deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-23673
Published: 2023-05-16
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Harish Chouhan, Themeist I Recommend This plugin <= 3.8.3 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/i-recommend-this/wordpress-i-recommend-this-plugin-3-8-3-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/i-recommend-this/wordpress-i-recommend-this-plugin-3-8-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-23676
Published: 2023-05-16
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Bruno "Aesqe" Babic File Gallery plugin <= 1.8.5.3 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/file-gallery/wordpress-file-gallery-plugin-1-8-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/file-gallery/wordpress-file-gallery-plugin-1-8-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-23727
Published: 2023-05-16
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Formilla Live Chat by Formilla plugin <= 1.3 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/formilla-live-chat/wordpress-live-chat-by-formilla-real-time-chat-chatbots-plugin-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/formilla-live-chat/wordpress-live-chat-by-formilla-real-time-chat-chatbots-plugin-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-2499
Published: 2023-05-16
Description: The RegistrationMagic plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.2.1.0. This is due to insufficient verification on the user being supplied during a Google social login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288, CWE-287
References: https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/tags/5.2.0.4/services/class_rm_user_services.php#L791; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2912481%40custom-registration-form-builder-with-submission-manager&new=2912481%40custom-registration-form-builder-with-submission-manager&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/87ec5542-b6e7-4b18-a3ec-c258e749d32e?source=cve
CVE: CVE-2023-2548
Published: 2023-05-16
Description: The RegistrationMagic plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 5.2.0.5. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for authenticated attackers, with administrator-level permissions and above, to change user passwords and potentially take over super-administrator accounts in multisite setup.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/tags/5.2.0.5/includes/class_rm_utilities.php#L3044; https://www.wordfence.com/threat-intel/vulnerabilities/id/bfbc406b-49af-419e-adeb-0510794b7e3f?source=cve; https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/tags/5.2.0.5/includes/class_rm_utilities.php#L3044
CVE: CVE-2023-23641
Published: 2023-05-16
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPmanage Uji Popup plugin <= 1.4.3 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/uji-popup/wordpress-uji-popup-plugin-1-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/uji-popup/wordpress-uji-popup-plugin-1-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-23657
Published: 2023-05-16
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Richard Leishman t/a Webforward Mail Subscribe List plugin <= 2.1.9 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/mail-subscribe-list/wordpress-mail-subscribe-list-plugin-2-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/mail-subscribe-list/wordpress-mail-subscribe-list-plugin-2-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-23703
Published: 2023-05-16
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Arconix Shortcodes plugin <= 2.1.7 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/arconix-shortcodes/wordpress-arconix-shortcodes-plugin-2-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/arconix-shortcodes/wordpress-arconix-shortcodes-plugin-2-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-23709
Published: 2023-05-16
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Denis WPJAM Basic plugin <= 6.2.1 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wpjam-basic/wordpress-wpjam-basic-plugin-6-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wpjam-basic/wordpress-wpjam-basic-plugin-6-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-23720
Published: 2023-05-16
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NetReviews SAS Verified Reviews (Avis Vérifiés) plugin <= 2.3.13 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/netreviews/wordpress-verified-reviews-avis-verifies-plugin-2-3-12-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/netreviews/wordpress-verified-reviews-avis-verifies-plugin-2-3-12-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-2730
Published: 2023-05-16
Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/8ab06bfbb5a05a1b190731d9c7476ec45f5ee878; https://huntr.dev/bounties/6c6f5c26-d545-4e7b-82bb-1fe28006c885; https://github.com/pimcore/pimcore/commit/8ab06bfbb5a05a1b190731d9c7476ec45f5ee878
CVE: CVE-2023-31572
Published: 2023-05-16
Description: An issue in Bludit 4.0.0-rc-2 allows authenticated attackers to change the Administrator password and escalate privileges via a crafted request.
