deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-44197
Published: 2023-03-07
Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in UBIT Information Technologies Student Information Management System.This issue affects Student Information Management System: before 20211126.


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://www.usom.gov.tr/bildirim/tr-23-0131; https://www.usom.gov.tr/bildirim/tr-23-0131
CVE: CVE-2021-4330
Published: 2023-03-07
Description: The Envato Elements & Download and Template Kit – Import plugins for WordPress are vulnerable to arbitrary file uploads due to insufficient validation of file type upon extracting uploaded Zip files in the installFreeTemplateKit and uploadTemplateKitZipFile functions. This makes it possible for attackers with contributor-lever permissions and above to upload arbitrary files and potentially gain remote code execution in versions up to and including 1.0.13 of Template Kit – Import and versions up to and including 2.0.10 of Envato Elements & Download.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2617529%40envato-elements&new=2617529%40envato-elements&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/68fe17e2-d5ab-4ebd-a5c6-d65cea327abd?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2617529%40envato-elements&new=2617529%40envato-elements&sfp_email=&sfph_mail=
CVE: CVE-2015-10087
Published: 2023-03-07
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in UpThemes Theme DesignFolio Plus 1.2 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 53f6ae62878076f99718e5feb589928e83c879a9. It is recommended to apply a patch to fix this issue. The identifier VDB-221809 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/CCrashBandicot/exploit/commit/53f6ae62878076f99718e5feb589928e83c879a9; https://support.alertlogic.com/hc/en-us/articles/[PII_REDACTED]92-WordPress-Theme-DesignFolio-Plus-1-2-upload-file-php-Arbitrary-File-Upload; https://vuldb.com/?ctiid.221809
CVE: CVE-2021-4331
Published: 2023-03-07
Description: The Plus Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 4.1.9 (pro) and 2.0.6 (free). The plugin adds a registration form to the Elementor page builders functionality. As part of the registration form, users can choose which role to set as the default for users upon registration. This field is not hidden for lower-level users so any user with access to the Elementor page builder, such as contributors, can set the default role to administrator. Since contributors can not publish posts, only author+ users can elevate privileges without interaction via a site administrator (to approve a post).
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2514618%40the-plus-addons-for-elementor-page-builder&new=2514618%40the-plus-addons-for-elementor-page-builder&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/96388c82-2392-42b3-b0a0-c3d92910fb5c?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2514618%40the-plus-addons-for-elementor-page-builder&new=2514618%40the-plus-addons-for-elementor-page-builder&sfp_email=&sfph_mail=
CVE: CVE-2021-4332
Published: 2023-03-07
Description: The Plus Addons for Elementor plugin for WordPress is vulnerable to arbitrary file reads in versions up to, and including 4.1.9 (pro) and 2.0.6 (free). The plugin has a feature to add an "Info Box" to an Elementor created page. This Info Box can include an SVG image for the box. Unfortunately, the plugin used file_get_contents with no verification that the file being supplied was an SVG file, so any user with access to the Elementor page builder, such as contributors, could read arbitrary files on the WordPress installation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-73
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2523506%40the-plus-addons-for-elementor-page-builder&new=2523506%40the-plus-addons-for-elementor-page-builder&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/aa698e7e-b1c7-4ead-aa2e-7fbfc9dfac80?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2523506%40the-plus-addons-for-elementor-page-builder&new=2523506%40the-plus-addons-for-elementor-page-builder&sfp_email=&sfph_mail=
CVE: CVE-2021-4333
Published: 2023-03-07
Description: The WP Statistics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 13.1.1. This is due to missing or incorrect nonce validation on the view() function. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2626597%40wp-statistics&new=2626597%40wp-statistics&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/215937d9-739b-4198-b375-6d171bbac64a?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2626597%40wp-statistics&new=2626597%40wp-statistics&sfp_email=&sfph_mail=
CVE: CVE-2022-4931
Published: 2023-03-07
Description: The BackupWordPress plugin for WordPress is vulnerable to information disclosure in versions up to, and including 3.12. This is due to missing authorization on the heartbeat_received() function that triggers on WordPress heartbeat. This makes it possible for authenticated attackers, with subscriber-level permissions and above to retrieve back-up paths that can subsequently be used to download the back-up.
