deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-43664
Published: 2023-04-05
Description: A use-after-free vulnerability exists within the way Ichitaro Word Processor 2022, version 1.0.1.57600, processes protected documents. A specially crafted document can trigger reuse of freed memory, which can lead to further memory corruption and potentially result in arbitrary code execution. An attacker can provide a malicious document to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://jvn.jp/en/jp/JVN79149117/; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1673; https://jvn.jp/en/jp/JVN79149117/
CVE: CVE-2022-45115
Published: 2023-04-05
Description: A buffer overflow vulnerability exists in the Attribute Arena functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://jvn.jp/en/jp/JVN79149117/; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1684; https://jvn.jp/en/jp/JVN79149117/
CVE: CVE-2023-1412
Published: 2023-04-05
Description: An unprivileged (non-admin) user can exploit an Improper Access Control vulnerability in the Cloudflare WARP Client for Windows (<= 2022.12.582.0) to perform privileged operations with SYSTEM context by working with a combination of opportunistic locks (oplock) and symbolic links (which can both be created by an unprivileged user).

After installing the Cloudflare WARP Client (admin privileges required), an MSI-Installer is placed under C:\Windows\Installer. The vulnerability lies in the repair function of this MSI.

ImpactAn unprivileged (non-admin) user can exploit this vulnerability to perform privileged operations with SYSTEM context, including deleting arbitrary files and reading arbitrary file content. This can lead to a variety of attacks, including the manipulation of system files and privilege escalation.

PatchesA new installer with a fix that addresses this vulnerability was released in version 2023.3.381.0. While the WARP Client itself is not vulnerable (only the installer), users are encouraged to upgrade to the latest version and delete any older installers present in their systems.





CVSS Score: 7.0 (HIGH)
CWE: CWE-59, CWE-59
References: https://developers.cloudflare.com/warp-client/get-started/windows/; https://github.com/cloudflare/advisories/security/advisories/GHSA-hgxh-48m3-3gq7; https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/release
CVE: CVE-2023-1756
Published: 2023-04-05
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.


CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/ca75f4688a8b0f14d5d0697b9f4b6ea66088f726; https://huntr.dev/bounties/e495b443-b328-42f5-aed5-d68b929b4cb9; https://github.com/thorsten/phpmyfaq/commit/ca75f4688a8b0f14d5d0697b9f4b6ea66088f726
CVE: CVE-2023-1757
Published: 2023-04-05
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/5061e5841be6c218ebb0de0cbf7b7f195dc46d19; https://huntr.dev/bounties/584a200a-6ff8-4d53-a3c0-e7893edff60c; https://github.com/thorsten/phpmyfaq/commit/5061e5841be6c218ebb0de0cbf7b7f195dc46d19
CVE: CVE-2023-1758
Published: 2023-04-05
Description: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-75
References: https://github.com/thorsten/phpmyfaq/commit/f3380f46c464d1bc6f3ded29213c79be0de8fc57; https://huntr.dev/bounties/0854328e-eb00-41a3-9573-8da8f00e369c; https://github.com/thorsten/phpmyfaq/commit/f3380f46c464d1bc6f3ded29213c79be0de8fc57
CVE: CVE-2023-1788
Published: 2023-04-05
Description: Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613
References: https://github.com/firefly-iii/firefly-iii/commit/68f398f97cbe1870fc098d8460bf903b9c3fab30; https://huntr.dev/bounties/79323c9e-e0e5-48ef-bd19-d0b09587ccb2; https://github.com/firefly-iii/firefly-iii/commit/68f398f97cbe1870fc098d8460bf903b9c3fab30
CVE: CVE-2023-20022
Published: 2023-04-05
Description: Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid Administrator privileges on the affected device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-os-injection-pxhKsDM; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-os-injection-pxhKsDM
CVE: CVE-2023-20023
Published: 2023-04-05
Description: Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid Administrator privileges on the affected device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-os-injection-pxhKsDM; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-os-injection-pxhKsDM
CVE: CVE-2023-20030
Published: 2023-04-05
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access sensitive information, conduct a server-side request forgery (SSRF) attack through an affected device, or negatively impact the responsiveness of the web-based management interface itself. This vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by uploading a crafted XML file that contains references to external entities. A successful exploit could allow the attacker to retrieve files from the local system, resulting in the disclosure of confidential information. A successful exploit could also cause the web application to perform arbitrary HTTP requests on behalf of the attacker or consume memory resources to reduce the availability of the web-based management interface. To successfully exploit this vulnerability, an attacker would need valid Super Admin or Policy Admin credentials.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xxe-inj-GecEHY58; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xxe-inj-GecEHY58
CVE: CVE-2023-20068
Published: 2023-04-05
Description: A vulnerability in the web-based management interface of Cisco Prime Infrastructure Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by persuading a user of the web-based management interface on an affected device to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or to access sensitive, browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pi-xss-PU6dnfD9; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pi-xss-PU6dnfD9
CVE: CVE-2023-20073
Published: 2023-04-05
Description: A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement mechanisms in the context of file uploads. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to upload arbitrary files to the affected device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-afu-EXxwA65V; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-afu-EXxwA65V
CVE: CVE-2023-22291
Published: 2023-04-05
Description: An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to an attempt to free a stack pointer, which causes memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.0 (HIGH)
CWE: CWE-590
References: https://jvn.jp/en/jp/JVN79149117/; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1687; https://jvn.jp/en/jp/JVN79149117/
CVE: CVE-2023-22660
Published: 2023-04-05
