deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-43342
Published: 2022-11-14
Description: A stored cross-site scripting (XSS) vulnerability in the Add function of Eramba GRC Software c2.8.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the KPI Title text field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://discussions.eramba.org/t/question-stored-xss-vulnerability/2326; https://www.eramba.org/; https://discussions.eramba.org/t/question-stored-xss-vulnerability/2326
CVE: CVE-2022-45136
Published: 2022-11-14
Description: Apache Jena SDB 3.17.0 and earlier is vulnerable to a JDBC Deserialisation attack if the attacker is able to control the JDBC URL used or cause the underlying database server to return malicious data. The mySQL JDBC driver in particular is known to be vulnerable to this class of attack. As a result an application using Apache Jena SDB can be subject to RCE when connected to a malicious database server. Apache Jena SDB has been EOL since December 2020 and users should migrate to alternative options e.g. Apache Jena TDB 2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: http://www.openwall.com/lists/oss-security/2022/11/14/5; https://lists.apache.org/thread/mc77cdl5stgjtjoldk467gdf756qjt31; http://www.openwall.com/lists/oss-security/2022/11/14/5
CVE: CVE-2022-0324
Published: 2022-11-14
Description: There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp relay docker to shutdown.

Discovered by Eugene Lim of GovTech Singapore.

CVSS Score: 8.1 (HIGH)
CWE: CWE-120, CWE-120, CWE-787
References: https://github.com/sonic-net/sonic-buildimage/security/advisories/GHSA-m4qf-8rrq-mph9; https://govtech-csg.github.io/security-advisories/2022/11/14/CVE-2022-0324.html; https://github.com/sonic-net/sonic-buildimage/security/advisories/GHSA-m4qf-8rrq-mph9
CVE: CVE-2022-35719
Published: 2022-11-14
Description: IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/231370; https://www.ibm.com/support/pages/node/6838559; https://exchange.xforce.ibmcloud.com/vulnerabilities/231370
CVE: CVE-2022-3992
Published: 2022-11-14
Description: A vulnerability classified as problematic was found in SourceCodester Sanitization Management System. Affected by this vulnerability is an unknown functionality of the file admin/?page=system_info of the component Banner Image Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-213571.
CVSS Score: 2.4 (LOW)
CWE: CWE-707, CWE-79
References: https://vuldb.com/?id.213571; https://vuldb.com/?id.213571
CVE: CVE-2022-43693
Published: 2022-11-14
Description: Concrete CMS is vulnerable to CSRF due to the lack of "State" parameter for external Concrete authentication service for users of Concrete who use the "out of the box" core OAuth.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes; https://github.com/concretecms/concretecms/releases/8.5.10
CVE: CVE-2022-0137
Published: 2022-11-14
Description: A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-787
References: https://github.com/michaelrsweet/htmldoc/commit/71fe87878c9cbc3db429f5e5c70f28e4b3d96e3b; https://github.com/michaelrsweet/htmldoc/issues/461; https://github.com/michaelrsweet/htmldoc/commit/71fe87878c9cbc3db429f5e5c70f28e4b3d96e3b
CVE: CVE-2022-24937
Published: 2022-11-14
Description: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Silicon Labs Ember ZNet allows Overflow Buffers.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119, CWE-119
References: https://github.com/SiliconLabs/gecko_sdk; https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000HbLj2QAF?operationContext=S1; https://github.com/SiliconLabs/gecko_sdk
CVE: CVE-2022-24938
Published: 2022-11-14
Description: 
A malformed packet causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immediately clearing the error.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://github.com/SiliconLabs/gecko_sdk; https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000HbLj2QAF?operationContext=S1; https://github.com/SiliconLabs/gecko_sdk
CVE: CVE-2022-34312
Published: 2022-11-14
Description: 
IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 229447.


CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200, CWE-922
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229447; https://www.ibm.com/support/pages/node/6833150; https://www.ibm.com/support/pages/node/6833156
CVE: CVE-2022-34313
Published: 2022-11-14
Description: 
IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. X-Force ID: 229449.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229449; https://www.ibm.com/support/pages/node/6833158; https://www.ibm.com/support/pages/node/6833164
CVE: CVE-2022-34319
Published: 2022-11-14
Description: IBM CICS TX 11.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.  IBM X-Force ID:  229463.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229463; https://www.ibm.com/support/pages/node/6833190; https://www.ibm.com/support/pages/node/6833192
CVE: CVE-2022-34329
Published: 2022-11-14
Description: 
IBM CICS TX 11.7 could allow an attacker to obtain sensitive information from HTTP response headers. IBM X-Force ID: 229467.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229467; https://www.ibm.com/support/pages/node/6833210; https://www.ibm.com/support/pages/node/6833212
CVE: CVE-2022-38705
Published: 2022-11-14
Description: 
IBM CICS TX 11.1 Standard and Advanced could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 234172.


CVSS Score: 5.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/234172; https://www.ibm.com/support/pages/node/6833216; https://www.ibm.com/support/pages/node/6833218
CVE: CVE-2022-3993
Published: 2022-11-14
Description: Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3.






CVSS Score: 9.4 (CRITICAL)
CWE: CWE-307, CWE-307
References: https://github.com/kareadita/kavita/commit/f8db37d3f9aa42d47e7c4f4ca839e892d3f97afb; https://huntr.dev/bounties/bebd0cd6-18ec-469c-b6ca-19ffa9db0699; https://github.com/kareadita/kavita/commit/f8db37d3f9aa42d47e7c4f4ca839e892d3f97afb
CVE: CVE-2022-34314
Published: 2022-11-14
Description: 
IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force ID: 229450.


CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200, CWE-732
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229450; https://www.ibm.com/support/pages/node/6833166; https://www.ibm.com/support/pages/node/6833170
CVE: CVE-2022-34315
Published: 2022-11-14
Description: 
IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229451.


CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229451; https://www.ibm.com/support/pages/node/6833172; https://www.ibm.com/support/pages/node/6833174
CVE: CVE-2022-34316
Published: 2022-11-14
Description: 
IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452.


CVSS Score: 3.7 (LOW)
CWE: CWE-644, CWE-116
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229452; https://www.ibm.com/support/pages/node/6833176; https://www.ibm.com/support/pages/node/6833178
CVE: CVE-2022-43692
Published: 2022-11-14
Description: Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS - user can cause an administrator to trigger reflected XSS with a url if the targeted administrator is using an old browser that lacks XSS protection. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes; https://github.com/concretecms/concretecms/releases/8.5.10
CVE: CVE-2022-43694
Published: 2022-11-14
Description: Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the image manipulation library due to un-sanitized output.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes; https://github.com/concretecms/concretecms/releases/8.5.10
CVE: CVE-2022-34317
Published: 2022-11-14
Description: 
IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229459.


CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229459; https://www.ibm.com/support/pages/node/6833180; https://www.ibm.com/support/pages/node/6833182
CVE: CVE-2022-34320
Published: 2022-11-14
Description: 
IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 229464.


CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229464; https://www.ibm.com/support/pages/node/6833204; https://www.ibm.com/support/pages/node/6833206
CVE: CVE-2022-43323
Published: 2022-11-14
Description: EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Top Up Balance component under the Edit Member module.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/weng-xianhu/eyoucms/issues/28#issue[PII_REDACTED]; https://github.com/weng-xianhu/eyoucms/issues/28#issue[PII_REDACTED]
CVE: CVE-2022-44387
Published: 2022-11-14
Description: EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Basic Information component under the Edit Member module.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/weng-xianhu/eyoucms/issues/29; https://github.com/weng-xianhu/eyoucms/issues/29; https://github.com/weng-xianhu/eyoucms/issues/29
CVE: CVE-2022-44389
Published: 2022-11-14
Description: EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit Admin Profile module. This vulnerability allows attackers to arbitrarily change Administrator account information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/weng-xianhu/eyoucms/issues/30; https://github.com/weng-xianhu/eyoucms/issues/30
CVE: CVE-2022-44390
Published: 2022-11-14
Description: A cross-site scripting (XSS) vulnerability in EyouCMS V1.5.9-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Public Security Record Number text field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/weng-xianhu/eyoucms/issues/31; https://github.com/weng-xianhu/eyoucms/issues/31
CVE: CVE-2022-27896
Published: 2022-11-14
Description: Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs included the Foundry token that represents the Code-Workbooks Python console. Upgrade to Code-Workbooks version 4.461.0. This issue affects Palantir Foundry Code-Workbooks version 4.144 to version 4.460.0 and is resolved in 4.461.0.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-08.md; https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-08.md
CVE: CVE-2022-28764
Published: 2022-11-14
Description: The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information exposure vulnerability. A failure to clear data from a local SQL database after a meeting ends and the usage of an insufficiently secure per-device key encrypting that database results in a local malicious user being able to obtain meeting information such as in-meeting chat for the previous meeting attended from that local user account.
CVSS Score: 3.3 (LOW)
CWE: CWE-200, CWE-459
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2022-37109
Published: 2022-11-14
Description: patrickfuller camp up to and including commit bbd53a256ed70e79bd[PII_REDACTED]afbf6d738767 is vulnerable to Incorrect Access Control. Access to the password.txt file is not properly restricted as it is in the root directory served by StaticFileHandler and the Tornado rule to throw a 403 error when password.txt is accessed can be bypassed. Furthermore, it is not necessary to crack the password hash to authenticate with the application because the password hash is also used as the cookie secret, so an attacker can generate his own authentication cookie.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522, CWE-522
References: http://packetstormsecurity.com/files/171478/Raspberry-Pi-Camera-Server-1.0-Authentication-Bypass.html; https://github.com/ehtec/camp-exploit; https://github.com/patrickfuller/camp/commit/bf6af5c2e5cf713e4050c11c52dd4c55e89880b1
CVE: CVE-2022-38167
Published: 2022-11-14
Description: The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://help.nintex.com/en-US/platform/ReleaseNotes/NintexSharePoint2019.htm; https://www.nintex.com/; https://help.nintex.com/en-US/platform/ReleaseNotes/NintexSharePoint2019.htm
CVE: CVE-2022-39385
Published: 2022-11-14
Description: Discourse is the an open source discussion platform. In some rare cases users redeeming an invitation can be added as a participant to several private message topics that they should not be added to. They are not notified of this, it happens transparently in the background. This issue has been resolved in commit `a414520742` and will be included in future releases. Users are advised to upgrade. Users are also advised to set `SiteSetting.max_invites_per_day` to 0 until the patch is installed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-863
References: https://github.com/discourse/discourse/commit/a414520742da8dc9dc976d4fb7b72dbd445813bb; https://github.com/discourse/discourse/security/advisories/GHSA-gh5r-j595-qx48; https://github.com/discourse/discourse/commit/a414520742da8dc9dc976d4fb7b72dbd445813bb
CVE: CVE-2022-3238
Published: 2022-11-14
Description: A double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount simultaneously. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-459, CWE-415, CWE-415
References: https://bugzilla.redhat.com/show_bug.cgi?id=2127927; https://bugzilla.redhat.com/show_bug.cgi?id=2127927
CVE: CVE-2022-3362
Published: 2022-11-14
Description: Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613, CWE-613
