deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-5203
Published: 2023-12-26
Description: The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query parameters before using them in an SQL query, allowing unauthenticated attackers to extract sensitive data from the database via blind time based SQL injection techniques, or in some cases an error/union based technique.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/7f4f505b-2667-4e0f-9841-9c1cd0831932; https://wpscan.com/vulnerability/7f4f505b-2667-4e0f-9841-9c1cd0831932
CVE: CVE-2023-5644
Published: 2023-12-26
Description: The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing users with the Contributor role to view and delete data that should only be accessible to Admin users.
CVSS Score: 7.6 (HIGH)
CWE: CWE-863
References: https://wpscan.com/vulnerability/08f1d623-0453-4103-a9aa-2d0ddb6eb69e; https://wpscan.com/vulnerability/08f1d623-0453-4103-a9aa-2d0ddb6eb69e
CVE: CVE-2023-5645
Published: 2023-12-26
Description: The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Contributor.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/e392fb53-66e9-4c43-9e4f-f4ea7c561551; https://wpscan.com/vulnerability/e392fb53-66e9-4c43-9e4f-f4ea7c561551
CVE: CVE-2023-5672
Published: 2023-12-26
Description: The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to emails, leading to local file inclusion, and allowing an attacker to leak the contents of arbitrary files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://wpscan.com/vulnerability/7c1dff5b-bed3-49f8-96cc-1bc9abe78749; https://wpscan.com/vulnerability/7c1dff5b-bed3-49f8-96cc-1bc9abe78749
CVE: CVE-2023-5673
Published: 2023-12-26
Description: The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file extensions uploading files to attach to emails, allowing attackers to upload PHP files, leading to remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/231f72bf-9ad0-417e-b7a0[PII_REDACTED]e9; https://wpscan.com/vulnerability/231f72bf-9ad0-417e-b7a0[PII_REDACTED]e9
CVE: CVE-2023-5674
Published: 2023-12-26
Description: The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Contributor.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/32a23d0d-7ece-4870-a99d-f3f344be2d67; https://wpscan.com/vulnerability/32a23d0d-7ece-4870-a99d-f3f344be2d67
CVE: CVE-2023-5931
Published: 2023-12-26
Description: The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary files such as PHP on the server
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/3d6889e3-a01b-4e7f-868f-af7cc8c7531a; https://wpscan.com/vulnerability/3d6889e3-a01b-4e7f-868f-af7cc8c7531a
CVE: CVE-2023-5939
Published: 2023-12-26
Description: The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 loads the contents of the import file in an unsafe manner, leading to remote code execution by privileged users.
CVSS Score: 7.2 (HIGH)
References: https://wpscan.com/vulnerability/db5d41fc-bcd3-414f-aa99-54d5537007bc; https://wpscan.com/vulnerability/db5d41fc-bcd3-414f-aa99-54d5537007bc
CVE: CVE-2023-5980
Published: 2023-12-26
Description: The BSK Forms Blacklist WordPress plugin before 3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b621261b-ae18-4853-9ace-7b773810529a; https://wpscan.com/vulnerability/b621261b-ae18-4853-9ace-7b773810529a
CVE: CVE-2023-5991
Published: 2023-12-26
Description: The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and delete arbitrary files on the server
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://wpscan.com/vulnerability/e9d35e36-1e60-4483-b8b3-5cbf08fcd49e; https://wpscan.com/vulnerability/e9d35e36-1e60-4483-b8b3-5cbf08fcd49e
CVE: CVE-2023-6114
Published: 2023-12-26
Description: The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the `backups-dup-lite/tmp` directory (or the `backups-dup-pro/tmp` directory in the Pro version), which temporarily stores files containing sensitive data. When directory listing is enabled in the web server, this allows unauthenticated attackers to discover and access these sensitive files, which include a full database dump and a zip archive of the site.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://drive.google.com/file/d/1mpapFCqfZLv__EAM7uivrrl2h55rpi1V/view?usp=sharing; https://wpscan.com/vulnerability/5c5d41b9-1463-4a9b-862f-e9ee600ef8e1; https://drive.google.com/file/d/1mpapFCqfZLv__EAM7uivrrl2h55rpi1V/view?usp=sharing
CVE: CVE-2023-6155
Published: 2023-12-26
Description: The Quiz Maker WordPress plugin before 6.4.9.5 does not adequately authorize the `ays_quiz_author_user_search` AJAX action, allowing an unauthenticated attacker to perform a search for users of the system, ultimately leaking user email addresses.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://wpscan.com/vulnerability/c62be802-e91a-4bcf-990d-8fd8ef7c9a28; https://wpscan.com/vulnerability/c62be802-e91a-4bcf-990d-8fd8ef7c9a28
