deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-32856
Published: 2023-02-21
Description: Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted in versions 1.2.9 and 1.2.12, but it is incomplete.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/microweber/microweber/commit/f3b86d59ab674dbf514f9f9948ddfa091739ab75; https://securitylab.github.com/advisories/GHSL-2021-1005-Microweber/; https://github.com/microweber/microweber/commit/f3b86d59ab674dbf514f9f9948ddfa091739ab75
CVE: CVE-2021-32857
Published: 2023-02-21
Description: Cockpit is a content management system that allows addition of content management functionality to any site. In versions 0.12.2 and prior, bad HTML sanitization in `htmleditor.js` may lead to cross-site scripting (XSS) issues. There are no known patches for this issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/agentejo/cockpit/blob/f7cd602bcc6134657ccfeb4e400b0050943dd243/assets/lib/uikit/js/components/htmleditor.js; https://github.com/agentejo/cockpit/commit/0c6628cbff3e49bc317c97b03a4666b3a75f76cc; https://securitylab.github.com/advisories/GHSL-2021-1035_Cockpit_Next/
CVE: CVE-2021-32858
Published: 2023-02-21
Description: esdoc-publish-html-plugin is a plugin for the document maintenance software ESDoc. TheHTML sanitizer in esdoc-publish-html-plugin 1.1.2 and prior can be bypassed which may lead to cross-site scripting (XSS) issues. There are no known patches for this issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/esdoc/esdoc-plugins/blob/2de5022baa569785a189056a99acd1d7ca8284b7/esdoc-publish-html-plugin/src/Builder/util.js#L80; https://securitylab.github.com/advisories/GHSL-2021-1034_esdoc-publish-html-plugin/; https://github.com/esdoc/esdoc-plugins/blob/2de5022baa569785a189056a99acd1d7ca8284b7/esdoc-publish-html-plugin/src/Builder/util.js#L80
CVE: CVE-2021-32859
Published: 2023-02-21
Description: The Baremetrics date range picker is a solution for selecting both date ranges and single dates from a single calender view. Versions 1.0.14 and prior are prone to cross-site scripting (XSS) when handling untrusted `placeholder` entries. An attacker who is able to influence the field `placeholder` when creating a `Calendar` instance is able to supply arbitrary `html` or `javascript` that will be rendered in the context of a user leading to XSS. There are no known patches for this issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Baremetrics/calendar/blob/240c20134ffbf0f0f246a50feff2be1ff19cf349/public/js/Calendar.js#L724; https://securitylab.github.com/advisories/GHSL-2021-1042_Baremetrics_Date_Range_Picker/; https://github.com/Baremetrics/calendar/blob/240c20134ffbf0f0f246a50feff2be1ff19cf349/public/js/Calendar.js#L724
CVE: CVE-2021-32860
Published: 2023-02-21
Description: iziModal is a modal plugin with jQuery. Versions prior to 1.6.1 are vulnerable to cross-site scripting (XSS) when handling untrusted modal titles. An attacker who is able to influence the field `title` when creating a `iziModal` instance is able to supply arbitrary `html` or `javascript` code that will be rendered in the context of a user, potentially leading to `XSS`. Version 1.6.1 contains a patch for this issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/marcelodolza/iziModal/commit/01728ac52bac5c1b4512087dafe0ad8b091fdc9e; https://github.com/marcelodolza/iziModal/issues/249; https://securitylab.github.com/advisories/GHSL-2021-1044_iziModal/
CVE: CVE-2021-32861
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-32856. Reason: This candidate is a reservation duplicate of CVE-2021-32856. Notes: All CVE users should reference CVE-2021-32856 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2023-0934
Published: 2023-02-21
Description: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.5.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/answerdev/answer/commit/edc06942d51fa8e56a134c5c7e5c8826d9260da0; https://huntr.dev/bounties/cd213098-5bab-487f-82c7-13698ad43b51; https://github.com/answerdev/answer/commit/edc06942d51fa8e56a134c5c7e5c8826d9260da0
CVE: CVE-2023-24184
Published: 2023-02-21
Description: TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/fuxianghah/IOT/tree/main/Motorala/MR2600/13; https://github.com/fuxianghah/IOT/tree/main/Motorala/MR2600/13
CVE: CVE-2023-22920
Published: 2023-02-21
Description: A security misconfiguration vulnerability exists in the Zyxel LTE3316-M604 firmware version V2.00(ABMP.6)C0 due to a factory default misconfiguration intended for testing purposes. A remote attacker could leverage this vulnerability to access an affected device using Telnet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-security-misconfiguration-vulnerability-of-4g-lte-indoor-routers; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-security-misconfiguration-vulnerability-of-4g-lte-indoor-routers
