deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-29442
Published: 2023-04-26
Description: Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2023-29442.html; https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2023-29442.html
CVE: CVE-2023-29443
Published: 2023-04-26
Description: Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://www.manageengine.com/products/service-desk/CVE-2023-29443.html; https://www.manageengine.com/products/service-desk/CVE-2023-29443.html
CVE: CVE-2023-2291
Published: 2023-04-26
Description: Static credentials exist in the PostgreSQL data used in ManageEngine Access Manager Plus (AMP) build 4309, ManageEngine Password Manager Pro, and ManageEngine PAM360. These credentials could allow a malicious actor to modify configuration data that would escalate their permissions from that of a low-privileged user to an Administrative user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-798
References: https://tenable.com/security/research/tra-2023-16; https://tenable.com/security/research/tra-2023-16
CVE: CVE-2023-30363
Published: 2023-04-26
Description: vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321, CWE-1321
References: https://cwe.mitre.org/data/definitions/1321.html; https://github.com/Tencent/vConsole/issues/616; https://cwe.mitre.org/data/definitions/1321.html
CVE: CVE-2023-30843
Published: 2023-04-26
Description: Payload is a free and open source headless content management system. In versions prior to 1.7.0, if a user has access to documents that contain hidden fields or fields they do not have access to, the user could reverse-engineer those values via brute force. Version 1.7.0 contains a patch. As a workaround, write a `beforeOperation` hook to remove `where` queries that attempt to access hidden field data.
CVSS Score: 7.4 (HIGH)
CWE: CWE-200
References: https://github.com/payloadcms/payload/releases/tag/v1.7.0; https://github.com/payloadcms/payload/security/advisories/GHSA-35jj-vqcf-f2jf; https://github.com/payloadcms/payload/releases/tag/v1.7.0
CVE: CVE-2023-30845
Published: 2023-04-26
Description: ESPv2 is a service proxy that provides API management capabilities using Google Service Infrastructure. ESPv2 2.20.0 through 2.42.0 contains an authentication bypass vulnerability. API clients can craft a malicious `X-HTTP-Method-Override` header value to bypass JWT authentication in specific cases.

ESPv2 allows malicious requests to bypass authentication if both the conditions are true: The requested HTTP method is **not** in the API service definition (OpenAPI spec or gRPC `google.api.http` proto annotations, and the specified `X-HTTP-Method-Override` is a valid HTTP method in the API service definition. ESPv2 will forward the request to your backend without checking the JWT. Attackers can craft requests with a malicious `X-HTTP-Method-Override` value that allows them to bypass specifying JWTs. Restricting API access with API keys works as intended and is not affected by this vulnerability.

Upgrade deployments to release v2.43.0 or higher to receive a patch. This release ensures that JWT authentication occurs, even when the caller specifies `x-http-method-override`. `x-http-method-override` is still supported by v2.43.0+. API clients can continue sending this header to ESPv2.
CVSS Score: 8.2 (HIGH)
CWE: CWE-287
References: https://github.com/GoogleCloudPlatform/esp-v2/commit/0bcdfc024ce96b34db4e1b4f2211b509d9be93cd; https://github.com/GoogleCloudPlatform/esp-v2/commit/e95670146f5e96bb5565b0a9c1e153886b3e04ce; https://github.com/GoogleCloudPlatform/esp-v2/commit/e98061ee4527a564506ba4e814c0ecf324dc2c6f
CVE: CVE-2023-30846
Published: 2023-04-26
Description: typed-rest-client is a library for Node Rest and Http Clients with typings for use with TypeScript. Users of the typed-rest-client library version 1.7.3 or lower are vulnerable to leak authentication data to 3rd parties. The flow of the vulnerability is as follows: First, send any request with `BasicCredentialHandler`, `BearerCredentialHandler` or `PersonalAccessTokenCredentialHandler`. Second, the target host may return a redirection (3xx), with a link to a second host. Third, the next request will use the credentials to authenticate with the second host, by setting the `Authorization` header. The expected behavior is that the next request will *NOT* set the `Authorization` header. The problem was fixed in version 1.8.0. There are no known workarounds.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-522
References: https://github.com/microsoft/typed-rest-client/commit/f9ff755631b982ee1303dfc3e3c823d0d31233e8; https://github.com/microsoft/typed-rest-client/security/advisories/GHSA-558p-m34m-vpmq; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-45876
Published: 2023-04-26
Description: Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-05; https://www.vbase.net/en/download.php; https://www.visam.com/kontakt.php
CVE: CVE-2023-27107
Published: 2023-04-26
