deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-23901
Published: 2024-01-24
Description: Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group, allowing attackers to configure and share a project, resulting in a crafted Pipeline being built by Jenkins during the next scan of the group.
CVSS Score: 6.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2024/01/24/6; https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3040; http://www.openwall.com/lists/oss-security/2024/01/24/6
CVE: CVE-2024-23902
Published: 2024-01-24
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier allows attackers to connect to an attacker-specified URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: http://www.openwall.com/lists/oss-security/2024/01/24/6; https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3251; http://www.openwall.com/lists/oss-security/2024/01/24/6
CVE: CVE-2024-23903
Published: 2024-01-24
Description: Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-697, CWE-697
References: http://www.openwall.com/lists/oss-security/2024/01/24/6; https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-2871; http://www.openwall.com/lists/oss-security/2024/01/24/6
CVE: CVE-2024-23904
Published: 2024-01-24
Description: Jenkins Log Command Plugin 1.0.2 and earlier does not disable a feature of its command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read content from arbitrary files on the Jenkins controller file system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2024/01/24/6; https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3334; http://www.openwall.com/lists/oss-security/2024/01/24/6
CVE: CVE-2024-23905
Published: 2024-01-24
Description: Jenkins Red Hat Dependency Analytics Plugin 0.7.1 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.openwall.com/lists/oss-security/2024/01/24/6; https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3322; http://www.openwall.com/lists/oss-security/2024/01/24/6
CVE: CVE-2021-42145
Published: 2024-01-24
Description: An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755, CWE-755
References: https://seclists.org/fulldisclosure/2024/Jan/18; http://seclists.org/fulldisclosure/2024/Jan/18; https://seclists.org/fulldisclosure/2024/Jan/18
CVE: CVE-2021-42146
Published: 2024-01-24
Description: An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two times the TCP maximum segment lifetime, which is prohibited in RFC6347. This vulnerability allows remote attackers to obtain sensitive application (data of connected clients).
CVSS Score: 7.5 (HIGH)
CWE: CWE-755, CWE-303
References: https://seclists.org/fulldisclosure/2024/Jan/19; http://seclists.org/fulldisclosure/2024/Jan/19; https://seclists.org/fulldisclosure/2024/Jan/19
CVE: CVE-2021-42147
Published: 2024-01-24
Description: Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cause a denial of service via crafted data packet.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://seclists.org/fulldisclosure/2024/Jan/20; http://seclists.org/fulldisclosure/2024/Jan/20; https://seclists.org/fulldisclosure/2024/Jan/20
CVE: CVE-2021-43584
Published: 2024-01-24
Description: DOM-based Cross Site Scripting (XSS vulnerability in 'Tail Event Logs' functionality in Nagios Nagios Cross-Platform Agent (NCPA) before 2.4.0 allows attackers to run arbitrary code via the name element when filtering for a log.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/NagiosEnterprises/ncpa/issues/830; https://github.com/NagiosEnterprises/ncpa/issues/830
CVE: CVE-2024-23644
Published: 2024-01-24
Description: Trillium is a composable toolkit for building internet applications with async rust. In `trillium-http` prior to 0.3.12 and `trillium-client` prior to 0.5.4, insufficient validation of outbound header values may lead to request splitting or response splitting attacks in scenarios where attackers have sufficient control over headers. This only affects use cases where attackers have control of request headers, and can insert "\r\n" sequences. Specifically, if untrusted and unvalidated input is inserted into header names or values.

Outbound `trillium_http::HeaderValue` and `trillium_http::HeaderName` can be constructed infallibly and were not checked for illegal bytes when sending requests from the client or responses from the server. Thus, if an attacker has sufficient control over header values (or names) in a request or response that they could inject `\r\n` sequences, they could get the client and server out of sync, and then pivot to gain control over other parts of requests or responses. (i.e. exfiltrating data from other requests, SSRF, etc.)

