deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-0679
Published: 2022-03-28
Description: The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the lib_path parameter before it is passed into a call to require() via the narnoo_distributor_lib_request AJAX action (available to both unauthenticated and authenticated users) which results in the disclosure of arbitrary files as the content of the file is then displayed in the response as JSON data. This could also lead to RCE with various tricks but depends on the underlying system and it's configuration.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://wpscan.com/vulnerability/0ea79eb1-6561-4c21-a20b-a1870863b0a8; https://wpscan.com/vulnerability/0ea79eb1-6561-4c21-a20b-a1870863b0a8
CVE: CVE-2022-0680
Published: 2022-03-28
Description: The Plezi WordPress plugin before 1.0.3 has a REST endpoint allowing unauthenticated users to update the plz_configuration_tracker_enable option, which is then displayed in the admin panel without sanitisation and escaping, leading to a Stored Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/7cede02e-9af7-4f50-95a8-84ef4c7f7ded; https://wpscan.com/vulnerability/7cede02e-9af7-4f50-95a8-84ef4c7f7ded
CVE: CVE-2022-0720
Published: 2022-03-28
Description: The Amelia WordPress plugin before 1.0.47 does not have proper authorisation when managing appointments, allowing any customer to update other's booking, as well as retrieve sensitive information about the bookings, such as the full name and phone number of the person who booked it.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://wpscan.com/vulnerability/435ef99c-9210-46c7-80a4-09cd4d3d00cf; https://wpscan.com/vulnerability/435ef99c-9210-46c7-80a4-09cd4d3d00cf
CVE: CVE-2022-0770
Published: 2022-03-28
Description: The Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and write debug data such as user's cookies in a publicly accessible file if a specific parameter is used when requesting them. Combining those two issues, an attacker could gain access to a logged in admin cookies by making them open a malicious link or page
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/49abe79c-ab1c-4dbf-824c-8daaac7e079d; https://wpscan.com/vulnerability/49abe79c-ab1c-4dbf-824c-8daaac7e079d
CVE: CVE-2022-0784
Published: 2022-03-28
Description: The Title Experiments Free WordPress plugin before 9.0.1 does not sanitise and escape the id parameter before using it in a SQL statement via the wpex_titles AJAX action (available to unauthenticated users), leading to an unauthenticated SQL injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/6672b59f-14bc-4a22-9e0b-fcab4e01d97f; https://wpscan.com/vulnerability/6672b59f-14bc-4a22-9e0b-fcab4e01d97f
CVE: CVE-2022-0787
Published: 2022-03-28
Description: The Limit Login Attempts (Spam Protection) WordPress plugin before 5.1 does not sanitise and escape some parameters before using them in SQL statements via AJAX actions (available to unauthenticated users), leading to SQL Injections
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/69329a8a-2cbe-4f99-a367-b152bd85b3dd; https://wpscan.com/vulnerability/69329a8a-2cbe-4f99-a367-b152bd85b3dd
CVE: CVE-2022-0818
Published: 2022-03-28
Description: The WooCommerce Affiliate Plugin WordPress plugin before 4.16.4.5 does not have authorization and CSRF checks on a specific action handler, as well as does not sanitize its settings, which enables an unauthenticated attacker to inject malicious XSS payloads into the settings page of the plugin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/c43fabb4-b388-462c-adc4-c6b25af7043b; https://wpscan.com/vulnerability/c43fabb4-b388-462c-adc4-c6b25af7043b
CVE: CVE-2022-0833
Published: 2022-03-28
Description: The Church Admin WordPress plugin before 3.4.135 does not have authorisation and CSRF in some of its action as well as requested files, allowing unauthenticated attackers to repeatedly request the "refresh-backup" action, and simultaneously keep requesting a publicly accessible temporary file generated by the plugin in order to disclose the final backup filename, which can then be fetched by the attacker to download the backup of the plugin's DB data
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/b2c7c1e8-d72c-4b1e-b5cb-dc2a6538965d; https://wpscan.com/vulnerability/b2c7c1e8-d72c-4b1e-b5cb-dc2a6538965d
CVE: CVE-2022-0846
Published: 2022-03-28
Description: The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before using it in a SQL statement via the dk_speakout_sendmail AJAX action, leading to an SQL Injection exploitable by unauthenticated users
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/b030296d-688e-44a4-a48a-140375f2c5f4; https://wpscan.com/vulnerability/b030296d-688e-44a4-a48a-140375f2c5f4
CVE: CVE-2021-39876
Published: 2022-03-28
Description: In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of private groups.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39876.json; https://gitlab.com/gitlab-org/gitlab/-/issues/29683; https://hackerone.com/reports/627507
CVE: CVE-2021-4191
Published: 2022-03-28
Description: An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with restricted sign-ups may be vulnerable to user enumeration to unauthenticated users through the GraphQL API.
