deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-48364
Published: 2023-03-06
Description: The undo_mark_statuses_as_sensitive method in app/services/approve_appeal_service.rb in Mastodon 3.5.x before 3.5.3 does not use the server's representative account, resulting in moderator identity disclosure when a moderator approves the appeal of a user whose status update was marked as sensitive.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: https://github.com/40826d/advisories/blob/master/CVE-2022-48364/README.md; https://github.com/mastodon/mastodon/blob/main/CHANGELOG.md#353---2022-05-26; https://github.com/mastodon/mastodon/compare/v3.5.2...v3.5.3
CVE: CVE-2022-4265
Published: 2023-03-06
Description: The Replyable WordPress plugin before 2.2.10 does not validate the class name submitted by the request when instantiating an object in the prompt_dismiss_notice action and also lacks CSRF check in the related action. This could allow any authenticated users, such as subscriber to perform Object Injection attacks. The attack could also be done via a CSRF vector against any authenticated user
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/095cba08-7edd-41fb-9776-da151c0885dd; https://wpscan.com/vulnerability/095cba08-7edd-41fb-9776-da151c0885dd
CVE: CVE-2022-4328
Published: 2023-03-06
Description: The WooCommerce Checkout Field Manager WordPress plugin before 18.0 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/4dc72cd2-81d7-4a66-86bd-c9cfaf690eed; https://wpscan.com/vulnerability/4dc72cd2-81d7-4a66-86bd-c9cfaf690eed
CVE: CVE-2023-0063
Published: 2023-03-06
Description: The WordPress Shortcodes WordPress plugin through 1.6.36 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/2262f2fc-8122-46ed-8e67-8c34ee35fc97; https://wpscan.com/vulnerability/2262f2fc-8122-46ed-8e67-8c34ee35fc97
CVE: CVE-2023-0064
Published: 2023-03-06
Description: The eVision Responsive Column Layout Shortcodes WordPress plugin through 2.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/97be5795-b5b8-40c7-80bf-7da95da7705a; https://wpscan.com/vulnerability/97be5795-b5b8-40c7-80bf-7da95da7705a
CVE: CVE-2023-0065
Published: 2023-03-06
Description: The i2 Pros & Cons WordPress plugin through 1.3.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/42c3ac68-4bbc-4d47-ad53-2c9ed48cd677; https://wpscan.com/vulnerability/42c3ac68-4bbc-4d47-ad53-2c9ed48cd677
CVE: CVE-2023-0068
Published: 2023-03-06
Description: The Product GTIN (EAN, UPC, ISBN) for WooCommerce WordPress plugin through 1.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4abd1454-380c-4c23-8474-d7da4b2f3b8e; https://wpscan.com/vulnerability/4abd1454-380c-4c23-8474-d7da4b2f3b8e
CVE: CVE-2023-0069
Published: 2023-03-06
Description: The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/d9f00bcb-3746-4a9d-a222-4d532e84615f; https://wpscan.com/vulnerability/d9f00bcb-3746-4a9d-a222-4d532e84615f
CVE: CVE-2023-0076
Published: 2023-03-06
Description: The Download Attachments WordPress plugin before 1.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/a0a44f8a-877c-40df-a3ba-b9b806ffb772/; https://wpscan.com/vulnerability/a0a44f8a-877c-40df-a3ba-b9b806ffb772/
CVE: CVE-2023-0078
Published: 2023-03-06
Description: The Resume Builder WordPress plugin through 3.1.1 does not sanitize and escape some parameters related to Resume, which could allow users with a role as low as subscriber to perform Stored XSS attacks against higher privilege users
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/e667854f-56f8-4dbe-9573-6652a8aacc2c; https://wpscan.com/vulnerability/e667854f-56f8-4dbe-9573-6652a8aacc2c
CVE: CVE-2023-0165
Published: 2023-03-06
Description: The Cost Calculator WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f00b82f7-d8ad-4f6b-b791-81cc16b6336b; https://wpscan.com/vulnerability/f00b82f7-d8ad-4f6b-b791-81cc16b6336b
CVE: CVE-2023-0212
Published: 2023-03-06
Description: The Advanced Recent Posts WordPress plugin through 0.6.14 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/5fdd44aa-7f3f-423a-9fb0-dc9dc36f33a3; https://wpscan.com/vulnerability/5fdd44aa-7f3f-423a-9fb0-dc9dc36f33a3
CVE: CVE-2023-0328
Published: 2023-03-06
Description: The WPCode WordPress plugin before 2.0.7 does not have adequate privilege checks in place for several AJAX actions, only checking the nonce. This may lead to allowing any authenticated user who can edit posts to call the endpoints related to WPCode Library authentication (such as update and delete the auth key).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://wpscan.com/vulnerability/3c4318a9-a3c5-409b-a52e-edd8583c3c43; https://wpscan.com/vulnerability/3c4318a9-a3c5-409b-a52e-edd8583c3c43
CVE: CVE-2023-0377
Published: 2023-03-06
