deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-32634
Published: 2024-04-16
Description: In huge memory get unmapped area check, code can never be reached because of a logical contradiction. 
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-561
References: https://www.asrmicro.com/en/goods/psirt?cid=38; https://www.asrmicro.com/en/goods/psirt?cid=38
CVE: CVE-2024-3871
Published: 2024-04-16
Description: The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users. This interface implements multiple features that are affected by command injections and stack overflows vulnerabilities.
Successful exploitation of these flaws would allow remote unauthenticated attackers to gain remote code execution with elevated privileges on the affected devices.

This issue affects DVW-W02W2-E2 through version 2.5.2.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-120
References: https://onekey.com/; https://onekey.com/
CVE: CVE-2024-3872
Published: 2024-04-16
Description: Mattermost Mobile app versions 2.13.0 and earlier use a regular expression with polynomial complexity to parse certain deeplinks, which allows an unauthenticated remote attacker to freeze or crash the app via a long maliciously crafted link.


CVSS Score: 3.1 (LOW)
CWE: CWE-400
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2024-1357
Published: 2024-04-16
Description: The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aux_timeline shortcode in all versions up to, and including, 2.15.7 due to insufficient input sanitization and output escaping on user supplied attributes such as thumb_mode and date_type. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3074455%40auxin-elements&new=3074455%40auxin-elements&sfp_email=&sfph_mail=#file8; https://www.wordfence.com/threat-intel/vulnerabilities/id/fe175315-99ef-438a-b5b0-a5f190403116?source=cve; https://plugins.trac.wordpress.org/browser/auxin-elements/trunk/includes/general-shortcodes.php#L310
CVE: CVE-2024-3867
Published: 2024-04-16
Description: The archive-tainacan-collection theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in version 2.7.2. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://themes.trac.wordpress.org/changeset/224400/tainacan-interface/2.7.2/archive-tainacan-collection.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/3ffd63ca-5ea4-451c-aa97-092a754ca79f?source=cve; https://themes.trac.wordpress.org/changeset/224400/tainacan-interface/2.7.2/archive-tainacan-collection.php
CVE: CVE-2024-3367
Published: 2024-04-16
Description: Argument injection in websphere_mq agent plugin in Checkmk 2.0.0, 2.1.0, <2.2.0p26 and <2.3.0b5 allows local attacker to inject one argument to runmqsc
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-88, CWE-88
References: https://checkmk.com/werk/16615; https://checkmk.com/werk/16615
CVE: CVE-2024-3067
Published: 2024-04-16
Description: The WooCommerce Google Feed Manager plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 2.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This can also be used by unauthenticated attackers to inject malicious web scripts.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://plugins.trac.wordpress.org/browser/wp-product-feed-manager/trunk/includes/user-interface/class-wppfm-feed-editor-page.php#L34; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3070663%40wp-product-feed-manager&new=3070663%40wp-product-feed-manager&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/37bfb60d-8e2d-4c77-880c-3d17a6a434b8?source=cve
CVE: CVE-2024-3243
Published: 2024-04-16
Description: The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the send_test_email() function in all versions up to, and including, 5.46.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to send arbitrary test emails.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/customer-reviews-woocommerce/trunk/includes/settings/class-cr-settings-review-discount.php#L506; https://plugins.trac.wordpress.org/changeset/3069811/customer-reviews-woocommerce/trunk/includes/settings/class-cr-settings-review-discount.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/a0e80e63-f4f7-44cc-ae29-72e7847d7448?source=cve
CVE: CVE-2024-3672
Published: 2024-04-16
Description: The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'all-items' shortcode in all versions up to, and including, 1.6.8 due to insufficient input sanitization and output escaping on user supplied attributes such as 'classes'. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CVE-2024-32576 is likely a duplicate of this issue.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3070808%40ba-book-everything&new=3070808%40ba-book-everything&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/b0ce06d3-491e-4565-8b26-f33937aee3e8?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3070808%40ba-book-everything&new=3070808%40ba-book-everything&sfp_email=&sfph_mail=
CVE: CVE-2024-3869
Published: 2024-04-16
Description: The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'woocommerce_json_search_coupons' function . This makes it possible for attackers with subscriber level access to view coupon codes.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/customer-reviews-woocommerce/trunk/includes/settings/class-cr-settings-review-discount.php#L470; https://plugins.trac.wordpress.org/changeset/3069811/customer-reviews-woocommerce/trunk/includes/settings/class-cr-settings-review-discount.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/881e8096-e75f-49a7-87ed-c230e93ea378?source=cve
CVE: CVE-2024-30256
Published: 2024-04-16
Description: Open WebUI is a user-friendly WebUI for LLMs. Open-webui is vulnerable to authenticated blind server-side request forgery. This vulnerability is fixed in 0.1.117.