CVSS Score: 4.3 (MEDIUM)
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2683799%40backupwordpress&new=2683799%40backupwordpress&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/747c86f4-118b-4a9c-899c-e9067d2c7a02; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2683799%40backupwordpress&new=2683799%40backupwordpress&sfp_email=&sfph_mail=
CVE: CVE-2022-4932
Published: 2023-03-07
Description: The Total Upkeep plugin for WordPress is vulnerable to information disclosure in versions up to, and including 1.14.13. This is due to missing authorization on the heartbeat_received() function that triggers on WordPress heartbeat. This makes it possible for authenticated attackers, with subscriber-level permissions and above to retrieve back-up paths that can subsequently be used to download the back-up.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2684462%40boldgrid-backup&new=2684462%40boldgrid-backup&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/0e346146-1c00-4e03-a6c7-372566d7ffc9?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2684462%40boldgrid-backup&new=2684462%40boldgrid-backup&sfp_email=&sfph_mail=
CVE: CVE-2023-1253
Published: 2023-03-07
Description: A vulnerability, which was classified as critical, was found in SourceCodester Health Center Patient Record Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222483.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/[PII_REDACTED]/bug_report/blob/main/vendors/razormist/Health%20Center%20Patient%20Record%20Management/SQLi-1.md; https://vuldb.com/?ctiid.222483; https://vuldb.com/?id.222483
CVE: CVE-2023-1254
Published: 2023-03-07
Description: A vulnerability has been found in SourceCodester Health Center Patient Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file birthing_print.php. The manipulation of the argument birth_id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222484.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/[PII_REDACTED]/bug_report/blob/main/vendors/razormist/Health%20Center%20Patient%20Record%20Management/XSS-1.md; https://vuldb.com/?ctiid.222484; https://vuldb.com/?id.222484
CVE: CVE-2023-24781
Published: 2023-03-07
Description: Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/funadmin/funadmin/issues/8; https://github.com/funadmin/funadmin/issues/8
CVE: CVE-2023-26953
Published: 2023-03-07
Description: onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/keheying/onekeyadmin/issues/8; https://github.com/keheying/onekeyadmin/issues/8
CVE: CVE-2020-36670
Published: 2023-03-07
Description: The NEX-Forms. plugin for WordPress is vulnerable to unauthorized disclosure and modification of data in versions up to, and including 7.7.1 due to missing capability checks on several AJAX actions. This makes it possible for authenticated attackers with subscriber level permissions and above to invoke these functions which can be used to perform actions like modify form submission records, deleting files, sending test emails, modifying plugin settings, and more.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/2427162/; https://www.wordfence.com/threat-intel/vulnerabilities/id/01940eeb-b4a6-450d-b646-84f415ca92c9?source=cve; https://plugins.trac.wordpress.org/changeset/2427162/
CVE: CVE-2023-25690
Published: 2023-03-07
Description: Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack.




Configurations are affected when mod_proxy is enabled along with some form of RewriteRule
 or ProxyPassMatch in which a non-specific pattern matches
 some portion of the user-supplied request-target (URL) data and is then
 re-inserted into the proxied request-target using variable 
substitution. For example, something like:




RewriteEngine on
RewriteRule "^/here/(.*)" "http://example.com:8080/elsewhere?$1"; [P]
ProxyPassReverse /here/ http://example.com:8080/


Request splitting/smuggling could result in bypass of access controls in the proxy server, proxying unintended URLs to existing origin servers, and cache poisoning. Users are recommended to update to at least version 2.4.56 of Apache HTTP Server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-444
References: http://packetstormsecurity.com/files/176334/Apache-2.4.55-mod_proxy-HTTP-Request-Smuggling.html; https://httpd.apache.org/security/vulnerabilities_24.html; https://lists.debian.org/debian-lts-announce/2023/04/msg00028.html
CVE: CVE-2023-27522
Published: 2023-03-07
Description: HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55.