CVE: CVE-2023-22984
Published: 2023-02-21
Description: A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://d0ub1e-d.github.io/2022/12/30/exploit-db-1/; https://d0ub1e-d.github.io/2022/12/30/exploit-db-1/
CVE: CVE-2023-23009
Published: 2023-02-21
Description: Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://github.com/libreswan/libreswan/issues/954; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MFOIQX2LRL43P3GJT33DE7G7COHNXDN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CSMYJH7MC2FZGCY5NH5AXULO3ISXIHOF/
CVE: CVE-2015-10085
Published: 2023-02-21
Description: A vulnerability was found in GoPistolet. It has been declared as problematic. This vulnerability affects unknown code of the component MTA. The manipulation leads to denial of service. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The patch is identified as b91aa4674d[PII_REDACTED]84e8463c70e6d886bc90. It is recommended to apply a patch to fix this issue. VDB-221506 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-404
References: https://github.com/gopistolet/gopistolet/commit/b91aa4674d[PII_REDACTED]84e8463c70e6d886bc90; https://github.com/gopistolet/gopistolet/pull/27; https://vuldb.com/?ctiid.221506
CVE: CVE-2017-20178
Published: 2023-02-21
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Codiad 2.8.0. It has been rated as problematic. Affected by this issue is the function saveJSON of the file components/install/process.php. The manipulation of the argument data leads to information disclosure. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 2.8.1 is able to address this issue. The patch is identified as 517119de673e62547ee472a730be0604f44342b5. It is recommended to upgrade the affected component. VDB-221498 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: https://github.com/Codiad/Codiad/commit/517119de673e62547ee472a730be0604f44342b5; https://github.com/Codiad/Codiad/pull/974; https://github.com/Codiad/Codiad/releases/tag/v.2.8.1
CVE: CVE-2022-48282
Published: 2023-02-21
Description: Under very specific circumstances (see Required configuration section below), a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C#. This affects all MongoDB .NET/C# Driver versions prior to and including v2.18.0

Following configuration must be true for the vulnerability to be applicable:  *  Application must written in C# taking arbitrary data from users and serializing data using _t without any validation AND
  *  Application must be running on a Windows host using the full .NET Framework, not .NET Core AND
  *  Application must have domain model class with a property/field explicitly of type System.Object or a collection of type System.Object (against MongoDB best practice) AND
  *  Malicious attacker must have unrestricted insert access to target database to add a _t discriminator."Following configuration must be true for the vulnerability to be applicable




CVSS Score: 6.6 (MEDIUM)
CWE: CWE-502, CWE-502
References: https://github.com/mongodb/mongo-csharp-driver/releases/tag/v2.19.0; https://jira.mongodb.org/browse/CSHARP-4475; https://github.com/mongodb/mongo-csharp-driver/releases/tag/v2.19.0
CVE: CVE-2023-0942
Published: 2023-02-21
Description: The Japanized For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/woocommerce-for-japan/trunk/includes/admin/views/html-admin-setting-screen.php#L63; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2868545%40woocommerce-for-japan%2Ftrunk&old=2863064%40woocommerce-for-japan%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/blog/2023/03/multiple-reflected-cross-site-scripting-vulnerabilities-in-three-wordpress-plugins-patched/
CVE: CVE-2023-0943
Published: 2023-02-21
Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function save_settings of the file index.php?page=site_settings of the component Image Handler. The manipulation of the argument img with the input ../../shell.php leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-221591.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-434
References: https://vuldb.com/?ctiid.221591; https://vuldb.com/?id.221591; https://vuldb.com/?ctiid.221591
CVE: CVE-2017-20179
Published: 2023-02-21
Description: A vulnerability was found in InSTEDD Pollit 2.3.1. It has been rated as critical. This issue affects the function TourController of the file app/controllers/tour_controller.rb. The manipulation leads to an unknown weakness. The attack may be initiated remotely. Upgrading to version 2.3.2 is able to address this issue. The patch is named 6ef04f8b5972d5f16f8b86f8b53f62fac68d5498. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-221507.