CVSS Score: 5.3 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4191.json; https://gitlab.com/gitlab-org/gitlab/-/issues/343898; https://hackerone.com/reports/1089609
CVE: CVE-2022-0123
Published: 2022-03-28
Description: An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab does not validate SSL certificates for some of external CI services which makes it possible to perform MitM attacks on connections to these external services.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0123.json; https://gitlab.com/gitlab-org/gitlab/-/issues/296632; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0123.json
CVE: CVE-2022-0136
Published: 2022-03-28
Description: A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1. GitLab was vulnerable to a blind SSRF attack through the Project Import feature.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0136.json; https://gitlab.com/gitlab-org/gitlab/-/issues/28561; https://hackerone.com/reports/560658
CVE: CVE-2022-0249
Published: 2022-03-28
Description: A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since requests to shared address space were not blocked.
CVSS Score: 3.1 (LOW)
CWE: CWE-918
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0249.json; https://gitlab.com/gitlab-org/gitlab/-/issues/29395; https://hackerone.com/reports/579934
CVE: CVE-2022-0283
Published: 2022-03-28
Description: An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLab integration with Jira that a could cause the web application to redirect the request to the attacker specified URL.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0283.json; https://gitlab.com/gitlab-org/gitlab/-/issues/349422; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0283.json
CVE: CVE-2022-0344
Published: 2022-03-28
Description: An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions starting from 10.2 before 14.7.1. Private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a Merge Request and later moved to a public project
CVSS Score: 3.1 (LOW)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0344.json; https://gitlab.com/gitlab-org/gitlab/-/issues/37015; https://hackerone.com/reports/724880
CVE: CVE-2022-0371
Published: 2022-03-28
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14.5.4, all versions starting from 14.6 before 14.6.4, all versions starting from 14.7 before 14.7.1. GitLab search may allow authenticated users to search other users by their respective private emails even if a user set their email to private.
CVSS Score: 4.3 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0371.json; https://gitlab.com/gitlab-org/gitlab/-/issues/350476; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0371.json
CVE: CVE-2022-0427
Published: 2022-03-28
Description: Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows an attacker to perform arbitrary HTTP POST requests on a user's behalf leading to potential account takeover
CVSS Score: 7.7 (HIGH)
CWE: CWE-352
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0427.json; https://gitlab.com/gitlab-org/gitlab/-/issues/347284; https://hackerone.com/reports/1409788
CVE: CVE-2022-0488
Published: 2022-03-28
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigger a timeout on a page with markdown by using a specific amount of block-quotes.
CVSS Score: 3.5 (LOW)
CWE: CWE-400
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0488.json; https://gitlab.com/gitlab-org/gitlab/-/issues/23520; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0488.json
CVE: CVE-2022-0549
Published: 2022-03-28
Description: An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under certain conditions, GitLab REST API may allow unprivileged users to add other users to groups even if that is not possible to do through the Web UI.
CVSS Score: 6.5 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0549.json; https://gitlab.com/gitlab-org/gitlab/-/issues/342448; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0549.json
CVE: CVE-2022-0735
Published: 2022-03-28
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. An unauthorised user was able to steal runner registration tokens through an information disclosure vulnerability using quick actions commands.
