deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-36367
Published: 2024-05-29
Description: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via third-party reports was possible
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-36368
Published: 2024-05-29
Description: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 reflected XSS via OAuth provider configuration was possible
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-36369
Published: 2024-05-29
Description: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via issue tracker integration was possible
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-36370
Published: 2024-05-29
Description: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via OAuth connection settings was possible
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-36371
Published: 2024-05-29
Description: In JetBrains TeamCity before 2023.05.6, 2023.11.5 stored XSS in Commit status publisher was possible
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-36372
Published: 2024-05-29
Description: In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possible
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-36373
Published: 2024-05-29
Description: In JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possible
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-36374
Published: 2024-05-29
Description: In JetBrains TeamCity before 2024.03.2 stored XSS via build step settings was possible
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-36375
Published: 2024-05-29
Description: In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-36376
Published: 2024-05-29
Description: In JetBrains TeamCity before 2024.03.2 users could perform actions that should not be available to them based on their permissions
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-36377
Published: 2024-05-29
Description: In JetBrains TeamCity before 2024.03.2 certain TeamCity API endpoints did not check user permissions
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863, CWE-862
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-36378
Published: 2024-05-29
Description: In JetBrains TeamCity before 2024.03.2 server was susceptible to DoS attacks with incorrect auth tokens
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-36470
Published: 2024-05-29
Description: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases
CVSS Score: 8.1 (HIGH)
CWE: CWE-288, CWE-306
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-4358
Published: 2024-05-29
Description: In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-290, CWE-290
References: https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358; https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4358
CVE: CVE-2023-46297
Published: 2024-05-29
Description: An issue was discovered on Mercusys MW325R EU V3 MW325R(EU)_V3_1.11.0 221019 devices. A WAN attacker can make the admin interface unreachable/invisible via an unauthenticated HTTP request. Verification of the data sent by the user does not occur. The web server does not crash, but the admin interface becomes invisible, because the files necessary to display the content are no longer available. A reboot of the router is typically required to restore the correct behavior.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-755
References: https://k4m1ll0.com/cve-2023-46297.html; https://k4m1ll0.com/cve-2023-46297.html
CVE: CVE-2024-28974
Published: 2024-05-29
Description: Dell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
CVSS Score: 7.6 (HIGH)
CWE: CWE-326
References: https://www.dell.com/support/kbdoc/en-us/000225088/dsa-2024-192-security-update-for-data-protection-advisor-and-powerprotect-dp-series-appliance-idpa-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000225088/dsa-2024-192-security-update-for-data-protection-advisor-and-powerprotect-dp-series-appliance-idpa-for-multiple-vulnerabilities
CVE: CVE-2024-31079
Published: 2024-05-29
Description: When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate or cause other potential impact. This attack requires that a request be specifically timed during the connection draining process, which the attacker has no visibility and limited influence over.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-121, CWE-787
References: http://www.openwall.com/lists/oss-security/2024/05/30/4; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MLAOKJWDALQZBIV3WKGPJ6T5Z56D3PRD/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R7RPLWC35WHEUFCGKNFG62ESNID25TEZ/
CVE: CVE-2024-32760
Published: 2024-05-29
Description: When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can cause NGINX worker processes to terminate or cause or other potential impact.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: http://www.openwall.com/lists/oss-security/2024/05/30/4; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MLAOKJWDALQZBIV3WKGPJ6T5Z56D3PRD/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R7RPLWC35WHEUFCGKNFG62ESNID25TEZ/
CVE: CVE-2024-34161
Published: 2024-05-29
Description: When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a Maximum Transmission Unit (MTU) of 4096 or greater without fragmentation, undisclosed QUIC packets can cause NGINX worker processes to leak previously freed memory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416, CWE-416
References: http://www.openwall.com/lists/oss-security/2024/05/30/4; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MLAOKJWDALQZBIV3WKGPJ6T5Z56D3PRD/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R7RPLWC35WHEUFCGKNFG62ESNID25TEZ/
CVE: CVE-2024-35200
Published: 2024-05-29
Description: When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476, CWE-476
References: http://www.openwall.com/lists/oss-security/2024/05/30/4; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MLAOKJWDALQZBIV3WKGPJ6T5Z56D3PRD/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R7RPLWC35WHEUFCGKNFG62ESNID25TEZ/
CVE: CVE-2024-35283
Published: 2024-05-29
Description: A vulnerability in the Ignite component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a stored cross-site scripting (XSS) attack due to insufficient input validation.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0011; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0011
CVE: CVE-2024-35284
Published: 2024-05-29
Description: A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0012; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0012
CVE: CVE-2024-35311
Published: 2024-05-29
Description: Yubico YubiKey 5 Series before 5.7.0, Security Key Series before 5.7.0, YubiKey Bio Series before 5.6.4, and YubiKey 5 FIPS before 5.7.2 have Incorrect Access Control.
