deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-47115
Published: 2024-01-23
Description: Label Studio is an a popular open source data labeling tool. Versions prior to 1.9.2 have a cross-site scripting (XSS) vulnerability that could be exploited when an authenticated user uploads a crafted image file for their avatar that gets rendered as a HTML file on the website. Executing arbitrary JavaScript could result in an attacker performing malicious actions on Label Studio users if they visit the crafted avatar image. For an example, an attacker can craft a JavaScript payload that adds a new Django Super Administrator user if a Django administrator visits the image.

The file `users/functions.py` lines 18-49 show that the only verification check is that the file is an image by extracting the dimensions from the file. Label Studio serves avatar images using Django's built-in `serve` view, which is not secure for production use according to Django's documentation. The issue with the Django `serve` view is that it determines the `Content-Type` of the response by the file extension in the URL path. Therefore, an attacker can upload an image that contains malicious HTML code and name the file with a `.html` extension to be rendered as a HTML page. The only file extension validation is performed on the client-side, which can be easily bypassed.

Version 1.9.2 fixes this issue. Other remediation strategies include validating the file extension on the server side, not in client-side code; removing the use of Django's `serve` view and implement a secure controller for viewing uploaded avatar images; saving file content in the database rather than on the filesystem to mitigate against other file related vulnerabilities; and avoiding trusting user controlled inputs.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://docs.djangoproject.com/en/4.2/ref/views/#serving-files-in-development; https://github.com/HumanSignal/label-studio/blob/1.8.2/label_studio/users/functions.py#L18-L49; https://github.com/HumanSignal/label-studio/blob/1.8.2/label_studio/users/urls.py#L25-L26
CVE: CVE-2024-0804
Published: 2024-01-24
Description: Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 7.5 (HIGH)
CWE: CWE-693
References: https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html; https://crbug.com/1515137; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE: CVE-2024-0805
Published: 2024-01-24
Description: Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Medium)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-451
References: https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html; https://crbug.com/1514925; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE: CVE-2024-0806
Published: 2024-01-24
Description: Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html; https://crbug.com/1505176; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE: CVE-2024-0807
Published: 2024-01-24
Description: Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html; https://crbug.com/1505080; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE: CVE-2024-0808
Published: 2024-01-24
Description: Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191, CWE-191
References: https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html; https://crbug.com/1504936; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE: CVE-2024-0809
Published: 2024-01-24
Description: Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium security severity: Low)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-693
References: https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html; https://crbug.com/1497985; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE: CVE-2024-0810
Published: 2024-01-24
Description: Insufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Medium)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html; https://crbug.com/1496250; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE: CVE-2024-0811
Published: 2024-01-24
Description: Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Low)
CVSS Score: 4.3 (MEDIUM)
References: http://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html; https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html; https://crbug.com/1494490
CVE: CVE-2024-0812
Published: 2024-01-24
Description: Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
References: https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html; https://crbug.com/1484394; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE: CVE-2024-0813
Published: 2024-01-24
Description: Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html; https://crbug.com/1477151; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE: CVE-2024-0814
Published: 2024-01-24
Description: Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-346, CWE-346
References: https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html; https://crbug.com/1463935; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
CVE: CVE-2024-23453
Published: 2024-01-24
Description: Android Spoon application version 7.11.1 to 8.6.0 uses hard-coded credentials, which may allow a local attacker to retrieve the hard-coded API key when the application binary is reverse-engineered. This API key may be used for unexpected access of the associated service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-798, CWE-798
References: https://jvn.jp/en/jp/JVN96154238/; https://play.google.com/store/apps/details?id=co.spoonme&hl=en_US; https://spoon-support.spooncast.net/jp/update
CVE: CVE-2024-23633
Published: 2024-01-24
Description: Label Studio, an open source data labeling tool had a remote import feature allowed users to import data from a remote web source, that was downloaded and could be viewed on the website. Prior to version 1.10.1, this feature could had been abused to download a HTML file that executed malicious JavaScript code in the context of the Label Studio website. Executing arbitrary JavaScript could result in an attacker performing malicious actions on Label Studio users if they visit the crafted avatar image. For an example, an attacker can craft a JavaScript payload that adds a new Django Super Administrator user if a Django administrator visits the image.

