Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-41288 State: PUBLISHED Published: 2024-01-05T16:19:10.920Z Last Updated: 2025-04-17T18:12:26.469Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: QNAP Systems Inc. Products: Video Station Problem Types: CWE-78 Description: An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station 5.7.2 ( 2023/11/23 ) and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-55
CVE ID: CVE-2023-41289 State: PUBLISHED Published: 2024-01-05T16:19:05.701Z Last Updated: 2025-06-17T20:29:12.127Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: QcalAgent Problem Types: CWE-78 Description: An OS command injection vulnerability has been reported to affect QcalAgent. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QcalAgent 1.1.8 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-34
CVE ID: CVE-2023-41290 State: PUBLISHED Published: 2024-04-26T15:01:35.472Z Last Updated: 2024-08-12T19:33:32.522Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: QNAP Systems Inc. Products: QuFirewall Problem Types: CWE-22 Description: A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: QuFirewall 2.4.1 ( 2024/02/01 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https
( 2024/02/01 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-17
CVE ID: CVE-2023-41291 State: PUBLISHED Published: 2024-04-26T15:01:31.313Z Last Updated: 2024-08-12T19:34:13.709Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QuFirewall Problem Types: CWE-22 Description: A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: QuFirewall 2.4.1 ( 2024/02/01 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https
CVE ID: CVE-2023-41292 State: PUBLISHED Published: 2024-02-02T16:04:57.919Z Last Updated: 2025-06-17T21:29:23.513Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-120 Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTScloud c5.1.5.2651 and later
: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTScloud c5.1.5.2651 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-46
CVE ID: CVE-2023-41293 State: PUBLISHED Published: 2023-09-25T12:18:42.425Z Last Updated: 2024-09-24T15:12:33.027Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-227 Description: Data security classification vulnerability in the DDMP module. Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41294 State: PUBLISHED Published: 2023-09-25T11:00:34.076Z Last Updated: 2024-09-24T15:23:07.460Z Vendors: Huawei Products: HarmonyOS Problem Types: Weaknesses Introduced During Design Description: The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41295 State: PUBLISHED Published: 2023-09-25T11:02:55.849Z Last Updated: 2024-09-24T20:44:55.989Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of improper permission management in the displayengine module. Successful exploitation of this vulnerability may cause the screen to turn dim. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-41296 State: PUBLISHED Published: 2023-09-25T11:37:37.692Z Last Updated: 2024-09-24T16:21:50.631Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-862 Description: Vulnerability of missing authorization in the kernel module. Successful exploitation of this vulnerability may affect integrity and confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41297 State: PUBLISHED Published: 2023-09-25T11:39:06.939Z Last Updated: 2024-09-24T16:16:44.175Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Weaknesses Introduced During Design Description: Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41298 State: PUBLISHED Published: 2023-09-25T11:40:32.313Z Last Updated: 2024-09-24T16:13:21.160Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41299 State: PUBLISHED Published: 2023-09-25T11:41:44.258Z Last Updated: 2024-09-24T16:02:14.524Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-120 Description: DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41300 State: PUBLISHED Published: 2023-09-25T12:03:58.711Z Last Updated: 2024-09-24T15:56:29.778Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-20 Description: Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41301 State: PUBLISHED Published: 2023-09-25T12:08:30.160Z Last Updated: 2024-09-24T15:20:11.039Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of unauthorized API access in the PMS module. Successful exploitation of this vulnerability may cause features to perform abnormally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41302 State: PUBLISHED Published: 2023-09-25T12:16:12.190Z Last Updated: 2024-09-24T15:14:54.104Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-22 Description: Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41303 State: PUBLISHED Published: 2023-09-25T12:21:38.790Z Last Updated: 2024-09-24T15:00:59.226Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-20 Description: Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in the sock structure to be modified. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41304 State: PUBLISHED Published: 2023-10-11T11:56:35.365Z Last Updated: 2024-09-18T15:10:38.170Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-754 Description: Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-41305 State: PUBLISHED Published: 2023-09-26T01:12:50.286Z Last Updated: 2024-09-24T18:08:00.917Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-326 Description: Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41306 State: PUBLISHED Published: 2023-09-26T01:14:26.222Z Last Updated: 2024-09-24T18:49:21.601Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-362 Description: Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41307 State: PUBLISHED Published: 2023-09-26T01:16:21.629Z Last Updated: 2024-09-24T20:00:44.351Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Stack-based Buffer Overflow Description: Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41308 State: PUBLISHED Published: 2023-09-26T01:17:42.728Z Last Updated: 2024-09-24T19:57:16.117Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41309 State: PUBLISHED Published: 2023-09-26T01:19:07.089Z Last Updated: 2024-09-24T17:45:08.287Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-269 Description: Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41310 State: PUBLISHED Published: 2023-09-26T01:20:44.416Z Last Updated: 2024-09-24T18:48:23.529Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Business Logic Errors Description: Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerability may cause malicious apps to run continuously in the background. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41311 State: PUBLISHED Published: 2023-09-26T01:22:20.306Z Last Updated: 2024-09-25T13:07:33.566Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permission Issues Description: Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause an app to be activated automatically. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41312 State: PUBLISHED Published: 2023-09-26T01:23:42.389Z Last Updated: 2024-09-24T17:42:32.332Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-269 Description: Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause several apps to be activated automatically. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-41313 State: PUBLISHED Published: 2024-03-12T10:16:23.638Z Last Updated: 2025-02-13T17:09:00.819Z Vendors: Apache Software Foundation Products: Apache Doris Problem Types: CWE-208 Description: The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks. Users are recommended to upgrade to version 2.0.0 + or 1.2.8, which fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/jqczy3vxzs6q6rz9o0626j5nks9fnv95 - http://www.openwall.com/lists/oss-security/2024/03/10/2
CVE ID: CVE-2023-41314 State: PUBLISHED Published: 2023-12-18T08:27:51.999Z Last Updated: 2024-11-20T18:11:21.234Z Vendors: Apache Software Foundation Products: Apache Doris Problem Types: CWE-863 Description: The api /api/snapshot and /api/get_log_file would allow unauthenticated access. It could allow a DoS attack or get arbitrary files from FE node. Please upgrade to 2.0.3 to fix these issues. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/tgvpvz3yw7zgodl1sb3sv3jbbz8t5zb4
CVE ID: CVE-2023-41316 State: PUBLISHED Published: 2023-09-07T19:39:07.916Z Last Updated: 2024-09-26T14:12:50.570Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: tolgee Products: tolgee-platform Problem Types: CWE-79, CWE-20 Description: Tolgee is an open-source localization platform. Due to lack of validation field - Org Name, bad actor can send emails with HTML injected code to the victims. Registered users can inject HTML into unsanitized emails from the Tolgee instance to other users. This unsanitized HTML ends up in invitation emails which appear as legitimate org invitations. Bad actors may direct users to malicious website or execute javascript in th
which appear as legitimate org invitations. Bad actors may direct users to malicious website or execute javascript in the context of the users browser. This vulnerability has been addressed in version 3.29.2. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tolgee/tolgee-platform/security/advisories/GHSA-gx3w-rwh5-w5cg - https://github.com/tolgee/tolgee-platform/commit/bab718b1c9b3e90327bfb10d27b9799996e5c35b
CVE ID: CVE-2023-41317 State: PUBLISHED Published: 2023-09-05T18:31:43.185Z Last Updated: 2024-09-30T19:17:12.220Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: apollographql Products: router Problem Types: CWE-755 Description: The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Affected versions are subject to a Denial-of-Service (DoS) type vulnerability which causes the Router to panic and terminate when GraphQL Subscriptions are enabled. It can be triggered when **all of the following conditions are met**: 1. Running Apollo Router v1.28.0, v1.28.1 or v1.29.0 ("impa
