deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-1276
Published: 2023-03-08
Description: A vulnerability, which was classified as critical, has been found in SUL1SS_shop. This issue affects some unknown processing of the file application\merch\controller\Order.php. The manipulation of the argument keyword leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-222599.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89
References: https://tib36.github.io/2023/03/04/SUL1SS-shop-SQLi/; https://vuldb.com/?ctiid.222599; https://vuldb.com/?id.222599
CVE: CVE-2023-1277
Published: 2023-03-08
Description: A vulnerability, which was classified as critical, was found in kylin-system-updater up to 1.4.20kord on Ubuntu Kylin. Affected is the function InstallSnap of the component Update Handler. The manipulation leads to command injection. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222600.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://github.com/cn-lwj/vuldb/blob/master/kylin-system-updater_vuln.md; https://vuldb.com/?ctiid.222600; https://vuldb.com/?id.222600
CVE: CVE-2023-1278
Published: 2023-03-08
Description: A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-222608.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://gitee.com/ibos/IBOS/issues/I6G5IJ; https://vuldb.com/?ctiid.222608; https://vuldb.com/?id.222608
CVE: CVE-2023-23760
Published: 2023-03-08
Description: A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to versions 3.8 and was fixed in versions 3.7.7, 3.6.10, 3.5.14, and 3.4.17. This vulnerability was reported via the GitHub Bug Bounty program.





CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.17; https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.14; https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.10
CVE: CVE-2023-26956
Published: 2023-03-08
Description: onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-552
References: https://github.com/keheying/onekeyadmin/issues/4; https://github.com/keheying/onekeyadmin/issues/4
CVE: CVE-2023-27486
Published: 2023-03-08
Description: xCAT is a toolkit for deployment and administration of computer clusters. In versions prior to 2.16.5 if zones are configured as a mechanism to secure clusters in XCAT, it is possible for a local root user from one node to obtain credentials to SSH to any node in any zone, except the management node of the default zone. XCAT zones are not enabled by default. Only users that use the optional zone feature are impacted. All versions of xCAT prior to xCAT 2.16.5 are vulnerable. This problem has been fixed in xCAT 2.16.5. Users making use of zones should upgrade to 2.16.5. Users unable to upgrade may mitigate the issue by disabling zones or patching the management node with the fix contained in commit `85149c37f49`.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: https://github.com/xcat2/xcat-core/issues/7246; https://github.com/xcat2/xcat-core/pull/7247; https://github.com/xcat2/xcat-core/pull/7247/commits/85149c37f49dbca7bd85f1f[PII_REDACTED]04fc024
CVE: CVE-2023-24532
Published: 2023-03-08
Description: The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-682
References: https://go.dev/cl/471255; https://go.dev/issue/58647; https://groups.google.com/g/golang-announce/c/3-TpUx48iQY
CVE: CVE-2023-24533
Published: 2023-03-08
Description: Multiplication of certain unreduced P-256 scalars produce incorrect results. There are no protocols known at this time that can be attacked due to this.
CVSS Score: 7.5 (HIGH)
CWE: CWE-682
References: https://github.com/FiloSottile/nistec/commit/c58aa1223ccf3943513e1e661cebce95af137244; https://go.dev/issue/58647; https://pkg.go.dev/vuln/GO-2023-1595
CVE: CVE-2023-22889
Published: 2023-03-08
Description: SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation. This could lead to remote code execution by unauthenticated users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://smartbear.com/security/cve/; https://smartbear.com/security/cve/
CVE: CVE-2023-22890
Published: 2023-03-08
Description: SmartBear Zephyr Enterprise through 7.15.0 allows unauthenticated users to upload large files, which could exhaust the local drive space, causing a denial of service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434, CWE-434
References: https://smartbear.com/security/cve/; https://smartbear.com/security/cve/
CVE: CVE-2023-22891
Published: 2023-03-08
Description: There exists a privilege escalation vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by authorized users to reset passwords for other accounts.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863, CWE-863
References: https://smartbear.com/security/cve/; https://smartbear.com/security/cve/
CVE: CVE-2023-22892
Published: 2023-03-08
Description: There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by unauthenticated users to read arbitrary files from Zephyr instances.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668, CWE-668
References: https://smartbear.com/security/cve/; https://smartbear.com/security/cve/
CVE: CVE-2023-24282
Published: 2023-03-08
Description: An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://polycom.com; https://www.cryptnetix.com/blog/2023/01/19/Polycom-Trio-Vulnerability-Disclosure.html; http://polycom.com
CVE: CVE-2023-24782
Published: 2023-03-08
Description: Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/funadmin/funadmin/issues/3; https://github.com/funadmin/funadmin/issues/3
CVE: CVE-2023-27477
Published: 2023-03-08
Description: wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the WebAssembly `i8x16.select` instruction which will produce the wrong results when the same operand is provided to the instruction and some of the selected indices are greater than 16. There is an off-by-one error in the calculation of the mask to the `pshufb` instruction which causes incorrect results to be returned if lanes are selected from the second vector. This codegen bug has been fixed in Wasmtiem 6.0.1, 5.0.1, and 4.0.1. Users are recommended to upgrade to these updated versions. If upgrading is not an option for you at this time, you can avoid this miscompilation by disabling the Wasm simd proposal. Additionally the bug is only present on x86_64 hosts. Other platforms such as AArch64 and s390x are not affected.
