deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-23145
Published: 2023-01-20
Description: GPAC version 2.2-rev0-gab012bbfb-master was discovered to contain a memory leak in lsr_read_rare_full function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-401, CWE-401
References: https://github.com/gpac/gpac/commit/4ade98128cbc41d5115b97a41ca2e59529c8dd5f; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/commit/4ade98128cbc41d5115b97a41ca2e59529c8dd5f
CVE: CVE-2023-23490
Published: 2023-01-20
Description: The Survey Maker WordPress Plugin, version < 3.1.2, is affected by an authenticated SQL injection vulnerability in the 'surveys_ids' parameter of its 'ays_surveys_export_json' action.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.tenable.com/security/research/tra-2023-2; https://www.tenable.com/security/research/tra-2023-2
CVE: CVE-2023-23491
Published: 2023-01-20
Description: The Quick Event Manager WordPress Plugin, version < 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' parameter of its 'qem_ajax_calendar' action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.tenable.com/security/research/tra-2023-3; https://www.tenable.com/security/research/tra-2023-3
CVE: CVE-2023-23492
Published: 2023-01-20
Description: The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' parameter of its 'lwp_forgot_password' action.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.tenable.com/security/research/tra-2023-3; https://www.tenable.com/security/research/tra-2023-3
CVE: CVE-2023-24021
Published: 2023-01-20
Description: Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-170
References: https://github.com/SpiderLabs/ModSecurity/pull/2857; https://github.com/SpiderLabs/ModSecurity/pull/2857/commits/4324f0ac59f8225aa44bc5034df60dbeccd1d334; https://github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.7
CVE: CVE-2022-1109
Published: 2023-01-20
Description: An incorrect default permissions vulnerability in Lenovo Leyun cloud music application could allow denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://iknow.lenovo.com.cn/detail/dc_204380.html; https://iknow.lenovo.com.cn/detail/dc_204380.html
CVE: CVE-2022-3918
Published: 2023-01-20
Description: A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF ( ) injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF sequences into a URLRequest header value. When that request is sent via URLSession to an HTTP server, the server may interpret the content after the CRLF as extra headers, or even a second request. For example, consider a URLRequest to http://example.com/ with the GET method. Suppose we set the URLRequest header "Foo" to the value "Bar Extra-Header: Added GET /other HTTP/1.1". When this request is sent, it will appear to the server as two requests: GET / HTTP/1.1 Foo: Bar Extra-Header: Added GET /other HTTP/1.1 In this manner, the client is able to inject extra headers and craft an entirely new request to a separate path, despite only making one API call in URLSession. If a developer has total control over the request and its headers, this vulnerability may not pose a threat. However, this vulnerability escalates if un-sanitized user input is placed in header values. If so, a malicious user could inject new headers or requests to an intermediary or backend server. Developers should be especially careful to sanitize user input in this case, or upgrade their version of swift-corelibs-foundation to include the patch below.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://github.com/apple/swift-corelibs-foundation/security/advisories/GHSA-4pp3-mpf2-rj63; https://github.com/apple/swift-corelibs-foundation/security/advisories/GHSA-4pp3-mpf2-rj63
CVE: CVE-2020-25502
Published: 2023-01-20
Description: Cybereason EDR version 19.1.282 and above, 19.2.182 and above, 20.1.343 and above, and 20.2.X and above has a DLL hijacking vulnerability, which could allow a local attacker to execute code with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: http://cybereason.com; http://endpoint.com; https://www.cybereason.com/cybereason-vulnerability-disclosure
CVE: CVE-2021-33641
Published: 2023-01-20
Description: When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free).
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://gitee.com/src-openeuler/byacc/commit/50225f48c6b53e9d7c936681a06682404cb8ec4d; https://gitee.com/src-openeuler/byacc/commit/50225f48c6b53e9d7c936681a06682404cb8ec4d
CVE: CVE-2021-33642
Published: 2023-01-20
Description: When a file is processed, an infinite loop occurs in next_inline() of the more_curly() function.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://gitee.com/src-openeuler/byacc/commit/50225f48c6b53e9d7c936681a06682404cb8ec4d; https://gitee.com/src-openeuler/byacc/commit/50225f48c6b53e9d7c936681a06682404cb8ec4d
CVE: CVE-2023-23607
Published: 2023-01-20
Description: erohtar/Dasherr is a dashboard for self-hosted services. In affected versions unrestricted file upload allows any unauthenticated user to execute arbitrary code on the server. The file /www/include/filesave.php allows for any file to uploaded to anywhere. If an attacker uploads a php file they can execute code on the server. This issue has been addressed in version 1.05.00. Users are advised to upgrade. There are no known workarounds for this issue.

CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/erohtar/Dasherr/commit/445325c7cf1148a8cd38af3a90789c6cbf6c5112; https://github.com/erohtar/Dasherr/security/advisories/GHSA-6rgc-2x44-7phq; https://github.com/erohtar/Dasherr/commit/445325c7cf1148a8cd38af3a90789c6cbf6c5112
CVE: CVE-2023-24025
Published: 2023-01-20
Description: CRYSTALS-DILITHIUM (in Post-Quantum Cryptography Selected Algorithms 2022) in PQClean d03da30 may allow universal forgeries of digital signatures via a template side-channel attack because of intermediate data leakage of one vector.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347, CWE-347
References: https://csrc.nist.gov/Projects/post-quantum-cryptography/selected-algorithms-2022; https://eprint.iacr.org/2023/050; https://github.com/PQClean/PQClean/tree/d03da3053491e767ef842deaef43fc5bdb6bc911
CVE: CVE-2023-0052
Published: 2023-01-20
Description: SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without credentials. As Telnet and file transfer protocol (FTP) are the only protocols available for device management, an unauthorized user could access the system and modify the device configuration, which could result in the unauthorized user executing unrestricted malicious commands.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-05; https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-05
CVE: CVE-2023-22726
Published: 2023-01-20
Description: act is a project which allows for local running of github actions. The artifact server that stores artifacts from Github Action runs does not sanitize path inputs. This allows an attacker to download and overwrite arbitrary files on the host from a Github Action. This issue may lead to privilege escalation. The /upload endpoint is vulnerable to path traversal as filepath is user controlled, and ultimately flows into os.Mkdir and os.Open. The /artifact endpoint is vulnerable to path traversal as the path is variable is user controlled, and the specified file is ultimately returned by the server. This has been addressed in version 0.2.40. Users are advised to upgrade. Users unable to upgrade may, during implementation of Open and OpenAtEnd for FS, ensure to use ValidPath() to check against path traversal or clean the user-provided paths manually.
CVSS Score: 8.0 (HIGH)
CWE: CWE-434, CWE-22
References: https://github.com/nektos/act/blob/master/pkg/artifacts/server.go#L65; https://github.com/nektos/act/blob/v0.2.35/pkg/artifacts/server.go#L245; https://github.com/nektos/act/blob/v0.2.35/pkg/artifacts/server.go#LL103C2-L103C2
CVE: CVE-2023-24026
Published: 2023-01-20
Description: In MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph preview payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/MISP/MISP/commit/a46f794a136001101cbec84fccf3cc824e983493; https://github.com/MISP/MISP/commit/a46f794a136001101cbec84fccf3cc824e983493
CVE: CVE-2023-24027
Published: 2023-01-20
Description: In MISP 2.4.167, app/webroot/js/action_table.js allows XSS via a network history name.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/MISP/MISP/commit/72c5424034c378583d128fc1e769aae33fb1c8b9; https://github.com/MISP/MISP/commit/72c5424034c378583d128fc1e769aae33fb1c8b9
CVE: CVE-2023-24028
Published: 2023-01-20
Description: In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://github.com/MISP/MISP/commit/93bf15d3bd703a32ebfe86cb6c1c9b735cf23e30; https://github.com/MISP/MISP/commit/93bf15d3bd703a32ebfe86cb6c1c9b735cf23e30
CVE: CVE-2023-22742
Published: 2023-01-20
Description: libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. Prior versions of libgit2 require the caller to set the `certificate_check` field of libgit2's `git_remote_callbacks` structure - if a certificate check callback is not set, libgit2 does not perform any certificate checking. This means that by default - without configuring a certificate check callback, clients will not perform validation on the server SSH keys and may be subject to a man-in-the-middle attack. Users are encouraged to upgrade to v1.4.5 or v1.5.1. Users unable to upgrade should ensure that all relevant certificates are manually checked.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-347
References: http://www.openwall.com/lists/oss-security/2023/11/06/5; https://github.com/libgit2/libgit2/commit/42e5db98b963ae503229c63e44e06e439df50e56; https://github.com/libgit2/libgit2/commit/cd6f679af401eda1f172402006ef8265f8bd58ea
CVE: CVE-2020-36655
Published: 2023-01-21
Description: Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field. The attacker can embed arbitrary PHP code into the model file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://github.com/yiisoft/yii2-gii/issues/433; https://lab.wallarm.com/yii2-gii-remote-code-execution/; https://github.com/yiisoft/yii2-gii/issues/433
CVE: CVE-2023-24038
Published: 2023-01-21
