deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-23621
Published: 2024-01-26
Description: A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-131, CWE-120
References: https://blog.exodusintel.com/2024/01/25/ibm-merge-healthcare-efilm-workstation-license-server-buffer-overflow/; https://blog.exodusintel.com/2024/01/25/ibm-merge-healthcare-efilm-workstation-license-server-buffer-overflow/
CVE: CVE-2024-23622
Published: 2024-01-26
Description: A stack-based buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution with SYSTEM privileges.

CVSS Score: 10.0 (CRITICAL)
CWE: CWE-131, CWE-787
References: https://blog.exodusintel.com/2024/01/25/ibm-merge-healthcare-efilm-workstation-license-server-copysls_request3-buffer-overflow/; https://blog.exodusintel.com/2024/01/25/ibm-merge-healthcare-efilm-workstation-license-server-copysls_request3-buffer-overflow/
CVE: CVE-2024-23624
Published: 2024-01-26
Description: A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.

CVSS Score: 9.6 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://blog.exodusintel.com/2024/01/25/d-link-dap-1650-gena-cgi-subscribe-command-injection-vulnerability/; https://blog.exodusintel.com/2024/01/25/d-link-dap-1650-gena-cgi-subscribe-command-injection-vulnerability/
CVE: CVE-2024-23625
Published: 2024-01-26
Description: A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.

CVSS Score: 9.6 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://blog.exodusintel.com/2024/01/25/d-link-dap-1650-subscribe-callback-command-injection-vulnerability/; https://blog.exodusintel.com/2024/01/25/d-link-dap-1650-subscribe-callback-command-injection-vulnerability/
CVE: CVE-2024-23626
Published: 2024-01-26
Description: A command injection vulnerability exists in the ‘SaveSysLogParams’ 
parameter of the Motorola MR2600. A remote attacker can exploit this 
vulnerability to achieve command execution. Authentication is required, 
however can be bypassed.

CVSS Score: 9.0 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://blog.exodusintel.com/2024/01/25/motorola-mr2600-savesyslogparams-command-injection-vulnerability/; https://blog.exodusintel.com/2024/01/25/motorola-mr2600-savesyslogparams-command-injection-vulnerability/
CVE: CVE-2024-23627
Published: 2024-01-26
Description: A command injection vulnerability exists in the 'SaveStaticRouteIPv4Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is required, however can be bypassed.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://blog.exodusintel.com/2024/01/25/motorola-mr2600-savestaticrouteipv4params-command-injection-vulnerability/; https://blog.exodusintel.com/2024/01/25/motorola-mr2600-savestaticrouteipv4params-command-injection-vulnerability/
CVE: CVE-2024-23628
Published: 2024-01-26
Description: A command injection vulnerability exists in the 
'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600. A remote 
attacker can exploit this vulnerability to achieve command execution. 
Authentication is required, however can be bypassed.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://blog.exodusintel.com/2024/01/25/motorola-mr2600-savestaticrouteipv6params-command-injection-vulnerability/; https://blog.exodusintel.com/2024/01/25/motorola-mr2600-savestaticrouteipv6params-command-injection-vulnerability/
CVE: CVE-2024-23629
Published: 2024-01-26
Description: An authentication bypass vulnerability exists in the web component of the Motorola MR2600. An attacker can exploit this vulnerability to access protected URLs and retrieve sensitive information.

