deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-24731
Published: 2023-03-15
Description: Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24731/CVE-2023-24731.txt; https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html; https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip
CVE: CVE-2023-24732
Published: 2023-03-15
Description: Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24732/CVE-2023-24732.txt; https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html; https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip
CVE: CVE-2023-26084
Published: 2023-03-15
Description: The armv8_dec_aes_gcm_full() API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading to a man-in-the-middle attack. This occurs because of an improperly initialized variable.
CVSS Score: 3.7 (LOW)
CWE: CWE-665, CWE-665
References: https://github.com/ARM-software/AArch64cryptolib/security/advisories/GHSA-47c6-7x5x-r74g; https://github.com/ARM-software/AArch64cryptolib/security/advisories/GHSA-47c6-7x5x-r74g
CVE: CVE-2022-34148
Published: 2023-03-15
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JetBackup JetBackup – WP Backup, Migrate & Restore plugin <= 1.6.9.0 versions.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/backup/wordpress-backup-guard-plugin-1-6-8-8-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/backup/wordpress-backup-guard-plugin-1-6-8-8-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-38456
Published: 2023-03-15
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ernest Marcinko Ajax Search Lite plugin <= 4.10.3 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://patchstack.com/database/vulnerability/ajax-search-lite/wordpress-ajax-search-lite-plugin-4-10-3-auth-data-exposure-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/ajax-search-lite/wordpress-ajax-search-lite-plugin-4-10-3-auth-data-exposure-vulnerability?_s_id=cve
CVE: CVE-2022-44580
Published: 2023-03-15
Description: SQL Injection (SQLi) vulnerability in RichPlugins Plugin for Google Reviews plugin <= 2.2.3 versions.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: https://patchstack.com/database/vulnerability/widget-google-reviews/wordpress-plugin-for-google-reviews-plugin-2-2-3-auth-sql-injection-sqli-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/widget-google-reviews/wordpress-plugin-for-google-reviews-plugin-2-2-3-auth-sql-injection-sqli-vulnerability?_s_id=cve
CVE: CVE-2023-0100
Published: 2023-03-15
Description: In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HTTP path for the report parameter (e.g. __report=http://xyz.com/report.rptdesign). If the host indicated in the __report parameter matched the HTTP Host header value, the report would be retrieved. However, the Host header can be tampered with on some configurations where no virtual hosts are put in place (e.g. in the default configuration of Apache Tomcat) or when the default host points to the BIRT server. This vulnerability was patched on Eclipse BIRT 4.13.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=580391; https://bugs.eclipse.org/bugs/show_bug.cgi?id=580391
CVE: CVE-2023-27102
Published: 2023-03-15
Description: Libde265 v1.0.11 was discovered to contain a segmentation violation via the function decoder_context::process_slice_segment_header at decctx.cc.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/strukturag/libde265/issues/393; https://lists.debian.org/debian-lts-announce/2023/11/msg00032.html; https://github.com/strukturag/libde265/issues/393
CVE: CVE-2023-27103
Published: 2023-03-15
Description: Libde265 v1.0.11 was discovered to contain a heap buffer overflow via the function derive_collocated_motion_vectors at motion.cc.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/strukturag/libde265/issues/394; https://lists.debian.org/debian-lts-announce/2023/11/msg00032.html; https://github.com/strukturag/libde265/issues/394
CVE: CVE-2023-27781
Published: 2023-03-15
Description: jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/tjko/jpegoptim/issues/132; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66ZW65INCWSQYIT5E6N6I6PE5D7R6EK7/; https://github.com/tjko/jpegoptim/issues/132
CVE: CVE-2022-37402
Published: 2023-03-15
Description: Stored Cross-site Scripting (XSS) vulnerability in AFS Analytics plugin <= 4.18 versions.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/addfreestats/wordpress-afs-analytics-plugin-4-15-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/addfreestats/wordpress-afs-analytics-plugin-4-15-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-1379