triggered when **all of the following conditions are met**: 1. Running Apollo Router v1.28.0, v1.28.1 or v1.29.0 ("impacted versions"); **and** 2. The Supergraph schema provided to the Router (either via Apollo Uplink or explicitly via other configuration) **has a `subscription` type** with root-fields defined; **and** 3. The YAML configuration provided to the Router **has subscriptions enabled** (they are _disabled_ by default), either by setting `enabled: true` _or_ by setting a valid `mode` within the `subscriptions` object (as seen in [subscriptions' documentation](https://www.apollographql.com/docs/router/executing-operations/subscription-support/#router-setup)); **and** 4. An [anonymo
ps://www.apollographql.com/docs/router/executing-operations/subscription-support/#router-setup)); **and** 4. An [anonymous](https://spec.graphql.org/draft/#sec-Anonymous-Operation-Definitions) (i.e., un-named) `subscription` operation (e.g., `subscription { ... }`) is received by the Router If **all four** of these criteria are met, the impacted versions will panic and terminate. There is no data-privacy risk or sensitive-information exposure aspect to this vulnerability. This is fixed in Apollo Router v1.29.1. Users are advised to upgrade. Updating to v1.29.1 should be a clear and simple upgrade path for those running impacted versions. However, if Subscriptions are **not** necessary for yo
lear and simple upgrade path for those running impacted versions. However, if Subscriptions are **not** necessary for your Graph – but are enabled via configuration — then disabling subscriptions is another option to mitigate the risk. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apollographql/router/security/advisories/GHSA-w8vq-3hf9-xppx - https://github.com/apollographql/router/commit/b295c103dd86c57c848397d32e8094edfa8502aa - https://github.com/apollographql/router/releases/tag/v1.29.1
CVE ID: CVE-2023-41318 State: PUBLISHED Published: 2023-09-08T19:51:20.011Z Last Updated: 2024-09-26T14:03:33.058Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: turt2live Products: matrix-media-repo Problem Types: CWE-79 Description: matrix-media-repo is a highly customizable multi-domain media repository for the Matrix chat ecosystem. In affected versions an attacker could upload a malicious piece of media to the media repo, which would then be served with `Content-Disposition: inline` upon download. This vulnerability could be leveraged to execute scripts embedded in SVG content. Commits `77ec235` and `bf8abdd` fix the issue and are included in the 1.3.0
to execute scripts embedded in SVG content. Commits `77ec235` and `bf8abdd` fix the issue and are included in the 1.3.0 release. Operators should upgrade to v1.3.0 as soon as possible. Operators unable to upgrade should override the `Content-Disposition` header returned by matrix-media-repo as a workaround. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/turt2live/matrix-media-repo/security/advisories/GHSA-5crw-6j7v-xc72 - https://github.com/turt2live/matrix-media-repo/commit/77ec2354e8f46d5ef149d1dcaf25f51c04149137 - https://github.com/turt2live/matrix-media-repo/commit/bf8abdd7a5371118e280c65a8e0ec2b2e9bdaf59 - https://developer
137 - https://github.com/turt2live/matrix-media-repo/commit/bf8abdd7a5371118e280c65a8e0ec2b2e9bdaf59 - https://developer.mozilla.org/en-US/docs/Web/SVG/Element/script
CVE ID: CVE-2023-41319 State: PUBLISHED Published: 2023-09-06T17:54:30.889Z Last Updated: 2024-09-26T19:31:57.634Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ethyca Products: fides Problem Types: CWE-94, CWE-693 Description: Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. The Fides webserver API allows custom integrations to be uploaded as a ZIP file. This ZIP file must contain YAML files, but Fides can be configured to also accept the inclusion of custom Python code in it. The custom code is executed in a restricted, sa
be configured to also accept the inclusion of custom Python code in it. The custom code is executed in a restricted, sandboxed environment, but the sandbox can be bypassed to execute any arbitrary code. The vulnerability allows the execution of arbitrary code on the target system within the context of the webserver python process owner on the webserver container, which by default is `root`, and leverage that access to attack underlying infrastructure and integrated systems. This vulnerability affects Fides versions `2.11.0` through `2.19.0`. Exploitation is limited to API clients with the `CONNECTOR_TEMPLATE_REGISTER` authorization scope. In the Fides Admin UI this scope is restricted to hi