CVSS Score: 3.1 (LOW)
CWE: CWE-193
References: https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.wasm_simd; https://github.com/bytecodealliance/wasmtime/commit/5dc2bbccbb363e474d2c9a1b8e38a89a43bbd5d1; https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-xm67-587q-r2vw
CVE: CVE-2021-33351
Published: 2023-03-08
Description: Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attackers to escalte privileges via a crafted payload in the ticket message field.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://www.exploit-db.com/exploits/50113; https://www.wyomind.com/magento2/helpdesk-magento-2.html; https://www.exploit-db.com/exploits/50113
CVE: CVE-2021-33352
Published: 2023-03-08
Description: An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via a phar file upload in the ticket message field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://www.exploit-db.com/exploits/50113; https://www.wyomind.com/magento2/helpdesk-magento-2.html; https://www.exploit-db.com/exploits/50113
CVE: CVE-2021-33353
Published: 2023-03-08
Description: Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via the file attachment directory setting.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://www.exploit-db.com/exploits/50113; https://www.wyomind.com/magento2/helpdesk-magento-2.html; https://www.exploit-db.com/exploits/50113
CVE: CVE-2023-1283
Published: 2023-03-08
Description: Code Injection in GitHub repository builderio/qwik prior to 0.21.0.


CVSS Score: 10.0 (CRITICAL)
CWE: CWE-94
References: https://github.com/BuilderIO/qwik/pull/3249/commits/4d9ba6e098ae6e537aa55abb6b8369bb670ffe66; https://huntr.dev/bounties/63f1ff91-48f3-4886-a179-103f1ddd8ff8; https://github.com/BuilderIO/qwik/pull/3249/commits/4d9ba6e098ae6e537aa55abb6b8369bb670ffe66
CVE: CVE-2023-24777
Published: 2023-03-08
Description: Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/funadmin/funadmin/issues/5; https://github.com/funadmin/funadmin/issues/5
CVE: CVE-2021-33639
Published: 2023-03-08
Description: REMAP cmd of SVM driver can be used to remap read only memory as read-write, then cause read only memory/file modified.
CVSS Score: 7.5 (HIGH)
CWE: CWE-749
References: https://gitee.com/openeuler/kernel/commit/e4d0684a3ce68e7f8e11408121e791cd80312b27; https://gitee.com/openeuler/kernel/commit/e4d0684a3ce68e7f8e11408121e791cd80312b27
CVE: CVE-2022-4007
Published: 2023-03-08
Description: A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.8.4, and version 15.9 prior to 15.9.2 A cross-site scripting vulnerability was found in the title field of work items that allowed attackers to perform arbitrary actions on behalf of victims at client side.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4007.json; https://gitlab.com/gitlab-org/gitlab/-/issues/382789; https://hackerone.com/reports/1767745
CVE: CVE-2022-4315
Published: 2023-03-08
Description: An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4315.json; https://gitlab.com/gitlab-org/gitlab/-/issues/384995; https://hackerone.com/reports/1767525
CVE: CVE-2023-0030
Published: 2023-03-08
Description: A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=2157270; https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2018-25081
Published: 2023-03-09
Description: Bitwarden through 2023.2.1 offers password auto-fill within a cross-domain IFRAME element. NOTE: the vendor's position is that there have been important legitimate cross-domain configurations (e.g., an apple.com IFRAME element on the icloud.com website) and that "Auto-fill on page load" is not enabled by default.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://cdn.bitwarden.net/misc/Bitwarden%20Security%20Assessment%20Report.pdf; https://flashpoint.io/blog/bitwarden-password-pilfering/; https://github.com/bitwarden/clients/releases
CVE: CVE-2023-27974
Published: 2023-03-09
Description: Bitwarden through 2023.2.1 offers password auto-fill when the second-level domain matches, e.g., a password stored for an example.com hosting provider when customer-website.example.com is visited. NOTE: the vendor's position is that "Auto-fill on page load" is not enabled by default.
