deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-1851
Published: 2024-03-08
Description: The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the atkp_create_list() function in all versions up to, and including, 3.5.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to to perform unauthorized actions such as creating product lists.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/changeset/3045821/affiliate-toolkit-starter/trunk/includes/atkp_endpoints.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/e9e256b0-e4e3-4f41-842c-80aa2b80af72?source=cve; https://plugins.trac.wordpress.org/changeset/3045821/affiliate-toolkit-starter/trunk/includes/atkp_endpoints.php
CVE: CVE-2024-2298
Published: 2024-03-08
Description: The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the atkp_import_product() function in all versions up to, and including, 3.5.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to to perform unauthorized actions such as creating importing products.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/changeset/3045821/affiliate-toolkit-starter/trunk/includes/atkp_endpoints.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/4d4d0176-3b7d-4de5-95ec-365873e6f13b?source=cve; https://plugins.trac.wordpress.org/changeset/3045821/affiliate-toolkit-starter/trunk/includes/atkp_endpoints.php
CVE: CVE-2023-52496
Published: 2024-03-08
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-2316
Published: 2024-03-08
Description: A vulnerability has been found in Bdtask Hospital AutoManager up to 20240227 and classified as problematic. This vulnerability affects unknown code of the file /billing/bill/edit/ of the component Update Bill Page. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-256270 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://drive.google.com/file/d/1v_Ee2FWlbpLgHYIl88COPp05EHSxUWI0/view?usp=sharing; https://vuldb.com/?ctiid.256270; https://vuldb.com/?id.256270
CVE: CVE-2024-2317
Published: 2024-03-08
Description: A vulnerability was found in Bdtask Hospital AutoManager up to 20240227 and classified as problematic. This issue affects some unknown processing of the file /prescription/prescription/delete/ of the component Prescription Page. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-256271. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.8 (LOW)
CWE: CWE-285
References: https://drive.google.com/file/d/13-Fxw8fw3VP1PvL0fYvDBVlpTDQHyCkc/view?usp=sharing; https://vuldb.com/?ctiid.256271; https://vuldb.com/?id.256271
CVE: CVE-2024-2318
Published: 2024-03-08
Description: A vulnerability was found in ZKTeco ZKBio Media 2.0.0_x64_2024-01-29-1028. It has been classified as problematic. Affected is an unknown function of the file /pro/common/download of the component Service Port 9999. The manipulation of the argument fileName with the input ../../../../zkbio_media.sql leads to path traversal: '../filedir'. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.1.3 Build 2025-05-26-1605 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-23, CWE-24, CWE-22
References: https://gist.github.com/whiteman007/a3b25a7ddf38774329d72930e0cd841a; https://vuldb.com/?ctiid.256272; https://vuldb.com/?id.256272
CVE: CVE-2024-2319
Published: 2024-03-08
Description: Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-django-markdownx; https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-django-markdownx
CVE: CVE-2023-32969
Published: 2024-03-08
Description: A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network.

We have already fixed the vulnerability in the following versions:
QuTScloud c5.1.5.2651 and later
QTS 5.1.4.2596 build 20231128 and later
QuTS hero h5.1.4.2596 build 20231128 and later

CVSS Score: 4.9 (MEDIUM)
CWE: CWE-79
References: https://www.qnap.com/en/security-advisory/qsa-24-11; https://www.qnap.com/en/security-advisory/qsa-24-11
CVE: CVE-2023-34980
Published: 2024-03-08
Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.

We have already fixed the vulnerability in the following versions:
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h4.5.4.2626 build 20231225 and later

CVSS Score: 5.9 (MEDIUM)
CWE: CWE-78
References: https://www.qnap.com/en/security-advisory/qsa-24-12; https://www.qnap.com/en/security-advisory/qsa-24-12
CVE: CVE-2023-47221
Published: 2024-03-08
Description: A path traversal vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network.

