deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-32125
Published: 2023-11-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.6 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/multi-rating/wordpress-multi-rating-plugin-5-0-6-cross-site-request-forgery-csrf?_s_id=cve; https://patchstack.com/database/vulnerability/multi-rating/wordpress-multi-rating-plugin-5-0-6-cross-site-request-forgery-csrf?_s_id=cve
CVE: CVE-2023-32500
Published: 2023-11-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in xtemos WoodMart - Multipurpose WooCommerce Theme <= 7.1.1 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/woodmart/wordpress-woodmart-theme-7-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woodmart/wordpress-woodmart-theme-7-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-32501
Published: 2023-11-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.6.1 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/vikbooking/wordpress-vikbooking-hotel-booking-engine-pms-plugin-1-6-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/vikbooking/wordpress-vikbooking-hotel-booking-engine-pms-plugin-1-6-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-32502
Published: 2023-11-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Sybre Waaijer Pro Mime Types – Manage file media types plugin <= 1.0.7 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/pro-mime-types/wordpress-pro-mime-types-plugin-1-0-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/pro-mime-types/wordpress-pro-mime-types-plugin-1-0-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-36014
Published: 2023-11-10
Description: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36014; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36014
CVE: CVE-2023-36024
Published: 2023-11-10
Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36024; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36024
CVE: CVE-2023-46729
Published: 2023-11-10
Description: sentry-javascript provides Sentry SDKs for JavaScript. An unsanitized input of Next.js SDK tunnel endpoint allows sending HTTP requests to arbitrary URLs and reflecting the response back to the user. This issue only affects users who have Next.js SDK tunneling feature enabled. The problem has been fixed in version 7.77.0.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-918
References: https://github.com/getsentry/sentry-javascript/commit/ddbda3c02c35aba8c5235e0cf07fc5bf656f81be; https://github.com/getsentry/sentry-javascript/pull/9415; https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-2rmr-xw8m-22q9
CVE: CVE-2023-6069
Published: 2023-11-10
Description: Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0.


CVSS Score: 9.9 (CRITICAL)
CWE: CWE-59, CWE-59
References: https://github.com/froxlor/froxlor/commit/9e8f32f1e86016733b603b50c31b97f472e8dabc; https://huntr.com/bounties/aac0627e-e59d-476e-9385-edb7ff53758c; https://github.com/froxlor/froxlor/commit/9e8f32f1e86016733b603b50c31b97f472e8dabc
CVE: CVE-2023-45167
Published: 2023-11-10
Description: IBM AIX's 7.3 Python implementation could allow a non-privileged local user to exploit a vulnerability to cause a denial of service.  IBM X-Force ID:  267965.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20, CWE-400
References: https://aix.software.ibm.com/aix/efixes/security/python_advisory6.asc; https://exchange.xforce.ibmcloud.com/vulnerabilities/267965; https://www.ibm.com/support/pages/node/7068084
CVE: CVE-2023-39796
Published: 2023-11-10
Description: SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the DB_RECORD_TABLE parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://forum.wbce.org/viewtopic.php?pid=42046#p42046; https://github.com/WBCE/WBCE_CMS/releases/tag/1.6.1; https://pastebin.com/PBw5AvGp
CVE: CVE-2023-47246
Published: 2023-11-10
Description: In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://documentation.sysaid.com/docs/latest-version-installation-files; https://documentation.sysaid.com/docs/on-premise-security-enhancements-2023; https://www.sysaid.com/blog/service-desk/on-premise-software-security-vulnerability-notification
CVE: CVE-2023-47800
Published: 2023-11-10
Description: Natus NeuroWorks and SleepWorks before 8.4 GMA3 utilize a default password of xltek for the Microsoft SQL Server service sa account, allowing a threat actor to perform remote code execution, data exfiltration, or other nefarious actions such as tampering with data or destroying/disrupting MSSQL services.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://partner.natus.com/m/7cd3bcca88e446d4/original/NeuroWorks-SleepWorks-Product-Security-Bulletin.pdf; https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2023-006.txt; https://partner.natus.com/m/7cd3bcca88e446d4/original/NeuroWorks-SleepWorks-Product-Security-Bulletin.pdf
CVE: CVE-2023-6073
Published: 2023-11-10
Description: Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 (and other vehicles of the VW Group with the same hardware) and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls.

