Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
isite, then it can affect the whole cluster. The vulnerability is patched in version 3.0.2 of the `stable` branch and version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-cp7c-fm4c-6xxx - https://github.com/discourse/discourse/pull/20700 - https://github.com/discourse/discourse/pull/20701 - https://github.com/discourse/discourse/commit/0bd64788d2b4680c04fbef76314a24884d65fed9 - https://github.com/discourse/discourse/commit/78a3efa7104eed6dd3ed7a06a71e2705337d9e61
CVE ID: CVE-2023-28108 State: PUBLISHED Published: 2023-03-16T16:34:56.176Z Last Updated: 2025-02-25T14:55:10.634Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: pimcore Products: pimcore Problem Types: CWE-89 Description: Pimcore is an open source data and experience management platform. Prior to version 10.5.19, quoting is not done properly in UUID DAO model. There is the theoretical possibility to inject custom SQL if the developer is using this methods with input data and not doing proper input validation in advance and so relies on the auto-quoting being done by the DAO class. Users should update to version 10.5.19 to receive a patch or, as a workaround,
auto-quoting being done by the DAO class. Users should update to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pimcore/pimcore/security/advisories/GHSA-xc9p-r5qj-8xm9 - https://github.com/pimcore/pimcore/pull/14633 - https://github.com/pimcore/pimcore/commit/08e7ba56ae983c3c67ec563b6989b16ef8f35275.patch
CVE ID: CVE-2023-28109 State: PUBLISHED Published: 2023-03-16T16:49:17.956Z Last Updated: 2025-02-25T14:55:02.690Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: play-with-docker Products: play-with-docker Problem Types: CWE-639 Description: Play With Docker is a browser-based Docker playground. Versions 0.0.2 and prior are vulnerable to domain hijacking. Because CORS configuration was not correct, an attacker could use `play-with-docker.com` as an example and set the origin header in an http request as `evil-play-with-docker.com`. The domain would echo in response header, which successfully bypassed the CORS policy and retrieved basic user information. Thi
ain would echo in response header, which successfully bypassed the CORS policy and retrieved basic user information. This issue has been fixed in commit ed82247c9ab7990ad76ec2bf1498c2b2830b6f1a. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/play-with-docker/play-with-docker/security/advisories/GHSA-vq59-5x26-h639 - https://github.com/play-with-docker/play-with-docker/commit/ed82247c9ab7990ad76ec2bf1498c2b2830b6f1a
CVE ID: CVE-2023-28110 State: PUBLISHED Published: 2023-03-16T16:18:49.977Z Last Updated: 2025-02-25T14:55:29.601Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H) Vendors: jumpserver Products: jumpserver Problem Types: CWE-77 Description: Jumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, refactoring coco's SSH/SFTP service and Web Terminal service. Prior to version 2.28.8, using illegal tokens to connect to a Kubernetes cluster through Koko can result in the execution of dangerous commands that may disrupt the Koko container environment and affect normal usage. The vulnerability has been fixed in v2.2
mmands that may disrupt the Koko container environment and affect normal usage. The vulnerability has been fixed in v2.28.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jumpserver/jumpserver/security/advisories/GHSA-6x5p-jm59-jh29 - https://github.com/jumpserver/jumpserver/releases/tag/v2.28.8
CVE ID: CVE-2023-28111 State: PUBLISHED Published: 2023-03-17T17:00:04.375Z Last Updated: 2025-02-25T14:54:07.874Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: discourse Products: discourse Problem Types: CWE-918 Description: Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, attackers are able to bypass Discourse's server-side request forgery (SSRF) protection for private IPv4 addresses by using a IPv4-mapped IPv6 address. The issue is patched in the latest beta and tests-passed version of Discourse. version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known work
ests-passed version of Discourse. version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-26h3-8ww8-v5fc - https://github.com/discourse/discourse/pull/20710 - https://github.com/discourse/discourse/commit/fd16eade7fcc6bba4b71e71106a2eb13cdfdae4a
CVE ID: CVE-2023-28112 State: PUBLISHED Published: 2023-03-17T18:35:07.984Z Last Updated: 2025-02-25T14:54:01.690Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: discourse Products: discourse Problem Types: CWE-918 Description: Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, some user provided URLs were being passed to FastImage without SSRF protection. Insufficient protections could enable attackers to trigger outbound network connections from the Discourse server to private IP addresses. This affects any site running the `tests-passed` or `beta` branches versions 3.1.0.beta2 and prio
private IP addresses. This affects any site running the `tests-passed` or `beta` branches versions 3.1.0.beta2 and prior. This issue is patched in version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-9897-x229-55gh - https://github.com/discourse/discourse/pull/20710 - https://github.com/discourse/discourse/commit/39c2f63b35d90ebaf67b9604cf1d424e5984203c