Description: Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch 32 and Central Server before 8.2 Patch 22 allows users who do not have appropriate access rights to generate internal reports using a direct URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863, CWE-863
References: https://gist.github.com/smidtbx10/f8ff1c4977b7f54886c6a52e9ef4e816; https://gist.github.com/smidtbx10/f8ff1c4977b7f54886c6a52e9ef4e816
CVE: CVE-2023-1786
Published: 2023-04-26
Description: Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://bugs.launchpad.net/cloud-init/+bug/2013967; https://github.com/canonical/cloud-init/commit/a378b7e4f[PII_REDACTED]1c0972e7cd813f6fe0a6b; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ATBJSXPL2IOAD2LDQRKWPLIC7QXS44GZ/
CVE: CVE-2023-2297
Published: 2023-04-27
Description: The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets  in versions up to, and including 3.9.0. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function (wppb_front_end_password_recovery). The function uses the plaintext value of a password reset key instead of a hashed value which means it can easily be retrieved and subsequently used. An attacker can leverage CVE-2023-0814, or another vulnerability like SQL Injection in another plugin or theme installed on the site to successfully exploit this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-620, CWE-287
References: https://lana.codes/lanavdb/512e7307-04a5-4d8b-8f79-f75f37784a9f/; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2864329%40profile-builder&new=2864329%40profile-builder&sfp_email=&sfph_mail=; https://www.wordfence.com/blog/2023/03/vulnerability-patched-in-cozmolabs-profile-builder-plugin-information-disclosure-leads-to-account-takeover/
CVE: CVE-2023-25292
Published: 2023-04-27
Description: Reflected Cross Site Scripting (XSS) in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GO_LANGUAGE cookie.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://group-office.com; http://intermesh.com; https://github.com/brainkok/CVE-2023-25292
CVE: CVE-2023-26243
Published: 2023-04-27
Description: An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L[PII_REDACTED]14. The decryption binary used to decrypt firmware files has an information leak that allows an attacker to read the AES key and initialization vector from memory. An attacker may exploit this to create custom firmware that may be installed in the IVI system. Then, an attacker may be able to install a backdoor in the IVI system that may allow him to control it, if it is connected to the Internet through Wi-Fi.
CVSS Score: 7.8 (HIGH)
CWE: CWE-668, CWE-22
References: https://sowhat.iit.cnr.it; https://sowhat.iit.cnr.it:8443/can-work/chimaera; https://sowhat.iit.cnr.it:8443/can-work/chimaera/-/blob/main/Report/IIT-01-2023.pdf
CVE: CVE-2023-26244
Published: 2023-04-27
Description: An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L[PII_REDACTED]14. The AppDMClient binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the digital signature check of AppUpgrade and .lge.upgrade.xml files, which are used during the firmware installation process. This indirectly allows an attacker to use a custom version of AppUpgrade and .lge.upgrade.xml files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-863
References: https://sowhat.iit.cnr.it; https://sowhat.iit.cnr.it:8443/can-work/chimaera; https://sowhat.iit.cnr.it:8443/can-work/chimaera/-/blob/main/Report/IIT-01-2023.pdf
CVE: CVE-2023-26245
Published: 2023-04-27
Description: An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L[PII_REDACTED]14. The AppUpgrade binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the version check in order to install any firmware version (e.g., newer, older, or customized). This indirectly allows an attacker to install custom firmware in the IVI system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-863
References: https://sowhat.iit.cnr.it; https://sowhat.iit.cnr.it:8443/can-work/chimaera; https://sowhat.iit.cnr.it:8443/can-work/chimaera/-/blob/main/Report/IIT-01-2023.pdf
CVE: CVE-2023-26246
Published: 2023-04-27
Description: An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L[PII_REDACTED]14. The AppUpgrade binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the digital signature check. This indirectly allows an attacker to install custom firmware in the IVI system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-863
References: https://sowhat.iit.cnr.it; https://sowhat.iit.cnr.it:8443/can-work/chimaera; https://sowhat.iit.cnr.it:8443/can-work/chimaera/-/blob/main/Report/IIT-01-2023.pdf
CVE: CVE-2022-47758
Published: 2023-04-27
Description: Nanoleaf firmware v7.1.1 and below is missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-295, CWE-295
References: http://nanoleaf.com; https://pwning.tech/cve-2022-47758; https://pwning.tech/cve-2022-47758/
CVE: CVE-2023-20852
Published: 2023-04-27