CVSS Score: 9.6 (CRITICAL)
CWE: CWE-287, CWE-287, CWE-863
References: https://blog.exodusintel.com/2024/01/25/motorola-mr2600-authentication-bypass-vulnerability/; https://blog.exodusintel.com/2024/01/25/motorola-mr2600-authentication-bypass-vulnerability/
CVE: CVE-2024-23630
Published: 2024-01-26
Description: An arbitrary firmware upload vulnerability exists in the Motorola 
MR2600. An attacker can exploit this vulnerability to achieve code 
execution on the device. Authentication is required, however can be 
bypassed.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://blog.exodusintel.com/2024/01/25/motorola-mr2600-arbitrary-firmware-upload-vulnerability/; https://blog.exodusintel.com/2024/01/25/motorola-mr2600-arbitrary-firmware-upload-vulnerability/
CVE: CVE-2023-5933
Published: 2024-01-26
Description: An issue has been discovered in GitLab CE/EE affecting all versions after 13.7 before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. Improper input sanitization of user name allows arbitrary API PUT requests.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/430236; https://hackerone.com/reports/2225710
CVE: CVE-2024-0402
Published: 2024-01-26
Description: An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/437819; https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/
CVE: CVE-2024-0456
Published: 2024-01-26
Description: An authorization vulnerability exists in GitLab versions 14.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. An unauthorized attacker is able to assign arbitrary users to MRs that they created within the project
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-425
References: https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/430726; https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/
CVE: CVE-2024-21326
Published: 2024-01-26
Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21326; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21326
CVE: CVE-2024-21382
Published: 2024-01-26
Description: Microsoft Edge for Android Information Disclosure Vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-942
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21382; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21382
CVE: CVE-2024-21383
Published: 2024-01-26
Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS Score: 3.3 (LOW)
CWE: CWE-347
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21383; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21383
CVE: CVE-2024-21385
Published: 2024-01-26
Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score: 8.3 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21385; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21385
CVE: CVE-2024-21387
Published: 2024-01-26
Description: Microsoft Edge for Android Spoofing Vulnerability
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-357
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21387; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21387
CVE: CVE-2023-5612
Published: 2024-01-26
Description: An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the user email address via tags feed although the visibility in the user profile has been disabled.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/428441; https://hackerone.com/reports/2208790
CVE: CVE-2023-6159
Published: 2024-01-26
Description: An issue has been discovered in GitLab CE/EE affecting all versions from 12.7 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 It was possible for an attacker to trigger a Regular Expression Denial of Service via a `Cargo.toml` containing maliciously crafted input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/431924; https://hackerone.com/reports/2251278
CVE: CVE-2023-38317
Published: 2024-01-26
Description: An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the network interface name entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/openNDS/openNDS/blob/master/ChangeLog; https://github.com/openNDS/openNDS/releases/tag/v10.1.3; https://openwrt.org/docs/guide-user/services/captive-portal/opennds
CVE: CVE-2023-38318
Published: 2024-01-26
Description: An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the gateway FQDN entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/openNDS/openNDS/blob/master/ChangeLog; https://github.com/openNDS/openNDS/releases/tag/v10.1.3; https://openwrt.org/docs/guide-user/services/captive-portal/opennds
CVE: CVE-2023-38319
Published: 2024-01-26
Description: An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the FAS key entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/openNDS/openNDS/blob/master/ChangeLog; https://github.com/openNDS/openNDS/releases/tag/v10.1.3; https://openwrt.org/docs/guide-user/services/captive-portal/opennds
CVE: CVE-2023-38323
Published: 2024-01-26
Description: An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the status path script entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/openNDS/openNDS/blob/master/ChangeLog; https://github.com/openNDS/openNDS/releases/tag/v10.1.3; https://openwrt.org/docs/guide-user/services/captive-portal/opennds
CVE: CVE-2023-48126
Published: 2024-01-26
Description: An issue in Luxe Beauty Clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
References: https://github.com/syz913/CVE-reports/blob/main/Luxe%20Beauty%20Clinic.md; https://github.com/syz913/CVE-reports/blob/main/Luxe%20Beauty%20Clinic.md
CVE: CVE-2023-48127
Published: 2024-01-26
Description: An issue in myGAKUYA mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/syz913/CVE-reports/blob/main/myGAKUYA.md; https://github.com/syz913/CVE-reports/blob/main/myGAKUYA.md
CVE: CVE-2023-48128
Published: 2024-01-26
Description: An issue in UNITED BOXING GYM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
References: https://github.com/syz913/CVE-reports/blob/main/UNITED%20BOXING%20GYM.md; https://github.com/syz913/CVE-reports/blob/main/UNITED%20BOXING%20GYM.md
CVE: CVE-2023-48130
Published: 2024-01-26
Description: An issue in GINZA CAFE mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://github.com/syz913/CVE-reports/blob/main/GINZA%20CAFE.md; https://github.com/syz913/CVE-reports/blob/main/GINZA%20CAFE.md
CVE: CVE-2023-48131
Published: 2024-01-26
Description: An issue in CHIGASAKI BAKERY mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://github.com/syz913/CVE-reports/blob/main/CHIGASAKI%20BAKERY.md; https://github.com/syz913/CVE-reports/blob/main/CHIGASAKI%20BAKERY.md
CVE: CVE-2023-48132
Published: 2024-01-26
Description: An issue in kosei entertainment esportsstudioLegends mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://github.com/syz913/CVE-reports/blob/main/esportsstudioLegends.md; https://github.com/syz913/CVE-reports/blob/main/esportsstudioLegends.md
CVE: CVE-2023-48133
Published: 2024-01-26
Description: An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
References: https://github.com/syz913/CVE-reports/blob/main/angel%20coffee.md; https://github.com/syz913/CVE-reports/blob/main/angel%20coffee.md
CVE: CVE-2023-48135
Published: 2024-01-26
Description: An issue in mimasaka_farm mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://github.com/syz913/CVE-reports/blob/main/mimasaka_farm.md; https://github.com/syz913/CVE-reports/blob/main/mimasaka_farm.md
CVE: CVE-2024-23388
Published: 2024-01-26
Description: Improper authorization in handler for custom URL scheme issue in "Mercari" App for Android prior to version 5.78.0 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://jvn.jp/en/jp/JVN70818619/; https://jvn.jp/en/jp/JVN70818619/
CVE: CVE-2023-48129
Published: 2024-01-26
Description: An issue in kimono-oldnew mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://github.com/syz913/CVE-reports/blob/main/kimono-oldnew.md; https://github.com/syz913/CVE-reports/blob/main/kimono-oldnew.md
CVE: CVE-2023-6919
Published: 2024-01-26
Description: Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal.This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C.