CVE ID: CVE-2023-28113 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-25T14:55:51.611Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: warp-tech Products: russh Problem Types: CWE-20, CWE-358 Description: russh is a Rust SSH client and server library. Starting in version 0.34.0 and prior to versions 0.36.2 and 0.37.1, Diffie-Hellman key validation is insufficient, which can lead to insecure shared secrets and therefore breaks confidentiality. Connections between a russh client and server or those of a russh peer with some other misbehaving peer are most likely to be problematic. These may vulnerable to eavesdropping. Most other im
with some other misbehaving peer are most likely to be problematic. These may vulnerable to eavesdropping. Most other implementations reject such keys, so this is mainly an interoperability issue in such a case. This issue is fixed in versions 0.36.2 and 0.37.1 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/warp-tech/russh/commit/d831a3716d3719dc76f091fcea9d94bd4ef97c6e - https://github.com/warp-tech/russh/blob/master/russh/src/kex/dh/groups.rs#L72-L76 - https://github.com/warp-tech/russh/blob/master/russh/src/kex/dh/groups.rs#L78-L81 - https://github.com/warp-tech/russh/releases/tag/v0.36.2 - https://github.com/warp-tech/russh/re
x/dh/groups.rs#L78-L81 - https://github.com/warp-tech/russh/releases/tag/v0.36.2 - https://github.com/warp-tech/russh/releases/tag/v0.37.1 - https://github.com/warp-tech/russh/security/advisories/GHSA-cqvm-j2r2-hwpg
CVE ID: CVE-2023-28114 State: PUBLISHED Published: 2023-03-22T18:30:16.774Z Last Updated: 2025-02-25T14:51:44.533Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: cilium Products: cilium-cli Problem Types: CWE-280, CWE-755 Description: `cilium-cli` is the command line interface to install, manage, and troubleshoot Kubernetes clusters running Cilium. Prior to version 0.13.2,`cilium-cli`, when used to configure cluster mesh functionality, can remove the enforcement of user permissions on the `etcd` store used to mirror local cluster information to remote clusters. Users who have set up cluster meshes using the Cilium Helm chart are not affected by this issue.
on to remote clusters. Users who have set up cluster meshes using the Cilium Helm chart are not affected by this issue. Due to an incorrect mount point specification, the settings specified by the `initContainer` that configures `etcd` users and their permissions are overwritten when using `cilium-cli` to configure a cluster mesh. An attacker who has already gained access to a valid key and certificate for an `etcd` cluster compromised in this manner could then modify state in that `etcd` cluster. This issue is patched in `cilium-cli` 0.13.2. As a workaround, one may use Cilium's Helm charts to create their cluster. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
lium's Helm charts to create their cluster. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cilium/cilium-cli/security/advisories/GHSA-6f27-3p6c-p5jc - https://github.com/cilium/cilium-cli/commit/fb1427025764e1eebc4a7710d902c4f22cae2610 - https://artifacthub.io/packages/helm/cilium/cilium - https://github.com/cilium/cilium-cli/releases/tag/v0.13.2
CVE ID: CVE-2023-28115 State: PUBLISHED Published: 2023-03-17T21:15:25.113Z Last Updated: 2025-02-25T14:53:10.142Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: KnpLabs Products: snappy Problem Types: CWE-502 Description: Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.4.2, Snappy is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the `file_exists()` function. If an attacker can upload files of any type to the server he can pass in the phar:// protocol to unserialize the uploaded file and instantiate arbitrary PHP objects. This can lea
he can pass in the phar:// protocol to unserialize the uploaded file and instantiate arbitrary PHP objects. This can lead to remote code execution especially when snappy is used with frameworks with documented POP chains like Laravel/Symfony vulnerable developer code. If a user can control the output file from the `generateFromHtml()` function, it will invoke deserialization. This vulnerability is capable of remote code execution if Snappy is used with frameworks or developer code with vulnerable POP chains. It has been fixed in version 1.4.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/KnpLabs/snappy/security/advisories/GHSA-g
E Program Container: - CISA ADP Vulnrichment: References: - https://github.com/KnpLabs/snappy/security/advisories/GHSA-gq6w-q6wh-jggc - https://github.com/KnpLabs/snappy/pull/469 - https://github.com/KnpLabs/snappy/commit/1ee6360cbdbea5d09705909a150df7963a88efd6 - https://github.com/KnpLabs/snappy/commit/b66f79334421c26d9c244427963fa2d92980b5d3 - https://github.com/KnpLabs/snappy/blob/5126fb5b335ec929a226314d40cd8dad497c3d67/src/Knp/Snappy/AbstractGenerator.php#L670 - https://github.com/KnpLabs/snappy/releases/tag/v1.4.2
CVE ID: CVE-2023-28116 State: PUBLISHED Published: 2023-03-17T21:22:54.703Z Last Updated: 2025-02-25T14:53:03.165Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: contiki-ng Products: contiki-ng Problem Types: CWE-120 Description: Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write can occur in the BLE L2CAP module of the Contiki-NG operating system. The network stack of Contiki-NG uses a global buffer (packetbuf) for processing of packets, with the size of PACKETBUF_SIZE. In particular, when using the BLE L2CAP module with the default configuration, the PACKETBUF