In `trillium-http` versions 0.3.12 and later, if a header name is invalid in server response headers, the specific header and any associated values are omitted from network transmission. Additionally, if a header value is invalid in server response headers, the individual header value is omitted from network transmission. Other headers values with the same header name will still be sent. In `trillium-client` versions 0.5.4 and later, if any header name or header value is invalid in the client request headers, awaiting the client Conn returns an `Error::MalformedHeader` prior to any network access. As a workaround, Trillium services and client applications should sanitize or validate untrusted input that is included in header values and header names. Carriage return, newline, and null characters are not allowed.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-113, CWE-436
References: https://github.com/trillium-rs/trillium/commit/16a42b3f8378a3fa4e61ece3e3e37e6a530df51d; https://github.com/trillium-rs/trillium/commit/8d468f85e27b8d0943d6f43ce9f8c7397141a999; https://github.com/trillium-rs/trillium/security/advisories/GHSA-9f9p-cp3c-72jf
CVE: CVE-2024-23646
Published: 2024-01-24
Description: Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. The application allows users to create zip files from available files on the site. In the 1.x branch prior to version 1.3.2, parameter `selectedIds` is susceptible to SQL Injection. Any backend user with very basic permissions can execute arbitrary SQL statements and thus alter any data or escalate their privileges to at least admin level. Version 1.3.2 contains a fix for this issue.

CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/pimcore/admin-ui-classic-bundle/blob/1.x/src/Controller/Admin/Asset/AssetController.php#L2006; https://github.com/pimcore/admin-ui-classic-bundle/blob/1.x/src/Controller/Admin/Asset/AssetController.php#L2087; https://github.com/pimcore/admin-ui-classic-bundle/commit/363afef29496cc40a8b863c2ca2338979fcf50a8
CVE: CVE-2023-24676
Published: 2024-01-24
Description: An issue found in ProcessWire 3.0.210 allows attackers to execute arbitrary code and install a reverse shell via the download_zip_url parameter when installing a new module. NOTE: this is disputed because exploitation requires that the attacker is able to enter requests as an admin; however, a ProcessWire admin is intentionally allowed to install any module that contains any arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://medium.com/%40cupc4k3/reverse-shell-via-remote-file-inlusion-in-proccesswire-cms-a8fa5ace3255; https://medium.com/%40cupc4k3/reverse-shell-via-remote-file-inlusion-in-proccesswire-cms-a8fa5ace3255
CVE: CVE-2024-22751
Published: 2024-01-24
Description: D-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the sub_477AA0 function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/5erua/vuls/blob/main/dir882.md; https://www.dlink.com/en/security-bulletin/; https://github.com/5erua/vuls/blob/main/dir882.md
CVE: CVE-2024-0617
Published: 2024-01-25
Description: The Category Discount Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpcd_save_discount() function in all versions up to, and including, 4.12. This makes it possible for unauthenticated attackers to modify product category discounts that could lead to loss of revenue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/woo-product-category-discount/trunk/cd-admin.php#L171; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3026242%40woo-product-category-discount&new=3026242%40woo-product-category-discount&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/996b44bb-d1e0-4f82-b8ee-a98b0ae994f9?source=cve
CVE: CVE-2024-0624
Published: 2024-01-25
Description: The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.12.7. This is due to missing or incorrect nonce validation on the pmpro_update_level_order() function. This makes it possible for unauthenticated attackers to update the order of levels via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/browser/paid-memberships-pro/trunk/includes/services.php#L139; https://plugins.trac.wordpress.org/changeset/3025164/paid-memberships-pro/tags/2.12.8/includes/services.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/ae68d083-b6e2-409b-8c91-d4eb7e62dba9?source=cve
CVE: CVE-2024-0688
Published: 2024-01-25
Description: The "WebSub (FKA. PubSubHubbub)" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions up to, and including, 3.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3024228%40pubsubhubbub&new=3024228%40pubsubhubbub&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/f07b166b-3436-4797-a2df-096ff7c27a09?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3024228%40pubsubhubbub&new=3024228%40pubsubhubbub&sfp_email=&sfph_mail=
CVE: CVE-2024-0625
Published: 2024-01-25
Description: The WPFront Notification Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpfront-notification-bar-options[custom_class]’ parameter in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79, CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/wpfront-notification-bar/trunk/templates/template-wpfront-notification-bar.php#L94; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3025472%40wpfront-notification-bar&new=3025472%40wpfront-notification-bar&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/19a5a9f3-637c-42af-9775-5651a14cf516?source=cve
CVE: CVE-2024-23985
Published: 2024-01-25
Description: EzServer 6.4.017 allows a denial of service (daemon crash) via a long string, such as one for the RNTO command.
