deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-33974
Published: 2023-05-30
Description: RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In versions 2023.01 and prior, an attacker can send multiple crafted frames to the device to trigger a race condition. The race condition invalidates assumptions about the program state and leads to an invalid memory access resulting in denial of service. This issue is patched in pull request 19679. There are no known workarounds.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362, CWE-362
References: https://github.com/RIOT-OS/RIOT/blob/f41b4b67b6affca0a8b32edced7f[PII_REDACTED]9a/sys/net/gnrc/network_layer/sixlowpan/frag/sfr/gnrc_sixlowpan_frag_sfr.c#L1717; https://github.com/RIOT-OS/RIOT/blob/f41b4b67b6affca0a8b32edced7f[PII_REDACTED]9a/sys/net/gnrc/network_layer/sixlowpan/frag/sfr/gnrc_sixlowpan_frag_sfr.c#L509; https://github.com/RIOT-OS/RIOT/blob/f41b4b67b6affca0a8b32edced7f[PII_REDACTED]9a/sys/net/gnrc/network_layer/sixlowpan/frag/sfr/gnrc_sixlowpan_frag_sfr.c#L617
CVE: CVE-2018-8661
Published: 2023-05-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2023-2968
Published: 2023-05-30
Description: A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError exception.


CVSS Score: 7.5 (HIGH)
CWE: CWE-232
References: https://research.jfrog.com/vulnerabilities/undefined-variable-usage-in-proxy-leads-to-remote-denial-of-service-xray-520917; https://research.jfrog.com/vulnerabilities/undefined-variable-usage-in-proxy-leads-to-remote-denial-of-service-xray-520917
CVE: CVE-2023-2994
Published: 2023-05-30
Description: Rejected reason: This 2023 CVE was incorrectly assigned instead of a 2022 CVE.
CVE: CVE-2023-32684
Published: 2023-05-30
Description: Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to version 0.16.0, a virtual machine instance with a malicious disk image could read a single file on the host filesystem, even when no filesystem is mounted from the host. The official templates of Lima and the well-known third party products (Colima, Rancher Desktop, and Finch) are unlikely to be affected by this issue. To exploit this issue, the attacker has to embed the target file path (an absolute or a relative path from the instance directory) in a malicious disk image, as the qcow2 (or vmdk) backing file path string. As Lima refuses to run as the root, it is practically impossible for the attacker to read the entire host disk via `/dev/rdiskN`. Also, practically, the attacker cannot read at least the first 512 bytes (MBR) of the target file. The issue has been patched in Lima in version 0.16.0 by prohibiting using a backing file path in the VM base image.
CVSS Score: 2.7 (LOW)
CWE: CWE-552, CWE-552
References: https://github.com/lima-vm/lima/commit/01dbd4d9cabe692afa4517be3995771f0ebb38a5; https://github.com/lima-vm/lima/releases/tag/v0.16.0; https://github.com/lima-vm/lima/security/advisories/GHSA-f7qw-jj9c-rpq9
CVE: CVE-2023-32689
Published: 2023-05-30
Description: Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Versions prior to 5.4.4 and 6.1.1 are vulnerable to a phishing attack vulnerability that involves a user uploading malicious files. A malicious user could upload an HTML file to Parse Server via its public API. That HTML file would then be accessible at the internet domain at which Parse Server is hosted. The URL of the the uploaded HTML could be shared for phishing attacks. The HTML page may seem legitimate because it is served under the internet domain where Parse Server is hosted, which may be the same as a company's official website domain.

An additional security issue arises when the Parse JavaScript SDK is used. The SDK stores sessions in the internet browser's local storage, which usually restricts data access depending on the internet domain. A malicious HTML file could contain a script that retrieves the user's session token from local storage and then share it with the attacker.