CVSS Score: 3.3 (LOW)
CWE: CWE-922
References: https://www.yubico.com/support/security-advisories/ysa-2024-02/; https://www.yubico.com/support/security-advisories/ysa-2024-02/
CVE: CVE-2024-35333
Published: 2024-05-29
Description: A stack-buffer-overflow vulnerability exists in the read_charset_decl function of html2xhtml 1.3. This vulnerability occurs due to improper bounds checking when copying data into a fixed-size stack buffer. An attacker can exploit this vulnerability by providing a specially crafted input to the vulnerable function, causing a buffer overflow and potentially leading to arbitrary code execution, denial of service, or data corruption.
CVSS Score: 8.4 (HIGH)
CWE: CWE-121
References: https://github.com/momo1239/CVE-2024-35333; https://github.com/momo1239/CVE-2024-35333
CVE: CVE-2024-36427
Published: 2024-05-29
Description: The file-serving function in TARGIT Decision Suite before 24.06.19002 (TARGIT Decision Suite 2024 – June) allows authenticated attackers to read or write to server files via a crafted file request. This can allow code execution via a .xview file.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22, CWE-918
References: https://community.targit.com/hc/en-us/articles/[PII_REDACTED]156-Vulnerabilities; https://github.com/DMCERTCE/DecisionSuite_Path_Traversal_SSRF; https://github.com/DMCERTCE/DecisionSuite_Path_Traversal_SSRF
CVE: CVE-2024-34715
Published: 2024-05-29
Description: Fides is an open-source privacy engineering platform. The Fides webserver requires a connection to a hosted PostgreSQL database for persistent storage of application data. If the password used by the webserver for this database connection includes special characters such as `@` and `$`, webserver startup fails and the part of the password following the special character is exposed in webserver error logs. This is caused by improper escaping of the SQLAlchemy password string. As a result users are subject to a partial exposure of hosted database password in webserver logs. The vulnerability has been patched in Fides version `2.37.0`. Users are advised to upgrade to this version or later to secure their systems against this threat. There are no known workarounds for this vulnerability.
CVSS Score: 2.3 (LOW)
CWE: CWE-116, CWE-532
References: https://docs.sqlalchemy.org/en/14/core/engines.html#escaping-special-characters-such-as-signs-in-passwords; https://github.com/ethyca/fides/commit/6ab37b1ffe2b1a3bd35b706a82f78e061086141c; https://github.com/ethyca/fides/security/advisories/GHSA-8cm5-jfj2-26q7
CVE: CVE-2024-35512
Published: 2024-05-29
Description: hmq v1.5.5 is vulnerable to Denial of Service (DoS) due to a Null Pointer Exception. A remote attacker can trigger a broker crash by sending a specially crafted MQTT UNSUBSCRIBE packet with an illegal control character Topic. The failure to properly validate this field leads to a null pointer dereference, resulting in the immediate termination of the hmq process.