We have already fixed the vulnerability in the following version:
Photo Station 6.4.2 ( 2023/12/15 ) and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://www.qnap.com/en/security-advisory/qsa-24-13; https://www.qnap.com/en/security-advisory/qsa-24-13
CVE: CVE-2024-21899
Published: 2024-03-08
Description: An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.3.2578 build 20231110 and later
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h5.1.3.2578 build 20231110 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.qnap.com/en/security-advisory/qsa-24-09; https://www.qnap.com/en/security-advisory/qsa-24-09
CVE: CVE-2024-21900
Published: 2024-03-08
Description: An injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute commands via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.3.2578 build 20231110 and later
QuTS hero h5.1.3.2578 build 20231110 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 4.3 (MEDIUM)
CWE: CWE-74
References: https://www.qnap.com/en/security-advisory/qsa-24-09; https://www.qnap.com/en/security-advisory/qsa-24-09
CVE: CVE-2024-21901
Published: 2024-03-08
Description: A SQL injection vulnerability has been reported to affect myQNAPcloud. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network.

We have already fixed the vulnerability in the following versions:
myQNAPcloud 1.0.52 ( 2023/11/24 ) and later
QTS 4.5.4.2627 build 20231225 and later

CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89
References: https://www.qnap.com/en/security-advisory/qsa-24-09; https://www.qnap.com/en/security-advisory/qsa-24-09
CVE: CVE-2022-43855
Published: 2024-03-08
Description: IBM SPSS Statistics 26.0, 27.0.1, and 28.0 IO Module could allow a local user to create multiple files that could exhaust the file handles capacity and cause a denial of service.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-399
References: https://www.ibm.com/support/pages/node/7130881; https://exchange.xforce.ibmcloud.com/vulnerabilities/239235; https://www.ibm.com/support/pages/node/7130881
CVE: CVE-2024-2338
Published: 2024-03-08
Description: PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There is a flaw that allows complex expressions to be provided as a value. This expression is then later used as it to create the masked views leading to SQL Injection. If dynamic masking is enabled, this will lead to privilege escalation to superuser after the label is created. Users that don't own a table, especially masked users cannot exploit this vulnerability. The problem is resolved in v1.3.
CVSS Score: 8.0 (HIGH)
CWE: CWE-89, CWE-89
References: https://gitlab.com/dalibo/postgresql_anonymizer/-/commit/f55daadba3fa[PII_REDACTED]964aa8889d01a79778; https://gitlab.com/dalibo/postgresql_anonymizer/-/commit/f55daadba3fa[PII_REDACTED]964aa8889d01a79778
CVE: CVE-2024-2339
Published: 2024-03-08
Description: PostgreSQL Anonymizer v1.2 contains a vulnerability  that allows a user who owns a table to elevate to superuser. A user can define a masking function for a column and place malicious code in that function. When a privileged user applies the masking rules using the static masking or the anonymous dump method, the malicious code is executed and can grant escalated privileges to the malicious user. PostgreSQL Anonymizer v1.2 does provide a protection against this risk with the restrict_to_trusted_schemas option, but that protection is incomplete. Users that don't own a table, especially masked users cannot exploit this vulnerability. The problem is resolved in v1.3.
CVSS Score: 8.0 (HIGH)
CWE: CWE-20
References: https://gitlab.com/dalibo/postgresql_anonymizer/-/commit/e517b38e62e50871b04011598e73a7308bdae9d9; https://gitlab.com/dalibo/postgresql_anonymizer/-/commit/e517b38e62e50871b04011598e73a7308bdae9d9
CVE: CVE-2023-32264
Published: 2024-03-08
Description: CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2. The vulnerability could allow upload arbitrary code and execute it on the client's computer.



