deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-30217
Published: 2024-04-09
Description: Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can approve or reject a bank account application affecting the integrity of the application. Confidentiality and Availability are not impacted.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3430173; https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364; https://me.sap.com/notes/3430173
CVE: CVE-2024-30218
Published: 2024-04-09
Description: The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. This leads to a considerable impact on availability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-605
References: https://me.sap.com/notes/3359778; https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364; https://me.sap.com/notes/3359778
CVE: CVE-2024-30676
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30678
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30679
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30680
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30681
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30683
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-1664
Published: 2024-04-09
Description: The Responsive Gallery Grid WordPress plugin before 2.3.11 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/fc3beca7-af38-4ab2-b05f-13b47d042b85/; https://wpscan.com/vulnerability/fc3beca7-af38-4ab2-b05f-13b47d042b85/
CVE: CVE-2024-30684
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30686
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30687
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30688
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30690
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-1233
Published: 2024-04-09
Description: A flaw was found in` JwtValidator.resolvePublicKey` in JBoss EAP, where the validator checks jku and sends a HTTP request. During this process, no whitelisting or other filtering behavior is performed on the destination URL address, which may result in a server-side request forgery (SSRF) vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-918
References: https://access.redhat.com/errata/RHSA-2024:3559; https://access.redhat.com/errata/RHSA-2024:3560; https://access.redhat.com/errata/RHSA-2024:3561
CVE: CVE-2024-30691
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30692
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30694
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30695
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30696
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30697
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30699
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30701
Published: 2024-04-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-31365
Published: 2024-04-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themify Post Type Builder (PTB) allows Reflected XSS.This issue affects Post Type Builder (PTB): from n/a before 2.1.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/themify-ptb/wordpress-post-type-builder-ptb-plugin-2-0-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/themify-ptb/wordpress-post-type-builder-ptb-plugin-2-0-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-31366
Published: 2024-04-09
Description: Missing Authorization vulnerability in Themify Post Type Builder (PTB).This issue affects Post Type Builder (PTB): from n/a through 2.0.8.
CVSS Score: 7.1 (HIGH)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/themify-ptb/wordpress-post-type-builder-ptb-plugin-2-0-8-subscriber-arbitrary-post-page-creation-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/themify-ptb/wordpress-post-type-builder-ptb-plugin-2-0-8-subscriber-arbitrary-post-page-creation-vulnerability?_s_id=cve
CVE: CVE-2023-1082
Published: 2024-04-09
Description: An remote attacker with low privileges can perform a command injection which can lead to root access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://cert.vde.com/en/advisories/VDE-2024-009; https://cert.vde.com/en/advisories/VDE-2024-009
CVE: CVE-2023-1083
Published: 2024-04-09
Description: An unauthenticated remote attacker who is aware of a MQTT  topic name can send and receive messages, including GET/SET configuration commands, reboot commands and firmware updates.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://cert.vde.com/en/advisories/VDE-2024-009; https://cert.vde.com/en/advisories/VDE-2024-009
CVE: CVE-2023-50821
Published: 2024-04-09
Description: A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Update 8), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 4), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 1), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 16), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products do not properly validate the input provided in the login dialog box. An attacker could leverage this vulnerability to cause a persistent denial of service condition.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-120
References: https://cert-portal.siemens.com/productcert/html/ssa-730482.html; https://cert-portal.siemens.com/productcert/html/ssa-730482.html
CVE: CVE-2024-26275
Published: 2024-04-09
Description: A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://cert-portal.siemens.com/productcert/html/ssa-222019.html; https://cert-portal.siemens.com/productcert/html/ssa-771940.html; https://cert-portal.siemens.com/productcert/html/ssa-222019.html
CVE: CVE-2024-26276
Published: 2024-04-09
Description: A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected application contains a stack exhaustion vulnerability while parsing a specially crafted X_T file. This could allow an attacker to cause denial of service condition.
CVSS Score: 3.3 (LOW)
CWE: CWE-770
References: https://cert-portal.siemens.com/productcert/html/ssa-222019.html; https://cert-portal.siemens.com/productcert/html/ssa-771940.html; https://cert-portal.siemens.com/productcert/html/ssa-222019.html
CVE: CVE-2024-26277
Published: 2024-04-09
Description: A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted X_T files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
CVSS Score: 3.3 (LOW)
CWE: CWE-476
References: https://cert-portal.siemens.com/productcert/html/ssa-222019.html; https://cert-portal.siemens.com/productcert/html/ssa-771940.html; https://cert-portal.siemens.com/productcert/html/ssa-222019.html
CVE: CVE-2024-31367
Published: 2024-04-09
Description: Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2.
CVSS Score: 7.1 (HIGH)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/soledad/wordpress-soledad-theme-8-4-2-authenticated-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/soledad/wordpress-soledad-theme-8-4-2-authenticated-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-31368
Published: 2024-04-09
Description: Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/soledad/wordpress-soledad-theme-8-4-2-unauthenticated-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/soledad/wordpress-soledad-theme-8-4-2-unauthenticated-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-31369
Published: 2024-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/soledad/wordpress-soledad-theme-8-4-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/soledad/wordpress-soledad-theme-8-4-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2024-31370
Published: 2024-04-09
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CodeIsAwesome AIKit aikit-wordpress-ai-writing-assistant-using-gpt3.This issue affects AIKit: from n/a through <= 4.14.1.
CVSS Score: 8.5 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/Wordpress/Plugin/aikit-wordpress-ai-writing-assistant-using-gpt3/vulnerability/wordpress-codeisawesome-aikit-plugin-4-14-1-sql-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/aikit-wordpress-ai-writing-assistant-using-gpt3/wordpress-codeisawesome-aikit-plugin-4-14-1-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2024-31860
Published: 2024-04-09
Description: Improper Input Validation vulnerability in Apache Zeppelin.