Description: The Scriptless Social Sharing WordPress plugin before 3.2.2 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/5b1aacd1-3f75-4a6f-8146-cbb98a713724; https://wpscan.com/vulnerability/5b1aacd1-3f75-4a6f-8146-cbb98a713724
CVE: CVE-2015-10094
Published: 2023-03-06
Description: A vulnerability was found in Fastly Plugin up to 0.97 on WordPress. It has been rated as problematic. Affected by this issue is the function post of the file lib/api.php. The manipulation of the argument url leads to cross site scripting. The attack may be launched remotely. Upgrading to version 0.98 is able to address this issue. The patch is identified as d7fe42538f4d4af500e3af9678b6b06fba731656. It is recommended to upgrade the affected component. VDB-222326 is the identifier assigned to this vulnerability.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://github.com/wp-plugins/fastly/commit/d7fe42538f4d4af500e3af9678b6b06fba731656; https://github.com/wp-plugins/fastly/releases/tag/0.98; https://vuldb.com/?ctiid.222326
CVE: CVE-2023-0979
Published: 2023-03-06
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MedData MedDataPACS allows SQL Injection.This issue affects MedDataPACS : before 2023-03-03.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.usom.gov.tr/bildirim/tr-23-0129; https://www.usom.gov.tr/bildirim/tr-23-0129
CVE: CVE-2022-4930
Published: 2023-03-06
Description: A vulnerability classified as problematic was found in nuxsmin sysPass up to 3.2.4. Affected by this vulnerability is an unknown functionality of the component URL Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.2.5 is able to address this issue. The patch is named 4da4d031732ecca67519851fd0c34597dbb8ee55. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-222319.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/nuxsmin/sysPass/commit/4da4d031732ecca67519851fd0c34597dbb8ee55; https://github.com/nuxsmin/sysPass/pull/1832; https://github.com/nuxsmin/sysPass/releases/tag/3.2.5
CVE: CVE-2023-1197
Published: 2023-03-06
Description: Cross-site Scripting (XSS) - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/uvdesk/community-skeleton/commit/6fae9442361c8a216611d3622bec26249a8c48a0; https://huntr.dev/bounties/97d226ea-2cd8-4f4d-9360-aa46c37fdd26; https://github.com/uvdesk/community-skeleton/commit/6fae9442361c8a216611d3622bec26249a8c48a0
CVE: CVE-2023-1200
Published: 2023-03-06
Description: A vulnerability was found in ehuacui bbs. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vulnerability is VDB-222388.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://gitee.com/ehuacui/ehuacui-bbs/issues/I6GDCB; https://vuldb.com/?ctiid.222388; https://vuldb.com/?id.222388
CVE: CVE-2023-24789
Published: 2023-03-06
Description: jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/jeecgboot/jeecg-boot/issues/4511; https://github.com/jeecgboot/jeecg-boot/issues/4511
CVE: CVE-2023-25304
Published: 2023-03-06
Description: An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://github.com/PrismLauncher/PrismLauncher/security/advisories/GHSA-wxgx-8v36-mj2m; https://github.com/PrismLauncher/PrismLauncher/security/advisories/GHSA-wxgx-8v36-mj2m
CVE: CVE-2023-27474
Published: 2023-03-06
Description: Directus is a real-time API and App dashboard for managing SQL database content. Instances relying on an allow-listed reset URL are vulnerable to an HTML injection attack through the use of query parameters in the reset URL. An attacker could exploit this to email users urls to the servers domain but which may contain malicious code. The problem has been resolved and released under version 9.23.0. People relying on a custom password reset URL should upgrade to 9.23.0 or later, or remove the custom reset url from the configured allow list. Users are advised to upgrade. Users unable to upgrade may disable the custom reset URL allow list as a workaround.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: https://github.com/directus/directus/issues/17119; https://github.com/directus/directus/pull/17120; https://github.com/directus/directus/security/advisories/GHSA-4hmq-ggrm-qfc6
CVE: CVE-2023-22481
Published: 2023-03-06
Description: FreshRSS is a self-hosted RSS feed aggregator. When using the greader API, the provided password is logged in clear in `users/_/log_api.txt` in the case where the authentication fails. The issues occurs in `authorizationToUser()` in `greader.php`. If there is an issue with the request or the credentials, `unauthorized()` or `badRequest()` is called. Both these functions are printing the return of `debugInfo()` in the logs.  `debugInfo()` will return the content of the request. By default, this will be saved in `users/_/log_api.txt` and if the const `COPY_LOG_TO_SYSLOG` is true, in syslogs as well. Exploiting this issue requires having access to logs produced by FreshRSS. Using the information from the logs, a malicious individual could get users' API keys (would be displayed if the users fills in a bad username) or passwords.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-532
