deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-34372
Published: 2023-08-30
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Didier Sampaolo SpamReferrerBlock plugin <= 2.22 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/spamreferrerblock/wordpress-spamreferrerblock-plugin-2-22-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/spamreferrerblock/wordpress-spamreferrerblock-plugin-2-22-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-35092
Published: 2023-08-30
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abhay Yadav Breadcrumb simple plugin <= 1.3 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/breadcrumb-simple/wordpress-breadcrumb-simple-plugin-1-3-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/breadcrumb-simple/wordpress-breadcrumb-simple-plugin-1-3-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-35094
Published: 2023-08-30
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Julien Berthelot / MPEmbed WP Matterport Shortcode plugin <= 2.1.4 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/shortcode-gallery-for-matterport-showcase/wordpress-wp-matterport-shortcode-plugin-2-1-4-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/shortcode-gallery-for-matterport-showcase/wordpress-wp-matterport-shortcode-plugin-2-1-4-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-20266
Published: 2023-08-30
Description: A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an authenticated, remote attacker to elevate privileges to root on an affected device.
 This vulnerability exists because the application does not properly restrict the files that are being used for upgrades. An attacker could exploit this vulnerability by providing a crafted upgrade file. A successful exploit could allow the attacker to elevate privileges to root. To exploit this vulnerability, the attacker must have valid platform administrator credentials on an affected device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-347, CWE-269
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-priv-esc-D8Bky5eg; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-priv-esc-D8Bky5eg
CVE: CVE-2023-40592
Published: 2023-08-30
Description: In Splunk Enterprise versions below 9.1.1, 9.0.6, and 8.2.12, an attacker can craft a special web request that can result in reflected cross-site scripting (XSS) on the “/app/search/table” web endpoint. Exploitation of this vulnerability can lead to the execution of arbitrary commands on the Splunk platform instance.
CVSS Score: 8.4 (HIGH)
CWE: CWE-79, CWE-79
References: https://advisory.splunk.com/advisories/SVD-2023-0801; https://research.splunk.com/application/182f9080-4137-4629-94ac-cb1083ac981a/; https://advisory.splunk.com/advisories/SVD-2023-0801
CVE: CVE-2023-40593
Published: 2023-08-30
Description: In Splunk Enterprise versions lower than 9.0.6 and 8.2.12, a malicious actor can send a malformed security assertion markup language (SAML) request to the `/saml/acs` REST endpoint which can cause a denial of service through a crash or hang of the Splunk daemon.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-400
References: https://advisory.splunk.com/advisories/SVD-2023-0802; https://research.splunk.com/application/8e8a86d5-f323-4567-95be-8e817e2baee6/; https://advisory.splunk.com/advisories/SVD-2023-0802
CVE: CVE-2023-40594
Published: 2023-08-30
Description: In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can use the `printf` SPL function to perform a denial of service (DoS) against the Splunk Enterprise instance.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://advisory.splunk.com/advisories/SVD-2023-0803; https://research.splunk.com/application/78b48d08-075c-4eac-bd07-e364c3780867/; https://advisory.splunk.com/advisories/SVD-2023-0803
CVE: CVE-2023-40595
Published: 2023-08-30
Description: In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can execute a specially crafted query that they can then use to serialize untrusted data. The attacker can use the query to execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://advisory.splunk.com/advisories/SVD-2023-0804; https://research.splunk.com/application/d1d8fda6-874a-400f-82cf-dcbb59d8e4db/; https://advisory.splunk.com/advisories/SVD-2023-0804
CVE: CVE-2023-40596
Published: 2023-08-30
Description: In Splunk Enterprise versions earlier than 8.2.12, 9.0.6, and 9.1.1, a dynamic link library (DLL) that ships with Splunk Enterprise references an insecure path for the OPENSSLDIR build definition. An attacker can abuse this reference and subsequently install malicious code to achieve privilege escalation on the Windows machine.
CVSS Score: 7.0 (HIGH)
CWE: CWE-665, CWE-427
References: https://advisory.splunk.com/advisories/SVD-2023-0805; https://advisory.splunk.com/advisories/SVD-2023-0805
CVE: CVE-2023-40597
Published: 2023-08-30
Description: In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk.