CVSS Score: 5.3 (MEDIUM)
References: https://gist.github.com/pengwGit/6ccca73a5acf91f31ff0d4185b15a3ea; https://gist.github.com/pengwGit/6ccca73a5acf91f31ff0d4185b15a3ea
CVE: CVE-2024-35434
Published: 2024-05-29
Description: Irontec Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtp_check_packet at /sngrep/src/rtp.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SIP packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122
References: https://github.com/inputzero/Security-Advisories/blob/main/CVE-XXXX-XXXX.md; https://github.com/inputzero/Security-Advisories/blob/main/CVE-XXXX-XXXX.md
CVE: CVE-2024-36016
Published: 2024-05-29
Description: In the Linux kernel, the following vulnerability has been resolved:

tty: n_gsm: fix possible out-of-bounds in gsm0_receive()

Assuming the following:
- side A configures the n_gsm in basic option mode
- side B sends the header of a basic option mode frame with data length 1
- side A switches to advanced option mode
- side B sends 2 data bytes which exceeds gsm->len
  Reason: gsm->len is not used in advanced option mode.
- side A switches to basic option mode
- side B keeps sending until gsm0_receive() writes past gsm->buf
  Reason: Neither gsm->state nor gsm->len have been reset after
  reconfiguration.

Fix this by changing gsm->count to gsm->len comparison from equal to less
than. Also add upper limit checks against the constant MAX_MRU in
gsm0_receive() and gsm1_receive() to harden against memory corruption of
gsm->len and gsm->mru.

All other checks remain as we still need to limit the data according to the
user configuration and actual payload size.
CVSS Score: 7.7 (HIGH)
CWE: CWE-125
References: https://git.kernel.org/stable/c/0fb736c9931e02dbc7d9a75044c8e1c039e50f04; https://git.kernel.org/stable/c/46f52c89a7e7d2691b97a9728e4591d071ca8abc; https://git.kernel.org/stable/c/47388e807f85948eefc403a8a5fdc5b406a65d5a
CVE: CVE-2024-35492
Published: 2024-05-29
Description: Cesanta Mongoose commit b316989 was discovered to contain a NULL pointer dereference via the scpy function at src/fmt.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MQTT packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/zzh-newlearner/MQTT_Crash/blob/main/Mongoose_null_pointer.md; https://github.com/zzh-newlearner/MQTT_Crash/blob/main/Mongoose_null_pointer.md
CVE: CVE-2024-35221
Published: 2024-05-29
Description: Rubygems.org is the Ruby community's gem hosting service. A Gem publisher can cause a Remote DoS when publishing a Gem. This is due to how Ruby reads the Manifest of Gem files when using Gem::Specification.from_yaml. from_yaml makes use of SafeYAML.load which allows YAML aliases inside the YAML-based metadata of a gem. YAML aliases allow for Denial of Service attacks with so-called `YAML-bombs` (comparable to Billion laughs attacks). This was patched. There is is no action required by users. This issue is also tracked as GHSL-2024-001 and was discovered by the GitHub security lab.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400
References: https://en.wikipedia.org/wiki/Billion_laughs_attack; https://github.com/ruby/ruby/blob/7cf74a2ff28b1b4c26e367d0d67521f7e1fed239/lib/rubygems/safe_yaml.rb#L28; https://github.com/rubygems/rubygems.org/security/advisories/GHSA-4vc5-whwr-7hh2
CVE: CVE-2024-36114
Published: 2024-05-29
Description: Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java. All decompressor implementations of Aircompressor (LZ4, LZO, Snappy, Zstandard) can crash the JVM for certain input, and in some cases also leak the content of other memory of the Java process (which could contain sensitive information). When decompressing certain data, the decompressors try to access memory outside the bounds of the given byte arrays or byte buffers. Because Aircompressor uses the JDK class `sun.misc.Unsafe` to speed up memory access, no additional bounds checks are performed and this has similar security consequences as out-of-bounds access in C or C++, namely it can lead to non-deterministic behavior or crash the JVM. Users should update to Aircompressor 0.27 or newer where these issues have been fixed. When decompressing data from untrusted users, this can be exploited for a denial-of-service attack by crashing the JVM, or to leak other sensitive information from the Java process. There are no known workarounds for this issue.
