deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-29154
Published: 2023-06-01
Description: SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may execute an arbitrary SQL command via specially crafted input to the query setting page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://jvn.jp/en/vu/JVNVU93372935/; https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_en.pdf; https://www.contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_jp.pdf
CVE: CVE-2023-29159
Published: 2023-06-01
Description: Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to view files in a web service which was built using Starlette.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/encode/starlette/releases/tag/0.27.0; https://github.com/encode/starlette/security/advisories/GHSA-v5gw-mw7f-84px; https://jvn.jp/en/jp/JVN95981715/
CVE: CVE-2023-30758
Published: 2023-06-01
Description: Cross-site scripting vulnerability in Pleasanter 1.3.38.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Implem/Implem.Pleasanter/issues/474; https://jvn.jp/en/jp/JVN62111727/; https://pleasanter.org/archives/vulnerability-update-202305
CVE: CVE-2023-29748
Published: 2023-06-01
Description: Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. When an attacker injects too much data, the application will trigger an OOM error and crash at startup, resulting in a persistent denial of service.
CVSS Score: 7.5 (HIGH)
References: https://apksos.com/app/story.saver.downloader.photo.video.repost.byrk; https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29748/CVE%20detail.md; https://play.google.com/store/apps/details?id=ru.yandex.yandexnavi
CVE: CVE-2023-33461
Published: 2023-06-01
Description: iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/ndevilla/iniparser/issues/144; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ASV7SEDHGCP63GYAFEW3CTTVQDZM5RIK/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAIP5AURSTWIQOOP7G4CXYJ5IIGPY3Q/
CVE: CVE-2023-33716
Published: 2023-06-01
Description: mp4v2 v2.1.3 was discovered to contain a memory leak via the class MP4StringProperty at mp4property.cpp.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://github.com/enzo1982/mp4v2/issues/36; https://github.com/enzo1982/mp4v2/issues/36
CVE: CVE-2023-33719
Published: 2023-06-01
Description: mp4v2 v2.1.3 was discovered to contain a memory leak via MP4SdpAtom::Read() at atom_sdp.cpp
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://github.com/enzo1982/mp4v2/; https://github.com/enzo1982/mp4v2/issues/37; https://github.com/enzo1982/mp4v2/
CVE: CVE-2023-34312
Published: 2023-06-01
Description: In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a write-what-where condition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-763, CWE-763
References: https://github.com/vi3t1/qq-tim-elevation; https://github.com/vi3t1/qq-tim-elevation
CVE: CVE-2023-33778
Published: 2023-06-01
Description: Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their own account. Attackers are then able to create WCF and DrayDDNS licenses and synchronize them from the website.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://gist.github.com/Ji4n1ng/6d028709d39458f5ab95b3ea211225ef; https://gist.github.com/Ji4n1ng/6d028709d39458f5ab95b3ea211225ef
CVE: CVE-2010-10010
Published: 2023-06-01
Description: A vulnerability classified as problematic has been found in Stars Alliance PsychoStats up to 3.2.2a. This affects an unknown part of the file upload/admin/login.php. The manipulation of the argument ref leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 3.2.2b is able to address this issue. The identifier of the patch is 5d3b7311fd5085ec6ea1b1bfa9a05285964e07e4. It is recommended to upgrade the affected component. The identifier VDB-230265 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.psychostats.com/forums/index.php?showtopic=20796&hl=; https://github.com/StarsAlliance/PsychoStats/commit/5d3b7311fd5085ec6ea1b1bfa9a05285964e07e4; https://github.com/StarsAlliance/PsychoStats/releases/tag/3.2.2b
CVE: CVE-2023-24584
Published: 2023-06-01
Description: 
Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. 




This issue affects Controller 6000: before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.230201a, all versions of vCR8.40 and prior.


CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-24584; https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-24584
CVE: CVE-2022-4332
Published: 2023-06-01
Description: In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified. Through physical access and hardware manipulation, an attacker might be able to bypass hardware-based code verification and thus inject and execute arbitrary code and gain full access of the device.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/2022-12_Advisories.pdf; https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/2022-12_Advisories.pdf
CVE: CVE-2022-4333
Published: 2023-06-01
Description: Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to Sprecher's hardening guidelines.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/2022-12_Advisories.pdf; https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/2022-12_Advisories.pdf
CVE: CVE-2023-3028
Published: 2023-06-01
Description: Insufficient authentication in the MQTT backend (broker) allows an attacker to access and even manipulate the telemetry data of the entire fleet of vehicles using the HopeChart HQT-401 telematics unit. Other models are possibly affected too.








Multiple vulnerabilities were identified:



- The MQTT backend does not require authentication, allowing unauthorized connections from an attacker.



- The vehicles publish their telemetry data (e.g. GPS Location, speed, odometer, fuel, etc) as messages in public topics. The backend also sends commands to the vehicles as MQTT posts in public topics. As a result, an attacker can access the confidential data of the entire fleet that is managed by the backend.



- The MQTT messages sent by the vehicles or the backend are not encrypted or authenticated. An attacker can create and post messages to impersonate a vehicle or the backend. The attacker could then, for example, send incorrect information to the backend about the vehicle's location.



- The backend can inject data into a vehicle´s CAN bus by sending a specific MQTT message on a public topic. Because these messages are not authenticated or encrypted, an attacker could impersonate the backend, create a fake message and inject CAN data in any vehicle managed by the backend.


The confirmed version is[PII_REDACTED]36, however further versions have been also identified as potentially impacted.




CVSS Score: 8.6 (HIGH)
CWE: CWE-287, CWE-319, CWE-345, CWE-287
References: https://asrg.io/security-advisories/cve-2023-3028/; https://asrg.io/security-advisories/cve-2023-3028/
CVE: CVE-2023-3029
Published: 2023-06-01
Description: A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as problematic. This vulnerability affects unknown code of the file /note/index/delete. The manipulation of the argument id leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230458 is the identifier assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://gitee.com/gouguopen/office/issues/I74VRG; https://vuldb.com/?ctiid.230458; https://vuldb.com/?id.230458
CVE: CVE-2018-25086
Published: 2023-06-01
Description: A vulnerability was found in sea75300 FanPress CM up to 3.6.3. It has been classified as problematic. This affects the function getArticlesPreview of the file inc/controller/action/system/templatepreview.php of the component Template Preview. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 3.6.4 is able to address this issue. The patch is named c380d343c2107fcee55ab00eb8d189ce5e03369b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230235.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/sea75300/fanpresscm3/commit/c380d343c2107fcee55ab00eb8d189ce5e03369b; https://github.com/sea75300/fanpresscm3/releases/tag/v3.6.4; https://vuldb.com/?ctiid.230235
CVE: CVE-2023-22652
Published: 2023-06-01
Description: A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files.
This issue affects libeconf: before 0.5.2.
CVSS Score: 3.3 (LOW)
CWE: CWE-120
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22652; https://https://github.com/openSUSE/libeconf/issues/177; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SDD5GL5T3V5XZ3VFA4HPE6YGJ2K4HHPC/
CVE: CVE-2023-32181
Published: 2023-06-01
Description: A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files
This issue affects libeconf: before 0.5.2.


CVSS Score: 3.3 (LOW)
CWE: CWE-120
References: https://https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32181; https://https://github.com/openSUSE/libeconf/issues/178; https://https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32181
CVE: CVE-2014-125104
Published: 2023-06-01
Description: A vulnerability was found in VaultPress Plugin up to 1.6.0 on WordPress. It has been declared as critical. Affected by this vulnerability is the function protect_aioseo_ajax of the file class.vaultpress-hotfixes.php of the component MailPoet Plugin. The manipulation leads to unrestricted upload. The attack can be launched remotely. Upgrading to version 1.6.1 is able to address this issue. The patch is named e3b92b14edca6291c5f998d54c90cbe98a1fb0e3. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230263.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/wp-plugins/vaultpress/commit/e3b92b14edca6291c5f998d54c90cbe98a1fb0e3; https://github.com/wp-plugins/vaultpress/releases/tag/1.6.1; https://vuldb.com/?ctiid.230263
CVE: CVE-2015-10109
Published: 2023-06-01
Description: A vulnerability was found in Video Playlist and Gallery Plugin up to 1.136 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality of the file wp-media-cincopa.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. Upgrading to version 1.137 is able to address this issue. The name of the patch is ee28e91f4d[PII_REDACTED]c43b7b84a8ffecad932e. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-230264.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/wp-plugins/video-playlist-and-gallery-plugin/commit/ee28e91f4d[PII_REDACTED]c43b7b84a8ffecad932e; https://github.com/wp-plugins/video-playlist-and-gallery-plugin/releases/tag/1.137; https://vuldb.com/?ctiid.230264
CVE: CVE-2022-43760
Published: 2023-06-01
Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher allows users in some higher-privileged groups to to inject code that is 
executed within another user's browser, allowing the attacker to steal 
sensitive information, manipulate web content, or perform other 
malicious activities on behalf of the victims. This could result in a 
user with write access to the affected areas being able to act on behalf
 of an administrator, once an administrator opens the affected web page.


