deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-20069
Published: 2023-03-03
Description: A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker would need to have valid credentials to access the web-based management interface of the affected device.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pi-epnm-xss-mZShH2J; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pi-epnm-xss-mZShH2J
CVE: CVE-2023-20078
Published: 2023-03-03
Description: Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP
CVE: CVE-2023-20079
Published: 2023-03-03
Description: Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP
CVE: CVE-2023-20088
Published: 2023-03-03
Description: A vulnerability in the nginx configurations that are provided as part of the VPN-less reverse proxy for Cisco Finesse could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition for new and existing users who are connected through a load balancer. This vulnerability is due to improper IP address filtering by the reverse proxy. An attacker could exploit this vulnerability by sending a series of unauthenticated requests to the reverse proxy. A successful exploit could allow the attacker to cause all current traffic and subsequent requests to the reverse proxy through a load balancer to be dropped, resulting in a DoS condition.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-proxy-dos-vY5dQhrV; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-proxy-dos-vY5dQhrV
CVE: CVE-2023-20104
Published: 2023-03-03
Description: A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending an arbitrary file to a user and persuading that user to browse to a specific URL. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-Yn8HHsMJ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-Yn8HHsMJ
CVE: CVE-2023-26604
Published: 2023-03-03
Description: systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/174130/systemd-246-Local-Root-Privilege-Escalation.html; https://blog.compass-security.com/2012/10/dangerous-sudoers-entries-part-2-insecure-functionality/; https://github.com/systemd/systemd/blob/main/NEWS#L4335-L4340
CVE: CVE-2018-3614
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3618
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3622
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3623
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3625
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3631
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3636
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3637
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3642
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3644
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3647
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3648
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3651
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3653
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3654
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3656
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3660
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3664
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3673
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3674
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3675
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3676
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3677
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3678
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3680
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3681
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3685
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3692
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3694
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3695
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3706
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3707
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3708
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2018-3709
Published: 2023-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE: CVE-2023-24641
Published: 2023-03-03
Description: Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateview.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/594238758/mycve/blob/main/judging-management-system/SQLi-1.md; https://github.com/594238758/mycve/blob/main/judging-management-system/SQLi-1.md
CVE: CVE-2023-24642
Published: 2023-03-03
Description: Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateTxtview.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/594238758/mycve/blob/main/judging-management-system/SQLi-2.md; https://github.com/594238758/mycve/blob/main/judging-management-system/SQLi-2.md
CVE: CVE-2023-24643
Published: 2023-03-03
Description: Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateBlankTxtview.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/594238758/mycve/blob/main/judging-management-system/SQLi-3.md; https://github.com/594238758/mycve/blob/main/judging-management-system/SQLi-3.md
CVE: CVE-2023-27561
Published: 2023-03-03
Description: runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. NOTE: this issue exists because of a CVE-2019-19921 regression.
CVSS Score: 7.0 (HIGH)
CWE: CWE-706, CWE-706
References: https://gist.github.com/LiveOverflow/c937820b688922eb127fb760ce06dab9; https://github.com/opencontainers/runc/issues/2197#issuecomment[PII_REDACTED]; https://github.com/opencontainers/runc/issues/3751
CVE: CVE-2023-27566
Published: 2023-03-03
Description: Cubism Core in Live2D Cubism Editor 4.2.03 allows out-of-bounds write via a crafted Section Offset Table or Count Info Table in an MOC3 file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://docs.live2d.com/cubism-editor-manual/updates4/; https://github.com/openl2d/moc3ingbird; https://news.ycombinator.com/item?id=35013098
CVE: CVE-2022-46973
Published: 2023-03-03
Description: Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2022-46973; https://github.com/anji-plus/report/issues/15; https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2022-46973
CVE: CVE-2023-0968
Published: 2023-03-03
Description: The Watu Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘dn’, 'email', 'points', and 'date' parameters in versions up to, and including, 3.3.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/watu/trunk/views/takings.php#L31; https://www.wordfence.com/blog/2023/03/multiple-reflected-cross-site-scripting-vulnerabilities-in-three-wordpress-plugins-patched/; https://www.wordfence.com/threat-intel/vulnerabilities/id/6341bdcc-c99f-40c3-81c4-ad90ff19f802?source=cve
CVE: CVE-2023-23313
Published: 2023-03-03
Description: Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of the router's web application management portal. This affects Vigor3910, Vigor1000B, Vigor2962 v4.3.2.1; Vigor2865 and Vigor2866 v4.4.1.0; Vigor2927 v4.4.2.2; and Vigor2915, Vigor2765, Vigor2766, Vigor2135 v4.4.2.0; Vigor2763 v4.4.2.1; Vigor2862 and Vigor2926 v3.9.9.0; Vigor2925 v3.9.3; Vigor2952 and Vigor3220 v3.9.7.3; Vigor2133 and Vigor2762 v3.9.6.4; and Vigor2832 v3.9.6.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.draytek.com/about/security-advisory/cross-site-scripting-vulnerability-%28cve-2023-23313%29/; https://www.horizonconsulting.com/advisories23-Multiple-XSS-Stored-in-DrayTek-routers-CVE-2023-23313; https://www.draytek.com/about/security-advisory/cross-site-scripting-vulnerability-%28cve-2023-23313%29/
CVE: CVE-2023-23927
Published: 2023-03-03
Description: Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting (XSS) happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7.

CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#437---2023-02-03; https://github.com/craftcms/cms/security/advisories/GHSA-qcrj-6ffc-v7hq; https://user-images.githubusercontent.com/53917092/215604129-d5b75608-5a24-4eb3-906f-55b192310298.mp4
CVE: CVE-2023-26213
Published: 2023-03-03
Description: On Barracuda CloudGen WAN Private Edge Gateway devices before 8 webui-sdwan-1089-8.3.1-174141891, an OS command injection vulnerability exists in /ajax/update_certificate - a crafted HTTP request allows an authenticated attacker to execute arbitrary commands. For example, a name field can contain :password and a password field can contain shell metacharacters.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: http://seclists.org/fulldisclosure/2023/Mar/2; https://campus.barracuda.com/product/cloudgenwan/doc/96024723/release-notes-8-3-1/; https://sec-consult.com/vulnerability-lab/advisory/os-command-injection-in-barracuda-cloudgen-wan/
CVE: CVE-2023-26488
Published: 2023-03-03
Description: OpenZeppelin Contracts is a library for secure smart contract development. The ERC721Consecutive contract designed for minting NFTs in batches does not update balances when a batch has size 1 and consists of a single token. Subsequent transfers from the receiver of that token may overflow the balance as reported by `balanceOf`. The issue exclusively presents with batches of size 1. The issue has been patched in 4.8.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-682
References: https://github.com/OpenZeppelin/openzeppelin-contracts/commit/167bf67ed3907f4a[PII_REDACTED]19fa346cee7705; https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.2; https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-878m-3g6q-594q
CVE: CVE-2023-26492
Published: 2023-03-03
Description: Directus is a real-time API and App dashboard for managing SQL database content. Directus is vulnerable to Server-Side Request Forgery (SSRF) when importing a file from a remote web server (POST to `/files/import`). An attacker can bypass the security controls by performing a DNS rebinding attack and view sensitive data from internal servers or perform a local port scan. An attacker can exploit this vulnerability to access highly sensitive internal server(s) and steal sensitive information. This issue was fixed in version 9.23.0.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-918
References: https://github.com/directus/directus/commit/ff53d3e69a602d05342e15d9bb616884833ddbff; https://github.com/directus/directus/releases/tag/v9.23.0; https://github.com/directus/directus/security/advisories/GHSA-j3rg-3rgm-537h
CVE: CVE-2023-27567
Published: 2023-03-03
Description: In OpenBSD 7.2, a TCP packet with destination port 0 that matches a pf divert-to rule can crash the kernel.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/013_tcp.patch.sig; https://github.com/openbsd/src/commit/0a543725ccdd2a01669122ce79bb67e66ede77f2; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-27574
Published: 2023-03-03
Description: ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODE_SIGNING_INJECT_BASE_ENTITLEMENTS.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-494
References: https://github.com/shadowsocks/ShadowsocksX-NG/pull/1456; https://shadowsocks.org; https://github.com/shadowsocks/ShadowsocksX-NG/pull/1456
CVE: CVE-2023-1170
Published: 2023-03-03
Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-122
References: https://github.com/vim/vim/commit/1c73b65229c25e3c1fd8824ba958f7cc4d604f9c; https://huntr.dev/bounties/286e0090-e654-46d2-ac60-29f81799d0a4; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/
CVE: CVE-2023-25402
Published: 2023-03-03
Description: CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload. There is no restriction on the suffix of the uploaded file, resulting in any file upload.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/CleverStupidDog/yf-exam/issues/1; https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-25402; https://github.com/CleverStupidDog/yf-exam/issues/1
CVE: CVE-2023-25403
Published: 2023-03-03
Description: CleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass. The program uses a fixed JWT key, and the stored key uses username format characters. Any user who logged in within 24 hours. A token can be forged with his username to bypass authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639, CWE-639
References: https://github.com/CleverStupidDog/yf-exam/issues/2; https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-25403; https://github.com/CleverStupidDog/yf-exam/issues/2
CVE: CVE-2023-26047
Published: 2023-03-03
Description: teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version v0.2.0 is vulnerable to a bypass attack when a specific case-sensitive hex entities payload with special characters such as CR/LF and horizontal tab is used. This vulnerability allows an attacker to execute arbitrary JavaScript code on the victim's browser and compromise the security of the web application. An attacker can exploit this vulnerability to bypass common web attack threat rules in teler-waf and launch cross-site scripting (XSS) attacks. The attacker can execute arbitrary JavaScript code on the victim's browser and steal sensitive information, such as login credentials and session tokens, or take control of the victim's browser and perform malicious actions. This issue has been patched in version 0.2.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-80, CWE-692
References: https://github.com/dwisiswant0/cwa-filter-rules/commit/d818d1645832d1a02cd210c7680e692d2bf4313b; https://github.com/kitabisa/teler-waf/releases/tag/v0.2.0; https://github.com/kitabisa/teler-waf/security/advisories/GHSA-p2pf-g8cq-3gq5