CVSS Score: 7.5 (HIGH)
References: https://flashpoint.io/blog/bitwarden-password-pilfering/; https://github.com/bitwarden/clients/releases; https://news.ycombinator.com/item?id=35075861
CVE: CVE-2023-26948
Published: 2023-03-09
Description: onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-552
References: https://github.com/keheying/onekeyadmin/issues/5; https://github.com/keheying/onekeyadmin/issues/5
CVE: CVE-2023-26109
Published: 2023-03-09
Description: All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation.
CVSS Score: 7.3 (HIGH)
CWE: CWE-120, CWE-120
References: https://security.snyk.io/vuln/SNYK-JS-NODEBLUETOOTHSERIALPORT-3311820; https://security.snyk.io/vuln/SNYK-JS-NODEBLUETOOTHSERIALPORT-3311820
CVE: CVE-2023-26110
Published: 2023-03-09
Description: All versions of the package node-bluetooth are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation.
CVSS Score: 7.3 (HIGH)
CWE: CWE-120, CWE-120
References: https://security.snyk.io/vuln/SNYK-JS-NODEBLUETOOTH-3311821; https://security.snyk.io/vuln/SNYK-JS-NODEBLUETOOTH-3311821
CVE: CVE-2023-27985
Published: 2023-03-09
Description: emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is fixed in 29.0.90
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-78
References: http://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=d32091199ae5de590a83f1542a01d75fba000467; http://www.openwall.com/lists/oss-security/2023/03/09/1; https://debbugs.gnu.org/cgi/bugreport.cgi?bug=60204
CVE: CVE-2023-27986
Published: 2023-03-09
Description: emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailto: URI with unescaped double-quote characters. It is fixed in 29.0.90.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94, CWE-94
References: http://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=3c1693d08b0a71d40a77e7b40c0ebc42dca2d2cc; http://www.openwall.com/lists/oss-security/2023/03/09/1; https://www.gabriel.urdhr.fr/2023/06/08/emacsclient-mail-shell-elisp-injections/
CVE: CVE-2023-1251
Published: 2023-03-09
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akinsoft Wolvox. This issue affects Wolvox: before 8.02.03.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.usom.gov.tr/bildirim/tr-23-0136; https://www.usom.gov.tr/bildirim/tr-23-0136
CVE: CVE-2023-1286
Published: 2023-03-09
Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/82cca7f4a7560b160336cce[PII_REDACTED]ca52c18; https://huntr.dev/bounties/31d97442-3f87-439f-83f0-1c7862ef0c7c; https://github.com/pimcore/pimcore/commit/82cca7f4a7560b160336cce[PII_REDACTED]ca52c18
CVE: CVE-2022-29056
Published: 2023-03-09
Description: A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0, version 6.2.0 through 6.2.4 and before 6.0.9 allows  a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form.