CVE: CVE-2023-6166
Published: 2023-12-26
Description: The Quiz Maker WordPress plugin before 6.4.9.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e6155d9b-f6bb-4607-ad64-1976a8afe907; https://wpscan.com/vulnerability/e6155d9b-f6bb-4607-ad64-1976a8afe907
CVE: CVE-2023-6250
Published: 2023-12-26
Description: The BestWebSoft's Like & Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthenticated users via a meta tag
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://wpscan.com/vulnerability/6cad602b-7414-4867-8ae2-f0b846c4c8f0; https://wpscan.com/vulnerability/6cad602b-7414-4867-8ae2-f0b846c4c8f0
CVE: CVE-2023-6268
Published: 2023-12-26
Description: The JSON Content Importer WordPress plugin before 1.5.4 does not sanitise and escape the tab parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/15b9ab48-c038-4f2e-b823-1e374baae985; https://wpscan.com/vulnerability/15b9ab48-c038-4f2e-b823-1e374baae985
CVE: CVE-2023-48003
Published: 2023-12-26
Description: An open redirect through HTML injection in user messages in Asp.Net Zero before 12.3.0 allows remote attackers to redirect targeted victims to any URL via the '<meta http-equiv="refresh"' in the WebSocket messages.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://docs.unsafe-inline.com/0day/asp.net-zero-v12.3.0-html-injection-leads-to-open-redirect-via-websockets-cve-2023-48003; https://github.com/passtheticket/vulnerability-research/blob/main/aspnetzero_html_injection_via_websockets_messages.md; https://docs.unsafe-inline.com/0day/asp.net-zero-v12.3.0-html-injection-leads-to-open-redirect-via-websockets-cve-2023-48003
CVE: CVE-2023-49438
Published: 2023-12-26
Description: An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/Flask-Middleware/flask-security; https://github.com/brandon-t-elliott/CVE-2023-49438; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6HCYH377TPUMUHELPI36PDS2ZM4VFIXM/
CVE: CVE-2023-52096
Published: 2023-12-26
Description: SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an application receives a StartTransaction Open Charge Point Protocol message with a timestamp parameter of 1000000). This may lead to a SQL exception in applications, and may undermine the integrity of transaction records.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/steve-community/ocpp-jaxb/compare/0.0.7...0.0.8; https://github.com/steve-community/ocpp-jaxb/issues/13; https://github.com/steve-community/steve/issues/1292
CVE: CVE-2023-6190
Published: 2023-12-27
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in İzmir Katip Çelebi University University Information Management System allows Absolute Path Traversal.This issue affects University Information Management System: before 30.11.2023.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://www.usom.gov.tr/bildirim/tr-23-0736; https://www.usom.gov.tr/bildirim/tr-23-0736
CVE: CVE-2023-3171
Published: 2023-12-27
Description: A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on resources consumed. This issue could allow an attacker to submit malicious requests using these classes, which could eventually exhaust the heap and result in a Denial of Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-789, CWE-770
References: https://access.redhat.com/errata/RHSA-2023:5484; https://access.redhat.com/errata/RHSA-2023:5485; https://access.redhat.com/errata/RHSA-2023:5486
CVE: CVE-2023-4641
Published: 2023-12-27
Description: A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-303, CWE-287
References: https://access.redhat.com/errata/RHSA-2023:6632; https://access.redhat.com/errata/RHSA-2023:7112; https://access.redhat.com/errata/RHSA-2024:0417
CVE: CVE-2023-7116
Published: 2023-12-27
Description: A vulnerability, which was classified as critical, has been found in WeiYe-Jing datax-web 2.1.2. Affected by this issue is some unknown functionality of the file /api/log/killJob of the component HTTP POST Request Handler. The manipulation of the argument processId leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-249086 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78
References: https://medium.com/@[PII_REDACTED]ljk/rec-vulnerability-e8f2e1033b1f; https://vuldb.com/?ctiid.249086; https://vuldb.com/?id.249086
CVE: CVE-2023-50255
Published: 2023-12-27
Description: Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that can be exploited to achieve Remote Command Execution on the target system upon opening crafted archives. Users are advised to update to version 5.12.21 which addresses the issue. There are no known workarounds for this vulnerability.

CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22, CWE-23, CWE-26
References: https://github.com/linuxdeepin/deepin-compressor/commit/82f668c78c133873f5094cfab6e4eabc0b70e4b6; https://github.com/linuxdeepin/developer-center/security/advisories/GHSA-rw5r-8p9h-3gp2; https://github.com/linuxdeepin/deepin-compressor/commit/82f668c78c133873f5094cfab6e4eabc0b70e4b6
CVE: CVE-2023-51443
Published: 2023-12-27
Description: FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.11, when handling DTLS-SRTP for media setup, FreeSWITCH is susceptible to Denial of Service due to a race condition in the hello handshake phase of the DTLS protocol. This attack can be done continuously, thus denying new DTLS-SRTP encrypted calls during the attack. If an attacker manages to send a ClientHello DTLS message with an invalid CipherSuite (such as `TLS_NULL_WITH_NULL_NULL`) to the port on the FreeSWITCH server that is expecting packets from the caller, a DTLS error is generated. This results in the media session being torn down, which is followed by teardown at signaling (SIP) level too. Abuse of this vulnerability may lead to a massive Denial of Service on vulnerable FreeSWITCH servers for calls that rely on DTLS-SRTP. To address this vulnerability, upgrade FreeSWITCH to 1.10.11 which includes the security fix. The solution implemented is to drop all packets from addresses that have not been validated by an ICE check.
CVSS Score: 7.5 (HIGH)
CWE: CWE-703
References: http://packetstormsecurity.com/files/176393/FreeSWITCH-Denial-Of-Service.html; https://github.com/signalwire/freeswitch/commit/86cbda90b84ba186e508fbc7bfae469270a97d11; https://github.com/signalwire/freeswitch/security/advisories/GHSA-39gv-hq72-j6m6
CVE: CVE-2023-51664
Published: 2023-12-27
Description: tj-actions/changed-files is a Github action to retrieve all files and directories. Prior to 41.0.0, the `tj-actions/changed-files` workflow allows for command injection in changed filenames, allowing an attacker to execute arbitrary code and potentially leak secrets. This issue may lead to arbitrary command execution in the GitHub Runner. This vulnerability has been addressed in version 41.0.0. Users are advised to upgrade.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-77, CWE-77
References: https://github.com/tj-actions/changed-files/commit/0102c07446a3cad972f4afcbd0ee4dbc4b6d2d1b; https://github.com/tj-actions/changed-files/commit/716b1e[PII_REDACTED]e00e85fd4ec490e186c4a2f; https://github.com/tj-actions/changed-files/commit/ff2f6e6b91913a7be42be1b5917330fe442f2ede
CVE: CVE-2023-51665
Published: 2023-12-27
Description: Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.7.0, Audiobookshelf is vulnerable to unauthenticated blind server-side request (SSRF) vulnerability in Auth.js. This vulnerability has been addressed in version 2.7.0. There are no known workarounds for this vulnerability.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/advplyr/audiobookshelf/commit/728496010cbfcee5b7b54001c9f79e02ede30d82; https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-gjgj-98v3-47pg; https://github.com/advplyr/audiobookshelf/commit/728496010cbfcee5b7b54001c9f79e02ede30d82
CVE: CVE-2023-51697
Published: 2023-12-27
Description: Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.7.0, Audiobookshelf is vulnerable to unauthenticated blind server-side request (SSRF) vulnerability in `podcastUtils.js`. This vulnerability has been addressed in version 2.7.0. There are no known workarounds for this vulnerability.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/advplyr/audiobookshelf/commit/f2f2ea161ca0701e1405e737b0df0f96296e4f64; https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-jhjx-c3wx-q2x7; https://github.com/advplyr/audiobookshelf/commit/f2f2ea161ca0701e1405e737b0df0f96296e4f64
CVE: CVE-2023-51700
Published: 2023-12-27
Description: Unofficial Mobile BankID Integration for WordPress lets users employ Mobile BankID to authenticate themselves on your WordPress site. Prior to 1.0.1, WP-Mobile-BankID-Integration is affected by a vulnerability classified as a Deserialization of Untrusted Data vulnerability, specifically impacting scenarios where an attacker can manipulate the database. If unauthorized actors gain access to the database, they could exploit this vulnerability to execute object injection attacks. This could lead to unauthorized code execution, data manipulation, or data exfiltration within the WordPress environment.  Users of the plugin should upgrade to version 1.0.1 (or later), where the serialization and deserialization of OrderResponse objects have been switched out to an array stored as JSON.  A possible workaround for users unable to upgrade immediately is to enforce stricter access controls on the database, ensuring that only trusted and authorized entities can modify data. Additionally, implementing monitoring tools to detect unusual database activities could help identify and mitigate potential exploitation attempts.

CVSS Score: 6.4 (MEDIUM)
CWE: CWE-502
References: https://github.com/jamieblomerus/WP-Mobile-BankID-Integration/commit/8251c6298a995ccf4f26c43f03ed11a275dd0c5f; https://github.com/jamieblomerus/WP-Mobile-BankID-Integration/security/advisories/GHSA-pqwp-qrp7-grg4; https://github.com/jamieblomerus/WP-Mobile-BankID-Integration/commit/8251c6298a995ccf4f26c43f03ed11a275dd0c5f
CVE: CVE-2023-52077
Published: 2023-12-27
Description: Nexkey is a lightweight fork of Misskey v12 optimized for small to medium size servers. Prior to 12.23Q4.5, Nexkey allows external apps using tokens issued by administrators and moderators to call admin APIs.  This allows malicious third-party apps to perform operations such as updating server settings, as well as compromise object storage and email server credentials. This issue has been patched in 12.23Q4.5.