CVSS Score: 8.8 (HIGH)
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/bludit/2023/Bludit-v4.0.0-Release-candidate-2; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/bludit/2023/Bludit-v4.0.0-Release-candidate-2
CVE: CVE-2023-31576
Published: 2023-05-16
Description: An arbitrary file upload vulnerability in Serendipity 2.4-beta1 allows attackers to execute arbitrary code via a crafted HTML or Javascript file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/s9y/2023/Serendipity-2.4-beta-1; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/s9y/2023/Serendipity-2.4-beta-1
CVE: CVE-2023-29439
Published: 2023-05-16
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FooPlugins FooGallery plugin <= 2.2.35 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://lourcode.kr/posts/CVE-2023-29439-Analysis?_s_id=cve; https://patchstack.com/database/vulnerability/foogallery/wordpress-foogallery-plugin-2-2-35-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://lourcode.kr/posts/CVE-2023-29439-Analysis?_s_id=cve
CVE: CVE-2023-2738
Published: 2023-05-16
Description: A vulnerability classified as critical has been found in Tongda OA 11.10. This affects the function actionGetdata of the file GatewayController.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-229149 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/RCEraser/cve/blob/main/tongda.md; https://vuldb.com/?ctiid.229149; https://vuldb.com/?id.229149
CVE: CVE-2023-31519
Published: 2023-05-16
Description: Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the email parameter at login_core.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/yangliukk/Injection-Vulnerability-In-Pharmacy-Management-System-1.0/blob/main/README.md; https://github.com/yangliukk/Injection-Vulnerability-In-Pharmacy-Management-System-1.0/blob/main/README.md
CVE: CVE-2023-31587
Published: 2023-05-16
Description: Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/yanbushuang/CVE/blob/main/TendaAC5.md; https://www.tenda.com.cn/download/detail-2740.html; https://www.tenda.com.cn/product/AC5.html
CVE: CVE-2023-31856
Published: 2023-05-16
Description: A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute arbitrary commands via a crafted http packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/xiangbulala/CVE/blob/main/totlink.md; https://github.com/xiangbulala/CVE/blob/main/totlink.md
CVE: CVE-2023-31857
Published: 2023-05-16
Description: Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/Jadore147258369/php-ocls/blob/main/README.md; https://github.com/Jadore147258369/php-ocls/blob/main/README.md
CVE: CVE-2023-28076
Published: 2023-05-16
Description: 
CloudLink 7.1.2 and all prior versions contain a broken or risky cryptographic algorithm vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability leading to some information disclosure.


CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: https://www.dell.com/support/kbdoc/en-us/000212095/dsa-2023-121-dell-cloudlink-security-update-for-aes-gcm-ciphers-vulnerability; https://www.dell.com/support/kbdoc/en-us/000212095/dsa-2023-121-dell-cloudlink-security-update-for-aes-gcm-ciphers-vulnerability
CVE: CVE-2023-2739
Published: 2023-05-16
Description: A vulnerability classified as problematic was found in Gira HomeServer up to 4.12.0.220829 beta. This vulnerability affects unknown code of the file /hslist. The manipulation of the argument lst with the input debug%27"><img%20src=x%20onerror=alert(document.cookie)> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-229150 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://vuldb.com/?ctiid.229150; https://vuldb.com/?id.229150; https://vuldb.com/?ctiid.229150
CVE: CVE-2023-31890
Published: 2023-05-16
Description: An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://github.com/glazedlists/glazedlists/issues/709; https://github.com/glazedlists/glazedlists/issues/709
CVE: CVE-2023-32977
Published: 2023-05-16
Description: Jenkins Pipeline: Job Plugin does not escape the display name of the build that caused an earlier build to be aborted, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set build display names immediately.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3042; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3042
CVE: CVE-2023-32978
Published: 2023-05-16
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins LDAP Plugin allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3046; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3046
CVE: CVE-2023-32979
Published: 2023-05-16
Description: Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files in the email-templates/ directory in the Jenkins home directory on the controller file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3088%20(1); https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3088%20(1)
CVE: CVE-2023-32980
Published: 2023-05-16
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Email Extension Plugin allows attackers to make another user stop watching an attacker-specified job.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3088%20(2); https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3088%20(2)
CVE: CVE-2023-32981
Published: 2023-05-16
Description: An arbitrary file write vulnerability in Jenkins Pipeline Utility Steps Plugin 2.15.2 and earlier allows attackers able to provide crafted archives as parameters to create or replace arbitrary files on the agent file system with attacker-specified content.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2196; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2196
CVE: CVE-2023-32982
Published: 2023-05-16
Description: Jenkins Ansible Plugin 204.v8191fd551eb_f and earlier stores extra variables unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-311, CWE-312
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3017; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3017
CVE: CVE-2023-32983
Published: 2023-05-16