Special characters in the origin response header can truncate/split the response forwarded to the client.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://httpd.apache.org/security/vulnerabilities_24.html; https://lists.debian.org/debian-lts-announce/2023/04/msg00028.html; https://security.gentoo.org/glsa/202309-01
CVE: CVE-2022-22297
Published: 2023-03-07
Description: An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through 6.4.1, FortiWeb version 6.3.0 through 6.3.17, FortiWeb all versions 6.2, FortiWeb all versions 6.1, FortiWeb all versions 6.0, FortiRecorder version 6.4.0 through 6.4.3, FortiRecorder all versions 6.0, FortiRecorder all versions 2.7 may allow an authenticated user to read arbitrary files via specially crafted command arguments.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-792
References: https://fortiguard.com/psirt/FG-IR-21-218; https://fortiguard.com/psirt/FG-IR-21-218
CVE: CVE-2022-27490
Published: 2023-03-07
Description: A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer version 6.0.0 through 6.0.4, FortiPortal version 6.0.0 through 6.0.9, 5.3.0 through 5.3.8, 5.2.x, 5.1.0, 5.0.x, 4.2.x, 4.1.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.x, 6.0.x allows an attacker which has obtained access to a restricted administrative account to obtain sensitive information via `diagnose debug` commands.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://fortiguard.com/psirt/FG-IR-18-232; https://fortiguard.com/psirt/FG-IR-18-232
CVE: CVE-2022-39951
Published: 2023-03-07
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versions allows attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-22-254; https://fortiguard.com/psirt/FG-IR-22-254
CVE: CVE-2022-39953
Published: 2023-03-07
Description: A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.6, FortiNAC version 9.1.0 through 9.1.8, FortiNAC all versions 8.8, FortiNAC all versions 8.7, FortiNAC all versions 8.6, FortiNAC all versions 8.5, FortiNAC version 8.3.7 allows attacker to escalation of privilege via specially crafted commands.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://fortiguard.com/psirt/FG-IR-22-309; https://fortiguard.com/psirt/FG-IR-22-309
CVE: CVE-2022-40676
Published: 2023-03-07
Description: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 allows attacker to execute unauthorized code or commands via specially crafted http requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79, CWE-79
References: https://fortiguard.com/psirt/FG-IR-22-281; https://fortiguard.com/psirt/FG-IR-22-281
CVE: CVE-2022-41328
Published: 2023-03-07
Description: A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://fortiguard.com/psirt/FG-IR-22-369; https://fortiguard.com/psirt/FG-IR-22-369; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41328
CVE: CVE-2022-41329
Published: 2023-03-07
Description: An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiOS version 7.2.0 through 7.2.3 and 7.0.0 through 7.0.9 allows an unauthenticated attackers to obtain sensitive logging informations on the device via crafted HTTP GET requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://fortiguard.com/psirt/FG-IR-22-364; https://fortiguard.com/psirt/FG-IR-22-364
CVE: CVE-2022-41333
Published: 2023-03-07
Description: An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: http://packetstormsecurity.com/files/171766/FortiRecorder-6.4.3-Denial-Of-Service.html; https://fortiguard.com/psirt/FG-IR-22-388; http://packetstormsecurity.com/files/171766/FortiRecorder-6.4.3-Denial-Of-Service.html
CVE: CVE-2022-42476
Published: 2023-03-07
Description: A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.11, FortiProxy version 7.2.0 through 7.2.2 and 7.0.0 through 7.0.8 allows privileged VDOM administrators to escalate their privileges to super admin of the box via crafted CLI requests.