CVSS Score: 7.8 (HIGH)
CWE: CWE-36, CWE-22
References: https://advisory.splunk.com/advisories/SVD-2023-0806; https://research.splunk.com/application/356bd3fe-f59b-4f64-baa1-51495411b7ad/; https://advisory.splunk.com/advisories/SVD-2023-0806
CVE: CVE-2023-40598
Published: 2023-08-30
Description: In Splunk Enterprise versions below 8.2.12, 9.0.6, and 9.1.1, an attacker can create an external lookup that calls a legacy internal function. The attacker can use this internal function to insert code into the Splunk platform installation directory. From there, a user can execute arbitrary code on the Splunk platform Instance.
CVSS Score: 8.5 (HIGH)
CWE: CWE-77, CWE-306
References: https://advisory.splunk.com/advisories/SVD-2023-0807; https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd/; https://advisory.splunk.com/advisories/SVD-2023-0807
CVE: CVE-2023-40837
Published: 2023-08-30
Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADD50' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADD50" function to execute commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/cmd/2/2.md; https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/cmd/2/2.md
CVE: CVE-2023-40838
Published: 2023-08-30
Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_3A1D0' contains a command execution vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/cmd/1/1.md; https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/cmd/1/1.md
CVE: CVE-2023-40839
Published: 2023-08-30
Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADF3C' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADF3C" function to execute commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/cmd/3/3.md; https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/cmd/3/3.md
CVE: CVE-2023-40840
Published: 2023-08-30
Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "fromGetWirelessRepeat."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/6/6.md; https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/6/6.md
CVE: CVE-2023-40841
Published: 2023-08-30
Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "add_white_node,"
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/5/5.md; https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/5/5.md
CVE: CVE-2023-40842
Published: 2023-08-30
Description: Tengda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "R7WebsSecurityHandler."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/4/4.md; https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/4/4.md
CVE: CVE-2023-40843
Published: 2023-08-30
Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "sub_73004."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/8/8.md; https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/8/8.md
CVE: CVE-2023-40844
Published: 2023-08-30
Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'formWifiBasicSet.'
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/2/2.md; https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/2/2.md
CVE: CVE-2023-40845
Published: 2023-08-30
Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'sub_34FD0.' In the function, it reads user provided parameters and passes variables to the function without any length checks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/14/14.md; https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/14/14.md
CVE: CVE-2023-40847
Published: 2023-08-30
Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a user-provided parameter, and the variable is passed to the function without any length check.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/12/12.md; https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/12/12.md
CVE: CVE-2023-40848
Published: 2023-08-30
Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "sub_7D858."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/11/11.md; https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/11/11.md
CVE: CVE-2023-4571
Published: 2023-08-30
Description: In Splunk IT Service Intelligence (ITSI) versions below below 4.13.3, 4.15.3, or 4.17.1, a malicious actor can inject American National Standards Institute (ANSI) escape codes into Splunk ITSI log files that, when a vulnerable terminal application reads them, can run malicious code in the vulnerable application. This attack requires a user to use a terminal application that translates ANSI escape codes to read the malicious log file locally in the vulnerable terminal. The vulnerability also requires additional user interaction to succeed. 

The vulnerability does not directly affect Splunk ITSI. The indirect impact on Splunk ITSI can vary significantly depending on the permissions in the vulnerable terminal application, as well as where and how the user reads the malicious log file. For example, users can copy the malicious file from Splunk ITSI and read it on their local machine.
