There is no other mitigation than upgrading CubeFS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cubefs/cubefs/security/advisories/GHSA-vwch-g97w-hfg2 - https://github.com/cubefs/cubefs/commit/8dccce6ac8dff3db44d7e9074094c7303a5ff5dd
CVE ID: CVE-2023-46743 State: PUBLISHED Published: 2023-11-09T15:32:21.852Z Last Updated: 2024-09-04T13:49:40.913Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: xwikisas Products: application-collabora Problem Types: CWE-276 Description: application-collabora is an integration of Collabora Online in XWiki. As part of the application use cases, depending on the rights that a user has over a document, they should be able to open the office attachments files in view or edit mode. Currently, if a user opens an attachment file in edit mode in collabora, this right will be preserved for all future users, until the editing session is closes, even if some of them ha
llabora, this right will be preserved for all future users, until the editing session is closes, even if some of them have only view right. Collabora server is the one issuing this request and it seems that the `userCanWrite` query parameter is cached, even if, for example, token is not. This issue has been patched in version 1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwikisas/application-collabora/security/advisories/GHSA-mvq3-xxg2-rj57
CVE ID: CVE-2023-46744 State: PUBLISHED Published: 2023-11-07T17:22:25.951Z Last Updated: 2024-09-04T15:24:18.995Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Squidex Products: squidex Problem Types: CWE-79 Description: Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting (XSS) vulnerability enables privilege escalation of authenticated users. The SVG element filtering mechanism intended to stop XSS attacks through uploaded SVG images, is insufficient resulting to stored XSS attacks. Squidex allows the CMS contributors to be granted the permission of uploading an SVG asset. When the asset i
SS attacks. Squidex allows the CMS contributors to be granted the permission of uploading an SVG asset. When the asset is uploaded, a filtering mechanism is performed to validate that the SVG does not contain malicious code. The validation logic consists of traversing the HTML nodes in the DOM. In order for the validation to succeed, 2 conditions must be met: 1. No HTML tags included in a "blacklist" called "InvalidSvgElements" are present. This list only contains the element "script". and 2. No attributes of HTML tags begin with "on" (i.e. onerror, onclick) (line 65). If either of the 2 conditions is not satisfied, validation fails and the file/asset is not uploaded. However it is possible
ither of the 2 conditions is not satisfied, validation fails and the file/asset is not uploaded. However it is possible to bypass the above filtering mechanism and execute arbitrary JavaScript code by introducing other HTML elements such as an <iframe> element with a "src" attribute containing a "javascript:" value. Authenticated adversaries with the "assets.create" permission, can leverage this vulnerability to upload a malicious SVG as an asset, targeting any registered user that will attempt to open/view the asset through the Squidex CMS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Squidex/squidex/security/advisories/GHSA-xf
Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Squidex/squidex/security/advisories/GHSA-xfr4-qg2v-7v5m
CVE ID: CVE-2023-46745 State: PUBLISHED Published: 2023-11-17T21:42:43.134Z Last Updated: 2024-08-29T14:09:05.812Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: librenms Products: librenms Problem Types: CWE-307 Description: LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. In affected versions the login method has no rate limit. An attacker may be able to leverage this vulnerability to gain access to user accounts. This issue has been addressed in version 23.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. Addi
addressed in version 23.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/librenms/librenms/security/advisories/GHSA-rq42-58qf-v3qx
CVE ID: CVE-2023-46746 State: PUBLISHED Published: 2023-12-01T21:53:19.584Z Last Updated: 2024-08-02T20:53:20.967Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: PostHog Products: posthog Problem Types: CWE-918 Description: PostHog provides open-source product analytics, session recording, feature flagging and A/B testing that you can self-host. A server-side request forgery (SSRF), which can only be exploited by authenticated users, was found in Posthog. Posthog did not verify whether a URL was local when enabling webhooks, allowing authenticated users to forge a POST request. This vulnerability has been addressed in `22bd5942` and will be included in subs