Description: The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic backtracking for HTML content with certain style attributes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/clintongormley/perl-html-stripscripts/issues/3; https://lists.debian.org/debian-lts-announce/2023/01/msg00036.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MYD5PFRUUB4VVY52I5KA3RQ7SQOD7YM/
CVE: CVE-2023-24039
Published: 2023-01-21
Description: A stack-based buffer overflow in ParseColors in libXm in Common Desktop Environment 1.6 can be exploited by local low-privileged users via the dtprintinfo setuid binary to escalate their privileges to root on Solaris 10 systems. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://seclists.org/fulldisclosure/2023/Jan/24; https://github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintlibXmas.c; https://github.com/hnsecurity/vulns/blob/main/HNS-2022-01-dtprintinfo.txt
CVE: CVE-2023-24040
Published: 2023-01-21
Description: dtprintinfo in Common Desktop Environment 1.6 has a bug in the parser of lpstat (an invoked external command) during listing of the names of available printers. This allows low-privileged local users to inject arbitrary printer names via the $HOME/.printers file. This injection allows those users to manipulate the control flow and disclose memory contents on Solaris 10 systems. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 7.1 (HIGH)
CWE: CWE-74
References: http://seclists.org/fulldisclosure/2023/Jan/24; https://github.com/hnsecurity/vulns/blob/main/HNS-2022-01-dtprintinfo.txt; https://security.humanativaspa.it/nothing-new-under-the-sun/
CVE: CVE-2023-24042
Published: 2023-01-21
Description: A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context->FileName.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362, CWE-362
References: https://github.com/hfiref0x/LightFTP/issues/25; https://github.com/hfiref0x/LightFTP/issues/25
CVE: CVE-2023-22884
Published: 2023-01-21
Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/apache/airflow/pull/28811; https://lists.apache.org/thread/0l0j3nt0t7fzrcjl2ch0jgj6c58kxs5h; https://github.com/apache/airflow/pull/28811
CVE: CVE-2023-0433
Published: 2023-01-21
Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: http://seclists.org/fulldisclosure/2023/Mar/17; http://seclists.org/fulldisclosure/2023/Mar/18; http://seclists.org/fulldisclosure/2023/Mar/21
CVE: CVE-2023-22617
Published: 2023-01-21
Description: A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode. This is fixed in 4.8.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674, CWE-674
References: http://www.openwall.com/lists/oss-security/2023/01/20/1; https://docs.powerdns.com/recursor/changelog/4.8.html#change-4.8.1; https://docs.powerdns.com/recursor/security-advisories/
CVE: CVE-2023-0434
Published: 2023-01-22
Description: Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://github.com/pyload/pyload/commit/a2b1eb1028f45ac58dea5f58593c1d3db2b4a104; https://huntr.dev/bounties/7d9332d8-6997-483b-9fb9-bcf2ae01dad4; https://github.com/pyload/pyload/commit/a2b1eb1028f45ac58dea5f58593c1d3db2b4a104
CVE: CVE-2023-24044
Published: 2023-01-22
Description: A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows attackers to redirect users to malicious websites via a Host request header. NOTE: the vendor's position is "the ability to use arbitrary domain names to access the panel is an intended feature."
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://gist.github.com/TJetnipat/02b3854543b7ec95d54a8de811f2e8ae; https://medium.com/%40jetnipat.tho/cve-2023-24044-10e48ab940d8; https://support.plesk.com/hc/en-us/articles/[PII_REDACTED]322-Vulnerability-CVE-2023-24044
CVE: CVE-2023-24055
Published: 2023-01-22
Description: KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312
References: https://securityboulevard.com/2023/01/keepass-password-manager-leak-cve-richixbw/; https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/; https://sourceforge.net/p/keepass/feature-requests/2773/
CVE: CVE-2023-24056
Published: 2023-01-22
Description: In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://gitea.treehouse.systems/ariadne/pkgconf/commit/628b2b2bafa5d3a2017193ddf375093e70666059; https://github.com/pkgconf/pkgconf/tags; https://nullprogram.com/blog/2023/01/18/
CVE: CVE-2023-24058
Published: 2023-01-22
Description: Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId value to reservation_save.php. NOTE: 2.5.5 is a version from 2014; the latest version of Booked Scheduler is not affected. However, LabArchives Scheduler (Sep 6, 2022 Feature Release) is affected.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/LibreBooking/app/blob/0a6cb1a9eb84835553c8caf93db2791f8655140f/Pages/Ajax/ReservationSavePage.php#L234-L237; https://github.com/LibreBooking/app/blob/0a6cb1a9eb84835553c8caf93db2791f8655140f/Web/ajax/reservation_save.php; https://github.com/LibreBooking/app/tags?after=2.7.1
CVE: CVE-2023-24059
Published: 2023-01-22
Description: Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January 2023.