References: https://github.com/ikus060/rdiffweb/commit/6efb995bc32c8a8e9ad755eb813dec991dffb2b8; https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1; https://github.com/ikus060/rdiffweb/commit/6efb995bc32c8a8e9ad755eb813dec991dffb2b8
CVE: CVE-2022-3903
Published: 2022-11-14
Description: An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB device. A local user could use this flaw to starve the resources, causing denial of service or potentially crashing the system.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-843
References: https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA%40mail.gmail.com/; https://lore.kernel.org/all/E1obysd-009Grw-He%40www.linuxtv.org/; https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA%40mail.gmail.com/
CVE: CVE-2022-41913
Published: 2022-11-14
Description: Discourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar in the first post of a topic. Members of private groups or public groups with private members can be listed by users, who can create and edit post events. This vulnerability only affects sites which have discourse post events enabled. This issue has been patched in commit `ca5ae3e7e` which will be included in future releases. Users unable to upgrade should disable the `discourse_post_event_enabled` setting to fully mitigate the issue. Also, it's possible to prevent regular users from using this vulnerability by removing all groups from the `discourse_post_event_allowed_on_groups` but note that moderators will still be able to use it.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/discourse/discourse-calendar/commit/ca5ae3e7e0c2b32af5ca4ec69c95e95b2ecef2e9; https://github.com/discourse/discourse-calendar/security/advisories/GHSA-jh96-w279-g7r9; https://github.com/discourse/discourse-calendar/commit/ca5ae3e7e0c2b32af5ca4ec69c95e95b2ecef2e9
CVE: CVE-2022-43146
Published: 2022-11-14
Description: An arbitrary file upload vulnerability in the image upload function of Canteen Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://medium.com/%40syedmudassiruddinalvi/cve-2022-43146-rce-via-arbitrary-file-upload-28dfa77c5de7; https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html; https://medium.com/%40syedmudassiruddinalvi/cve-2022-43146-rce-via-arbitrary-file-upload-28dfa77c5de7
CVE: CVE-2022-43295
Published: 2022-11-14
Description: XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy() at xpdf/Stream.cc:795.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-121
References: https://forum.xpdfreader.com/viewtopic.php?t=42360; https://forum.xpdfreader.com/viewtopic.php?t=42360
CVE: CVE-2022-30773
Published: 2022-11-14
Description: DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack). DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack). This issue was discovered by Insyde engineering. This issue is fixed in Kernel 5.4: 05.44.23 and Kernel 5.5: 05.52.23. CWE-367
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022042; https://www.insyde.com/security-pledge
CVE: CVE-2022-32266
Published: 2022-11-14
Description: DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe could lead to a TOCTOU attack on the SMI handler and lead to corruption of other ACPI fields and adjacent memory fields. DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe could lead to a TOCTOU attack on the SMI handler and lead to corruption of other ACPI fields and adjacent memory fields. The attack would require detailed knowledge of the PCD database contents on the current platform. This issue was discovered by Insyde engineering during a security review. This issue is fixed in Kernel 5.3: 05.36.23, Kernel 5.4: 05.44.23, Kernel 5.5: 05.52.23. Kernel 5.2 is unaffected. CWE-787 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the parameter buffer that is used by a software SMI handler (used by the PcdSmmDxe driver) could lead to a TOCTOU race-condition attack on the SMI handler, and lead to corruption of other ACPI fields and adjacent memory fields. The attack would require detailed knowledge of the PCD database contents on the current platform.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022045; https://www.insyde.com/security-pledge
CVE: CVE-2022-43294
Published: 2022-11-14
Description: Tasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack overflow via the ClientPortPtr parameter at lib/libesp32/rtsp/CRtspSession.cpp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/arendst/Tasmota/pull/16802; https://github.com/arendst/Tasmota/pull/16802/commits/066878da4d4762a9b6cb169fdf353e804d735cfd; https://github.com/arendst/Tasmota/pull/16802
CVE: CVE-2022-43686
Published: 2022-11-14
Description: In Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2, the authTypeConcreteCookieMap table can be filled up causing a denial of service (high load).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes; https://github.com/concretecms/concretecms/releases/8.5.10
CVE: CVE-2022-43967
Published: 2022-11-14
Description: Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the multilingual report due to un-sanitized output. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes; https://github.com/concretecms/concretecms/releases/8.5.10