The fix included in versions 5.4.4 and 6.1.1 adds a new Parse Server option `fileUpload.fileExtensions` to restrict file upload on Parse Server by file extension. It is recommended to restrict file upload for HTML file extensions, which this fix disables by default. If an app requires upload of files with HTML file extensions, the option can be set to `['.*']` or another custom value to override the default.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://github.com/parse-community/parse-server/pull/8537; https://github.com/parse-community/parse-server/pull/8538; https://github.com/parse-community/parse-server/security/advisories/GHSA-9prm-jqwx-45x9
CVE: CVE-2023-33656
Published: 2023-05-30
Description: A memory leak vulnerability exists in NanoMQ 0.17.2. The vulnerability is located in the file message.c. An attacker could exploit this vulnerability to cause a denial of service attack by causing the program to consume all available memory resources.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://github.com/emqx/nanomq; https://github.com/emqx/nanomq/issues/1164; https://github.com/emqx/nanomq/issues/1165#issuecomment[PII_REDACTED]
CVE: CVE-2023-33975
Published: 2023-05-30
Description: RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In version 2023.01 and prior, an attacker can send a crafted frame to the device resulting in an out of bounds write in the packet buffer. The overflow can be used to corrupt other packets and the allocator metadata. Corrupting a pointer will easily lead to denial of service. While carefully manipulating the allocator metadata gives an attacker the possibility to write data to arbitrary locations and thus execute arbitrary code. This issue is fixed in pull request 19680. As a workaround, disable support for fragmented IP datagrams.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-787, CWE-787
References: https://github.com/RIOT-OS/RIOT/blob/f41b4b67b6affca0a8b32edced7f[PII_REDACTED]9a/sys/net/gnrc/network_layer/sixlowpan/frag/rb/gnrc_sixlowpan_frag_rb.c#L320; https://github.com/RIOT-OS/RIOT/blob/f41b4b67b6affca0a8b32edced7f[PII_REDACTED]9a/sys/net/gnrc/network_layer/sixlowpan/frag/rb/gnrc_sixlowpan_frag_rb.c#L388; https://github.com/RIOT-OS/RIOT/blob/f41b4b67b6affca0a8b32edced7f[PII_REDACTED]9a/sys/net/gnrc/network_layer/sixlowpan/frag/rb/gnrc_sixlowpan_frag_rb.c#L463
CVE: CVE-2023-1711
Published: 2023-05-30
Description: A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. 
If exploited an attacker could obtain confidential information.



List of CPEs:
  *  cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:*
  *  cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:*

  *  cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:*

  *  cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:*

  *  cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:*

  *  cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:*

  *  cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:*

  *  cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:*

  *  cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:*

  *  
  *  cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*
  *  cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:*

  *  cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:*

  *  cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:*

  *  cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:*

  *  cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:*

  *  cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:*

  *  cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:*

  *  cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:*



CVSS Score: 4.0 (MEDIUM)
CWE: CWE-117, CWE-116
References: https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2023-32696
Published: 2023-05-30
Description: CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.1, the `ckan` user (equivalent to www-data) owned code and configuration files in the docker container and the `ckan` user had the permissions to use sudo. These issues allowed for code execution or privilege escalation if an arbitrary file write bug was available. Versions 2.9.9, 2.9.9-dev, 2.10.1, and 2.10.1-dev contain a patch.