`data_import/uploader.py` lines 125C5 through 146 showed that if a URL passed the server side request forgery verification checks, the contents of the file would be downloaded using the filename in the URL. The downloaded file path could then be retrieved by sending a request to `/api/projects/{project_id}/file-uploads?ids=[{download_id}]` where `{project_id}` was the ID of the project and `{download_id}` was the ID of the downloaded file. Once the downloaded file path was retrieved by the previous API endpoint, `data_import/api.py`lines 595C1 through 616C62 demonstrated that the `Content-Type` of the response was determined by the file extension, since `mimetypes.guess_type` guesses the `Content-Type` based on the file extension. Since the `Content-Type` was determined by the file extension of the downloaded file, an attacker could import in a `.html` file that would execute JavaScript when visited.

Version 1.10.1 contains a patch for this issue. Other remediation strategies are also available. For all user provided files that are downloaded by Label Studio, set the `Content-Security-Policy: sandbox;` response header when viewed on the site. The `sandbox` directive restricts a page's actions to prevent popups, execution of plugins and scripts and enforces a `same-origin` policy. Alternatively, restrict the allowed file extensions that may be downloaded.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/sandbox; https://github.com/HumanSignal/label-studio/blob/1.9.2.post0/label_studio/data_import/api.py#L595C1-L616C62; https://github.com/HumanSignal/label-studio/blob/1.9.2.post0/label_studio/data_import/uploader.py#L125C5-L146
CVE: CVE-2024-23638
Published: 2024-01-24
Description: Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Service when generating error pages for Client Manager reports. Squid older than 5.0.5 have not been tested and should be assumed to be vulnerable. All Squid-5.x up to and including 5.9 are vulnerable. All Squid-6.x up to and including 6.5 are vulnerable. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. As a workaround, prevent access to Cache Manager using Squid's main access control: `http_access deny manager`.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-825, CWE-672
References: http://www.squid-cache.org/Versions/v5/SQUID-2023_11.patch; http://www.squid-cache.org/Versions/v6/SQUID-2023_11.patch; https://github.com/squid-cache/squid/commit/290ae202883ac28a48867079c2fb34c40efd382b
CVE: CVE-2022-4964
Published: 2024-01-24
Description: Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://bugs.launchpad.net/ubuntu/+source/pipewire/+bug/1995707/; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4964; https://gitlab.freedesktop.org/pipewire/pipewire/-/merge_requests/1779
CVE: CVE-2024-21765
Published: 2024-01-24
Description: Electronic Delivery Check System (Doboku) Ver.18.1.0 and earlier, Electronic Delivery Check System (Dentsu) Ver.12.1.0 and earlier, Electronic Delivery Check System (Kikai) Ver.10.1.0 and earlier, and Electronic delivery item Inspection Support SystemVer.4.0.31 and earlier improperly restrict XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611, CWE-611
References: http://www.cals-ed.go.jp/checksys-release-20231130/; https://jvn.jp/en/jp/JVN77736613/; https://www.ysk.nilim.go.jp/cals/
CVE: CVE-2024-21796
Published: 2024-01-24
Description: Electronic Deliverables Creation Support Tool (Construction Edition) prior to Ver1.0.4 and Electronic Deliverables Creation Support Tool (Design & Survey Edition) prior to Ver1.0.4 improperly restrict XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://jvn.jp/en/jp/JVN40049211/; https://www.dfeg.mod.go.jp/hp/contents-dfis/tool.html; https://jvn.jp/en/jp/JVN40049211/
CVE: CVE-2024-22380
Published: 2024-01-24
Description: Electronic Delivery Check System (Ministry of Agriculture, Forestry and Fisheries The Agriculture and Rural Development Project Version) March, Heisei 31 era edition Ver.14.0.001.002 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://jvn.jp/en/jp/JVN01434915/; https://www.maff.go.jp/j/nousin/seko/nouhin_youryou/densi.html; https://jvn.jp/en/jp/JVN01434915/
CVE: CVE-2023-31037
Published: 2024-01-24
Description: 
NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network call. A successful exploit of this vulnerability may lead to code execution on the OS.