CVSS Score: 6.3 (MEDIUM)
References: https://github.com/instedd/pollit/commit/6ef04f8b5972d5f16f8b86f8b53f62fac68d5498; https://github.com/instedd/pollit/releases/tag/2.3.2; https://vuldb.com/?ctiid.221507
CVE: CVE-2022-46637
Published: 2023-02-21
Description: Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://0xsp.com/security%20research%20%20development%20srd/backdoor-discovered-in-pldt-home-fiber-routers/; https://packetstormsecurity.com/files/170342/ProLink-PRS1841-Backdoor-Account.html; https://prolink2u.com/product/prs1841/
CVE: CVE-2023-0945
Published: 2023-02-21
Description: A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input "><img src=x onerror=prompt(document.domain);> leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-221592.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.221592; https://vuldb.com/?id.221592; https://vuldb.com/?ctiid.221592
CVE: CVE-2023-0946
Published: 2023-02-21
Description: A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file billing/index.php?id=9. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The identifier VDB-221593 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://vuldb.com/?ctiid.221593; https://vuldb.com/?id.221593; https://vuldb.com/?ctiid.221593
CVE: CVE-2023-25158
Published: 2023-02-21
Description: GeoTools is an open source Java library that provides tools for geospatial data. GeoTools includes support for OGC Filter expression language parsing, encoding and execution against a range of datastore. SQL Injection Vulnerabilities have been found when executing OGC Filters with JDBCDataStore implementations. Users are advised to upgrade to either version 27.4 or to 28.2 to resolve this issue. Users unable to upgrade may disable `encode functions` for PostGIS DataStores or enable `prepared statements` for JDBCDataStores as a partial mitigation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b; https://github.com/geotools/geotools/security/advisories/GHSA-99c3-qc2q-p94m; https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b
CVE: CVE-2023-25657
Published: 2023-02-21
Description: Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions earlier than 1.5.7 are impacted by a remote code execution vulnerability. Nautobot did not properly sandbox Jinja2 template rendering. In Nautobot 1.5.7 has enabled sandboxed environments for the Jinja2 template engine used internally for template rendering for the following objects: `extras.ComputedField`, `extras.CustomLink`, `extras.ExportTemplate`, `extras.Secret`, `extras.Webhook`. While no active exploits of this vulnerability are known this change has been made as a preventative measure to protect against any potential remote code execution attacks utilizing maliciously crafted template code. This change forces the Jinja2 template engine to use a `SandboxedEnvironment` on all new installations of Nautobot. This addresses any potential unsafe code execution everywhere the helper function `nautobot.utilities.utils.render_jinja2` is called. Additionally, the documentation that had previously suggesting the direct use of `jinja2.Template` has been revised to suggest `render_jinja2`. Users are advised to upgrade to Nautobot 1.5.7 or newer. For users that are unable to upgrade to the latest release of Nautobot, you may add the following setting to your `nautobot_config.py` to apply the sandbox environment enforcement: `TEMPLATES[1]["OPTIONS"]["environment"] = "jinja2.sandbox.SandboxedEnvironment"` After applying this change, you must restart all Nautobot services, including any Celery worker processes. **Note:** *Nautobot specifies two template engines by default, the first being “django” for the Django built-in template engine, and the second being “jinja” for the Jinja2 template engine. This recommended setting will update the second item in the list of template engines, which is the Jinja2 engine.* For users that are unable to immediately update their configuration such as if a Nautobot service restart is too disruptive to operations, access to provide custom Jinja2 template values may be mitigated using permissions to restrict “change” (write) actions to the affected object types listed in the first section. **Note:** *This solution is intended to be stopgap until you can successfully update your `nautobot_config.py` or upgrade your Nautobot instance to apply the sandboxed environment enforcement.*