Description: Jenkins Ansible Plugin 204.v8191fd551eb_f and earlier does not mask extra variables displayed on the configuration form, increasing the potential for attackers to observe and capture them.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3017; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3017
CVE: CVE-2023-32984
Published: 2023-05-16
Description: Jenkins TestNG Results Plugin 730.v4c[PII_REDACTED] and earlier does not escape several values that are parsed from TestNG report files and displayed on the plugin's test information pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a crafted TestNG report file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3047; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3047
CVE: CVE-2023-32985
Published: 2023-05-16
Description: Jenkins Sidebar Link Plugin 2.2.1 and earlier does not restrict the path of files in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3125; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3125
CVE: CVE-2023-32986
Published: 2023-05-16
Description: Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File Parameters, allowing attackers with Item/Configure permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3123; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3123
CVE: CVE-2023-32987
Published: 2023-05-16
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Reverse Proxy Auth Plugin 1.7.4 and earlier allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3002; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3002
CVE: CVE-2023-32988
Published: 2023-05-16
Description: A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2855%20(1); https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2855%20(1)
CVE: CVE-2023-32989
Published: 2023-05-16
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through another method.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2855%20(2); https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2855%20(2)
CVE: CVE-2023-2740
Published: 2023-05-16
Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Guest Management System 1.0. Affected by this issue is some unknown functionality of the file dateTest.php of the component GET Parameter Handler. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229160.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/xryj920/CVE/blob/main/XSS.md; https://vuldb.com/?ctiid.229160; https://vuldb.com/?id.229160
CVE: CVE-2023-32990
Published: 2023-05-16
Description: A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through another method.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2855%20(2); https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2855%20(2)
CVE: CVE-2023-32991
Published: 2023-05-16
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier allows attackers to send an HTTP request to an attacker-specified URL and parse the response as XML, or parse a local file on the Jenkins controller as XML.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2993; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2993
CVE: CVE-2023-32992
Published: 2023-05-16
Description: Missing permission checks in Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier allow attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as XML, or parse a local file on the Jenkins controller as XML.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2993; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2993
CVE: CVE-2023-32993
Published: 2023-05-16
Description: Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier does not perform hostname validation when connecting to miniOrange or the configured IdP to retrieve SAML metadata, which could be abused using a man-in-the-middle attack to intercept these connections.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-345, CWE-346
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3001%20(1); https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3001%20(1)
CVE: CVE-2023-32994
Published: 2023-05-16
Description: Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 and earlier unconditionally disables SSL/TLS certificate validation for connections to miniOrange or the configured IdP to retrieve SAML metadata, which could be abused using a man-in-the-middle attack to intercept these connections.
CVSS Score: 3.7 (LOW)
CWE: CWE-295, CWE-295
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3001%20(2); https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3001%20(2)
CVE: CVE-2023-32995
Published: 2023-05-16
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attackers to send an HTTP POST request with JSON body containing attacker-specified content, to miniOrange's API for sending emails.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2994; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2994
CVE: CVE-2023-32996
Published: 2023-05-16
Description: A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request with JSON body containing attacker-specified content, to miniOrange's API for sending emails.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2994; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2994
CVE: CVE-2023-32997
Published: 2023-05-16
Description: Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login.
CVSS Score: 8.8 (HIGH)
CWE: CWE-384, CWE-384
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3000; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3000
CVE: CVE-2023-32998
Published: 2023-05-16
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins AppSpider Plugin 1.0.15 and earlier allows attackers to connect to an attacker-specified URL and send an HTTP POST request with a JSON payload consisting of attacker-specified credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3121; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3121
CVE: CVE-2023-32999
Published: 2023-05-16
Description: A missing permission check in Jenkins AppSpider Plugin 1.0.15 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL and send an HTTP POST request with a JSON payload consisting of attacker-specified credentials.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3121; https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3121