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://support.rockstargames.com/community/200063373/[PII_REDACTED]147; https://support.rockstargames.com/community/200063373/[PII_REDACTED]819; https://twitter.com/TezFunz2/status/[PII_REDACTED]15964166
CVE: CVE-2023-0435
Published: 2023-01-22
Description: Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1125
References: https://github.com/pyload/pyload/commit/431ea6f0371d748df66b344a05ca1a8e0310cff3; https://huntr.dev/bounties/a3e32ad5-caee-4f43-b10a-4a876d4e3f1d; https://github.com/pyload/pyload/commit/431ea6f0371d748df66b344a05ca1a8e0310cff3
CVE: CVE-2022-48281
Published: 2023-01-23
Description: processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://gitlab.com/libtiff/libtiff/-/commit/d1b6b9c1b3cae2d9e37754506c1ad8f4f7b646b5; https://gitlab.com/libtiff/libtiff/-/issues/488; https://lists.debian.org/debian-lts-announce/2023/01/msg00037.html
CVE: CVE-2022-46959
Published: 2023-01-23
Description: An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/go-sonic/sonic/issues/56; https://github.com/go-sonic/sonic/issues/56
CVE: CVE-2023-23314
Published: 2023-01-23
Description: An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted .ssh file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/helloxz/zdir/issues/90; https://github.com/helloxz/zdir/issues/90
CVE: CVE-2023-24070
Published: 2023-01-23
Description: app/View/AuthKeys/authkey_display.ctp in MISP through 2.4.167 has an XSS in authkey add via a Referer field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/f7238fe5e71ac065daa43c8607d02f8ac682f18f; https://zigrin.com/advisories/misp-xss-in-add-action-of-the-authkeys-controller/; https://github.com/MISP/MISP/commit/f7238fe5e71ac065daa43c8607d02f8ac682f18f
CVE: CVE-2023-24068
Published: 2023-01-23
Description: Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to modify conversation attachments within the attachments.noindex directory. Client mechanisms fail to validate modifications of existing cached files, resulting in an attacker's ability to insert malicious code into pre-existing attachments or replace them completely. A threat actor can forward the existing attachment in the corresponding conversation to external groups, and the name and size of the file will not change, allowing the malware to masquerade as another file. NOTE: the vendor disputes the relevance of this finding because the product is not intended to protect against adversaries with this degree of local access.
CVSS Score: 7.8 (HIGH)
References: https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069/; https://signal.org/download/linux; https://signal.org/download/macos
CVE: CVE-2023-24069
Published: 2023-01-23
Description: Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to obtain potentially sensitive attachments sent in messages from the attachments.noindex directory. Cached attachments are not effectively cleared. In some cases, even after a self-initiated file deletion, an attacker can still recover the file if it was previously replied to in a conversation. (Local filesystem access is needed by the attacker.) NOTE: the vendor disputes the relevance of this finding because the product is not intended to protect against adversaries with this degree of local access.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069/; https://signal.org/download/linux; https://signal.org/download/macos
CVE: CVE-2023-0438
Published: 2023-01-23
Description: Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/modoboa/modoboa/commit/38d778cc71e370216e067d054ce0169ad83078c8; https://huntr.dev/bounties/07a5b61b-306d-47c4-8ff0-06c540c7dfb3; https://github.com/modoboa/modoboa/commit/38d778cc71e370216e067d054ce0169ad83078c8
CVE: CVE-2023-0440
Published: 2023-01-23
Description: Observable Discrepancy in GitHub repository healthchecks/healthchecks prior to v2.6.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://github.com/healthchecks/healthchecks/commit/359edbd2709e27b60687061a32e19322bc971c1f; https://huntr.dev/bounties/208a096f-7986-4eed-8629-b7285348a686; https://github.com/healthchecks/healthchecks/commit/359edbd2709e27b60687061a32e19322bc971c1f
CVE: CVE-2021-24837
Published: 2023-01-23
Description: The Passster WordPress plugin before 3.5.5.8 does not escape the area parameter of its shortcode, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/5fea3ac3-d599-41f3-8f76-08f0d3552af1; https://wpscan.com/vulnerability/5fea3ac3-d599-41f3-8f76-08f0d3552af1
CVE: CVE-2021-24881
Published: 2023-01-23
Description: The Passster WordPress plugin before 3.5.5.9 does not properly check for password, as well as that the post to be viewed is public, allowing unauthenticated users to bypass the protection offered by the plugin, and access arbitrary posts (such as private) content, by sending a specifically crafted request.
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/0967303d-ea49-4993-84eb-a7ec97240071; https://wpscan.com/vulnerability/0967303d-ea49-4993-84eb-a7ec97240071
CVE: CVE-2021-43444
Published: 2023-01-23
Description: ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. Signed document download URLs can be forged due to a weak default URL signing key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-287
References: https://github.com/ONLYOFFICE/server; https://labs.nettitude.com/blog/exploiting-onlyoffice-web-sockets-for-unauthenticated-remote-code-execution/; https://www.onlyoffice.com/