CVSS Score: 3.7 (LOW)
CWE: CWE-307, CWE-307
References: https://fortiguard.com/psirt/FG-IR-20-078; https://fortiguard.com/psirt/FG-IR-20-078
CVE: CVE-2023-1290
Published: 2023-03-09
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Sales Tracker Management System 1.0. Affected by this issue is some unknown functionality of the file admin/clients/view_client.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222644.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Mart1nD0t/vul-test/blob/main/sts-1.md; https://vuldb.com/?ctiid.222644; https://vuldb.com/?id.222644
CVE: CVE-2023-1291
Published: 2023-03-09
Description: A vulnerability, which was classified as critical, was found in SourceCodester Sales Tracker Management System 1.0. This affects an unknown part of the file admin/clients/manage_client.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222645 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Mart1nD0t/vul-test/blob/main/sts-2.md; https://vuldb.com/?ctiid.222645; https://vuldb.com/?id.222645
CVE: CVE-2023-1292
Published: 2023-03-09
Description: A vulnerability has been found in SourceCodester Sales Tracker Management System 1.0 and classified as critical. This vulnerability affects the function delete_client of the file classes/Master.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222646 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Mart1nD0t/vul-test/blob/main/sts-3.md; https://vuldb.com/?ctiid.222646; https://vuldb.com/?id.222646
CVE: CVE-2023-1293
Published: 2023-03-09
Description: A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects the function mysqli_query of the file admin_cs.php. The manipulation leads to sql injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222647.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-89
References: https://blog.csdn.net/weixin_43864034/article/details/129418770; https://vuldb.com/?ctiid.222647; https://vuldb.com/?id.222647
CVE: CVE-2023-1294
Published: 2023-03-09
Description: A vulnerability was found in SourceCodester File Tracker Manager System 1.0. It has been classified as critical. Affected is an unknown function of the file /file_manager/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222648.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/godownio/bug_report/blob/main/vendors/hemedy99/File%20Tracker%20Manager%20System/SQLi-1.md; https://vuldb.com/?ctiid.222648; https://vuldb.com/?id.222648
CVE: CVE-2023-26208
Published: 2023-03-09
Description: A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x and before allows  a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form.
CVSS Score: 3.7 (LOW)
CWE: CWE-307, CWE-307
References: https://fortiguard.com/psirt/FG-IR-20-078; https://fortiguard.com/psirt/FG-IR-20-078
CVE: CVE-2023-26209
Published: 2023-03-09
Description: A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiDeceptor 3.1.x and before allows  a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form.
CVSS Score: 3.7 (LOW)
CWE: CWE-307, CWE-307
References: https://fortiguard.com/psirt/FG-IR-20-078; https://fortiguard.com/psirt/FG-IR-20-078
CVE: CVE-2023-0845
Published: 2023-03-09
Description: Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://discuss.hashicorp.com/t/hcsec-2023-06-consul-server-panic-when-ingress-and-api-gateways-configured-with-peering-connections/51197; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/
CVE: CVE-2023-1287
Published: 2023-03-09
Description: 
















An XSL template vulnerability in
ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution.




CVSS Score: 9.0 (CRITICAL)
CWE: CWE-74, CWE-94
References: https://www.3ds.com/vulnerability/advisories; https://www.3ds.com/vulnerability/advisories
CVE: CVE-2023-1288
Published: 2023-03-09
Description: 







An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the server.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://www.3ds.com/vulnerability/advisories; https://www.3ds.com/vulnerability/advisories
CVE: CVE-2023-25573
Published: 2023-03-09
Description: metersphere is an open source continuous testing platform. In affected versions an improper access control vulnerability exists in `/api/jmeter/download/files`, which allows any user to download any file without authentication. This issue may expose all files available to the running process. This issue has been addressed in version 1.20.20 lts and 2.7.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.6 (HIGH)
CWE: CWE-862
References: https://github.com/metersphere/metersphere/security/advisories/GHSA-mcwr-j9vm-5g8h; https://github.com/metersphere/metersphere/security/advisories/GHSA-mcwr-j9vm-5g8h
CVE: CVE-2023-25814
Published: 2023-03-09
Description: metersphere is an open source continuous testing platform. In versions prior to 2.7.1 a user who has permission to create a resource file through UI operations is able to append a path to their submission query which will be read by the system and displayed to the user. This allows a users of the system to read arbitrary files on the filesystem of the server so long as the server process itself has permission to read the requested files. This issue has been addressed in version 2.7.1. All users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: https://github.com/metersphere/metersphere/security/advisories/GHSA-fwc3-5h55-mh2j; https://github.com/metersphere/metersphere/security/advisories/GHSA-fwc3-5h55-mh2j