References: https://github.com/FreshRSS/FreshRSS/commit/075cf4c800063e3cc65c3d41a9c23222e8ebb554; https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-8vvv-jxg6-8578; https://github.com/FreshRSS/FreshRSS/commit/075cf4c800063e3cc65c3d41a9c23222e8ebb554
CVE: CVE-2023-25169
Published: 2023-03-06
Description: discourse-yearly-review is a discourse plugin which publishes an automated Year in Review topic. In affected versions a user present in a yearly review topic that is then anonymised will still have some data linked to its original account. This issue has been patched in commit `b3ab33bbf7` which is included in the latest version of the Discourse Yearly Review plugin. Users are advised to upgrade. Users unable to upgrade may disable the `yearly_review_enabled` setting to fully mitigate the issue. Also, it's possible to edit the anonymised user's old data in the yearly review topics manually.
CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: https://github.com/discourse/discourse-yearly-review/commit/b3ab33bbf7130fca54764cf0336395a8a1eeaf3c; https://github.com/discourse/discourse-yearly-review/security/advisories/GHSA-x2r8-v85c-x3x7; https://github.com/discourse/discourse-yearly-review/commit/b3ab33bbf7130fca54764cf0336395a8a1eeaf3c
CVE: CVE-2023-23939
Published: 2023-03-06
Description: Azure/setup-kubectl is a GitHub Action for installing Kubectl. This vulnerability only impacts versions before version 3. An insecure temporary creation of a file allows other actors on the Actions runner to replace the Kubectl binary created by this action because it is world writable. This Kubectl tool installer runs `fs.chmodSync(kubectlPath, 777)` to set permissions on the Kubectl binary, however, this allows any local user to replace the Kubectl binary. This allows privilege escalation to the user that can also run kubectl, most likely root. This attack is only possible if an attacker somehow breached the GitHub actions runner or if a user is utilizing an Action that maliciously executes this attack. This has been fixed and released in all versions `v3` and later. 775 permissions are used instead. Users are advised to upgrade. There are no known workarounds for this issue.

CVSS Score: 3.9 (LOW)
CWE: CWE-732
References: https://github.com/Azure/setup-kubectl/commit/d449d75495d2b9d1463555bb00ca3dca77a42ab6; https://github.com/Azure/setup-kubectl/security/advisories/GHSA-p756-rfxh-x63h; https://github.com/Azure/setup-kubectl/commit/d449d75495d2b9d1463555bb00ca3dca77a42ab6
CVE: CVE-2023-26054
Published: 2023-03-06
Description: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In affected versions when the user sends a build request that contains a Git URL that contains credentials and the build creates a provenance attestation describing that build, these credentials could be visible from the provenance attestation. Git URL can be passed in two ways: 1) Invoking build directly from a URL with credentials. 2) If the client sends additional version control system (VCS) info hint parameters on builds from a local source. Usually, that would mean reading the origin URL from `.git/config` file. When a build is performed under specific conditions where credentials were passed to BuildKit they may be visible to everyone who has access to provenance attestation. Provenance attestations and VCS info hints were added in version v0.11.0. Previous versions are not vulnerable. In v0.10, when building directly from Git URL, the same URL could be visible in `BuildInfo` structure that is a predecessor of Provenance attestations. Previous versions are not vulnerable. This bug has been fixed in v0.11.4. Users are advised to upgrade. Users unable to upgrade may disable VCS info hints by setting `BUILDX_GIT_INFO=0`. `buildctl` does not set VCS hints based on `.git` directory, and values would need to be passed manually with `--opt`.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/moby/buildkit/commit/75123c696506bdbca1ed69906479e200f1b62604; https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/
CVE: CVE-2023-27472
Published: 2023-03-06
Description:  quickentity-editor-next is an open source, system local, video game asset editor. In affected versions HTML tags in entity names are not sanitised (XSS vulnerability). Allows arbitrary code execution within the browser sandbox, among other things, simply from loading a file containing a script tag in any entity name. This issue has been patched in version 1.28.1 of the application. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://github.com/atampy25/quickentity-editor-next/commit/5303b45a20a6e4e9318729b8dd7bbf09b37b369d; https://github.com/atampy25/quickentity-editor-next/security/advisories/GHSA-22gc-rq5x-fxpw; https://github.com/atampy25/quickentity-editor-next/commit/5303b45a20a6e4e9318729b8dd7bbf09b37b369d