By adding relative path indicators(E.g ..), attackers can see the contents for any files in the filesystem that the server account can access. 
This issue affects Apache Zeppelin: from 0.9.0 before 0.11.0.

Users are recommended to upgrade to version 0.11.0, which fixes the issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/apache/zeppelin/pull/4632; https://lists.apache.org/thread/c0zfjnow3oc3dzc8w5rbkzj8lqj5jm5x; http://www.openwall.com/lists/oss-security/2024/04/09/2
CVE: CVE-2024-31978
Published: 2024-04-09
Description: A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download files from the file system. Under certain circumstances the downloaded files are deleted from the file system.
CVSS Score: 7.6 (HIGH)
CWE: CWE-22
References: https://cert-portal.siemens.com/productcert/html/ssa-128433.html; https://cert-portal.siemens.com/productcert/html/ssa-128433.html
CVE: CVE-2021-28656
Published: 2024-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Credential page of Apache Zeppelin allows an attacker to submit malicious request.  This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2024/04/09/3; https://lists.apache.org/thread/dttzkkv4qyn1rq2fdv1r94otb1osxztc; http://www.openwall.com/lists/oss-security/2024/04/09/3
CVE: CVE-2022-47894
Published: 2024-04-09
Description: Improper Input Validation vulnerability in Apache Zeppelin SAP.This issue affects Apache Zeppelin SAP: from 0.8.0 before 0.11.0.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

For more information, the fix already was merged in the source code but Zeppelin decided to retire the SAP component
NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2024/04/09/4; https://github.com/apache/zeppelin/pull/4302; https://lists.apache.org/thread/csf4k73kkn3nx58pm0p2qrylbox4fvyy
CVE: CVE-2024-31862
Published: 2024-04-09
Description: Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0.

Users are recommended to upgrade to version 0.11.0, which fixes the issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2024/04/09/5; https://github.com/apache/zeppelin/pull/4632; https://lists.apache.org/thread/73xdjx43yg4yz8bd4p3o8vzyybkysmn0
CVE: CVE-2024-3046
Published: 2024-04-09
Description: In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to retrieve the device logs. Also, downloaded logs may be used by an attacker to perform privilege escalation by using the session id of an authenticated user reported in logs.

This issue affects org.eclipse.kura:org.eclipse.kura.web2 version range [2.0.600, 2.4.0], which is included in Eclipse Kura version range [5.0.0, 5.4.1]


CVSS Score: 7.5 (HIGH)
CWE: CWE-303
References: https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/188; https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/188
CVE: CVE-2024-31863
Published: 2024-04-09
Description: Authentication Bypass by Spoofing vulnerability by replacing to exsiting notes in Apache Zeppelin.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0.