CVSS Score: 8.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://github.com/ckan/ckan-docker-base/commit/5483c46ce9b518a4e1b626ef7032cce2c1d75c7d; https://github.com/ckan/ckan-docker-base/security/advisories/GHSA-c74x-xfvr-x5wg; https://github.com/ckan/ckan-docker-base/commit/5483c46ce9b518a4e1b626ef7032cce2c1d75c7d
CVE: CVE-2023-32699
Published: 2023-05-30
Description: MeterSphere is an open source continuous testing platform. Version 2.9.1 and prior are vulnerable to denial of service. ​The `checkUserPassword` method is used to check whether the password provided by the user matches the password saved in the database, and the `CodingUtil.md5` method is used to encrypt the original password with MD5 to ensure that the password will not be saved in plain text when it is stored. If a user submits a very long password when logging in, the system will be forced to execute the long password MD5 encryption process, causing the server CPU and memory to be exhausted, thereby causing a denial of service attack on the server. This issue is fixed in version 2.10.0-lts with a maximum password length.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://github.com/metersphere/metersphere/commit/c59e381d[PII_REDACTED]13085a1a4877c5ef865411; https://github.com/metersphere/metersphere/security/advisories/GHSA-qffq-8gf8-mhq7; https://github.com/metersphere/metersphere/commit/c59e381d[PII_REDACTED]13085a1a4877c5ef865411
CVE: CVE-2022-36243
Published: 2023-05-30
Description: Shop Beat Solutions (pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in "studio" software of Shop Beat. This issue affects: Shop Beat studio studio versions prior to 3.2.57 on arm.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-548, CWE-22
References: https://www.shopbeat.co.za; https://www.shopbeat.co.za
CVE: CVE-2022-36244
Published: 2023-05-30
Description: Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting (XSS) vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbeat.co.za.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.shopbeat.co.za; https://www.shopbeat.co.za
CVE: CVE-2022-36246
Published: 2023-05-30
Description: Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: https://www.shopbeat.co.za; https://www.shopbeat.co.za
CVE: CVE-2022-36247
Published: 2023-05-30
Description: Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to IDOR via controlpanel.shopbeat.co.za.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-639
References: https://www.shopbeat.co.za; https://www.shopbeat.co.za
CVE: CVE-2022-36249
Published: 2023-05-30
Description: Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs. For Controlpanel Lite. "After login we are directly able to use the bearer token or jsession ID to access the apis instead of entering the 2FA code. Thus, leading to bypass of 2FA on API level.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-288, CWE-306
References: https://www.shopbeat.co.za; https://www.shopbeat.co.za
CVE: CVE-2022-36250
Published: 2023-05-30
Description: Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Cross Site Request Forgery (CSRF).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.shopbeat.co.za; https://www.shopbeat.co.za
CVE: CVE-2022-47028
Published: 2023-05-30
Description: An issue discovered in Action Launcher for Android v50.5 allows an attacker to cause a denial of service via arbitary data injection to function insert.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2022-47028/CVE%20detailed.md; https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2022-47028/CVE%20detailed.md
CVE: CVE-2022-47029
Published: 2023-05-30
Description: An issue was found in Action Launcher v50.5 allows an attacker to escalate privilege via modification of the intent string to function update.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1284
References: https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2022-47029/CVE%20detailed.md; https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2022-47029/CVE%20detailed.md
CVE: CVE-2022-48137
Published: 2023-05-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-26830. Reason: This candidate is a reservation duplicate of CVE-2023-26830. Notes: All CVE users should reference CVE-2023-26830 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2022-48138
Published: 2023-05-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-26829. Reason: This candidate is a reservation duplicate of CVE-2023-26829. Notes: All CVE users should reference CVE-2023-26829 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2023-23561
Published: 2023-05-30
Description: Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-346
References: https://advisories.stormshield.eu; https://advisories.stormshield.eu/2023-001/; https://advisories.stormshield.eu
CVE: CVE-2023-23956
Published: 2023-05-30
Description: A user can supply malicious HTML and JavaScript code that will be executed in the client browser
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/173038/Symantec-SiteMinder-WebAgent-12.52-Cross-Site-Scripting.html; https://support.broadcom.com/external/content/SecurityAdvisories/0/22221; http://packetstormsecurity.com/files/173038/Symantec-SiteMinder-WebAgent-12.52-Cross-Site-Scripting.html
CVE: CVE-2023-29731
Published: 2023-05-30
Description: SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. When an attacker injects too much data, the application will trigger an OOM error and crash at startup, resulting in a persistent denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276, CWE-276
References: https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29731/CVE%20detail.md; https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29731/CVE%20detail.md; https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29731/CVE%20detail.md
CVE: CVE-2023-29732
Published: 2023-05-30
Description: SoLive 1.6.14 thru 1.6.20 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the application is opened. Depending on how the data is used, this can result in various attack consequences, such as ad display exceptions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276, CWE-276
