deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-41232
Published: 2023-09-27
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.7, iOS 17 and iPadOS 17, macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. An app may be able to disclose kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2023/Oct/4; http://seclists.org/fulldisclosure/2023/Oct/5; http://seclists.org/fulldisclosure/2023/Oct/6
CVE: CVE-2023-41233
Published: 2023-09-27
Description: Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN97197972/; https://www.welcart.com/archives/20106.html; https://jvn.jp/en/jp/JVN97197972/
CVE: CVE-2023-41235
Published: 2023-09-27
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Everest News Pro theme <= 1.1.7 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/everest-news-pro/wordpress-everest-news-pro-theme-1-1-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/everest-news-pro/wordpress-everest-news-pro-theme-1-1-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-41236
Published: 2023-09-27
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Happy addons Happy Elementor Addons Pro plugin <= 2.8.0 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/happy-elementor-addons-pro/wordpress-happy-elementor-addons-pro-plugin-2-8-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/happy-elementor-addons-pro/wordpress-happy-elementor-addons-pro-plugin-2-8-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-41237
Published: 2023-09-27
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose Pro theme <= 1.0.8 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/arya-multipurpose-pro/wordpress-arya-multipurpose-pro-theme-1-0-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/arya-multipurpose-pro/wordpress-arya-multipurpose-pro-theme-1-0-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-41238
Published: 2023-09-27
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in UltimatelySocial Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.3 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/ultimate-social-media-icons/wordpress-social-media-share-icons-plugin-2-8-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/ultimate-social-media-icons/wordpress-social-media-share-icons-plugin-2-8-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-41241
Published: 2023-09-27
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SureCart WordPress Ecommerce For Creating Fast Online Stores plugin <= 2.5.0 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/surecart/wordpress-surecart-plugin-2-5-0-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/surecart/wordpress-surecart-plugin-2-5-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-41242
Published: 2023-09-27
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Hassan Ali Snap Pixel plugin <= 1.5.7 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/snap-pixel/wordpress-snap-pixel-plugin-1-5-7-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/snap-pixel/wordpress-snap-pixel-plugin-1-5-7-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-41305
Published: 2023-09-27
Description: Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326, CWE-326
References: https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/9/
CVE: CVE-2023-41306
Published: 2023-09-27
Description: Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable.
CVSS Score: 3.7 (LOW)
CWE: CWE-362, CWE-362
References: https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/9/
CVE: CVE-2023-41307
Published: 2023-09-27
Description: Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/9/
CVE: CVE-2023-41308
Published: 2023-09-27
Description: Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/9/
CVE: CVE-2023-41309
Published: 2023-09-27
Description: Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269
References: https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/9/
CVE: CVE-2023-41310
Published: 2023-09-27
Description: Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerability may cause malicious apps to run continuously in the background.
CVSS Score: 3.3 (LOW)
CWE: CWE-400
References: https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/9/
CVE: CVE-2023-41311
Published: 2023-09-27
Description: Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause an app to be activated automatically.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/9/
CVE: CVE-2023-41312
Published: 2023-09-27
Description: Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause several apps to be activated automatically.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-269
References: https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/9/
CVE: CVE-2023-41320
Published: 2023-09-27
Description: GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. UI layout preferences management can be hijacked to lead to SQL injection. This injection can be use to takeover an administrator account. Users are advised to upgrade to version 10.0.10. There are no known workarounds for this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-mv2r-gpw3-g476; https://github.com/glpi-project/glpi/security/advisories/GHSA-mv2r-gpw3-g476
CVE: CVE-2023-41321
Published: 2023-09-27
Description: GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. An API user can enumerate sensitive fields values on resources on which he has read access. Users are advised to upgrade to version 10.0.10. There are no known workarounds for this vulnerability.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-3fxw-j5rj-w836; https://github.com/glpi-project/glpi/security/advisories/GHSA-3fxw-j5rj-w836
CVE: CVE-2023-41322
Published: 2023-09-27