CVSS Score: 10.0 (CRITICAL)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0735.json; https://gitlab.com/gitlab-org/gitlab/-/issues/353529; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0735.json
CVE: CVE-2022-0738
Published: 2022-03-28
Description: An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. GitLab was leaking user passwords when adding mirrors with SSH credentials under specific conditions.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-522
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0738.json; https://gitlab.com/gitlab-org/gitlab/-/issues/27395; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0738.json
CVE: CVE-2022-0751
Published: 2022-03-28
Description: Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands
CVSS Score: 6.5 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0751.json; https://gitlab.com/gitlab-org/gitlab/-/issues/349382; https://hackerone.com/reports/1420660
CVE: CVE-2022-1056
Published: 2022-03-28
Description: Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1056.json; https://gitlab.com/libtiff/libtiff/-/issues/391; https://gitlab.com/libtiff/libtiff/-/merge_requests/307
CVE: CVE-2022-26980
Published: 2022-03-28
Description: Teampass 2.1.26 allows reflected XSS via the index.php PATH_INFO.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/RNPG/6919286e0daebce7634d0a744e060dca; https://github.com/nilsteampassnet/TeamPass/commits/teampass_2; https://gist.github.com/RNPG/6919286e0daebce7634d0a744e060dca
CVE: CVE-2022-27658
Published: 2022-03-28
Description: Under certain conditions, SAP Innovation management - version 2.0, allows an attacker to access information which could lead to information gathering for further exploits and attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10; https://launchpad.support.sap.com/#/notes/3165856; https://sapbasisworld.com/sap-security-notes-summary-march-2022/
CVE: CVE-2003-5001
Published: 2022-03-28
Description: A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-269
References: http://www.cgisecurity.com/articles/xss-faq.shtml; http://www.computec.ch/mruef/advisories/black_ice_pc_protection_xss_evasion.txt; https://vuldb.com/?id.104
CVE: CVE-2003-5002
Published: 2022-03-28
Description: A vulnerability was found in ISS BlackICE PC Protection. It has been declared as problematic. Affected by this vulnerability is the component Update Handler which allows cleartext transmission of data. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 3.7 (LOW)
CWE: CWE-319, CWE-319
References: https://vuldb.com/?id.295; https://vuldb.com/?id.295
CVE: CVE-2003-5003
Published: 2022-03-28
Description: A vulnerability was found in ISS BlackICE PC Protection. It has been rated as problematic. Affected by this issue is the Update Handler. The manipulation with an unknown input leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://vuldb.com/?id.296; https://vuldb.com/?id.296
CVE: CVE-2005-10001
Published: 2022-03-28
Description: A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argument target leads to an open redirect. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://vuldb.com/?id.1022; https://vuldb.com/?id.1022
CVE: CVE-2008-10001
Published: 2022-03-28
Description: A vulnerability, which was classified as problematic, has been found in Pro2col Stingray FTS. The manipulation of the argument Username leads to cross site scripting. The attack may be initiated remotely. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-80, CWE-79
References: http://seclists.org/bugtraq/2008/Sep/0157.html; https://vuldb.com/?id.3809; http://seclists.org/bugtraq/2008/Sep/0157.html
CVE: CVE-2010-10001
Published: 2022-03-28
Description: A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 Beta 4. This affects the component NZB Date Parser. The manipulation of the argument date with the input [PII_REDACTED] as part of a NZB File leads to a denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404, CWE-404
References: http://seclists.org/bugtraq/2010/Jul/60; https://vuldb.com/?id.4143; https://www.scip.ch/publikationen/advisories/scip_advisory-4143_shemes_grabbit_malicious_nzb_date_denial_of_service.txt
CVE: CVE-2017-20011
Published: 2022-03-28