the size of PACKETBUF_SIZE. In particular, when using the BLE L2CAP module with the default configuration, the PACKETBUF_SIZE value becomes larger then the actual size of the packetbuf. When large packets are processed by the L2CAP module, a buffer overflow can therefore occur when copying the packet data to the packetbuf. The vulnerability has been patched in the "develop" branch of Contiki-NG, and will be included in release 4.9. The problem can be worked around by applying the patch manually. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-m737-4vx6-pfqp - https://github.com/contiki
erences: - https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-m737-4vx6-pfqp - https://github.com/contiki-ng/contiki-ng/pull/2398
CVE ID: CVE-2023-28117 State: PUBLISHED Published: 2023-03-22T19:37:18.748Z Last Updated: 2025-02-25T14:51:37.740Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N) Vendors: getsentry Products: sentry-python Problem Types: CWE-201, CWE-209 Description: Sentry SDK is the official Python SDK for Sentry, real-time crash reporting software. When using the Django integration of versions prior to 1.14.0 of the Sentry SDK in a specific configuration it is possible to leak sensitive cookies values, including the session cookie to Sentry. These sensitive cookies could then be used by someone with access to your Sentry issues to impersonate or escalate their privileges within your
could then be used by someone with access to your Sentry issues to impersonate or escalate their privileges within your application. In order for these sensitive values to be leaked, the Sentry SDK configuration must have `sendDefaultPII` set to `True`; one must use a custom name for either `SESSION_COOKIE_NAME` or `CSRF_COOKIE_NAME` in one's Django settings; and one must not be configured in one's organization or project settings to use Sentry's data scrubbing features to account for the custom cookie names. As of version 1.14.0, the Django integration of the `sentry-sdk` will detect the custom cookie names based on one's Django settings and will remove the values from the payload before s
will detect the custom cookie names based on one's Django settings and will remove the values from the payload before sending the data to Sentry. As a workaround, use the SDK's filtering mechanism to remove the cookies from the payload that is sent to Sentry. For error events, this can be done with the `before_send` callback method and for performance related events (transactions) one can use the `before_send_transaction` callback method. Those who want to handle filtering of these values on the server-side can also use Sentry's advanced data scrubbing feature to account for the custom cookie names. Look for the `$http.cookies`, `$http.headers`, `$request.cookies`, or `$request.headers` fie
or the custom cookie names. Look for the `$http.cookies`, `$http.headers`, `$request.cookies`, or `$request.headers` fields to target with a scrubbing rule. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/getsentry/sentry-python/security/advisories/GHSA-29pr-6jr8-q5jm - https://github.com/getsentry/sentry-python/pull/1842 - https://github.com/getsentry/sentry-python/releases/tag/1.14.0
CVE ID: CVE-2023-28118 State: PUBLISHED Published: 2023-03-20T12:39:42.075Z Last Updated: 2025-02-25T14:52:56.789Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: charleskorn Products: kaml Problem Types: CWE-776 Description: kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Version 0.53.0 and later default to refusing to parse YAML documents containing anchors and aliases. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.co
workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48 - https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a - https://github.com/charleskorn/kaml/releases/tag/0.53.0
CVE ID: CVE-2023-28119 State: PUBLISHED Published: 2023-03-22T19:51:13.210Z Last Updated: 2025-02-25T14:51:31.420Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: crewjam Products: saml Problem Types: CWE-770 Description: The crewjam/saml go library contains a partial implementation of the SAML standard in golang. Prior to version 0.4.13, the package's use of `flate.NewReader` does not limit the size of the input. The user can pass more than 1 MB of data in the HTTP request to the processing functions, which will be decompressed server-side using the Deflate algorithm. Therefore, after repeating the same request multiple times, it is possible to achieve a reli
sing the Deflate algorithm. Therefore, after repeating the same request multiple times, it is possible to achieve a reliable crash since the operating system kills the process. This issue is patched in version 0.4.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/crewjam/saml/security/advisories/GHSA-5mqj-xc49-246p - https://github.com/crewjam/saml/commit/8e9236867d176ad6338c870a84e2039aef8a5021
CVE ID: CVE-2023-28120 State: PUBLISHED Published: 2025-01-09T00:33:47.658Z Last Updated: 2025-01-09T21:46:38.220Z Vendors: Rails Products: ActiveSupport Description: There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.rubyonrails.org/t/cve-2023-28120-possible-xss-security-vulnerability-in-safebuffer-bytesplice/82469 - https://github.com/rails/rails/commit/3cf23c3f891e2e81c977ea4ab83b62bc2a444b70 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPV6PVCX4VDJHLFFT42EXBBSGAWZICOW/ - https://lists.