Published: 2023-03-15
Description: A vulnerability was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file addmem.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223127.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/AureliusLia/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/SQLi-1.md; https://vuldb.com/?ctiid.223127; https://vuldb.com/?id.223127
CVE: CVE-2023-1415
Published: 2023-03-15
Description: A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/0xxtoby/Vuldb/blob/main/SIMPLE%20ART%20GALLERY%20system%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf; https://vuldb.com/?ctiid.223126; https://vuldb.com/?id.223126
CVE: CVE-2023-1416
Published: 2023-03-15
Description: A vulnerability classified as critical has been found in Simple Art Gallery 1.0. Affected is an unknown function of the file adminHome.php. The manipulation of the argument social_facebook leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223128.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Songs-YZS/CveList/blob/main/SIMPLE%20ART%20GALLERY%20system%20has%20Sql%20injection%20vulnerabilities.pdf; https://vuldb.com/?ctiid.223128; https://vuldb.com/?id.223128
CVE: CVE-2023-1418
Published: 2023-03-15
Description: A vulnerability classified as problematic was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file cashconfirm.php of the component POST Parameter Handler. The manipulation of the argument transactioncode leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223129 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/[PII_REDACTED]/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/XSS-1.md; https://vuldb.com/?ctiid.223129; https://vuldb.com/?id.223129
CVE: CVE-2022-43874
Published: 2023-03-15
Description: IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  239963.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/239963; https://www.ibm.com/support/pages/node/6960189; https://exchange.xforce.ibmcloud.com/vulnerabilities/239963
CVE: CVE-2023-24229
Published: 2023-03-15
Description: DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi 'parameter' parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://github.com/sadwwcxz/Vul; https://web.archive.org/web/[PII_REDACTED]1013/https://github.com/sadwwcxz/Vul; https://www.draytek.co.uk/support/guides/kb-remotemanagement
CVE: CVE-2023-25804
Published: 2023-03-15
Description: Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a limited path traversal vulnerability. An SSH key can be saved into an unintended location, for example the `/tmp` folder using a payload `../../../../../tmp/test111_dev`. This issue has been fixed in version 6.3.5.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-69j6-crq8-rrhv; https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-69j6-crq8-rrhv
CVE: CVE-2023-26284
Published: 2023-03-15
Description: IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls.  IBM X-Force ID:  248417.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/248417; https://www.ibm.com/support/pages/node/6960201; https://exchange.xforce.ibmcloud.com/vulnerabilities/248417
CVE: CVE-2020-4556
Published: 2023-03-15
Description: IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the system.  IBM X-Force ID:  183329.
CVSS Score: 4.0 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/183329; https://www.ibm.com/support/pages/node/6962117; https://exchange.xforce.ibmcloud.com/vulnerabilities/183329
CVE: CVE-2020-4927
Published: 2023-03-15
Description: A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol.  IBM X-Force ID:  191695.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191695; https://www.ibm.com/support/pages/node/6960571; https://exchange.xforce.ibmcloud.com/vulnerabilities/191695
CVE: CVE-2022-46774
Published: 2023-03-15
Description: IBM Manage Application 8.8.0 and 8.9.0 in the IBM Maximo Application Suite is vulnerable to incorrect default permissions which could give access to a user to actions that they should not have access to.  IBM X-Force ID:  242953.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-287, CWE-276
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/242953; https://www.ibm.com/support/pages/node/6962455; https://exchange.xforce.ibmcloud.com/vulnerabilities/242953