CVSS Score: 5.8 (MEDIUM)
CWE: CWE-1385
References: https://support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0799355; https://support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0799355
CVE: CVE-2024-28753
Published: 2024-03-09
Description: RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request.
CVSS Score: 6.5 (MEDIUM)
References: https://dustri.org/b/carrot-disclosure.html; https://dustri.org/b/carrot-disclosure.html
CVE: CVE-2024-28754
Published: 2024-03-09
Description: RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to cause a persistent denial of service (bricking) via a crafted request.
CVSS Score: 7.5 (HIGH)
References: https://dustri.org/b/carrot-disclosure.html; https://dustri.org/b/carrot-disclosure.html
CVE: CVE-2024-28122
Published: 2024-03-09
Description:  JWX is Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. This vulnerability allows an attacker with a trusted public key to cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. This issue has been patched in versions 1.2.29 and 2.0.21.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-400
References: https://github.com/lestrrat-go/jwx/releases/tag/v1.2.29; https://github.com/lestrrat-go/jwx/releases/tag/v2.0.21; https://github.com/lestrrat-go/jwx/security/advisories/GHSA-hj3v-m684-v259
CVE: CVE-2024-28176
Published: 2024-03-09
Description: jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens (JWT), JSON Web Signature (JWS), JSON Web Encryption (JWE), JSON Web Key (JWK), JSON Web Key Set (JWKS), and more. A vulnerability has 
 been identified in the JSON Web Encryption (JWE) decryption interfaces, specifically related to the support for decompressing plaintext after its decryption. Under certain conditions it is possible to have the user's environment consume unreasonable amount of CPU time or memory during JWE Decryption operations. This issue has been patched in versions 2.0.7 and 4.15.5.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-400
References: https://github.com/panva/jose/commit/02a65794f7873cdaf12e81e80ad076fcdc4a9314; https://github.com/panva/jose/commit/1b91d88d2f8233f3477a5f4579aa5f8057b2ee8b; https://github.com/panva/jose/security/advisories/GHSA-hhhv-q57g-882q
CVE: CVE-2024-28180
Published: 2024-03-09
Description: Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-409
References: https://github.com/go-jose/go-jose/commit/0dd4dd541c665fb292d664f77604ba694726f298; https://github.com/go-jose/go-jose/commit/add6a284ea0f844fd6628cba637be5451fe4b28a; https://github.com/go-jose/go-jose/commit/f4c051a0653d78199a053892f7619ebf96339502
CVE: CVE-2024-28184
Published: 2024-03-09
Description: WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if `url_fetcher` is configured to prevent access to files and URLs. This vulnerability has been patched in version 61.2.
CVSS Score: 7.4 (HIGH)
CWE: CWE-829
References: https://github.com/Kozea/WeasyPrint/commit/734ee8e2dc84ff3090682f3abff056d0907c8598; https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-35jj-wx47-4w8r; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLQZMOEDY72TS43HDXOBVID2VYCTWIH6/
CVE: CVE-2023-49340
Published: 2024-03-09
Description: An issue was discovered in Newland Nquire 1000 Interactive Kiosk version NQ1000-II_G_V1.00.011, allows remote attackers to escalate privileges and bypass authentication via incorrect access control in the web management portal.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-1390
References: https://github.com/n0obit4/Vulnerability_Disclosure/tree/main/CVE-2023-49340; https://github.com/n0obit4/Vulnerability_Disclosure/tree/main/CVE-2023-49340
CVE: CVE-2023-49341
Published: 2024-03-09
Description: An issue was discovered in Newland Nquire 1000 Interactive Kiosk version NQ1000-II_G_V1.00.011, allows remote attackers to obtain sensitive information via cleartext credential storage in backup.htm component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://github.com/n0obit4/Vulnerability_Disclosure/tree/main/CVE-2023-49341; https://github.com/n0obit4/Vulnerability_Disclosure/tree/main/CVE-2023-49341
CVE: CVE-2023-50015
Published: 2024-03-09
Description: An issue was discovered in Grandstream GXP14XX 1.0.8.9 and GXP16XX 1.0.7.13, allows remote attackers to escalate privileges via incorrect access control using an end-user session-identity token.
CVSS Score: 8.8 (HIGH)
CWE: CWE-250
References: https://github.com/n0obit4/Vulnerability_Disclosure/tree/main/CVE-2023-50015; https://github.com/n0obit4/Vulnerability_Disclosure/tree/main/CVE-2023-50015
CVE: CVE-2023-46426
Published: 2024-03-09
Description: Heap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) via gf_fwrite component in at utils/os_file.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://github.com/gpac/gpac/issues/2642; https://github.com/gpac/gpac/issues/2642
CVE: CVE-2023-46427
Published: 2024-03-09