CVE: CVE-2021-35377
Published: 2023-03-06
Description: Cross Site Scripting vulnerability found in VICIdial v2.14-610c and v.2.10-415c allows attackers execute arbitrary code via the /agc/vicidial.php, agc/vicidial-greay.php, and /vicidial/KHOMP_admin.php parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://vicidial.com; https://www.vicidial.org/VICIDIALforum/viewtopic.php?f=2&t=41634; http://vicidial.com
CVE: CVE-2023-24763
Published: 2023-03-06
Description: In the module "Xen Forum" (xenforum) for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://addons.prestashop.com/en/blog-forum-new/19299-xen-forum.html; https://friends-of-presta.github.io/security-advisories/modules/2023/03/06/xenforum.html; https://addons.prestashop.com/en/blog-forum-new/19299-xen-forum.html
CVE: CVE-2023-24776
Published: 2023-03-06
Description: Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \controller\Addon.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/funadmin/funadmin/issues/7; https://github.com/funadmin/funadmin/issues/7
CVE: CVE-2023-26600
Published: 2023-03-06
Description: ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://manageengine.com; https://www.manageengine.com/products/service-desk/CVE-2023-26600.html; https://manageengine.com
CVE: CVE-2015-10095
Published: 2023-03-06
Description: A vulnerability classified as problematic has been found in woo-popup Plugin up to 1.2.2 on WordPress. This affects an unknown part of the file admin/class-woo-popup-admin.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.3.0 is able to address this issue. The patch is named 7c76ac78f3e16015991b612ff4fa616af4ce9292. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-222327.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/wp-plugins/woo-popup/commit/7c76ac78f3e16015991b612ff4fa616af4ce9292; https://github.com/wp-plugins/woo-popup/releases/tag/1.3.0; https://vuldb.com/?ctiid.222327
CVE: CVE-2021-36392
Published: 2023-03-06
Description: In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://moodle.org/mod/forum/discuss.php?d=424797; https://moodle.org/mod/forum/discuss.php?d=424797
CVE: CVE-2021-36393
Published: 2023-03-06
Description: In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://moodle.org/mod/forum/discuss.php?d=424798; https://moodle.org/mod/forum/discuss.php?d=424798
CVE: CVE-2021-36394
Published: 2023-03-06
Description: In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384, CWE-94
References: https://moodle.org/mod/forum/discuss.php?d=424799; https://moodle.org/mod/forum/discuss.php?d=424799
CVE: CVE-2021-36395
Published: 2023-03-06
Description: In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-674, CWE-674
References: https://moodle.org/mod/forum/discuss.php?d=424801; https://moodle.org/mod/forum/discuss.php?d=424801
CVE: CVE-2021-36396
Published: 2023-03-06
Description: In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918, CWE-918
References: https://moodle.org/mod/forum/discuss.php?d=424802; https://moodle.org/mod/forum/discuss.php?d=424802
CVE: CVE-2023-0093
Published: 2023-03-06
Description: Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third party library webbrowser. An outdated library, webbrowser, used by the ASA client was found to be vulnerable to command injection. To exploit this issue, an attacker would need to phish the user to enter an attacker controlled server URL during enrollment.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://trust.okta.com/security-advisories/okta-advanced-server-access-client-cve-2023-0093/; https://trust.okta.com/security-advisories/okta-advanced-server-access-client-cve-2023-0093/
CVE: CVE-2023-1161
Published: 2023-03-06
Description: ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-120
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1161.json; https://gitlab.com/wireshark/wireshark/-/issues/18839; https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html
CVE: CVE-2023-24733
Published: 2023-03-06
Description: PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /admin/convert/export_z3950_new.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/AetherBlack/CVE/tree/main/PMB; https://github.com/AetherBlack/CVE/tree/main/PMB
CVE: CVE-2023-24734
Published: 2023-03-06
Description: An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://github.com/AetherBlack/CVE/tree/main/PMB; https://github.com/AetherBlack/CVE/tree/main/PMB