Description: GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. A user with write access to another user can make requests to change the latter's password and then take control of their account. Users are advised to upgrade to version 10.0.10. There are no known work around for this vulnerability.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-269, CWE-284
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-9j8m-7563-8xvr; https://github.com/glpi-project/glpi/security/advisories/GHSA-9j8m-7563-8xvr
CVE: CVE-2023-41323
Published: 2023-09-27
Description: GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can enumerate users logins. Users are advised to upgrade to version 10.0.10. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-5cf4-6q6r-49x9; https://github.com/glpi-project/glpi/security/advisories/GHSA-5cf4-6q6r-49x9
CVE: CVE-2023-41324
Published: 2023-09-27
Description: GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. An API user that have read access on users resource can steal accounts of other users. Users are advised to upgrade to version 10.0.10. There are no known workarounds for this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-269
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-58wj-8jhx-jpm3; https://github.com/glpi-project/glpi/security/advisories/GHSA-58wj-8jhx-jpm3
CVE: CVE-2023-41326
Published: 2023-09-27
Description: GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. A logged user from any profile can hijack the Kanban feature to alter any user field, and end-up with stealing its account. Users are advised to upgrade to version 10.0.10. There are no known workarounds for this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-269
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-5wj6-hp4c-j5q9; https://github.com/glpi-project/glpi/security/advisories/GHSA-5wj6-hp4c-j5q9
CVE: CVE-2023-41332
Published: 2023-09-27
Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In Cilium clusters where Cilium's Layer 7 proxy has been disabled, creating workloads with `policy.cilium.io/proxy-visibility` annotations (in Cilium >= v1.13) or `io.cilium.proxy-visibility` annotations (in Cilium <= v1.12) causes the Cilium agent to segfault on the node to which the workload is assigned. Existing traffic on the affected node will continue to flow, but the Cilium agent on the node will not able to process changes to workloads running on the node. This will also prevent workloads from being able to start on the affected node. The denial of service will be limited to the node on which the workload is scheduled, however an attacker may be able to schedule workloads on the node of their choosing, which could lead to targeted attacks. This issue has been resolved in Cilium versions 1.14.2, 1.13.7, and 1.12.14. Users unable to upgrade can avoid this denial of service attack by enabling the Layer 7 proxy.


CVSS Score: 3.5 (LOW)
CWE: CWE-755
References: https://github.com/cilium/cilium/pull/27597; https://github.com/cilium/cilium/security/advisories/GHSA-24m5-r6hv-ccgp; https://github.com/cilium/cilium/pull/27597
CVE: CVE-2023-41333
Published: 2023-09-27
Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to create or modify CiliumNetworkPolicy objects in a particular namespace is able to affect traffic on an entire Cilium cluster, potentially bypassing policy enforcement in other namespaces. By using a crafted `endpointSelector` that uses the `DoesNotExist` operator on the `reserved:init` label, the attacker can create policies that bypass namespace restrictions and affect the entire Cilium cluster. This includes potentially allowing or denying all traffic. This attack requires API server access, as described in the Kubernetes API Server Attacker section of the Cilium Threat Model. This issue has been resolved in Cilium versions 1.14.2, 1.13.7, and 1.12.14. As a workaround an admission webhook can be used to prevent the use of `endpointSelectors` that use the `DoesNotExist` operator on the `reserved:init` label in CiliumNetworkPolicies.

CVSS Score: 6.9 (MEDIUM)
CWE: CWE-306
References: https://docs.cilium.io/en/stable/security/threat-model/#kubernetes-api-server-attacker; https://github.com/cilium/cilium/pull/28007; https://github.com/cilium/cilium/security/advisories/GHSA-4xp2-w642-7mcx
CVE: CVE-2023-41335
Published: 2023-09-27
Description: Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. When users update their passwords, the new credentials may be briefly held in the server database. While this doesn't grant the server any added capabilities—it already learns the users' passwords as part of the authentication process—it does disrupt the expectation that passwords won't be stored in the database. As a result, these passwords could inadvertently be captured in database backups for a longer duration. These temporarily stored passwords are automatically erased after a 48-hour window. This issue has been addressed in version 1.93.0. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 3.7 (LOW)
CWE: CWE-312
References: https://github.com/matrix-org/synapse/pull/16272; https://github.com/matrix-org/synapse/security/advisories/GHSA-4f74-84v3-j9q5; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2AFB2Y3S2VCPCN5P2XCZTG24MBMZ7DM4/
CVE: CVE-2023-41653
Published: 2023-09-27
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Beplus Sermon'e – Sermons Online plugin <= 1.0.0 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/sermone-online-sermons-management/wordpress-sermon-e-sermons-online-plugin-1-0-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/sermone-online-sermons-management/wordpress-sermon-e-sermons-online-plugin-1-0-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-41860