CVSS Score: 6.4 (MEDIUM)
CWE: CWE-918
References: https://github.com/open-webui/open-webui/security/advisories/GHSA-39wr-r5vm-3jxj; https://securitylab.github.com/advisories/GHSL-2024-033_open-webui; https://github.com/open-webui/open-webui/security/advisories/GHSA-39wr-r5vm-3jxj
CVE: CVE-2024-31451
Published: 2024-04-16
Description: DocsGPT is a GPT-powered chat for documentation. DocsGPT is vulnerable to unauthenticated limited file write in routes.py. This vulnerability is fixed in 0.8.1.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/arc53/DocsGPT/commit/d36f58230a326ecacb9c32a4ae8eac65666044f2; https://github.com/arc53/DocsGPT/security/advisories/GHSA-p5qc-vj2x-9rjp; https://securitylab.github.com/advisories/GHSL-2023-250_DocsGPT
CVE: CVE-2024-32022
Published: 2024-04-16
Description: Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss  is vulnerable to command injection in basic_caption_gui.py. This vulnerability is fixed in 23.1.5.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://github.com/bmaltais/kohya_ss/commit/831af8babeb75faff62bcc6a8c6a4f80354f1ff1; https://github.com/bmaltais/kohya_ss/security/advisories/GHSA-m6jq-7j4v-2fg3; https://securitylab.github.com/advisories/GHSL-2024-019_GHSL-2024-024_kohya_ss
CVE: CVE-2024-32023
Published: 2024-04-16
Description: Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a path injection in the `common_gui.py` `find_and_replace` function. This vulnerability is fixed in 23.1.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/bmaltais/kohya_ss/commit/8bc67a7467f8366db1a4b9b3b14525ec763f1650; https://github.com/bmaltais/kohya_ss/security/advisories/GHSA-p945-7qm7-7j53; https://securitylab.github.com/advisories/GHSL-2024-019_GHSL-2024-024_kohya_ss
CVE: CVE-2024-32024
Published: 2024-04-16
Description: Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a path injection in the `common_gui.py` `add_pre_postfix` function. This vulnerability is fixed in 23.1.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/bmaltais/kohya_ss/commit/25bb1303fff21cb5bae17236d53504e85c1866df; https://github.com/bmaltais/kohya_ss/security/advisories/GHSA-h9fp-j58h-wwrc; https://securitylab.github.com/advisories/GHSL-2024-019_GHSL-2024-024_kohya_ss
CVE: CVE-2024-32025
Published: 2024-04-16
Description: Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a command injection in `group_images_gui.py`. This vulnerability is fixed in 23.1.5.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://github.com/bmaltais/kohya_ss/commit/831af8babeb75faff62bcc6a8c6a4f80354f1ff1; https://github.com/bmaltais/kohya_ss/security/advisories/GHSA-qprv-9pg5-h33c; https://securitylab.github.com/advisories/GHSL-2024-019_GHSL-2024-024_kohya_ss
CVE: CVE-2024-32026
Published: 2024-04-16
Description: Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a command injection in `git_caption_gui.py`. This vulnerability is fixed in 23.1.5.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://github.com/bmaltais/kohya_ss/commit/831af8babeb75faff62bcc6a8c6a4f80354f1ff1; https://github.com/bmaltais/kohya_ss/security/advisories/GHSA-v5cm-33w8-xrj6; https://securitylab.github.com/advisories/GHSL-2024-019_GHSL-2024-024_kohya_ss
CVE: CVE-2024-32027
Published: 2024-04-16
Description: Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss v22.6.1 is vulnerable to command injection in `finetune_gui.py` This vulnerability is fixed in 23.1.5.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://github.com/bmaltais/kohya_ss/commit/831af8babeb75faff62bcc6a8c6a4f80354f1ff1; https://github.com/bmaltais/kohya_ss/security/advisories/GHSA-8h78-3vqm-xw83; https://securitylab.github.com/advisories/GHSL-2024-019_GHSL-2024-024_kohya_ss
CVE: CVE-2023-50872
Published: 2024-04-16
Description: The API in Accredible Credential.net December 6th, 2023 allows an Insecure Direct Object Reference attack that discloses partial information about certificates and their respective holder. NOTE: the excellium-services.com web page about this issue mentions "Vendor says that it's not a security issue."