CVSS Score: 8.2 (HIGH)
CWE: CWE-23, CWE-22
References: https://fortiguard.com/psirt/FG-IR-22-401; https://fortiguard.com/psirt/FG-IR-22-401
CVE: CVE-2022-45861
Published: 2023-03-07
Description: An access of uninitialized pointer vulnerability [CWE-824] in the SSL VPN portal of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.11 and FortiProxy version 7.2.0 through 7.2.1, version 7.0.0 through 7.0.7 and before 2.0.11 allows a remote authenticated attacker to crash the sslvpn daemon via an HTTP GET request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-824, CWE-824
References: https://fortiguard.com/psirt/FG-IR-22-477; https://fortiguard.com/psirt/FG-IR-22-477
CVE: CVE-2022-46257
Published: 2023-03-07
Description: An information disclosure vulnerability was identified in GitHub Enterprise Server that allowed private repositories to be added to a GitHub Actions runner group via the API by a user who did not have access to those repositories, resulting in the repository names being shown in the UI. To exploit this vulnerability, an attacker would need access to the GHES instance, permissions to modify GitHub Actions runner groups, and successfully guess the obfuscated ID of private repositories. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.7 and was fixed in versions 3.3.17, 3.4.12, 3.5.9, 3.6.5. This vulnerability was reported via the GitHub Bug Bounty program.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-668
References: https://docs.github.com/en/enterprise-server%403.3/admin/release-notes#3.3.17; https://docs.github.com/en/enterprise-server%403.4/admin/release-notes#3.4.12; https://docs.github.com/en/enterprise-server%403.5/admin/release-notes#3.5.9
CVE: CVE-2023-1257
Published: 2023-03-07
Description: An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication files to create a new user and gain full access to the system.
CVSS Score: 7.6 (HIGH)
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-04; https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-04
CVE: CVE-2023-23776
Published: 2023-03-07
Description: An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiAnalyzer versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.4 and 6.4.0 through 6.4.10 may allow a remote authenticated  attacker to read the client machine password in plain text in a heartbeat response when a log-fetch request is made from the FortiAnalyzer
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200, CWE-312
References: https://fortiguard.com/psirt/FG-IR-22-447; https://fortiguard.com/psirt/FG-IR-22-447
CVE: CVE-2023-25223
Published: 2023-03-07
Description: CRMEB <=1.3.4 is vulnerable to SQL Injection via /api/admin/user/list.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/crmeb/crmeb_java/issues/9; https://github.com/crmeb/crmeb_java/issues/9
CVE: CVE-2023-25230
Published: 2023-03-07
Description: A Server-Side Request Forgery (SSRF) in loonflow r2.0.14 allows attackers to force the application to make arbitrary requests via manipulation of the hook_url parameter.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-918
References: https://github.com/blackholll/loonflow/issues/402; https://github.com/blackholll/loonflow/issues/402
CVE: CVE-2023-25605
Published: 2023-03-07
Description: A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the administrative interface to perform unauthorized actions via crafted HTTP requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://fortiguard.com/psirt/FG-IR-23-050; https://fortiguard.com/psirt/FG-IR-23-050
CVE: CVE-2023-25611
Published: 2023-03-07
Description: A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0 - 7.0.5, and 7.2.0 - 7.2.1 allows local attacker to execute unauthorized code or commands via inserting spreadsheet formulas in macro names.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-1236, CWE-1236
References: https://fortiguard.com/psirt/FG-IR-22-488; https://fortiguard.com/psirt/FG-IR-22-488
CVE: CVE-2023-24775
Published: 2023-03-07
Description: Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/funadmin/funadmin/issues/9; https://github.com/funadmin/funadmin/issues/9
CVE: CVE-2023-27475
Published: 2023-03-07
Description: Goutil is a collection of miscellaneous functionality for the go language. In versions prior to 0.6.0 when users use fsutil.Unzip to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. This vulnerability is known as a ZipSlip. This issue has been fixed in version 0.6.0, users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/gookit/goutil/commit/d7b94fede71f018f129f7d21feb58c895d28dadc; https://github.com/gookit/goutil/security/advisories/GHSA-fx2v-qfhr-4chv; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-27478
Published: 2023-03-07
Description: libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. `libmemcached` could return data for a previously requested key, if that previous request timed out due to a low `POLL_TIMEOUT`. This issue has been addressed in version 1.1.4. Users are advised to upgrade. There are several ways to workaround or lower the probability of this bug affecting a given deployment. 1: use a reasonably high `POLL_TIMEOUT` setting, like the default. 2: use separate libmemcached connections for unrelated data. 3: do not re-use libmemcached connections in an unknown state.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/awesomized/libmemcached/commit/48dcc61a; https://github.com/awesomized/libmemcached/releases/tag/1.1.4; https://github.com/awesomized/libmemcached/security/advisories/GHSA-wwmh-39wj-fx59