CVSS Score: 8.6 (HIGH)
CWE: CWE-117, CWE-116
References: https://advisory.splunk.com/advisories/SVD-2023-0810; https://advisory.splunk.com/advisories/SVD-2023-0810
CVE: CVE-2023-4640
Published: 2023-08-30
Description: The controller responsible for setting the logging level does not include any authorization
checks to ensure the user is authenticated. This can be seen by noting that it extends
Controller rather than AuthenticatedController and includes no further checks. This issue affects YugabyteDB Anywhere: from 2.0.0 through 2.17.3

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://www.yugabyte.com/; https://www.yugabyte.com/
CVE: CVE-2023-36811
Published: 2023-08-30
Description: borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. A flaw in the cryptographic authentication scheme in borgbackup allowed an attacker to fake archives and potentially indirectly cause backup data loss in the repository. The attack requires an attacker to be able to: 1. insert files (with no additional headers) into backups and 2. gain write access to the repository. This vulnerability does not disclose plaintext to the attacker, nor does it affect the authenticity of existing archives. Creating plausible fake archives may be feasible for empty or small archives, but is unlikely for large archives. The issue has been fixed in borgbackup 1.2.5. Users are advised to upgrade. Additionally to installing the fixed code, users must follow the upgrade procedure as documented in the change log. Data loss after being attacked can be avoided by reviewing the archives (timestamp and contents valid and as expected) after any "borg check --repair" and before "borg prune". There are no known workarounds for this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-347
References: https://github.com/borgbackup/borg/blob/1.2.5-cvedocs/docs/changes.rst#pre-125-archives-spoofing-vulnerability-cve-2023-36811; https://github.com/borgbackup/borg/commit/3eb070191da10c2d3f7bc6484cf3d51c3045f884; https://github.com/borgbackup/borg/security/advisories/GHSA-8fjr-hghr-4m99
CVE: CVE-2023-40184
Published: 2023-08-30
Description: xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 2.6 (LOW)
CWE: CWE-755
References: https://github.com/neutrinolabs/xrdp/blame/9bbb2ec68f390504c32f2062847aa3d821a0089a/sesman/sesexec/session.c#L571C5-L571C19; https://github.com/neutrinolabs/xrdp/commit/a111a0fdfe2421ef600e40708b5f0168594cfb23; https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-f489-557v-47jq
CVE: CVE-2023-40582
Published: 2023-08-30
Description: find-exec is a utility to discover available shell commands. Versions prior to 1.0.3 did not properly escape user input and are vulnerable to Command Injection via an attacker controlled parameter. As a result, attackers may run malicious shell commands in the context of the running process. This issue has been addressed in version 1.0.3. users are advised to upgrade. Users unable to upgrade should ensure that all input passed to find-exec comes from a trusted source.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/shime/find-exec/commit/74fb108097c229b03d6dba4cce81e36aa364b51c; https://github.com/shime/find-exec/security/advisories/GHSA-95rp-6gqp-6622; https://github.com/shime/find-exec/commit/74fb108097c229b03d6dba4cce81e36aa364b51c
CVE: CVE-2023-41039
Published: 2023-08-30
Description: RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to critical information disclosure. With `RestrictedPython`, the format functionality is available via the `format` and `format_map` methods of `str` (and `unicode`) (accessed either via the class or its instances) and via `string.Formatter`. All known versions of `RestrictedPython` are vulnerable. This issue has been addressed in commit `4134aedcff1` which has been included in the 5.4 and 6.2 releases. Users are advised to upgrade. There are no known workarounds for this vulnerability.