References: https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29732/CVE%20detail.md; https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29732/CVE%20detail.md
CVE: CVE-2023-29733
Published: 2023-05-30
Description: The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data that affects many app functions. Malicious modifications by unauthorized apps can cause security issues, such as functionality manipulation, resulting in a severe escalation of privilege attack.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29733/CVE%20detail.md; https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29733/CVE%20detail.md
CVE: CVE-2023-29734
Published: 2023-05-30
Description: An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29734/CVE%20detail.md; https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29734/CVE%20detail.md
CVE: CVE-2023-29735
Published: 2023-05-30
Description: An issue found in edjing Mix v.7.09.01 for Android allows a local attacker to cause a denial of service via the database files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29735/CVE%20detail.md; https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29735/CVE%20detail.md
CVE: CVE-2023-31184
Published: 2023-05-30
Description: ROZCOM client CWE-798: Use of Hard-coded Credentials
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-798, CWE-798
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2023-31185
Published: 2023-05-30
Description: ROZCOM server framework - Misconfiguration may allow information disclosure via an unspecified request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2023-31186
Published: 2023-05-30
Description: Avaya IX Workforce Engagement v15.2.7.1195 - User Enumeration - Observable Response Discrepancy
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204, CWE-203
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2023-31187
Published: 2023-05-30
Description: Avaya IX Workforce Engagement v15.2.7.1195 - CWE-522: Insufficiently Protected Credentials
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2023-32218
Published: 2023-05-30
Description: Avaya IX Workforce Engagement v15.2.7.1195 - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2023-33177
Published: 2023-05-30
Description: Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially crafted zip file can be uploaded to the CMS via the layout import function by an authenticated user which would allow creation of files outside of the CMS library directory as the webserver user. This can be used to upload a PHP webshell inside the web root directory and achieve remote code execution as the webserver user. Users should upgrade to version 2.3.17 or 3.3.5, which fix this issue. Customers who host their CMS with Xibo Signage have already received an upgrade or patch to resolve this issue regardless of the CMS version that they are running.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://claroty.com/team82/disclosure-dashboard; https://github.com/xibosignage/xibo-cms/commit/1cbba380fa751a00756e70d7b08b5c[PII_REDACTED]; https://github.com/xibosignage/xibo-cms/commit/45c6b53c3978639db03b63270a56f4397f49b2c9
CVE: CVE-2023-33178
Published: 2023-05-30
Description: Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `/dataset/data/{id}` API route inside the CMS starting in version 1.4.0 and prior to versions 2.3.17 and 3.3.5. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values in to the `filter` parameter. Values allowed in the filter parameter are checked against a deny list of commands that should not be allowed, however this checking was done in a case sensitive manor and so it is possible to bypass these checks by using unusual case combinations. Users should upgrade to version 2.3.17 or 3.3.5, which fix this issue. There are no workarounds aside from upgrading.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://claroty.com/team82/disclosure-dashboard; https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-g9x2-757j-hmhh; https://xibosignage.com/blog/security-advisory-2023-05/
CVE: CVE-2023-0779
Published: 2023-05-30
Description: At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’s memory layout, further exploitation is possible.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20, CWE-476
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-9xj8-6989-r549; https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-9xj8-6989-r549
CVE: CVE-2023-33179
Published: 2023-05-30
Description: Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.5 in the `nameFilter` function used throughout the CMS. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values for logical operators. Users should upgrade to version 3.3.5 which fixes this issue. There are no known workarounds aside from upgrading.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://claroty.com/team82/disclosure-dashboard; https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-jmx8-cgm4-7mf5; https://xibosignage.com/blog/security-advisory-2023-05/
CVE: CVE-2023-33180
Published: 2023-05-30
Description: Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.2 in the `/display/map` API route inside the CMS. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values in to the `bounds` parameter. Users should upgrade to version 3.3.5, which fixes this issue. There are no known workarounds aside from upgrading.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://claroty.com/team82/disclosure-dashboard; https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-7ww5-x9rm-qm89; https://xibosignage.com/blog/security-advisory-2023-05/
CVE: CVE-2023-33181
Published: 2023-05-30
Description: Xibo is a content management system (CMS). Starting in version 3.0.0 and prior to version 3.3.5, some API routes will print a stack trace when called with missing or invalid parameters revealing sensitive information about the locations of paths that the server is using. Users should upgrade to version 3.3.5, which fixes this issue. There are no known workarounds aside from upgrading.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://claroty.com/team82/disclosure-dashboard; https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-c9cx-ghwr-x58m; https://xibosignage.com/blog/security-advisory-2023-05/