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-50872; https://excellium-services.com/cert-xlm-advisory/CVE-2023-50872; https://help.accredible.com/accredible-product-release-notes
CVE: CVE-2024-3302
Published: 2024-04-16
Description: There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of Memory condition in the browser. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.
CVSS Score: 3.7 (LOW)
CWE: CWE-770, CWE-770
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1881183; https://kb.cert.org/vuls/id/421644; https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html
CVE: CVE-2024-3852
Published: 2024-04-16
Description: GetBoundName could return the wrong version of an object when JIT optimizations were applied. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-386
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1883542; https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html; https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html
CVE: CVE-2024-3853
Published: 2024-04-16
Description: A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection started. This vulnerability affects Firefox < 125.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1884427; https://www.mozilla.org/security/advisories/mfsa2024-18/; https://bugzilla.mozilla.org/show_bug.cgi?id=1884427
CVE: CVE-2024-3854
Published: 2024-04-16
Description: In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1884552; https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html; https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html
CVE: CVE-2024-3855
Published: 2024-04-16
Description: In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox < 125.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1885828; https://www.mozilla.org/security/advisories/mfsa2024-18/; https://bugzilla.mozilla.org/show_bug.cgi?id=1885828
CVE: CVE-2024-3856
Published: 2024-04-16
Description: A use-after-free could occur during WASM execution if garbage collection ran during the creation of an array. This vulnerability affects Firefox < 125.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1885829; https://www.mozilla.org/security/advisories/mfsa2024-18/; https://bugzilla.mozilla.org/show_bug.cgi?id=1885829
CVE: CVE-2024-3857
Published: 2024-04-16
Description: The JIT created incorrect code for arguments in certain cases. This led to potential use-after-free crashes during garbage collection. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1886683; https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html; https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html
CVE: CVE-2024-3858
Published: 2024-04-16
Description: It was possible to mutate a JavaScript object so that the JIT could crash while tracing it. This vulnerability affects Firefox < 125.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1888892; https://www.mozilla.org/security/advisories/mfsa2024-18/; https://bugzilla.mozilla.org/show_bug.cgi?id=1888892
CVE: CVE-2024-3859
Published: 2024-04-16
Description: On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125, CWE-190
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1874489; https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html; https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html
CVE: CVE-2024-3860
Published: 2024-04-16
Description: An out-of-memory condition during object initialization could result in an empty shape list. If the JIT subsequently traced the object it would crash. This vulnerability affects Firefox < 125.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-401
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1881417; https://www.mozilla.org/security/advisories/mfsa2024-18/; https://bugzilla.mozilla.org/show_bug.cgi?id=1881417
CVE: CVE-2024-3861
Published: 2024-04-16
Description: If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use-after-free. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1883158; https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html; https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html
CVE: CVE-2024-3862
Published: 2024-04-16
Description: The MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a self-assignment. This vulnerability affects Firefox < 125.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-908
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1884457; https://www.mozilla.org/security/advisories/mfsa2024-18/; https://bugzilla.mozilla.org/show_bug.cgi?id=1884457
CVE: CVE-2024-3863
Published: 2024-04-16
Description: The executable file warning was not presented when downloading .xrm-ms files.  
*Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1885855; https://www.mozilla.org/security/advisories/mfsa2024-18/; https://www.mozilla.org/security/advisories/mfsa2024-19/
CVE: CVE-2024-3864
Published: 2024-04-16
Description: Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1888333; https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html; https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html
CVE: CVE-2024-3865
Published: 2024-04-16
Description: Memory safety bugs present in Firefox 124. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 125.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1881076%2C1884887%2C1885359%2C1889049; https://www.mozilla.org/security/advisories/mfsa2024-18/; https://bugzilla.mozilla.org/buglist.cgi?bug_id=1881076%2C1884887%2C1885359%2C1889049
CVE: CVE-2024-3873
Published: 2024-04-16
Description: A vulnerability was found in SMI SMI-EX-5414W up to 1.0.03. It has been classified as problematic. This affects an unknown part of the component Web Interface. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260907.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://drive.google.com/file/d/1ekMbzI-lv6M02HttjFoQHWG8nZOIwPbf/view?usp=sharing; https://vuldb.com/?ctiid.260907; https://vuldb.com/?id.260907
CVE: CVE-2024-3874
Published: 2024-04-16
Description: A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file /goform/SetRemoteWebManage. The manipulation of the argument remoteIP leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-260908. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W20E/formSetRemoteWebManage.md; https://vuldb.com/?ctiid.260908; https://vuldb.com/?id.260908
CVE: CVE-2024-21676
Published: 2024-04-16
Description: Rejected reason: This CVE's publication may have been a false positive or a mistake. As a result, we have rejected this record.
CVE: CVE-2024-32086
Published: 2024-04-16
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AitThemes Citadela Listing.This issue affects Citadela Listing: from n/a through 5.18.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://patchstack.com/database/vulnerability/citadela-directory/wordpress-citadela-listing-plugin-5-18-1-unauthenticated-sensitive-data-users-posts-exposure-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/citadela-directory/wordpress-citadela-listing-plugin-5-18-1-unauthenticated-sensitive-data-users-posts-exposure-vulnerability?_s_id=cve
CVE: CVE-2024-32254
Published: 2024-04-16
Description: Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via tms/admin/create-package.php. When creating a new package, there is no checks for what types of files are uploaded from the image.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/jinhaochan/CVE-POC/blob/main/tms/POC.md; https://github.com/jinhaochan/CVE-POC/blob/main/tms/POC.md
CVE: CVE-2024-32256
Published: 2024-04-16
Description: Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via /tms/admin/change-image.php. When updating a current package, there are no checks for what types of files are uploaded from the image.
CVSS Score: 8.1 (HIGH)
CWE: CWE-434
References: https://github.com/jinhaochan/CVE-POC/blob/main/tms/POC.md; https://www.exploit-db.com/exploits/51923; https://github.com/jinhaochan/CVE-POC/blob/main/tms/POC.md
CVE: CVE-2023-40000
Published: 2024-04-16
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/litespeed-cache/wordpress-litespeed-cache-plugin-5-7-unauthenticated-site-wide-stored-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/litespeed-cache/wordpress-litespeed-cache-plugin-5-7-unauthenticated-site-wide-stored-xss-vulnerability?_s_id=cve; https://github.com/rxerium/CVE-2023-40000
CVE: CVE-2023-45000
Published: 2024-04-16
Description: Missing Authorization vulnerability in LiteSpeed Technologies LiteSpeed Cache.This issue affects LiteSpeed Cache: from n/a through 5.7.
CVSS Score: 8.2 (HIGH)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/litespeed-cache/wordpress-litespeed-cache-plugin-5-7-unauthenticated-broken-access-control-on-api-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/litespeed-cache/wordpress-litespeed-cache-plugin-5-7-unauthenticated-broken-access-control-on-api-vulnerability?_s_id=cve