CVSS Score: 8.6 (HIGH)
CWE: CWE-125, CWE-787
References: https://github.com/airlift/aircompressor/commit/15e68df9eb0c2bfde7f796231ee7cd[PII_REDACTED]; https://github.com/airlift/aircompressor/commit/2cea90a45534f9aacbb77426fb64e975504dee6e; https://github.com/airlift/aircompressor/commit/cf66151541edb062ea88b6f3baab3f95e48b7b7f
CVE: CVE-2024-3726
Published: 2024-05-30
Description: The Login Logout Register Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'llrmloginlogout' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/login-logout-register-menu/; https://www.wordfence.com/threat-intel/vulnerabilities/id/c8a93aab-4845-46ed-8adc-d06b2ee8ee9e?source=cve; https://wordpress.org/plugins/login-logout-register-menu/
CVE: CVE-2024-5514
Published: 2024-05-30
Description: MinMax CMS from MinMax Digital Technology contains a hidden administrator account with a fixed password that cannot be removed or disabled from the management interface. Remote attackers who obtain this account can bypass IP access control restrictions and log in to the backend system without being recorded in the system logs.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-912
References: https://www.chtsecurity.com/news/2dde8d39-59fc-4c09-b4ad-0acf692321c5; https://www.chtsecurity.com/news/6b2393f5-3041-4011-b2ea-528e312c6b3c; https://www.twcert.org.tw/en/cp-139-7831-b9a46-2.html
CVE: CVE-2024-2253
Published: 2024-05-30
Description: The Testimonial Carousel For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via URL values the plugin's carousel widgets in all versions up to, and including, 10.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/testimonials-carousel-elementor/trunk/widgets/testimonials-carousel/class-testimonialscarousel-employees.php; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3098089%40testimonials-carousel-elementor&new=3098089%40testimonials-carousel-elementor&sfp_email=&sfph_mail=#file16; https://www.wordfence.com/threat-intel/vulnerabilities/id/d559b862-ee07-4207-8c64-81961516a046?source=cve
CVE: CVE-2024-3063
Published: 2024-05-30
Description: The WPB Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the output of 'tags' added to widgets in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping on user supplied tag attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3088737%40wpb-elementor-addons&new=3088737%40wpb-elementor-addons&sfp_email=&sfph_mail=#file44; https://www.wordfence.com/threat-intel/vulnerabilities/id/8a832e2b-a900-4057-96fc-1bd6899e3950?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3088737%40wpb-elementor-addons&new=3088737%40wpb-elementor-addons&sfp_email=&sfph_mail=#file44
CVE: CVE-2024-3190
Published: 2024-05-30
Description: The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's text field widget in all versions up to, and including, 1.5.107 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Please note that this vulnerability is different in that the issue stems from an external template. It appears that older version may also be patched due to this, however, we are choosing 1.5.108 as the patched version since that is the most recent version containing as known patch.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3090199%40unlimited-elements-for-elementor&new=3090199%40unlimited-elements-for-elementor&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/78d8ddc9-69ad-4d69-ac23-5a31dfeafd54?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3090199%40unlimited-elements-for-elementor&new=3090199%40unlimited-elements-for-elementor&sfp_email=&sfph_mail=
CVE: CVE-2024-3269
Published: 2024-05-30
Description: The Download Monitor plugin for WordPress is vulnerable to unauthorized access to functionality due to a missing capability check on the dlm_uninstall_plugin function in all versions up to, and including, 4.9.13. This makes it possible for authenticated attackers to uninstall the plugin and delete its data.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-285
References: https://plugins.trac.wordpress.org/changeset/3092928/download-monitor/trunk?contextall=1&old=3070504&old_path=%2Fdownload-monitor%2Ftrunk; https://www.wordfence.com/threat-intel/vulnerabilities/id/c454a958-91c4-4847-91f6-dedebf857964?source=cve; https://plugins.trac.wordpress.org/changeset/3092928/download-monitor/trunk?contextall=1&old=3070504&old_path=%2Fdownload-monitor%2Ftrunk