deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-40530
Published: 2023-03-10
Description: Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
CVSS Score: 8.4 (HIGH)
CWE: CWE-680, CWE-190
References: https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin
CVE: CVE-2022-40531
Published: 2023-03-10
Description: Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVSS Score: 8.4 (HIGH)
CWE: CWE-704, CWE-704
References: https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin
CVE: CVE-2022-40535
Published: 2023-03-10
Description: Transient DOS due to buffer over-read in WLAN while sending a packet to device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin
CVE: CVE-2022-40537
Published: 2023-03-10
Description: Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
CVSS Score: 7.3 (HIGH)
CWE: CWE-129, CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin
CVE: CVE-2022-40539
Published: 2023-03-10
Description: Memory corruption in Automotive Android OS due to improper validation of array index.
CVSS Score: 8.4 (HIGH)
CWE: CWE-284, CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin
CVE: CVE-2022-40540
Published: 2023-03-10
Description: Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.
CVSS Score: 8.4 (HIGH)
CWE: CWE-120, CWE-120
References: https://bugzilla.suse.com/show_bug.cgi?id=1209597; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin
CVE: CVE-2022-43399
Published: 2023-03-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-43902
Published: 2023-03-10
Description: IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages.  IBM X-Force ID:  240832.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/240832; https://www.ibm.com/support/pages/node/6890643; https://exchange.xforce.ibmcloud.com/vulnerabilities/240832
CVE: CVE-2022-47453
Published: 2023-03-10
Description: In wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47454
Published: 2023-03-10
Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47455
Published: 2023-03-10
Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47456
Published: 2023-03-10
Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47457
Published: 2023-03-10
Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47458
Published: 2023-03-10
Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47459
Published: 2023-03-10
Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47460
Published: 2023-03-10
Description: In gpu device, there is a memory corruption due to a use after free. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47461
Published: 2023-03-10
Description: In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47462
Published: 2023-03-10
Description: In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47471
Published: 2023-03-10
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47472
Published: 2023-03-10
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47473
Published: 2023-03-10
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47474
Published: 2023-03-10
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47475
Published: 2023-03-10
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47476
Published: 2023-03-10
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47477
Published: 2023-03-10
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47478
Published: 2023-03-10
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47479
Published: 2023-03-10
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47480
Published: 2023-03-10
Description: In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47481
Published: 2023-03-10
Description: In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47482
Published: 2023-03-10
Description: In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47483
Published: 2023-03-10
Description: In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2022-47484
Published: 2023-03-10
Description: In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]18192129
CVE: CVE-2023-0193
Published: 2023-03-10
Description: 
NVIDIA CUDA Toolkit SDK contains a vulnerability in cuobjdump, where a local user running the tool against a malicious binary may cause an out-of-bounds read, which may result in a limited denial of service and limited information disclosure.


CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5446; https://nvidia.custhelp.com/app/answers/detail/a_id/5446
CVE: CVE-2023-1173
Published: 2023-03-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2023-1198
Published: 2023-03-10
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saysis Starcities allows SQL Injection.This issue affects Starcities: through 1.3.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.usom.gov.tr/bildirim/tr-23-0140; https://www.usom.gov.tr/bildirim/tr-23-0140
CVE: CVE-2023-1201
Published: 2023-03-10
Description: Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that possesses the message UUID to access the data it contains.



CVSS Score: 6.5 (MEDIUM)
References: https://devolutions.net/security/advisories/DEVO-2023-0005; https://devolutions.net/security/advisories/DEVO-2023-0005
CVE: CVE-2023-1203
Published: 2023-03-10
Description: Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Manager PowerShell Module 2022.3.1.5 and earlier allows an authenticated user to access sensitive data on entries that were edited using the affected submodule.



CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://devolutions.net/security/advisories/DEVO-2023-0004; https://devolutions.net/security/advisories/DEVO-2023-0004
CVE: CVE-2023-1246
Published: 2023-03-10
Description: Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations.This issue affects Starcities: through 1.3.


CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-552
References: https://www.usom.gov.tr/bildirim/tr-23-0140; https://www.usom.gov.tr/bildirim/tr-23-0140
CVE: CVE-2023-24975
Published: 2023-03-10
Description: 
IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 247030.


CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247030; https://www.ibm.com/support/pages/node/6959369; https://exchange.xforce.ibmcloud.com/vulnerabilities/247030
CVE: CVE-2023-25143
Published: 2023-03-10
Description: An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state on affected products.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-427, CWE-427
References: https://success.trendmicro.com/solution/000292209; https://success.trendmicro.com/solution/000292209
CVE: CVE-2023-25144
Published: 2023-03-10
Description: An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitrary directories with arbitrary ownership.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://success.trendmicro.com/solution/000292209; https://www.zerodayinitiative.com/advisories/ZDI-23-171/; https://success.trendmicro.com/solution/000292209
CVE: CVE-2023-25145
Published: 2023-03-10
Description: A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://success.trendmicro.com/solution/000292209; https://www.zerodayinitiative.com/advisories/ZDI-23-174/; https://success.trendmicro.com/solution/000292209
CVE: CVE-2023-25146
Published: 2023-03-10
Description: A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete the original folder and replace with a junction to an arbitrary location, ultimately leading to an arbitrary file dropped to an arbitrary location.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://success.trendmicro.com/solution/000292209; https://www.zerodayinitiative.com/advisories/ZDI-23-172/; https://success.trendmicro.com/solution/000292209
CVE: CVE-2023-25147
Published: 2023-03-10
Description: An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypass the protection by using a specifically crafted DLL during a specific update process.

Please note: an attacker must first obtain administrative access on the target system via another method in order to exploit this.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://success.trendmicro.com/solution/000292209; https://success.trendmicro.com/solution/000292209
CVE: CVE-2023-25148
Published: 2023-03-10
Description: A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific file into a pseudo-symlink, allowing privilege escalation on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://success.trendmicro.com/solution/000292209; https://www.zerodayinitiative.com/advisories/ZDI-23-173/; https://success.trendmicro.com/solution/000292209
CVE: CVE-2023-27577
Published: 2023-03-10
Description: flarum is a forum software package for building communities. In versions prior to 1.7.0 an admin account which has already been compromised by an attacker may use a vulnerability in the `LESS` parser which can be exploited to read sensitive files on the server through the use of path traversal techniques. An attacker can achieve this by providing an absolute path to a sensitive file in the custom `LESS` setting, which the `LESS` parser will then read. For example, an attacker could use the following code to read the contents of the `/etc/passwd` file on a linux machine. The scope of what files are vulnerable will depend on the permissions given to the running flarum process. The vulnerability has been addressed in version `1.7`. Users should upgrade to this version to mitigate the vulnerability. Users unable to upgrade may mitigate the vulnerability by ensuring that their admin accounts are secured with strong passwords and follow other best practices for account security. Additionally, users can limit the exposure of sensitive files on the server by implementing appropriate file permissions and access controls at the operating system level.

CVSS Score: 6.6 (MEDIUM)
CWE: CWE-22
References: https://github.com/flarum/framework/commit/1761660c98ea5a3e9665fb8e6041d1f2ee62a444; https://github.com/flarum/framework/security/advisories/GHSA-vhm8-wwrf-3gcw; https://github.com/flarum/framework/commit/1761660c98ea5a3e9665fb8e6041d1f2ee62a444
CVE: CVE-2023-27898
Published: 2023-03-10
Description: Jenkins 2.270 through 2.393 (both inclusive), LTS 2.277.1 through 2.375.3 (both inclusive) does not escape the Jenkins version a plugin depends on when rendering the error message stating its incompatibility with the current version of Jenkins, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide plugins to the configured update sites and have this message shown by Jenkins instances.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3037; https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3037
CVE: CVE-2023-27899
Published: 2023-03-10
Description: Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a plugin for installation, potentially allowing attackers with access to the Jenkins controller file system to read and write the file before it is used, potentially resulting in arbitrary code execution.
CVSS Score: 7.0 (HIGH)
CWE: CWE-863, CWE-863
References: https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2823; https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2823
CVE: CVE-2023-27900
Published: 2023-03-10
Description: Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in hudson.util.MultipartFormDataParser, allowing attackers to trigger a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3030; https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3030
CVE: CVE-2023-27901
Published: 2023-03-10
Description: Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in org.kohsuke.stapler.RequestImpl, allowing attackers to trigger a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3030; https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3030
CVE: CVE-2023-27902
Published: 2023-03-10
Description: Jenkins 2.393 and earlier, LTS 2.375.3 and earlier shows temporary directories related to job workspaces, which allows attackers with Item/Workspace permission to access their contents.
CVSS Score: 4.3 (MEDIUM)
References: https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-1807; https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-1807
CVE: CVE-2023-27903
Published: 2023-03-10
Description: Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a file parameter through the CLI, potentially allowing attackers with access to the Jenkins controller file system to read and write the file before it is used.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3058; https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3058
CVE: CVE-2023-27904
Published: 2023-03-10
Description: Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers.
CVSS Score: 5.3 (MEDIUM)
References: https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2120; https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2120