CVSS Score: 7.5 (HIGH)
References: https://packetstormsecurity.com/files/176663/EzServer-6.4.017-Denial-Of-Service.html; https://packetstormsecurity.com/files/176663/EzServer-6.4.017-Denial-Of-Service.html
CVE: CVE-2023-50785
Published: 2024-01-25
Description: Zoho ManageEngine ADAudit Plus before 7270 allows admin users to view names of arbitrary directories via path traversal.
CVSS Score: 2.7 (LOW)
CWE: CWE-22, CWE-22
References: https://www.manageengine.com/products/active-directory-audit/cve-2023-50785.html; https://www.manageengine.com/products/active-directory-audit/cve-2023-50785.html
CVE: CVE-2024-22099
Published: 2024-01-25
Description: NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C.

This issue affects Linux kernel: v2.6.12-rc2.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-476, CWE-476, CWE-476
References: https://bugzilla.openanolis.cn/show_bug.cgi?id=7956; https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html; https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
CVE: CVE-2024-23307
Published: 2024-01-25
Description: Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://bugzilla.openanolis.cn/show_bug.cgi?id=7975; https://bugzilla.openanolis.cn/show_bug.cgi?id=7975
CVE: CVE-2023-33757
Published: 2024-01-25
Description: A lack of SSL certificate validation in Splicecom iPCS (iOS App) v1.3.4, iPCS2 (iOS App) v2.8 and before, and iPCS (Android App) v1.8.5 and before allows attackers to eavesdrop on communications via a man-in-the-middle attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://github.com/twignet/splicecom; https://github.com/twignet/splicecom
CVE: CVE-2023-33758
Published: 2024-01-25
Description: Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting (XSS) vulnerability via the CLIENT_NAME and DEVICE_GUID fields in the login component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/twignet/splicecom; https://github.com/twignet/splicecom
CVE: CVE-2023-33759
Published: 2024-01-25
Description: SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to bypass authentication via a brute force attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307, CWE-307
References: https://github.com/twignet/splicecom; https://github.com/twignet/splicecom
CVE: CVE-2023-33760
Published: 2024-01-25
Description: SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate. This issue can allow attackers to eavesdrop on communications via a man-in-the-middle attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://github.com/twignet/splicecom; https://github.com/twignet/splicecom
CVE: CVE-2023-6282
Published: 2024-01-25
Description: IceHrm 23.0.0.OS does not sufficiently encode user-controlled input, which creates a Cross-Site Scripting (XSS) vulnerability via /icehrm/app/fileupload_page.php, in multiple parameters. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload and partially hijacking the victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-icehrm; https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-icehrm
CVE: CVE-2024-23855
Published: 2024-01-25
Description: A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxcodemodify.php, in multiple parameters. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cups-easy; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cups-easy
CVE: CVE-2024-0879
Published: 2024-01-25
Description: 
Authentication bypass in vector-admin allows a user to register to a vector-admin server while “domain restriction” is active, even when not owning an authorized email address.



CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://github.com/Mintplex-Labs/vector-admin/pull/128/commits/a581b8177dd6be719a5ef6d3ce4b1e939636bb41; https://research.jfrog.com/vulnerabilities/vector-admin-filter-bypass/; https://github.com/Mintplex-Labs/vector-admin/pull/128/commits/a581b8177dd6be719a5ef6d3ce4b1e939636bb41
CVE: CVE-2024-22432
Published: 2024-01-25
Description: 
Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configured MySQL Database user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application Database with privileges of the compromised account.