Description: A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certain LayoutBox stream record types. A specially crafted document can cause a buffer overflow, leading to memory corruption, which can result in arbitrary code execution.To trigger this vulnerability, the victim would need to open a malicious, attacker-created document.
CVSS Score: 7.0 (HIGH)
CWE: CWE-122
References: https://jvn.jp/en/jp/JVN79149117/; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1722; https://jvn.jp/en/jp/JVN79149117/
CVE: CVE-2023-28633
Published: 2023-04-05
Description: GLPI is a free asset and IT management software package. Starting in version 0.84 and prior to versions 9.5.13 and 10.0.7, usage of RSS feeds is subject to server-side request forgery (SSRF). In case the remote address is not a valid RSS feed, an RSS autodiscovery feature is triggered. This feature does not check safety or URLs. Versions 9.5.13 and 10.0.7 contain a patch for this issue.
CVSS Score: 3.5 (LOW)
CWE: CWE-918
References: https://github.com/glpi-project/glpi/commit/e2819da64c[PII_REDACTED]a44c834e1f4dc621a982; https://github.com/glpi-project/glpi/releases/tag/10.0.7; https://github.com/glpi-project/glpi/releases/tag/9.5.13
CVE: CVE-2023-29389
Published: 2023-04-05
Description: Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reaching the headlight connector, and then sending forged "Key is validated" messages via CAN Injection, as exploited in the wild in (for example) July 2022.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-74, CWE-74
References: https://kentindell.github.io/2023/04/03/can-injection/; https://news.ycombinator.com/item?id=35452963; https://kentindell.github.io/2023/04/03/can-injection/
CVE: CVE-2023-1876
Published: 2023-04-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-1877
Published: 2023-04-05
Description: Command Injection in GitHub repository microweber/microweber prior to 1.3.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/microweber/microweber/commit/93a906d0bf096c3ab1674012a90c88d101e76c8d; https://huntr.dev/bounties/71fe4b3b-20ac-448c-8191-7b99d7ffaf55; https://github.com/microweber/microweber/commit/93a906d0bf096c3ab1674012a90c88d101e76c8d
CVE: CVE-2023-1878
Published: 2023-04-05
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/e018823f8e3bca103c11e5a98b0dd469e41ed417; https://huntr.dev/bounties/93f981a3-231d-460d-a239-bb960e8c2fdc; https://github.com/thorsten/phpmyfaq/commit/e018823f8e3bca103c11e5a98b0dd469e41ed417
CVE: CVE-2023-1879
Published: 2023-04-05
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/0dc8e527c375007cd4b8dbf61f7167393a6f6e91; https://huntr.dev/bounties/1dc7f818-c8ea-4f80-b000-31b48a426334; https://github.com/thorsten/phpmyfaq/commit/0dc8e527c375007cd4b8dbf61f7167393a6f6e91
CVE: CVE-2023-1880
Published: 2023-04-05
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/bbc5d4aa4a4375c14e34dd9fcad2042066fe476d; https://huntr.dev/bounties/ece5f051-674e-4919-b[PII_REDACTED]10f9e; https://github.com/thorsten/phpmyfaq/commit/bbc5d4aa4a4375c14e34dd9fcad2042066fe476d
CVE: CVE-2023-1881
Published: 2023-04-05
Description: Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/microweber/microweber/commit/8d039de2d615956f6df8df0bb1045ff3be88f183; https://huntr.dev/bounties/d5ebc2bd-8638-41c4-bf72-7c906c601344; https://github.com/microweber/microweber/commit/8d039de2d615956f6df8df0bb1045ff3be88f183
CVE: CVE-2023-1882
Published: 2023-04-05
Description: Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/49db615c300ae0f87795f20570f6f5bdccb1d2f2; https://huntr.dev/bounties/8ab09a1c-cfd5-4ce0-aae3-d33c93318957; https://github.com/thorsten/phpmyfaq/commit/49db615c300ae0f87795f20570f6f5bdccb1d2f2
CVE: CVE-2023-1883
Published: 2023-04-05
Description: Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-284
References: https://github.com/thorsten/phpmyfaq/commit/db77df[PII_REDACTED]87398597d4f153831c62a503; https://huntr.dev/bounties/2f1e417d-cf64-4cfb-954b-3a9cb2f38191; https://github.com/thorsten/phpmyfaq/commit/db77df[PII_REDACTED]87398597d4f153831c62a503
CVE: CVE-2023-1884
Published: 2023-04-05
Description: Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/7f0f921de74c88038826c46bbd2a123518d9d611; https://huntr.dev/bounties/dda73cb6-9344-4822-97a1-2e31efb6a73e; https://github.com/thorsten/phpmyfaq/commit/7f0f921de74c88038826c46bbd2a123518d9d611
CVE: CVE-2023-1885
Published: 2023-04-05
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.


CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/fecc803ab9c3e82718c4bcea7fe919d7a22ec024; https://huntr.dev/bounties/bce84c02-abb2-474f-a67b-1468c9dcabb8; https://github.com/thorsten/phpmyfaq/commit/fecc803ab9c3e82718c4bcea7fe919d7a22ec024
CVE: CVE-2023-1886
Published: 2023-04-05
Description: Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12.


CVSS Score: 7.3 (HIGH)
CWE: CWE-294
References: https://github.com/thorsten/phpmyfaq/commit/27eaaae[PII_REDACTED]ac52416a0bd38b35d7330a; https://huntr.dev/bounties/b7d244b7-5ac3-4964-81ee-8dbb5bb5e33a; https://github.com/thorsten/phpmyfaq/commit/27eaaae[PII_REDACTED]ac52416a0bd38b35d7330a
CVE: CVE-2023-1887
Published: 2023-04-05
Description: Business Logic Errors in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-840
References: https://github.com/thorsten/phpmyfaq/commit/400d9cd988d3287515c56b2ad[PII_REDACTED]f1a89; https://huntr.dev/bounties/e4a58835-96b5-412c-a17e-3ceed30231e1; https://github.com/thorsten/phpmyfaq/commit/400d9cd988d3287515c56b2ad[PII_REDACTED]f1a89
CVE: CVE-2023-20051
Published: 2023-04-05
Description: A vulnerability in the Vector Packet Processor (VPP) of Cisco Packet Data Network Gateway (PGW) could allow an unauthenticated, remote attacker to stop ICMP traffic from being processed over an IPsec connection. This vulnerability is due to the VPP improperly handling a malformed packet. An attacker could exploit this vulnerability by sending a malformed Encapsulating Security Payload (ESP) packet over an IPsec connection. A successful exploit could allow the attacker to stop ICMP traffic over an IPsec connection and cause a denial of service (DoS).
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-400
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pdng-dos-KmzwEy2Q; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pdng-dos-KmzwEy2Q
CVE: CVE-2023-28634
Published: 2023-04-05
Description: GLPI is a free asset and IT management software package. Starting in version 0.83 and prior to versions 9.5.13 and 10.0.7, a user who has the Technician profile could see and generate a Personal token for a Super-Admin. Using such token it is possible to negotiate a GLPI session and hijack the Super-Admin account, resulting in a Privilege Escalation. Versions 9.5.13 and 10.0.7 contain a patch for this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285, CWE-863
References: https://github.com/glpi-project/glpi/releases/tag/10.0.7; https://github.com/glpi-project/glpi/releases/tag/9.5.13; https://github.com/glpi-project/glpi/security/advisories/GHSA-4279-rxmh-gf39
CVE: CVE-2022-4935
Published: 2023-04-05
Description: The WCFM Marketplace plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to, and including, 3.4.11 due to missing capability checks on various AJAX actions. This makes it possible for authenticated attackers, with minimal permissions such as subscribers, to perform a wide variety of actions such as modifying shipping method details, modifying products, deleting arbitrary posts, and privilege escalation (via the wp_ajax_wcfm_vendor_store_online AJAX action).
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2630696%40wc-multivendor-marketplace&new=2630696%40wc-multivendor-marketplace&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/85730e9b-c5da-473c-a324-891c5c9f7ba3?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2630696%40wc-multivendor-marketplace&new=2630696%40wc-multivendor-marketplace&sfp_email=&sfph_mail=
CVE: CVE-2022-4936
Published: 2023-04-05
Description: The WCFM Marketplace plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.4.11 due to missing nonce checks on various AJAX actions. This makes it possible for unauthenticated attackers to perform a wide variety of actions such as modifying shipping method details, modifying products, deleting arbitrary posts, and more, via a forged request granted they can trick a site's administrator into performing an action such as clicking on a link.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2632635%40wc-multivendor-marketplace&new=2632635%40wc-multivendor-marketplace&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/5c2cc9a3-cd20-4c9e-baa4-1aea69f84331?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2632635%40wc-multivendor-marketplace&new=2632635%40wc-multivendor-marketplace&sfp_email=&sfph_mail=
CVE: CVE-2022-4937
Published: 2023-04-05
Description: The WCFM Frontend Manager plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to, and including, 6.6.0 due to missing capability checks on various AJAX actions. This makes it possible for authenticated attackers, with minimal permissions such as subscribers, to perform a wide variety of actions such as modifying knowledge bases, modifying notices, modifying payments, managing vendors, capabilities, and so much more. There were hundreds of AJAX endpoints affected.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2629284%40wc-frontend-manager&new=2629284%40wc-frontend-manager&sfp_email=&sfph_mail=; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2630745%40wc-frontend-manager&new=2630745%40wc-frontend-manager&sfp_email=&sfph_mail=; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2632630%40wc-frontend-manager&new=2632630%40wc-frontend-manager&sfp_email=&sfph_mail=
CVE: CVE-2022-4938
Published: 2023-04-05
Description: The WCFM Frontend Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.6.0 due to missing nonce checks on various AJAX actions. This makes it possible for unauthenticated attackers to perform a wide variety of actions such as modifying knowledge bases, modifying notices, modifying payments, managing vendors, capabilities, and so much more, via a forged request granted they can trick a site's administrator into performing an action such as clicking on a link. There were hundreds of AJAX endpoints affected.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2632630%40wc-frontend-manager&new=2632630%40wc-frontend-manager&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/798b57ad-0922-435c-8b4d-8a96b388b314?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2632630%40wc-frontend-manager&new=2632630%40wc-frontend-manager&sfp_email=&sfph_mail=
CVE: CVE-2023-20124
Published: 2023-04-05
Description: A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device. Cisco has not released software updates that address this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77, CWE-77
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv01x_rv32x_rce-nzAGWWDD; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv01x_rv32x_rce-nzAGWWDD