CVSS Score: 8.9 (HIGH)
CWE: CWE-863
References: https://github.com/mei23/misskey-v12/commit/78173e376f14fcc1987b02196f5538bf5b18225c; https://github.com/misskey-dev/misskey/commit/[PII_REDACTED]594278e9eb23e72d98b16593c4c230; https://github.com/nexryai/nexkey/commit/a4e4c9c47c5f84ec7ccd309bde59d4ae5d7e5a98
CVE: CVE-2023-40038
Published: 2023-12-27
Description: Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. (They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit.)
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://github.com/actuator/cve/blob/main/Arris/CVE-2023-40038; https://i.ebayimg.com/images/g/ByAAAOSwQCFi2b50/s-l1600.jpg; https://github.com/actuator/cve/blob/main/Arris/CVE-2023-40038
CVE: CVE-2023-52075
Published: 2023-12-27
Description: ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing rate limit to be triggered thus increasing server load. This causes a denial of service for all users using the API.  It is recommended to implement proper error caching.

CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: https://github.com/ReVanced/revanced-api/security/advisories/GHSA-852x-grxp-8p3q; https://github.com/ReVanced/revanced-api/security/advisories/GHSA-852x-grxp-8p3q
CVE: CVE-2023-43481
Published: 2023-12-27
Description: An issue in Shenzhen TCL Browser TV Web BrowseHere (aka com.tcl.browser) 6.65.022_dab24cc6_231221_gp allows a remote attacker to execute arbitrary JavaScript code via the com.tcl.browser.portal.browse.activity.BrowsePageActivity component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://github.com/actuator/com.tcl.browser/blob/main/CWE-94.md; https://github.com/actuator/com.tcl.browser/blob/main/CWE-94.md
CVE: CVE-2023-43955
Published: 2023-12-27
Description: The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView. This allows attackers to execute arbitrary code, create arbitrary files. and perform arbitrary downloads via JavaScript that uses takeBlobDownloadData.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/actuator/com.phlox.tvwebbrowser; https://github.com/actuator/com.phlox.tvwebbrowser/blob/main/CWE-94.md; https://github.com/actuator/com.phlox.tvwebbrowser/blob/main/poc.apk
CVE: CVE-2023-46919
Published: 2023-12-27
Description: Phlox com.phlox.simpleserver (aka Simple HTTP Server) 1.8 and com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus have a hardcoded aKySWb2jjrr4dzkYXczKRt7K (AES) encryption key. An attacker with physical access to the application's source code or binary can extract this key & use it decrypt the TLS secret.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-798
References: https://github.com/actuator/com.phlox.simpleserver/blob/main/CWE-321.md; https://github.com/actuator/com.phlox.simpleserver/blob/main/CWE-321.md
CVE: CVE-2023-47882
Published: 2023-12-27
Description: The Kami Vision YI IoT com.yunyi.smartcamera application through 4.1.9_20231127 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component.
CVSS Score: 7.1 (HIGH)
References: https://github.com/actuator/yi/blob/main/CWE-319.md; https://play.google.com/store/apps/details?id=com.yunyi.smartcamera; https://github.com/actuator/yi/blob/main/CWE-319.md
CVE: CVE-2023-47883
Published: 2023-12-27
Description: The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to an exposed MainActivity.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/AFC-POC.apk; https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/CWE-94.md; https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/TVBrowserDemo.gif
CVE: CVE-2023-51074
Published: 2023-12-27
Description: json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse() method.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/json-path/JsonPath/issues/973; https://github.com/json-path/JsonPath/issues/973
CVE: CVE-2023-51075
Published: 2023-12-27
Description: hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: https://github.com/dromara/hutool/issues/3421; https://github.com/dromara/hutool/issues/3421
CVE: CVE-2023-51079
Published: 2023-12-27
Description: A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java class lookups. NOTE: the vendor disputes this because "the only thing that you could expect is that the parser will take a crazy amount of time to complete its task."
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/mvel/mvel/issues/348; https://github.com/mvel/mvel/issues/348#issuecomment[PII_REDACTED]; https://github.com/mvel/mvel/issues/348
CVE: CVE-2023-51080
Published: 2023-12-27
Description: The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/dromara/hutool/issues/3423; https://github.com/dromara/hutool/issues/3423
CVE: CVE-2023-51084
Published: 2023-12-27
Description: hyavijava v6.0.07.1 was discovered to contain a stack overflow via the ResultConverter.convert2Xml method.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/PoppingSnack/VulReport/issues/12; https://github.com/PoppingSnack/VulReport/issues/12