Description: aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ interpreter. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands to perform arbitrary system operation or disrupt service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://www.twcert.org.tw/tw/cp-132-7023-8368b-1.html; https://www.twcert.org.tw/tw/cp-132-7023-8368b-1.html
CVE: CVE-2023-20853
Published: 2023-04-27
Description: aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ asynchronized message process. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands to perform arbitrary system operation or disrupt service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://www.twcert.org.tw/tw/cp-132-7024-bdefe-1.html; https://www.twcert.org.tw/tw/cp-132-7024-bdefe-1.html
CVE: CVE-2023-22901
Published: 2023-04-27
Description: ChangingTec MOTP system has a path traversal vulnerability. A remote attacker with administrator’s privilege can exploit this vulnerability to access arbitrary system files.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://www.twcert.org.tw/tw/cp-132-7022-2cbe0-1.html; https://www.twcert.org.tw/tw/cp-132-7022-2cbe0-1.html
CVE: CVE-2023-24836
Published: 2023-04-27
Description: SUNNET CTMS has vulnerability of path traversal within its file uploading function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload and execute scripts onto arbitrary directories to perform arbitrary system operation or disrupt service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://www.twcert.org.tw/tw/cp-132-7033-878ab-1.html; https://www.twcert.org.tw/tw/cp-132-7033-878ab-1.html
CVE: CVE-2023-28697
Published: 2023-04-27
Description: Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitrary system operation or disrupt service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://cdn-cms.azureedge.net/Moxa/media/PDIM/S100000223/MiiNePort%20E1%20Series_moxa-miineport-e1-series-firmware-v1.9.rom_Software%20Release%20History.pdf; https://www.twcert.org.tw/tw/cp-132-7021-eb43a-1.html; https://cdn-cms.azureedge.net/Moxa/media/PDIM/S100000223/MiiNePort%20E1%20Series_moxa-miineport-e1-series-firmware-v1.9.rom_Software%20Release%20History.pdf
CVE: CVE-2023-31285
Published: 2023-04-27
Description: An XSS issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When users upload temporary files, some specific file endings are not allowed, but it is possible to upload .html or .htm files containing an XSS payload. The resulting link can be sent to an administrator user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/172648/Serenity-StartSharp-Software-File-Upload-XSS-User-Enumeration-Reusable-Tokens.html; http://seclists.org/fulldisclosure/2023/May/14; https://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2
CVE: CVE-2023-31286
Published: 2023-04-27
Description: An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When a password reset request occurs, the server response leaks the existence of users. If one tries to reset a password of a non-existent user, an error message indicates that this user does not exist.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209, CWE-209
References: http://packetstormsecurity.com/files/172648/Serenity-StartSharp-Software-File-Upload-XSS-User-Enumeration-Reusable-Tokens.html; http://seclists.org/fulldisclosure/2023/May/14; https://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2
CVE: CVE-2023-31287
Published: 2023-04-27
Description: An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset the password. This token remains valid even after the password reset and can be used a second time to change the password of the corresponding user. The token expires only 3 hours after issuance and is sent as a query parameter when resetting. An attacker with access to the browser history can thus use the token again to change the password in order to take over the account.
CVSS Score: 7.8 (HIGH)
CWE: CWE-640, CWE-640
References: http://packetstormsecurity.com/files/172648/Serenity-StartSharp-Software-File-Upload-XSS-User-Enumeration-Reusable-Tokens.html; http://seclists.org/fulldisclosure/2023/May/14; https://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2
CVE: CVE-2023-31290
Published: 2023-04-27
Description: Trust Wallet Core before 3.1.1, as used in the Trust Wallet browser extension before 0.0.183, allows theft of funds because the entropy is 32 bits, as exploited in the wild in December 2022 and March 2023. This occurs because the mt19937 Mersenne Twister takes a single 32-bit value as an input seed, resulting in only four billion possible mnemonics. The affected versions of the browser extension are 0.0.172 through 0.0.182. To steal funds efficiently, an attacker can identify all Ethereum addresses created since the 0.0.172 release, and check whether they are Ethereum addresses that could have been created by this extension. To respond to the risk, affected users need to upgrade the product version and also move funds to a new wallet address.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-338, CWE-338