This issue affects Rancher: from >= 2.6.0 before < 2.6.13, from >= 2.7.0 before < 2.7.4.


CVSS Score: 8.4 (HIGH)
CWE: CWE-79
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2022-43760; https://github.com/rancher/rancher/security/advisories/GHSA-46v3-ggjg-qq3x; https://bugzilla.suse.com/show_bug.cgi?id=CVE-2022-43760
CVE: CVE-2023-22647
Published: 2023-06-01
Description: An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local
 cluster, resulting in the secret being deleted, but their read-level 
permissions to the secret being preserved. When this operation was 
followed-up by other specially crafted commands, it could result in the 
user gaining access to tokens belonging to service accounts in the local cluster.


This issue affects Rancher: from >= 2.6.0 before < 2.6.13, from >= 2.7.0 before < 2.7.4.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-267
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22647; https://github.com/rancher/rancher/security/advisories/GHSA-p976-h52c-26p6; https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22647
CVE: CVE-2023-22648
Published: 2023-06-01
Description: A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users 
while they are logged in the Rancher UI. This would cause the users to 
retain their previous permissions in Rancher, even if they change groups
 on Azure AD, for example, to a lower privileged group, or are removed 
from a group, thus retaining their access to Rancher instead of losing 
it.
This issue affects Rancher: from >= 2.6.7 before < 2.6.13, from >= 2.7.0 before < 2.7.4.
CVSS Score: 8.0 (HIGH)
CWE: CWE-271
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22648; https://github.com/rancher/rancher/security/advisories/GHSA-vf6j-6739-78m8; https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22648
CVE: CVE-2023-33544
Published: 2023-06-01
Description: hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/hawtio/hawtio/issues/2832; https://github.com/hawtio/hawtio/issues/2832
CVE: CVE-2023-33546
Published: 2023-06-01
Description: Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack overflow. NOTE: this is disputed by multiple parties because Janino is not intended for use with untrusted input.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/janino-compiler/janino/issues/201; https://janino-compiler.github.io/janino/#security; https://github.com/janino-compiler/janino/issues/201
CVE: CVE-2023-3035
Published: 2023-06-01
Description: A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Schedule Handler. The manipulation of the argument description leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230467.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://gitee.com/gouguopen/office/issues/I74ZPU; https://vuldb.com/?ctiid.230467; https://vuldb.com/?id.230467
CVE: CVE-2023-33551
Published: 2023-06-01
Description: Heap Buffer Overflow in the erofsfsck_dirent_iter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/lometsj/blog_repo/issues/2; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHOIRL6XH5NYR3LYI3KP5DE4SDSQWR7W/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGGIYW7PHYQM2NPYCJPSPSLULLD2P2PE/
CVE: CVE-2023-33552
Published: 2023-06-01
Description: Heap Buffer Overflow in the erofs_read_one_data function at data.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/lometsj/blog_repo/issues/1; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHOIRL6XH5NYR3LYI3KP5DE4SDSQWR7W/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGGIYW7PHYQM2NPYCJPSPSLULLD2P2PE/
CVE: CVE-2023-33965
Published: 2023-06-01
Description: Brook is a cross-platform programmable network tool. The `tproxy` server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local `tproxy` service leading to remote code execution. A patch is available in version 20230606.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/txthinking/brook/commit/314d7070c37babf6c38a0fe1eada872bb74bf03e; https://github.com/txthinking/brook/security/advisories/GHSA-vfrj-fv6p-3cpf; https://github.com/txthinking/brook/commit/314d7070c37babf6c38a0fe1eada872bb74bf03e
CVE: CVE-2023-28043
Published: 2023-06-01
Description: 
Dell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade path. A remote low privileged malicious user could potentially exploit this vulnerability to retrieve the plain text.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-327
References: https://www.dell.com/support/kbdoc/en-us/000214205/dsa-2023-164-dell-secure-connect-gateway-security-update-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000214205/dsa-2023-164-dell-secure-connect-gateway-security-update-for-multiple-vulnerabilities
CVE: CVE-2023-28066
Published: 2023-06-01
Description: 
Dell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability in order to elevate privileges on the system.


CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://www.dell.com/support/kbdoc/en-us/000212575/dsa-2023-147; https://www.dell.com/support/kbdoc/en-us/000212575/dsa-2023-147
CVE: CVE-2023-32310
Published: 2023-06-01
Description: DataEase is an open source data visualization and analysis tool. The API interface for DataEase delete dashboard and delete system messages is vulnerable to insecure direct object references (IDOR). This could result in a user deleting another user's dashboard or messages or interfering with the interface for marking messages read. The vulnerability has been fixed in v1.18.7. There are no known workarounds aside from upgrading.
CVSS Score: 8.1 (HIGH)
CWE: CWE-639, CWE-639
References: https://github.com/dataease/dataease/commit/72f428e87b5395c03d2f94ef6185fc247ddbc8dc; https://github.com/dataease/dataease/pull/5342; https://github.com/dataease/dataease/releases/tag/v1.18.7
CVE: CVE-2023-33963
Published: 2023-06-01
Description: DataEase is an open source data visualization and analysis tool. Prior to version 1.18.7, a deserialization vulnerability exists in the DataEase datasource, which can be exploited to execute arbitrary code. The vulnerability has been fixed in v1.18.7. There are no known workarounds aside from upgrading.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://github.com/dataease/dataease/releases/tag/v1.18.7; https://github.com/dataease/dataease/security/advisories/GHSA-m26j-gh4m-xh9f; https://github.com/dataease/dataease/releases/tag/v1.18.7
CVE: CVE-2023-32324
Published: 2023-06-01
Description: OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` could allow remote attackers to cause a DoS on the affected system. Exploitation of the vulnerability can be triggered when the configuration file `cupsd.conf` sets the value of `loglevel `to `DEBUG`. No known patches or workarounds exist at time of publication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-787, CWE-787
References: https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7; https://lists.debian.org/debian-lts-announce/2023/06/msg00001.html; https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
CVE: CVE-2023-32690
Published: 2023-06-01
Description: libspdm is a sample implementation that follows the DMTF SPDM specifications. Prior to versions 2.3.3 and 3.0, following a successful CAPABILITIES response, a libspdm Requester stores the Responder's CTExponent into its context without validation. If the Requester sends a request message that requires a cryptography operation by the Responder, such as CHALLENGE, libspdm will calculate the timeout value using the Responder's unvalidated CTExponent.

A patch is available in version 2.3.3. A workaround is also available. After completion of VCA, the Requester can check the value of the Responder's CTExponent. If it greater than or equal to 64, then the Requester can stop communication with the Responder.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-20
References: https://github.com/DMTF/libspdm/issues/2068; https://github.com/DMTF/libspdm/pull/2069; https://github.com/DMTF/libspdm/security/advisories/GHSA-56h8-4gv5-jf2c
CVE: CVE-2023-32706
Published: 2023-06-01
Description: On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, an unauthenticated attacker can send specially-crafted messages to the XML parser within SAML authentication to cause a denial of service in the Splunk daemon.
CVSS Score: 7.7 (HIGH)
CWE: CWE-611, CWE-611
References: https://advisory.splunk.com/advisories/SVD-2023-0601; https://advisory.splunk.com/advisories/SVD-2023-0601