CVSS Score: 8.3 (HIGH)
CWE: CWE-74
References: https://github.com/zopefoundation/RestrictedPython/commit/4134aedcff17c977da7717693ed89ce56d54c120; https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-xjw2-6jm9-rf67; https://github.com/zopefoundation/RestrictedPython/commit/4134aedcff17c977da7717693ed89ce56d54c120
CVE: CVE-2023-31714
Published: 2023-08-30
Description: Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/msd0pe-1/chitor-sqli; https://github.com/waqaskanju/Chitor-CMS/commit/69d34420ad382c91b0c285432418c1b0810128c1; https://github.com/waqaskanju/Chitor-CMS/releases/tag/Chitor-cms
CVE: CVE-2023-38970
Published: 2023-08-30
Description: Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the Name of member parameter in the add new member function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/anh91/uasoft-indonesia--badaso/blob/main/XSS3.md; https://panda002.hashnode.dev/badaso-version-297-has-an-xss-vulnerability-in-new-member; https://github.com/anh91/uasoft-indonesia--badaso/blob/main/XSS3.md
CVE: CVE-2023-39135
Published: 2023-08-30
Description: An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://blog.ostorlab.co/zip-packages-exploitation.html; https://github.com/marmelroy/Zip/issues/245; https://ostorlab.co/vulndb/advisory/OVE-2023-1
CVE: CVE-2023-39136
Published: 2023-08-30
Description: An unhandled edge case in the component _sanitizedPath of ZipArchive v2.5.4 allows attackers to cause a Denial of Service (DoS) via a crafted zip file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-703
References: https://blog.ostorlab.co/zip-packages-exploitation.html; https://github.com/ZipArchive/ZipArchive/issues/680; https://ostorlab.co/vulndb/advisory/OVE-2023-2
CVE: CVE-2023-39137
Published: 2023-08-30
Description: An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://blog.ostorlab.co/zip-packages-exploitation.html; https://github.com/brendan-duncan/archive/issues/266; https://ostorlab.co/vulndb/advisory/OVE-2023-3
CVE: CVE-2023-39138
Published: 2023-08-30
Description: An issue in ZIPFoundation v0.9.16 allows attackers to execute a path traversal via extracting a crafted zip file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://blog.ostorlab.co/zip-packages-exploitation.html; https://github.com/weichsel/ZIPFoundation/issues/282; https://ostorlab.co/vulndb/advisory/OVE-2023-4
CVE: CVE-2023-39139
Published: 2023-08-30
Description: An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://blog.ostorlab.co/zip-packages-exploitation.html; https://github.com/brendan-duncan/archive/issues/265; https://ostorlab.co/vulndb/advisory/OVE-2023-5
CVE: CVE-2023-41040
Published: 2023-08-30
Description: GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file being read is provided by the user, GitPython doesn't check if this file is located outside the `.git` directory. This allows an attacker to make GitPython read any file from the system. This vulnerability is present in https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175. That code joins the base directory with a user given string without checking if the final path is located outside the base directory. This vulnerability cannot be used to read the contents of files but could in theory be used to trigger a denial of service for the program. This issue has been addressed in version 3.1.37.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175; https://github.com/gitpython-developers/GitPython/commit/74e55ee4544867e1bd976b7df5a45869ee397b0b; https://github.com/gitpython-developers/GitPython/commit/e98f57b81f792f0f5e18d33ee658ae395f9aa3c4
CVE: CVE-2023-41041
Published: 2023-08-30
Description: Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Each node maintains an in-memory cache of user sessions. Upon a cache-miss, the session is loaded from the database. After that, the node operates solely on the cached session. Modifications to sessions will update the cached version as well as the session persisted in the database. However, each node maintains their isolated version of the session. When the user logs out, the session is removed from the node-local cache and deleted from the database. The other nodes will however still use the cached session. These nodes will only fail to accept the session id if they intent to update the session in the database. They will then notice that the session is gone. This is true for most API requests originating from user interaction with the Graylog UI because these will lead to an update of the session's "last access" timestamp. If the session update is however prevented by setting the `X-Graylog-No-Session-Extension:true` header in the request, the node will consider the (cached) session valid until the session is expired according to its timeout setting. No session identifiers are leaked. After a user has logged out, the UI shows the login screen again, which gives the user the impression that their session is not valid anymore. However, if the session becomes compromised later, it can still be used to perform API requests against the Graylog cluster. The time frame for this is limited to the configured session lifetime, starting from the time when the user logged out. This issue has been addressed in versions 5.0.9 and 5.1.3. Users are advised to upgrade.



CVSS Score: 2.6 (LOW)
CWE: CWE-613
References: https://github.com/Graylog2/graylog2-server/commit/bb88f3d0b2b0351669ab32c60b595ab7242a3fe3; https://github.com/Graylog2/graylog2-server/security/advisories/GHSA-3fqm-frhg-7c85; https://github.com/Graylog2/graylog2-server/commit/bb88f3d0b2b0351669ab32c60b595ab7242a3fe3
CVE: CVE-2023-41163
Published: 2023-08-30
Description: A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the replace in results field while replacing the results under the tools drop down.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41163; https://webmin.com/tags/webmin-changelog/; https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41163