References: https://blog.ledger.com/Funds-of-every-wallet-created-with-the-Trust-Wallet-browser-extension-could-have-been-stolen/; https://community.trustwallet.com/t/browser-extension-wasm-vulnerability-postmortem/750787; https://community.trustwallet.com/t/wasm-vulnerability-incident-update-and-recommended-actions/750786
CVE: CVE-2023-28769
Published: 2023-04-27
Description: The buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could allow a remote unauthenticated attacker to execute some OS commands or to cause denial-of-service (DoS) conditions on a vulnerable device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities
CVE: CVE-2023-28770
Published: 2023-04-27
Description: The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could allow a remote unauthenticated attacker to read the system files and to retrieve the password of the supervisor from the encrypted file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-203
References: http://packetstormsecurity.com/files/172277/Zyxel-Chained-Remote-Code-Execution.html; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities; http://packetstormsecurity.com/files/172277/Zyxel-Chained-Remote-Code-Execution.html
CVE: CVE-2023-2322
Published: 2023-04-27
Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/9fc674892b8b53103098b[PII_REDACTED]a45e7f773; https://huntr.dev/bounties/f7228f3f-3bef-46fe-b0e3-56c432048a67; https://github.com/pimcore/pimcore/commit/9fc674892b8b53103098b[PII_REDACTED]a45e7f773
CVE: CVE-2023-2323
Published: 2023-04-27
Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/e88fa79de7b5903fb58ddbc231130b04d937d79e; https://huntr.dev/bounties/41edf190-f6bf-4a29-a237-7ff1b2d048d3; https://github.com/pimcore/pimcore/commit/e88fa79de7b5903fb58ddbc231130b04d937d79e
CVE: CVE-2023-1778
Published: 2023-04-27
Description: This vulnerability exists in GajShield Data Security Firewall firmware versions prior to v4.28 (except v4.21) due to insecure default credentials which allows remote attacker to login as superuser by using default username/password via web-based management interface and/or exposed SSH port thereby enabling remote attackers to execute arbitrary commands with administrative/superuser privileges on the targeted systems.

The vulnerability has been addressed by forcing the user to change their default password to a new non-default password.

CVSS Score: 10.0 (CRITICAL)
CWE: CWE-287, CWE-522
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0119; https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0119
CVE: CVE-2023-2327
Published: 2023-04-27
Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/fb3056a21d439135480ee299bf1ab646867b5f4f; https://huntr.dev/bounties/7336b71f-a36f-4ce7-a26d-c8335ac713d6; https://github.com/pimcore/pimcore/commit/fb3056a21d439135480ee299bf1ab646867b5f4f
CVE: CVE-2023-2328
Published: 2023-04-27
Description: Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/e3562bfe249c557d15474c9a0acd5e06628521fe; https://huntr.dev/bounties/01a44584-e36b-46f4-ad94-53af488397f6; https://github.com/pimcore/pimcore/commit/e3562bfe249c557d15474c9a0acd5e06628521fe
CVE: CVE-2023-2331
Published: 2023-04-27
Description: Unquoted service Path or Element vulnerability in 42Gears Surelock Windows SureLock Service (NixService.Exe) on Windows application will allows to insert arbitrary code into the service.
This issue affects Surelock Windows : from 2.3.12 through 2.40.0.


CVSS Score: 7.8 (HIGH)
CWE: CWE-428, CWE-428
References: https://www.42gears.com/security-and-compliance; https://www.42gears.com/security-and-compliance/42g-2023-001/; https://www.42gears.com/security-and-compliance
CVE: CVE-2023-2336
Published: 2023-04-27
Description: Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4; https://huntr.dev/bounties/af[PII_REDACTED]-4f53-8480-85348dbb4f14; https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4
CVE: CVE-2023-2338
Published: 2023-04-27
Description: SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/pimcore/pimcore/commit/21e35af721c375ef4676ed50835e30d828e76520; https://huntr.dev/bounties/bbf59fa7-cf5b-4945-81b0-328adc710462; https://github.com/pimcore/pimcore/commit/21e35af721c375ef4676ed50835e30d828e76520
CVE: CVE-2023-2339
Published: 2023-04-27
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/6946f8a5a0a93b516c49f17a5b45044eebd73480; https://huntr.dev/bounties/bb1537a5-fe7b-4c77-a582-10a82435fbc2; https://github.com/pimcore/pimcore/commit/6946f8a5a0a93b516c49f17a5b45044eebd73480
CVE: CVE-2023-29255
Published: 2023-04-27
Description: IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as it may trap when compiling a variation of an anonymous block.  IBM X-Force ID:  251991.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/251991; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6985687
CVE: CVE-2023-2340
Published: 2023-04-27
Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/aa38319e353cc3cdfac12e03e21ed7a8f3628d3e; https://huntr.dev/bounties/964762b0-b4fe-441c-81e1-0ebdbbf80f3b; https://github.com/pimcore/pimcore/commit/aa38319e353cc3cdfac12e03e21ed7a8f3628d3e