CVSS Score: 7.8 (HIGH)
CWE: CWE-256, CWE-522
References: https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities
CVE: CVE-2024-22729
Published: 2024-01-25
Description: NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/adhikara13/CVE/blob/main/netis_MW5360/blind%20command%20injection%20in%20password%20parameter%20in%20initial%20settings.md; https://github.com/adhikara13/CVE/blob/main/netis_MW5360/blind%20command%20injection%20in%20password%20parameter%20in%20initial%20settings.md
CVE: CVE-2023-3181
Published: 2024-01-25
Description: The C:\Program Files (x86)\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Temp~nsu.tmp and copies itself to it as Au_.exe. The C:\Windows\Temp~nsu.tmp\Au_.exe file is automatically launched as SYSTEM when the system reboots or when a standard user runs an MSI repair using Splashtop Streamer’s Windows Installer. Since the C:\Windows\Temp~nsu.tmp folder inherits permissions from C:\Windows\Temp and Au_.exe is susceptible to DLL hijacking, standard users can write a malicious DLL to it and elevate their privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-379
References: https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0015.md; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0015.md
CVE: CVE-2023-40547
Published: 2024-01-25
Description: A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise. This flaw is only exploitable during the early boot phase, an attacker needs to perform a Man-in-the-Middle or compromise the boot server to be able to exploit this vulnerability successfully.
CVSS Score: 8.3 (HIGH)
CWE: CWE-787, CWE-346, CWE-787
References: https://access.redhat.com/errata/RHSA-2024:1834; https://access.redhat.com/errata/RHSA-2024:1835; https://access.redhat.com/errata/RHSA-2024:1873
CVE: CVE-2023-52076
Published: 2024-01-25
Description: Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the user opening a crafted document has access. The only limitation is that this vulnerability cannot be exploited to overwrite existing files, but that doesn't stop an attacker from achieving Remote Command Execution on the target system. Version 1.26.2 of Atril contains a patch for this vulnerability.
CVSS Score: 8.5 (HIGH)
CWE: CWE-22, CWE-24, CWE-25, CWE-27, CWE-22
References: https://github.com/mate-desktop/atril/commit/e70b21c815418a1e6ebedf6d8d31b8477c03ba50; https://github.com/mate-desktop/atril/releases/tag/v1.26.2; https://github.com/mate-desktop/atril/security/advisories/GHSA-6mf6-mxpc-jc37
CVE: CVE-2024-0822
Published: 2024-01-25
Description: An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in the system without authentication due to a flaw in the CreateUserSession command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1390, CWE-287
References: https://access.redhat.com/errata/RHSA-2024:0934; https://access.redhat.com/security/cve/CVE-2024-0822; https://bugzilla.redhat.com/show_bug.cgi?id=2258509
CVE: CVE-2024-22529
Published: 2024-01-25
Description: TOTOLINK X2000R_V2 V2.0.0-B20[PII_REDACTED]4 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /bin/boa.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/unpWn4bL3/iot-security/blob/main/29.md; https://github.com/unpWn4bL3/iot-security/blob/main/29.md
CVE: CVE-2024-22749
Published: 2024-01-25
Description: GPAC v2.3 was detected to contain a buffer overflow via the function gf_isom_new_generic_sample_description function in the isomedia/isom_write.c:4577
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/gpac/gpac/issues/2713; https://github.com/hanxuer/crashes/blob/main/gapc/01/readme.md; https://github.com/gpac/gpac/issues/2713
CVE: CVE-2024-0880
Published: 2024-01-25
Description: A vulnerability was found in Qidianbang qdbcrm 1.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/edit?id=2 of the component Password Reset. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252032. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/gtqbhksl/weekdays_something/blob/main/qdb_csrf.md; https://vuldb.com/?ctiid.252032; https://vuldb.com/?id.252032
CVE: CVE-2023-6267
Published: 2024-01-25
Description: A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that the resource may consume is being processed (deserialized) prior to the security constraints being evaluated and applied. This does not happen with configuration based security.
CVSS Score: 8.6 (HIGH)
CWE: CWE-755, CWE-755
References: https://access.redhat.com/errata/RHSA-2024:0494; https://access.redhat.com/errata/RHSA-2024:0495; https://access.redhat.com/security/cve/CVE-2023-6267