ct.org/archives/list/package-announce@lists.fedoraproject.org/message/UPV6PVCX4VDJHLFFT42EXBBSGAWZICOW/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZE5W4MH6IE4DV7GELDK6ISCSTFLHKSYO/ - https://security.netapp.com/advisory/ntap-20240202-0006/ - https://www.debian.org/security/2023/dsa-5389
CVE ID: CVE-2023-28121 State: PUBLISHED Published: 2023-04-12T00:00:00 Last Updated: 2024-08-02T12:30:24.170Z Vendors: n/a Products: WooCommerce Payments WordPress Plugin Problem Types: CWE-287 Description: An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to send requests on behalf of an elevated user, like administrator. This allows a remote, unauthenticated attacker to gain admin access on a site that has the affected version of the plugin activated. Additional Analyst Notes: - CVE Program Container: References: - https://developer.woocommerce.com/2023/03/23/critical-vulnerability-detected-in-woocommerce-payments-what-you-n
ences: - https://developer.woocommerce.com/2023/03/23/critical-vulnerability-detected-in-woocommerce-payments-what-you-need-to-know/ - https://www.rcesecurity.com/2023/07/patch-diffing-cve-2023-28121-to-compromise-a-woocommerce/
CVE ID: CVE-2023-28122 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T15:30:04.825Z Vendors: n/a Products: UI Desktop for Windows Problem Types: Privilege Escalation (CAPEC-233) Description: A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-029-029/a47c68f2-1f3a-47c3-b577-eb70
ichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-029-029/a47c68f2-1f3a-47c3-b577-eb70599644e4
CVE ID: CVE-2023-28123 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T15:27:31.624Z Vendors: n/a Products: UI Desktop for Windows Problem Types: CWE-732 Description: A permission misconfiguration in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow an user to hijack VPN credentials while UID VPN is starting.This vulnerability is fixed in Version 0.62.3 and later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-029-029/a47c68f2-1f3a-47c3-b577-eb70599644e4
CVE ID: CVE-2023-28124 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T15:25:22.401Z Vendors: n/a Products: UI Desktop for Windows Problem Types: CWE-326 Description: Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration files to decrypt their content.This vulnerability is fixed in Version 0.62.3 and later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-029-029/a47c68f2-1f3a-47c3-b577-eb70599644e4
CVE ID: CVE-2023-28125 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T14:37:25.739Z Vendors: n/a Products: Avalanche Problem Types: CWE-287 Description: An improper authentication vulnerability exists in Avalanche Premise versions 6.3.x and below that could allow an attacker to gain access to the server by registering to receive messages from the server and perform an authentication bypass. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/ZDI-CAN-17729-CVE-2023-28125-Bug-958437-ZDI-CAN-17729-Ivanti-Avalanche-InfoRail-Authentication-Bypass-Vulnerability?language=en_US
CVE ID: CVE-2023-28126 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T14:24:55.609Z Vendors: n/a Products: Avalanche Problem Types: CWE-305 Description: An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the Race Condition in the authentication message. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/ZDI-CAN-17750-Ivanti-Avalanche-EnterpriseServer-GetSettings-Exposed-Dangerous-Method-Authentication-Bypass-Vulnerability?language=en_US
CVE ID: CVE-2023-28127 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-28T21:07:56.659Z Vendors: n/a Products: Avalanche Problem Types: CWE-22 Description: A path traversal vulnerability exists in Avalanche version 6.3.x and below that when exploited could result in possible information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/ZDI-CAN-17769-Ivanti-Avalanche-getLogFile-Directory-Traversal-Information-Disclosure?language=en_US