CVSS Score: 5.7 (MEDIUM)
CWE: CWE-20, CWE-284
References: https://asrg.io/cve-2023-6073-dos-and-control-of-volume-settings-for-vw-id-3-icas3-ivi-ecu/; https://asrg.io/cve-2023-6073-dos-and-control-of-volume-settings-for-vw-id-3-icas3-ivi-ecu/
CVE: CVE-2023-47164
Published: 2023-11-10
Description: Cross-site scripting vulnerability in HOTELDRUID 3.0.5 and earlier allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN99177549/; https://www.hoteldruid.com/; https://www.hoteldruid.com/en/download.html
CVE: CVE-2023-29426
Published: 2023-11-10
Description: Cross-Site Request Forgery (CSRF) vulnerability in Robert Schulz (sprd.Net AG) Spreadshop plugin <= 1.6.5 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/spreadshop/wordpress-spreadshop-plugin-plugin-1-6-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/spreadshop/wordpress-spreadshop-plugin-plugin-1-6-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-29428
Published: 2023-11-10
Description: Cross-Site Request Forgery (CSRF) vulnerability in SuPlugins Superb Social Media Share Buttons and Follow Buttons for WordPress plugin <= 1.1.3 versions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/superb-social-share-and-follow-buttons/wordpress-superb-social-media-share-buttons-and-follow-buttons-plugin-1-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/superb-social-share-and-follow-buttons/wordpress-superb-social-media-share-buttons-and-follow-buttons-plugin-1-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-29440
Published: 2023-11-10
Description: Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Job Board plugin <= 2.10.3 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/simple-job-board/wordpress-simple-job-board-plugin-2-10-3-cross-site-request-forgery-csrf?_s_id=cve; https://patchstack.com/database/vulnerability/simple-job-board/wordpress-simple-job-board-plugin-2-10-3-cross-site-request-forgery-csrf?_s_id=cve
CVE: CVE-2023-30478
Published: 2023-11-10
Description: Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Newsletters plugin <= 4.8.8 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/newsletters-lite/wordpress-newsletters-plugin-4-8-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/newsletters-lite/wordpress-newsletters-plugin-4-8-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-31077
Published: 2023-11-10
Description: Cross-Site Request Forgery (CSRF) vulnerability in ReCorp Export WP Page to Static HTML/CSS plugin <= 2.1.9 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/export-wp-page-to-static-html/wordpress-export-wp-page-to-static-html-css-plugin-2-1-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/export-wp-page-to-static-html/wordpress-export-wp-page-to-static-html-css-plugin-2-1-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-31078
Published: 2023-11-10
Description: Cross-Site Request Forgery (CSRF) vulnerability in Marco Steinbrecher WP BrowserUpdate plugin <= 4.4.1 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/wp-browser-update/wordpress-wp-browserupdate-plugin-4-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-browser-update/wordpress-wp-browserupdate-plugin-4-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-23367
Published: 2023-11-10
Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.0.1.2376 build 20230421 and later
QuTS hero h5.0.1.2376 build 20230421 and later
QuTScloud c5.1.0.2498 and later