CVSS Score: 7.2 (HIGH)
CWE: CWE-94, CWE-78
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5511; https://nvidia.custhelp.com/app/answers/detail/a_id/5511
CVE: CVE-2024-22366
Published: 2024-01-24
Description: Active debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who knows how to use the debug function accesses the device's management page, this function can be enabled by performing specific operations. As a result, an arbitrary OS command may be executed and/or configuration settings of the device may be altered. Affected products and versions are as follows: WLX222 firmware Rev.24.00.03 and earlier, WLX413 firmware Rev.22.00.05 and earlier, WLX212 firmware Rev.21.00.12 and earlier, WLX313 firmware Rev.18.00.12 and earlier, and WLX202 firmware Rev.16.00.18 and earlier.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78, CWE-78
References: http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVNVU99896362.html; https://jvn.jp/en/vu/JVNVU99896362/; http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVNVU99896362.html
CVE: CVE-2024-22372
Published: 2024-01-24
Description: OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://jvn.jp/en/vu/JVNVU90908488/; https://www.elecom.co.jp/news/security/20240123-01/; https://jvn.jp/en/vu/JVNVU90908488/
CVE: CVE-2023-43317
Published: 2024-01-24
Description: An issue in Coign CRM Portal v.06.06 allows a remote attacker to escalate privileges via the userPermissionsList parameter in Session Storage component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://github.com/amjadali-110/CVE-2023-43317/; https://github.com/amjadali-110/CVE-2023-43317/
CVE: CVE-2023-51711
Published: 2024-01-24
Description: An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-51711; https://excellium-services.com/cert-xlm-advisory/cve-2023-51711/; https://excellium-services.com/cert-xlm-advisory/cve-2023-51711/
CVE: CVE-2024-0665
Published: 2024-01-24
Description: The WP Customer Area plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 8.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3025865/customer-area/trunk/src/php/core-addons/admin-area/templates/dashboard-page.template.php; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3024180%40customer-area&new=3024180%40customer-area&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/567d62ec-e868-45e2-b07a-8cc661d7c5e1?source=cve
CVE: CVE-2023-43988
Published: 2024-01-24
Description: An issue in nature fitness saijo mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43988.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43988.md
CVE: CVE-2023-43989
Published: 2024-01-24
Description: An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43989.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43989.md
CVE: CVE-2023-43990
Published: 2024-01-24
Description: An issue in cherub-hair mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43990.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43990.md
CVE: CVE-2023-43991
Published: 2024-01-24
Description: An issue in PRIMA CLINIC mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43991.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43991.md
CVE: CVE-2023-43992
Published: 2024-01-24
Description: An issue in STOCKMAN GROUP mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43992.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43992.md
CVE: CVE-2023-43993
Published: 2024-01-24
Description: An issue in smaregi_app_market mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43993.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43993.md
CVE: CVE-2023-43994
Published: 2024-01-24
Description: An issue in Cleaning_makotoya mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43994.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43994.md
CVE: CVE-2023-43995
Published: 2024-01-24
Description: An issue in picot.golf mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43995.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43995.md
CVE: CVE-2023-43996
Published: 2024-01-24
Description: An issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43996.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43996.md
CVE: CVE-2023-43997
Published: 2024-01-24
Description: An issue in Yoruichi hobby base mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43997.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43997.md
CVE: CVE-2023-43998
Published: 2024-01-24
Description: An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43998.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43998.md
CVE: CVE-2023-43999
Published: 2024-01-24
Description: An issue in COLORFUL_laundry mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43999.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43999.md
CVE: CVE-2023-44000
Published: 2024-01-24
Description: An issue in Otakara lapis totuka mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-44000.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-44000.md
CVE: CVE-2023-44001
Published: 2024-01-24
Description: An issue in Ailand clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-44001.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-44001.md
CVE: CVE-2024-0854
Published: 2024-01-24
Description: URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7, 7.1.1-42962-7 and 7.2.1-69057-2 allows remote authenticated users to conduct phishing attacks via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_02; https://www.synology.com/en-global/security/advisory/Synology_SA_24_02