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://github.com/nautobot/nautobot/commit/d47f157e83b0c353bb2b697f911882c71cf90ca0; https://github.com/nautobot/nautobot/security/advisories/GHSA-8mfq-f5wj-vw5m; https://jinja.palletsprojects.com/en/3.0.x/sandbox/#sandbox
CVE: CVE-2023-25810
Published: 2023-02-21
Description: Uptime Kuma is a self-hosted monitoring tool. In versions prior to 1.20.0 the Uptime Kuma status page allows a persistent XSS attack. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/louislam/uptime-kuma/security/advisories/GHSA-wh8j-xr66-f296; https://github.com/louislam/uptime-kuma/security/advisories/GHSA-wh8j-xr66-f296
CVE: CVE-2023-25811
Published: 2023-02-21
Description: Uptime Kuma is a self-hosted monitoring tool. In versions prior to 1.20.0 the Uptime Kuma `name` parameter allows a persistent XSS attack. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/louislam/uptime-kuma/security/advisories/GHSA-553g-fcpf-m3wp; https://github.com/louislam/uptime-kuma/security/advisories/GHSA-553g-fcpf-m3wp
CVE: CVE-2023-25812
Published: 2023-02-21
Description: Minio is a Multi-Cloud Object Storage framework. Affected versions do not correctly honor a `Deny` policy on ByPassGoverance. Ideally, minio should return "Access Denied" to all users attempting to DELETE a versionId  with the special header `X-Amz-Bypass-Governance-Retention: true`.  However, this was not honored instead the request will be honored and an object under governance would be incorrectly deleted.  All users are advised to upgrade. There are no known workarounds for this issue.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-281
References: https://github.com/minio/minio/commit/a7188bc9d0f0a5ae05aaf1b8126bcd3cb3fdc485; https://github.com/minio/minio/pull/16635; https://github.com/minio/minio/security/advisories/GHSA-c8fc-mjj8-fc63
CVE: CVE-2023-24320
Published: 2023-02-21
Description: An access control issue in Axcora POS #0~gitf77ec09 allows unauthenticated attackers to execute arbitrary commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://www.youtube.com/watch?v=1FhPL3erWd4; https://yuyudhn.github.io/CVE-2023-24320/; https://www.youtube.com/watch?v=1FhPL3erWd4
CVE: CVE-2023-25157
Published: 2023-02-21
Description: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language (CQL) as part of the Web Feature Service (WFS) and Web Map Service (WMS) protocols.  CQL is also supported through the Web Coverage Service (WCS) protocol for ImageMosaic coverages. Users are advised to upgrade to either version 2.21.4, or version 2.22.2 to resolve this issue. Users unable to upgrade should disable the PostGIS Datastore *encode functions* setting to mitigate ``strEndsWith``, ``strStartsWith`` and ``PropertyIsLike `` misuse and enable the PostGIS DataStore *preparedStatements* setting to mitigate the ``FeatureId`` misuse.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d; https://github.com/geoserver/geoserver/security/advisories/GHSA-7g5f-wrx8-5ccf; https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d
CVE: CVE-2021-23938
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2021-23939
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2021-23940
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2021-23941
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2021-23942
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2021-23943
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2021-23944
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2021-23945
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2021-23946
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2021-23947
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2021-23948
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2021-23949
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2021-23950
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2021-23951
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2021-23952
Published: 2023-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2023-24080
Published: 2023-02-21
Description: A lack of rate limiting on the password reset endpoint of Chamberlain myQ v5.222.0.32277 (on iOS) allows attackers to compromise user accounts via a bruteforce attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307, CWE-307
References: http://chamberlain.com; http://web.archive.org/web/[PII_REDACTED]4550/https://brackish.io/chamberlain-myq-account-takeover/; https://archive.ph/NH0Bk