CVE: CVE-2023-22876
Published: 2023-03-15
Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.1 could allow a privileged user to obtain sensitive information that could aid in further attacks against the system.  IBM X-Force ID:  244364.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/244364; https://www.ibm.com/support/pages/node/6963093; https://exchange.xforce.ibmcloud.com/vulnerabilities/244364
CVE: CVE-2023-25282
Published: 2023-03-15
Description: A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the config.log_to_syslog and log_opt_dropPackets parameters to mydlink_api.ccp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/migraine-sudo/D_Link_Vuln/tree/main/Permanent%20DDOS%20vulnerability%20in%20emailInfo; https://www.dlink.com/en/security-bulletin/; https://github.com/migraine-sudo/D_Link_Vuln/tree/main/Permanent%20DDOS%20vulnerability%20in%20emailInfo
CVE: CVE-2020-27507
Published: 2023-03-15
Description: The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server or possibly have unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/kamailio/kamailio/commit/ada3701d22b1fd579f06b4f54fa695fa988e685f; https://github.com/kamailio/kamailio/issues/2503; https://lists.debian.org/debian-lts-announce/2023/05/msg00030.html
CVE: CVE-2022-46773
Published: 2023-03-15
Description: IBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid credential pools may be created as a result.  IBM X-Force ID:  242951.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/242951; https://www.ibm.com/support/pages/node/6962155; https://exchange.xforce.ibmcloud.com/vulnerabilities/242951
CVE: CVE-2023-25344
Published: 2023-03-15
Description: An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/node-swig/swig-templates/issues/89; https://www.gem-love.com/2023/02/01/Swig%E6%A8%A1%E6%9D%BF%E5%BC%95%E6%93%8E0day%E6%8C%96%E6%8E%98-%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E5%92%8C%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96/; https://github.com/node-swig/swig-templates/issues/89
CVE: CVE-2023-25345
Published: 2023-03-15
Description: Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/node-swig/swig-templates/issues/88; https://github.com/node-swig/swig-templates/issues/88
CVE: CVE-2023-25680
Published: 2023-03-15
Description: IBM Robotic Process Automation 21.0.1 through 21.0.5 is vulnerable to insufficiently protecting credentials.   Queue Provider credentials are not obfuscated while editing queue provider details.  IBM X-Force ID:  247032.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247032; https://www.ibm.com/support/pages/node/6962207; https://exchange.xforce.ibmcloud.com/vulnerabilities/247032
CVE: CVE-2023-26912
Published: 2023-03-15
Description: Cross site scripting (XSS) vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/xenv/S-mall-ssm/issues/37; https://github.com/xenv/S-mall-ssm/issues/37
CVE: CVE-2023-22591
Published: 2023-03-15
Description: IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access to the system due to session tokens for not being invalidated after a password reset.  IBM X-Force ID:  243710.
CVSS Score: 3.9 (LOW)
CWE: CWE-613
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/243710; https://www.ibm.com/support/pages/node/6962175; https://exchange.xforce.ibmcloud.com/vulnerabilities/243710
CVE: CVE-2023-26484
Published: 2023-03-15
Description: KubeVirt is a virtual machine management add-on for Kubernetes. In versions 0.59.0 and prior, if a malicious user has taken over a Kubernetes node where virt-handler (the KubeVirt node-daemon) is running, the virt-handler service account can be used to modify all node specs. This can be misused to lure-in system-level-privileged components which can, for instance, read all secrets on the cluster, or can exec into pods on other nodes. This way, a compromised node can be used to elevate privileges beyond the node until potentially having full privileged access to the whole cluster. The simplest way to exploit this, once a user could compromise a specific node, is to set with the virt-handler service account all other nodes to unschedulable and simply wait until system-critical components with high privileges appear on its node. No patches are available as of time of publication. As a workaround, gatekeeper users can add a webhook which will block the `virt-handler` service account to modify the spec of a node.