Description: An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), and obtain sensitive information via null pointer deference in gf_dash_setup_period component in media_tools/dash_client.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/2641; https://github.com/gpac/gpac/issues/2641
CVE: CVE-2024-25951
Published: 2024-03-09
Description: A command injection vulnerability exists in local RACADM. A malicious authenticated user could gain control of the underlying operating system.
CVSS Score: 8.0 (HIGH)
CWE: CWE-1288, CWE-77
References: https://www.dell.com/support/kbdoc/en-us/000222591/dsa-2024-089-security-update-for-dell-idrac8-local-racadm-vulnerability; https://www.dell.com/support/kbdoc/en-us/000222591/dsa-2024-089-security-update-for-dell-idrac8-local-racadm-vulnerability
CVE: CVE-2024-1123
Published: 2024-03-09
Description: The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_frontend_event_submission() function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to overwrite the title and content of arbitrary posts. This can also be exploited by unauthenticated attackers when the allow_submission_by_anonymous_user setting is enabled.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3033882%40eventprime-event-calendar-management&new=3033882%40eventprime-event-calendar-management&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/351926d4-a9be-4fbd-bdf2-8bbff41d97ef?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3033882%40eventprime-event-calendar-management&new=3033882%40eventprime-event-calendar-management&sfp_email=&sfph_mail=
CVE: CVE-2024-1124
Published: 2024-03-09
Description: The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the ep_send_attendees_email() function in all versions up to, and including, 3.4.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to send arbitrary emails with arbitrary content from the site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3043888%40eventprime-event-calendar-management&new=3043888%40eventprime-event-calendar-management&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/346049ca-1bc5-4e02-9f38-d1f64338709d?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3043888%40eventprime-event-calendar-management&new=3043888%40eventprime-event-calendar-management&sfp_email=&sfph_mail=
CVE: CVE-2024-1125
Published: 2024-03-09
Description: The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the calendar_events_delete() function in all versions up to, and including, 3.4.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary posts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3043888%40eventprime-event-calendar-management&new=3043888%40eventprime-event-calendar-management&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/b5278afb-9db3-4b1d-bb2f-e6595f0ac6dc?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3043888%40eventprime-event-calendar-management&new=3043888%40eventprime-event-calendar-management&sfp_email=&sfph_mail=
CVE: CVE-2024-1320
Published: 2024-03-09
Description: The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'offline_status' parameter in all versions up to, and including, 3.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3043888%40eventprime-event-calendar-management&new=3043888%40eventprime-event-calendar-management&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/7e82e1c5-0ed4-4dee-9[PII_REDACTED]93eb5?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3043888%40eventprime-event-calendar-management&new=3043888%40eventprime-event-calendar-management&sfp_email=&sfph_mail=
CVE: CVE-2024-1767
Published: 2024-03-09
Description: The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all versions up to, and including, 2.0.26 due to insufficient input sanitization and output escaping on user supplied attributes like 'className' and 'radius'. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=219324%40blocksy&new=219324%40blocksy&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/fdeab668-9094-485f-aa01-13ba5c10ea89?source=cve; https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=219324%40blocksy&new=219324%40blocksy&sfp_email=&sfph_mail=
CVE: CVE-2024-28089
Published: 2024-03-09
Description: Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity (who has access to the router admin panel) to conduct a DOM-based stored XSS attack that can fetch remote resources. The payload is executed at index.html#advanced_location (aka the Device Location page). This can cause a denial of service or lead to information disclosure.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-79
References: https://github.com/actuator/cve/blob/main/Hitron/CVE-2024-28089; https://github.com/actuator/cve/blob/main/Hitron/Hitron_DOM_XSS_POC.gif; https://github.com/actuator/cve/blob/main/Hitron/Hitron_DOM_XSS_POC_DOS_ALT.gif
CVE: CVE-2024-25501
Published: 2024-03-09
Description: An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://gist.github.com/Drun1baby/8270239bed2952dbd99cc8d4262728e8; https://gist.github.com/Drun1baby/8270239bed2952dbd99cc8d4262728e8