CVSS Score: 4.7 (MEDIUM)
CWE: CWE-78
References: https://www.qnap.com/en/security-advisory/qsa-23-24; https://www.qnap.com/en/security-advisory/qsa-23-24
CVE: CVE-2023-45806
Published: 2023-11-10
Description: Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, if a user has been quoted and uses a `|` in their full name, they might be able to trigger a bug that generates a lot of duplicate content in all the posts they've been quoted by updating their full name again. Version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches contain a patch for this issue. No known workaround exists, although one can stop the "bleeding" by ensuring users only use alphanumeric characters in their full name field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1333
References: https://github.com/discourse/discourse/commit/2ec[PII_REDACTED]9cf80912bf011c18b8b870e1863; https://github.com/discourse/discourse/commit/7d484864fe91ff79c478f57e7ddb1235d701921e; https://github.com/discourse/discourse/security/advisories/GHSA-hcgf-hg2g-mw78
CVE: CVE-2023-45816
Published: 2023-11-10
Description: Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, there is an edge case where a bookmark reminder is sent and an unread notification is generated, but the underlying bookmarkable (e.g. post, topic, chat message) security has changed, making it so the user can no longer access the underlying resource. As of version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, bookmark reminders are now no longer sent if the user does not have access to the underlying bookmarkable, and also the unread bookmark notifications are always filtered by access. There are no known workarounds.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://github.com/discourse/discourse/commit/2c45b949ea0e9d6fa8e5af2dd07f6521ede08bf1; https://github.com/discourse/discourse/commit/3c5fb871c0f54af47679ae71ad449666b01d8216; https://github.com/discourse/discourse/security/advisories/GHSA-v9r6-92wp-f6cf
CVE: CVE-2023-46130
Published: 2023-11-10
Description: Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, some theme components allow users to add svgs with unlimited `height` attributes, and this can affect the availability of subsequent replies in a topic. Most Discourse instances are unaffected, only instances with the svgbob or the mermaid theme component are within scope. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. As a workaround, disable or remove the relevant theme components. 
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770
References: https://github.com/discourse/discourse/commit/6183d9633de873ac2b1e9cdb6ac1c94b4ffae9cb; https://github.com/discourse/discourse/commit/89a2e60706ce22e4afc463d03af2f34c53291800; https://github.com/discourse/discourse/security/advisories/GHSA-c876-638r-vfcg
CVE: CVE-2023-47119
Published: 2023-11-10
Description: Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, some links can inject arbitrary HTML tags when rendered through our Onebox engine. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-74, CWE-79
References: https://github.com/discourse/discourse/commit/628b293ff53fb617b3464dd27268aec84388cc09; https://github.com/discourse/discourse/commit/d78357917c6a917a8a27af68756228e89c69321c; https://github.com/discourse/discourse/security/advisories/GHSA-j95w-5hvx-jp5w
CVE: CVE-2023-6074
Published: 2023-11-10
Description: A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file check-status.php of the component Booking Reservation Handler. The manipulation leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-244943.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?ctiid.244943; https://vuldb.com/?id.244943; https://vuldb.com/?ctiid.244943
CVE: CVE-2023-6075
Published: 2023-11-10
Description: A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file index.php of the component Reservation Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-244944.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.244944; https://vuldb.com/?id.244944; https://vuldb.com/?ctiid.244944
CVE: CVE-2023-39295
Published: 2023-11-10
Description: An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network.

We have already fixed the vulnerability in the following version:
QuMagie 2.1.3 and later

CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.qnap.com/en/security-advisory/qsa-23-50; https://www.qnap.com/en/security-advisory/qsa-23-50
CVE: CVE-2023-41284
Published: 2023-11-10
Description: A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.

We have already fixed the vulnerability in the following version:
QuMagie 2.1.4 and later

CVSS Score: 7.4 (HIGH)
CWE: CWE-89
References: https://www.qnap.com/en/security-advisory/qsa-23-50; https://www.qnap.com/en/security-advisory/qsa-23-50
CVE: CVE-2023-41285
Published: 2023-11-10
Description: A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.

We have already fixed the vulnerability in the following version:
QuMagie 2.1.4 and later