Published: 2023-09-27
Description: Unauth. Cross-Site Scripting (XSS) vulnerability in TravelMap plugin <= 1.0.1 versions.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/travelmap-blog/wordpress-travel-map-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/travelmap-blog/wordpress-travel-map-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-41861
Published: 2023-09-27
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Restrict plugin <= 2.2.4 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/restricted-content/wordpress-restrict-membership-site-content-and-user-access-restrictions-for-wordpress-plugin-2-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/restricted-content/wordpress-restrict-membership-site-content-and-user-access-restrictions-for-wordpress-plugin-2-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-41878
Published: 2023-09-27
Description: MeterSphere is a one-stop open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing and performance testing. The Selenium VNC config used in Metersphere is using a weak password by default, attackers can login to vnc and obtain high permissions. This issue has been addressed in version 2.10.7 LTS. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-798
References: https://github.com/metersphere/installer/commit/02dd31c0951a225eaad99eda560e3eb91ba3001d; https://github.com/metersphere/metersphere/security/advisories/GHSA-88vv-6rm4-59h9; https://github.com/metersphere/installer/commit/02dd31c0951a225eaad99eda560e3eb91ba3001d
CVE: CVE-2023-41888
Published: 2023-09-27
Description: GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. The lack of path filtering on the GLPI URL may allow an attacker to transmit a malicious URL of login page that can be used to attempt a phishing attack on user credentials. Users are advised to upgrade to version 10.0.10. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-2hcg-75jj-hghp; https://github.com/glpi-project/glpi/security/advisories/GHSA-2hcg-75jj-hghp
CVE: CVE-2023-41904
Published: 2023-09-27
Description: Zoho ManageEngine ADManager Plus before 7203 allows 2FA bypass (for AuthToken generation) in REST APIs.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-287
References: https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-41904.html; https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-41904.html
CVE: CVE-2023-41962
Published: 2023-09-27
Description: Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script in the page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN97197972/; https://www.welcart.com/archives/20106.html; https://jvn.jp/en/jp/JVN97197972/
CVE: CVE-2023-41968
Published: 2023-09-27
Description: This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to read arbitrary files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://seclists.org/fulldisclosure/2023/Oct/10; http://seclists.org/fulldisclosure/2023/Oct/3; http://seclists.org/fulldisclosure/2023/Oct/5
CVE: CVE-2023-41979
Published: 2023-09-27
Description: A race condition was addressed with improved locking. This issue is fixed in macOS Sonoma 14. An app may be able to modify protected parts of the file system.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: http://seclists.org/fulldisclosure/2023/Oct/3; https://support.apple.com/en-us/HT213940; http://seclists.org/fulldisclosure/2023/Oct/3
CVE: CVE-2023-41980
Published: 2023-09-27
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2023/Oct/3; http://seclists.org/fulldisclosure/2023/Oct/8; https://support.apple.com/en-us/HT213938
CVE: CVE-2023-41981
Published: 2023-09-27
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.
CVSS Score: 4.4 (MEDIUM)
References: http://seclists.org/fulldisclosure/2023/Oct/10; http://seclists.org/fulldisclosure/2023/Oct/3; http://seclists.org/fulldisclosure/2023/Oct/4
CVE: CVE-2023-41984
Published: 2023-09-27
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: http://seclists.org/fulldisclosure/2023/Oct/10; http://seclists.org/fulldisclosure/2023/Oct/3; http://seclists.org/fulldisclosure/2023/Oct/4
CVE: CVE-2023-41986
Published: 2023-09-27
Description: The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2023/Oct/3; http://seclists.org/fulldisclosure/2023/Oct/8; https://support.apple.com/en-us/HT213938
CVE: CVE-2023-41995
Published: 2023-09-27
Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://seclists.org/fulldisclosure/2023/Oct/3; http://seclists.org/fulldisclosure/2023/Oct/8; https://support.apple.com/en-us/HT213938
CVE: CVE-2023-41996
Published: 2023-09-27
Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6. Apps that fail verification checks may still launch.
CVSS Score: 5.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2023/Oct/5; https://support.apple.com/en-us/HT213931; https://support.apple.com/kb/HT213940
CVE: CVE-2023-42453
Published: 2023-09-27
Description: Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Users were able to forge read receipts for any event (if they knew the room ID and event ID). Note that the users were not able to view the events, but simply mark it as read. This could be confusing as clients will show the event as read by the user, even if they are not in the room. This issue has been patched in version 1.93.0. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 3.1 (LOW)
CWE: CWE-285
References: https://github.com/matrix-org/synapse/pull/16327; https://github.com/matrix-org/synapse/security/advisories/GHSA-7565-cq32-vx2x; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2AFB2Y3S2VCPCN5P2XCZTG24MBMZ7DM4/