CVSS Score: 8.2 (HIGH)
CWE: CWE-863
References: https://github.com/kubevirt/kubevirt/issues/9109; https://github.com/kubevirt/kubevirt/security/advisories/GHSA-cp96-jpmq-xrr2; https://github.com/kubevirt/kubevirt/issues/9109
CVE: CVE-2023-27596
Published: 2023-03-15
Description: OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.8 and 3.2.5, OpenSIPS crashes when a malformed SDP body is sent multiple times to an OpenSIPS configuration that makes use of the `stream_process` function. This issue was discovered during coverage guided fuzzing of the function `codec_delete_except_re`. By abusing this vulnerability, an attacker is able to crash the server. It affects configurations containing functions that rely on the affected code, such as the function `codec_delete_except_re`. This issue has been fixed in version 3.1.8 and 3.2.5.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://github.com/OpenSIPS/opensips/commit/dd051f8ed5ae3347fb1d556ced3c97822c9d8450; https://github.com/OpenSIPS/opensips/security/advisories/GHSA-3ghx-j39m-cw4f; https://github.com/OpenSIPS/opensips/commit/dd051f8ed5ae3347fb1d556ced3c97822c9d8450
CVE: CVE-2023-27597
Published: 2023-03-15
Description: OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.8 and 3.2.5, when a specially crafted SIP message is processed by the function `rewrite_ruri`, a crash occurs due to a segmentation fault. This issue causes the server to crash. It affects configurations containing functions that make use of the affected code, such as the function `setport`. This issue has been fixed in version 3.1.8 and 3.2.5.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/OpenSIPS/opensips/commit/b2dffe4b5cd81182c9c8eabb6c96aac96c7acfe3; https://github.com/OpenSIPS/opensips/security/advisories/GHSA-358f-935m-7p9c; https://github.com/OpenSIPS/opensips/commit/b2dffe4b5cd81182c9c8eabb6c96aac96c7acfe3
CVE: CVE-2023-27598
Published: 2023-03-15
Description: OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, sending a malformed `Via` header to OpenSIPS triggers a segmentation fault when the function `calc_tag_suffix` is called. A specially crafted `Via` header, which is deemed correct by the parser, will pass uninitialized strings to the function `MD5StringArray` which leads to the crash. Abuse of this vulnerability leads to Denial of Service due to a crash. Since the uninitialized string points to memory location `0x0`, no further exploitation appears to be possible. No special network privileges are required to perform this attack, as long as the OpenSIPS configuration makes use of functions such as `sl_send_reply` or `sl_gen_totag` that trigger the vulnerable code. This issue has been fixed in versions 3.1.7 and 3.2.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-908, CWE-908
References: https://github.com/OpenSIPS/opensips/commit/ab611f74f69d9c42be5401c40d56ea06a58f5dd7; https://github.com/OpenSIPS/opensips/security/advisories/GHSA-wxfg-3gwh-rhvx; https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf
CVE: CVE-2023-27599
Published: 2023-03-15
Description: OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, when the function `append_hf` handles a SIP message with a malformed To header, a call to the function `abort()` is performed, resulting in a crash. This is due to the following check in `data_lump.c:399` in the function `anchor_lump`. An attacker abusing this vulnerability will crash OpenSIPS leading to Denial of Service. It affects configurations containing functions that make use of the affected code, such as the function `append_hf`. This issue has been fixed in versions 3.1.7 and 3.2.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/OpenSIPS/opensips/commit/cb56694d290530ac308f44b453c18120b1c1109d; https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qvj2-vqrg-f5jx; https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf
CVE: CVE-2023-28450
Published: 2023-03-15
Description: An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.
CVSS Score: 7.5 (HIGH)
References: https://capec.mitre.org/data/definitions/495.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6UQ6LKDTLSSD64TBIZ3XEKBM2SWC63VV/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU2ZT4ITSEOOR2CFBAHK4Z67KXJIEWQA/
CVE: CVE-2023-25267
Published: 2023-03-15
Description: An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://gist.github.com/Frycos/62fa664bacd19a85235be19c6e4d7599; https://support.kerioconnect.gfi.com/hc/en-us/articles/[PII_REDACTED]226-Kerio-Connect-10-0-0-Release-Notes; https://gist.github.com/Frycos/62fa664bacd19a85235be19c6e4d7599