CVSS Score: 7.5 (HIGH)
CWE: CWE-25
References: https://www.usom.gov.tr/bildirim/tr-24-0054; https://www.usom.gov.tr/bildirim/tr-24-0054
CVE: CVE-2024-22545
Published: 2024-01-26
Description: An issue was discovered in TRENDnet TEW-824DRU version 1.04b01, allows unauthenticated attackers to execute arbitrary code via the system.ntp.server parameter in the sub_420AE0() function. The attack can be launched remotely.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://warp-desk-89d.notion.site/TEW-824DRU-e7228d462ce24fa1a9fecb0bee57caad; https://warp-desk-89d.notion.site/TEW-824DRU-e7228d462ce24fa1a9fecb0bee57caad
CVE: CVE-2022-48622
Published: 2024-01-26
Description: In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/202; https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/202
CVE: CVE-2024-0727
Published: 2024-01-26
Description: Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL
to crash leading to a potential Denial of Service attack

Impact summary: Applications loading files in the PKCS12 format from untrusted
sources might terminate abruptly.

A file in PKCS12 format can contain certificates and keys and may come from an
untrusted source. The PKCS12 specification allows certain fields to be NULL, but
OpenSSL does not correctly check for this case. This can lead to a NULL pointer
dereference that results in OpenSSL crashing. If an application processes PKCS12
files from an untrusted source using the OpenSSL APIs then that application will
be vulnerable to this issue.

OpenSSL APIs that are vulnerable to this are: PKCS12_parse(),
PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()
and PKCS12_newpass().

We have also fixed a similar issue in SMIME_write_PKCS7(). However since this
function is related to writing data we do not consider it security significant.

The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2; https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a; https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c
CVE: CVE-2024-0918
Published: 2024-01-26
Description: A vulnerability was found in TRENDnet TEW-800MB 1.0.1.0 and classified as critical. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation of the argument DeviceURL leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-252122 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://vuldb.com/?ctiid.252122; https://vuldb.com/?id.252122; https://warp-desk-89d.notion.site/TEW-800MB-1f9576ce12234b72b08b9c7f4c7d32a6?pvs=4
CVE: CVE-2024-0919
Published: 2024-01-26
Description: A vulnerability was found in TRENDnet TEW-815DAP 1.0.2.0. It has been classified as critical. This affects the function do_setNTP of the component POST Request Handler. The manipulation of the argument NtpDstStart/NtpDstEnd leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252123. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://vuldb.com/?ctiid.252123; https://vuldb.com/?id.252123; https://warp-desk-89d.notion.site/TEW-815DAP-94a631c20dee4f399268dbcc880f1f4c?pvs=4
CVE: CVE-2024-0920
Published: 2024-01-26
Description: A vulnerability was found in TRENDnet TEW-822DRE 1.03B02. It has been declared as critical. This vulnerability affects unknown code of the file /admin_ping.htm of the component POST Request Handler. The manipulation of the argument ipv4_ping/ipv6_ping leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252124. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://vuldb.com/?ctiid.252124; https://vuldb.com/?id.252124; https://warp-desk-89d.notion.site/TEW-822DRE-5289eb95796749c[PII_REDACTED]ab451d8?pvs=4
CVE: CVE-2024-23856
Published: 2024-01-26
Description: A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itemlist.php, in the description parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cups-easy; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cups-easy
CVE: CVE-2024-23857
Published: 2024-01-26
Description: A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grnlinecreate.php, in the batchno parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cups-easy; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cups-easy
CVE: CVE-2024-23858
Published: 2024-01-26
Description: A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuancelinecreate.php, in the batchno parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cups-easy; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cups-easy
CVE: CVE-2024-23859
Published: 2024-01-26
Description: A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructurelinecreate.php, in the flatamount parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cups-easy; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cups-easy
CVE: CVE-2024-23860
Published: 2024-01-26
Description: A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/currencylist.php, in the description parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cups-easy; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cups-easy