Users are recommended to upgrade to version 0.11.0, which fixes the issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-290
References: http://www.openwall.com/lists/oss-security/2024/04/09/6; https://lists.apache.org/thread/3od2gfpwllmtc9c5ggw04ohn8s7w3ct9; http://www.openwall.com/lists/oss-security/2024/04/09/6
CVE: CVE-2024-2223
Published: 2024-04-09
Description: An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and reconfigure the relay. This issue affects the following products that include the vulnerable component: 

Bitdefender Endpoint Security for Linux version 7.0.5.200089
Bitdefender Endpoint Security for  Windows version 7.9.9.380
GravityZone Control Center (On Premises) version 6.36.1

CVSS Score: 8.1 (HIGH)
CWE: CWE-185, CWE-697
References: https://www.bitdefender.com/support/security-advisories/incorrect-regular-expression-in-gravityzone-update-server-va-11465/; https://www.bitdefender.com/support/security-advisories/incorrect-regular-expression-in-gravityzone-update-server-va-11465/
CVE: CVE-2024-2224
Published: 2024-04-09
Description: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects the following products that include the vulnerable component: 

Bitdefender Endpoint Security for Linux version 7.0.5.200089
Bitdefender Endpoint Security for  Windows version 7.9.9.380
GravityZone Control Center (On Premises) version 6.36.1

CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://www.bitdefender.com/support/security-advisories/privilege-escalation-via-the-gravityzone-productmanager-updateserver-kitsmanager-api-va-11466/; https://www.bitdefender.com/support/security-advisories/privilege-escalation-via-the-gravityzone-productmanager-updateserver-kitsmanager-api-va-11466/
CVE: CVE-2024-31544
Published: 2024-04-09
Description: A stored cross-site scripting (XSS) vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrower_name”, “faculty_department” parameters in /classes/Master.php?f=save_record.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/emirhanmtl/vuln-research/blob/main/Stored-XSS-Computer-Laboratory-Management-System-PoC.md; https://github.com/emirhanmtl/vuln-research/blob/main/Stored-XSS-Computer-Laboratory-Management-System-PoC.md
CVE: CVE-2023-6317
Published: 2024-04-09
Description: A prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7. An attacker can create a privileged account without asking the user for the security PIN. 

Full versions and TV models affected:

webOS 4.9.7 - 5.30.40 running on LG43UM7000PLA 
webOS 5.5.0 - 04.50.51 running on OLED55CXPUA 
webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB  
webOS 7.3.1-43 (mullet-mebin) - 03.33.85 running on OLED55A23LA  

CVSS Score: 7.2 (HIGH)
CWE: CWE-639
References: https://bitdefender.com/blog/labs/vulnerabilities-identified-in-lg-webos/; https://lgsecurity.lge.com/bulletins/tv#updateDetails; https://bitdefender.com/blog/labs/vulnerabilities-identified-in-lg-webos/
CVE: CVE-2023-6318
Published: 2024-04-09
Description: A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloudupload service on webOS version 5 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability.

Full versions and TV models affected:

  *  webOS 5.5.0 - 04.50.51 running on OLED55CXPUA 

  *  webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB 

  *  webOS 7.3.1-43 (mullet-mebin) - 03.33.85 running on OLED55A23LA


CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://bitdefender.com/blog/labs/vulnerabilities-identified-in-lg-webos/; https://lgsecurity.lge.com/bulletins/tv#updateDetails; https://bitdefender.com/blog/labs/vulnerabilities-identified-in-lg-webos/
CVE: CVE-2023-6319
Published: 2024-04-09
Description: A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability.

  *  webOS 4.9.7 - 5.30.40 running on LG43UM7000PLA 

  *  webOS 5.5.0 - 04.50.51 running on OLED55CXPUA 

  *  webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB 

  *  webOS 7.3.1-43 (mullet-mebin) - 03.33.85 running on OLED55A23LA


CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://bitdefender.com/blog/labs/vulnerabilities-identified-in-lg-webos/; https://lgsecurity.lge.com/bulletins/tv#updateDetails; https://bitdefender.com/blog/labs/vulnerabilities-identified-in-lg-webos/