Description: A vulnerability was found in WEKA INTEREST Security Scanner 1.8. It has been rated as problematic. This issue affects some unknown processing of the component HTTP Handler. The manipulation with an unknown input leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 2.8 (LOW)
CWE: CWE-404, CWE-404
References: http://www.computec.ch/news.php?item.117; https://vuldb.com/?id.101969; http://www.computec.ch/news.php?item.117
CVE: CVE-2017-20012
Published: 2022-03-28
Description: A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 2.8 (LOW)
CWE: CWE-404, CWE-404
References: http://www.computec.ch/news.php?item.117; https://vuldb.com/?id.101969; https://vuldb.com/?id.101970
CVE: CVE-2017-20013
Published: 2022-03-28
Description: A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulnerability is the Stresstest Configuration Handler. A manipulation leads to a local denial of service. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 2.8 (LOW)
CWE: CWE-404, CWE-404
References: http://www.computec.ch/news.php?item.117; https://vuldb.com/?id.101969; https://vuldb.com/?id.101971
CVE: CVE-2017-20014
Published: 2022-03-28
Description: A vulnerability, which was classified as problematic, has been found in WEKA INTEREST Security Scanner up to 1.8. Affected by this issue is some unknown functionality of the component Webspider. The manipulation with an unknown input leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 2.8 (LOW)
CWE: CWE-404, CWE-404
References: http://www.computec.ch/news.php?item.117; https://vuldb.com/?id.101969; https://vuldb.com/?id.101972
CVE: CVE-2017-20015
Published: 2022-03-28
Description: A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affects an unknown part of the component LAN Viewer. The manipulation with an unknown input leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 2.8 (LOW)
CWE: CWE-404, CWE-404
References: http://www.computec.ch/news.php?item.117; https://vuldb.com/?id.101969; https://vuldb.com/?id.101973
CVE: CVE-2017-20016
Published: 2022-03-28
Description: A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerability affects unknown code of the component Portscan. The manipulation with an unknown input leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-789, CWE-770
References: http://www.computec.ch/news.php?item.117; https://vuldb.com/?id.101969; https://vuldb.com/?id.101974
CVE: CVE-2022-26278
Published: 2022-03-28
Description: Tenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/pllrry/Tenda-AC9-V15.03.2.21_cn-Command-Execution-Vulnerability/tree/main/Tenda-AC9; https://github.com/pllrry/Tenda-AC9-V15.03.2.21_cn-Command-Execution-Vulnerability/tree/main/Tenda-AC9
CVE: CVE-2021-43097
Published: 2022-03-28
Description: A Server-side Template Injection (SSTI) vulnerability exists in bbs 5.3 in TemplateManageAction.javawhich could let a malicoius user execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/diyhi/bbs/issues/51; https://github.com/diyhi/bbs/issues/51
CVE: CVE-2021-43098
Published: 2022-03-28
Description: A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/diyhi/bbs/issues/51; https://github.com/diyhi/bbs/issues/51
CVE: CVE-2021-43099
Published: 2022-03-28
Description: An Archive Extraction (AKA "Zip Slip) vulnerability exists in bbs 5.3 in the UpgradeNow function in UpgradeManageAction.java, which unzips the arbitrary upladed zip file without checking filenames. The vulnerability is exploited using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe).
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://github.com/diyhi/bbs/issues/51; https://github.com/diyhi/bbs/issues/51
CVE: CVE-2021-43100
Published: 2022-03-28
Description: A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/diyhi/bbs/issues/51; https://github.com/diyhi/bbs/issues/51
CVE: CVE-2021-43101
Published: 2022-03-28
Description: A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/diyhi/bbs/issues/51; https://github.com/diyhi/bbs/issues/51
CVE: CVE-2021-43102
Published: 2022-03-28
Description: A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/diyhi/bbs/issues/51; https://github.com/diyhi/bbs/issues/51
CVE: CVE-2021-43103
Published: 2022-03-28
Description: A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/diyhi/bbs/issues/51; https://github.com/diyhi/bbs/issues/51