CVSS Score: 7.4 (HIGH)
CWE: CWE-89
References: https://www.qnap.com/en/security-advisory/qsa-23-50; https://www.qnap.com/en/security-advisory/qsa-23-50
CVE: CVE-2023-47120
Published: 2023-11-10
Description: Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the `stable` branch and versions 3.1.0,beta6 through 3.2.0.beta2 of the `beta` and `tests-passed` branches, Redis memory can be depleted by crafting a site with an abnormally long favicon URL and drafting multiple posts which Onebox it. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/discourse/discourse/commit/95a82d608d6377faf68a0e2c5d9640b043557852; https://github.com/discourse/discourse/commit/e910dd09140cb4abc3a563b95af4a137ca7fa0ce; https://github.com/discourse/discourse/security/advisories/GHSA-77cw-xhj8-hfp3
CVE: CVE-2023-47121
Published: 2023-11-10
Description: Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, the embedding feature is susceptible to server side request forgery. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. As a workaround, disable the Embedding feature.
CVSS Score: 3.4 (LOW)
CWE: CWE-918
References: https://github.com/discourse/discourse/commit/24cca10da731734af4e9748de99a508d586e59f1; https://github.com/discourse/discourse/commit/5f20748e402223b265e6fee381472c14e2604da6; https://github.com/discourse/discourse/security/advisories/GHSA-hp24-94qf-8cgc
CVE: CVE-2023-47614
Published: 2023-11-10
Description: A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to disclose hidden virtual paths and file names on the targeted system.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-22-210-telit-cinterion-thales-gemalto-modules-exposure-of-sensitive-information-to-an-unauthorized-actor-vulnerability/; https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-22-210-telit-cinterion-thales-gemalto-modules-exposure-of-sensitive-information-to-an-unauthorized-actor-vulnerability/
CVE: CVE-2023-6076
Published: 2023-11-10
Description: A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file booking-details.php of the component Reservation Status Handler. The manipulation of the argument bid leads to information disclosure. The attack can be launched remotely. The identifier VDB-244945 was assigned to this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://vuldb.com/?ctiid.244945; https://vuldb.com/?id.244945; https://vuldb.com/?ctiid.244945
CVE: CVE-2023-47611
Published: 2023-11-10
Description: A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-22-216-telit-cinterion-thales-gemalto-modules-improper-privilege-management-vulnerability/; https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-22-216-telit-cinterion-thales-gemalto-modules-improper-privilege-management-vulnerability/
CVE: CVE-2023-4949
Published: 2023-11-10
Description: An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.

CVSS Score: 8.1 (HIGH)
CWE: CWE-119, CWE-190, CWE-787
References: https://xenbits.xenproject.org/xsa/advisory-443.html; https://xenbits.xenproject.org/xsa/advisory-443.html
CVE: CVE-2023-46733
Published: 2023-11-10
Description: Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 5.4.21 and 6.2.7 and prior to versions 5.4.31 and 6.3.8, `SessionStrategyListener` does not migrate the session after every successful login. It does so only in case the logged in user changes by means of checking the user identifier. In some use cases, the user identifier doesn't change between the verification phase and the successful login, while the token itself changes from one type (partially-authenticated) to another (fully-authenticated). When this happens, the session id should be regenerated to prevent possible session fixations, which is not the case at the moment. As of versions 5.4.31 and 6.3.8, Symfony now checks the type of the token in addition to the user identifier before deciding whether the session id should be regenerated.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-384
References: https://github.com/symfony/symfony/commit/7467bd7e3f888b333102bc664b5e02ef1e7f88b9; https://github.com/symfony/symfony/commit/dc356499d5ceb86f7cf2b4c7f032eca97061ed74; https://github.com/symfony/symfony/security/advisories/GHSA-m2wj-r6g3-fxfx
CVE: CVE-2023-46734
Published: 2023-11-10
Description: Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 2.0.0, 5.0.0, and 6.0.0 and prior to versions 4.4.51, 5.4.31, and 6.3.8, some Twig filters in CodeExtension use `is_safe=html` but don't actually ensure their input is safe. As of versions 4.4.51, 5.4.31, and 6.3.8, Symfony now escapes the output of the affected filters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/symfony/symfony/commit/5d095d5feb1322b16450284a04d6bb48d1198f54; https://github.com/symfony/symfony/commit/9da9a145ce57e4585031ad4bee37c497353eec7c; https://github.com/symfony/symfony/security/advisories/GHSA-q847-2q57-wmr3
CVE: CVE-2023-46735
Published: 2023-11-10
Description: Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in version 6.0.0 and prior to version 6.3.8, the error message in `WebhookController` returns unescaped user-submitted input. As of version 6.3.8, `WebhookController` now doesn't return any user-submitted input in its response.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/symfony/symfony/commit/8128c302430394f639e818a7103b3f6815d8d962; https://github.com/symfony/symfony/security/advisories/GHSA-72x2-5c85-6wmr; https://github.com/symfony/symfony/commit/8128c302430394f639e818a7103b3f6815d8d962