nticated users to forge a POST request. This vulnerability has been addressed in `22bd5942` and will be included in subsequent releases. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PostHog/posthog/security/advisories/GHSA-wqqw-r8c5-j67c - https://github.com/PostHog/posthog/commit/22bd5942638d5d9bc4bd603a9bfe8f8a95572292 - https://securitylab.github.com/advisories/GHSL-2023-185_posthog_posthog/
CVE ID: CVE-2023-46747 State: PUBLISHED Published: 2023-10-26T20:04:53.929Z Last Updated: 2025-10-21T23:05:33.431Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-288 Description: Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000137353 - http://packetstormsecurity.com/files/175673/F5-BIG-IP-TMUI-AJP-Smuggling-Remote-Command-Execution.html - https://www.secpod.com/blog/f5-issues-warning-big-ip-vulnerability-used-in-active-exploit-chain/
CVE ID: CVE-2023-46748 State: PUBLISHED Published: 2023-10-26T20:05:04.967Z Last Updated: 2025-10-21T23:05:33.293Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-89 Description: An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
hnical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000137365 - https://www.secpod.com/blog/f5-issues-warning-big-ip-vulnerability-used-in-active-exploit-chain/
CVE ID: CVE-2023-46749 State: PUBLISHED Published: 2024-01-15T09:57:31.613Z Last Updated: 2025-11-03T21:50:03.484Z Vendors: Apache Software Foundation Products: Apache Shiro Problem Types: CWE-22 Description: Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when used together with path rewriting Mitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+, or ensure `blockSemicolon` is enabled (this is the default). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/mdv7ftz7k4488rzloxo2fb0p9shnp9wm
CVE ID: CVE-2023-46750 State: PUBLISHED Published: 2023-12-14T08:15:58.031Z Last Updated: 2025-11-03T21:50:05.435Z Vendors: Apache Software Foundation Products: Apache Shiro Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro. Mitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/hoc9zdyzmmrfj1zhctsvvtx844tcq6w9
CVE ID: CVE-2023-46751 State: PUBLISHED Published: 2023-12-06T00:00:00 Last Updated: 2024-08-02T20:53:21.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer. Additional Analyst Notes: - CVE Program Container: References: - https://ghostscript.com/ - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=dcdbc595c13c9d11d235702dff46bb74c80f7698 - https://bugs.ghostscript.com/show_bug.cgi?id=707264 - https://www.debian.org/security/2023/dsa-5578
CVE ID: CVE-2023-46752 State: PUBLISHED Published: 2023-10-26T00:00:00.000Z Last Updated: 2025-11-04T16:10:40.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI data, leading to a crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35 - https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
CVE ID: CVE-2023-46753 State: PUBLISHED Published: 2023-10-26T00:00:00.000Z Last Updated: 2025-11-04T16:10:41.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without mandatory attributes, e.g., one with only an unknown transit attribute. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FRRouting/frr/pull/14645/commits/d8482bf011cb2b173e85b65b4bf3d5061250cdb9 - https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
CVE ID: CVE-2023-46754 State: PUBLISHED Published: 2023-10-26T00:00:00 Last Updated: 2024-10-29T20:06:55.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary numerical values. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/obl-ong/admin/releases/tag/v1.1.2
CVE ID: CVE-2023-46755 State: PUBLISHED Published: 2023-11-08T10:11:18.525Z Last Updated: 2024-09-03T20:34:53.624Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper Access Control Description: Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerability may cause the launcher to restart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46756 State: PUBLISHED Published: 2023-11-08T10:12:50.853Z Last Updated: 2024-09-04T14:40:08.537Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46757 State: PUBLISHED Published: 2023-11-08T10:13:49.070Z Last Updated: 2024-09-04T14:34:24.081Z Vendors: Huawei Products: HarmonyOS Problem Types: CWE-200 Description: The remote PIN module has a vulnerability that causes incorrect information storage locations.Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46758 State: PUBLISHED Published: 2023-11-08T10:18:22.152Z Last Updated: 2024-09-04T14:32:13.777Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-269 Description: Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46759 State: PUBLISHED Published: 2023-11-08T10:20:04.805Z Last Updated: 2024-09-04T14:24:07.643Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Permission control vulnerability in the call module. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46760 State: PUBLISHED Published: 2023-11-08T09:30:02.430Z Last Updated: 2024-09-04T19:31:27.423Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-787 Description: Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46761 State: PUBLISHED Published: 2023-11-08T09:31:00.389Z Last Updated: 2024-09-04T19:34:26.787Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-787 Description: Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46762 State: PUBLISHED Published: 2023-11-08T09:32:04.437Z Last Updated: 2024-09-04T19:36:31.487Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-125 Description: Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46763 State: PUBLISHED Published: 2023-11-08T09:33:20.439Z Last Updated: 2024-09-04T14:55:04.015Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Data Processing Errors Description: Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause background apps to start maliciously. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46764 State: PUBLISHED Published: 2023-11-08T10:10:02.277Z Last Updated: 2024-09-04T14:50:14.654Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration Description: Unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause background apps to start maliciously. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46765 State: PUBLISHED Published: 2023-11-08T09:14:18.869Z Last Updated: 2024-10-28T20:53:53.424Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Uncaught Exception Description: Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46766 State: PUBLISHED Published: 2023-11-08T09:16:02.973Z Last Updated: 2024-09-04T19:24:05.993Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-125 Description: Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46767 State: PUBLISHED Published: 2023-11-08T09:27:46.514Z Last Updated: 2024-09-04T19:28:35.104Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-125 Description: Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46768 State: PUBLISHED Published: 2023-11-08T02:51:12.992Z Last Updated: 2024-09-04T14:58:19.576Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-416 Description: Multi-thread vulnerability in the idmap module. Successful exploitation of this vulnerability may cause features to perform abnormally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46769 State: PUBLISHED Published: 2023-11-08T02:52:20.476Z Last Updated: 2024-09-04T14:57:04.410Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-416 Description: Use-After-Free (UAF) vulnerability in the dubai module. Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46770 State: PUBLISHED Published: 2023-11-08T02:53:45.996Z Last Updated: 2024-09-04T19:00:14.137Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper Handling of Length Parameter Inconsistency Description: Out-of-bounds vulnerability in the sensor module. Successful exploitation of this vulnerability may cause mistouch prevention errors on users' mobile phones. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46771 State: PUBLISHED Published: 2023-11-08T09:03:34.784Z Last Updated: 2024-09-04T19:01:40.614Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-269 Description: Security vulnerability in the face unlock module. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46772 State: PUBLISHED Published: 2023-11-08T09:06:45.198Z Last Updated: 2024-09-04T19:08:34.413Z Vendors: Huawei Products: EMUI Problem Types: Heap-based Buffer Overflow Description: Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vulnerability may cause errors in reading file data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46773 State: PUBLISHED Published: 2023-12-06T08:31:12.555Z Last Updated: 2024-08-02T20:53:21.593Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Permission management vulnerability in the PMS module. Successful exploitation of this vulnerability may cause privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2023/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202312-0000001758430245
CVE ID: CVE-2023-46774 State: PUBLISHED Published: 2023-11-08T09:12:36.859Z Last Updated: 2024-09-04T19:19:38.453Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Uncaught Exception Description: Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-46775 State: PUBLISHED Published: 2023-11-06T10:59:01.108Z Last Updated: 2024-09-05T15:40:03.344Z Vendors: Djo Products: Original texts Yandex WebMaster Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Djo Original texts Yandex WebMaster plugin <= 1.18 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/original-texts-yandex-webmaster/wordpress-original-texts-yandex-webmaster-plugin-1-18-cross-site-request-forgery-csrf-vulnerability?_s_id=cve