deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-4390
Published: 2023-10-31
Description: The Popup box WordPress plugin before 3.7.2 does not sanitize and escape some Popup fields, which could allow high-privilege users such as an administrator to inject arbitrary web scripts even when the unfiltered_html capability is disallowed (for example in a multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/9fd2eb81-185d-4d42-8acf-925664b7cb2f; https://wpscan.com/vulnerability/9fd2eb81-185d-4d42-8acf-925664b7cb2f
CVE: CVE-2023-4610
Published: 2023-10-31
Description: Rejected reason: The SRCU code was added in upstream kernel v6.4-rc1 and removed before v6.4. This bug only existed in development kernels. Please see https://lore.kernel.org/all/ZTKVfoQZplpB8rki@casper.infradead.org and https://bugzilla.suse.com/show_bug.cgi?id=1215932 for more information.
CVE: CVE-2023-4823
Published: 2023-10-31
Description: The WP Meta and Date Remover WordPress plugin before 2.2.0 provides an AJAX endpoint for configuring the plugin settings. This endpoint has no capability checks and does not sanitize the user input, which is then later output unescaped. Allowing any authenticated users, such as subscriber change them and perform Stored Cross-Site Scripting.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/84f53e27-d8d2-4fa3-91f9-447037508d30; https://wpscan.com/vulnerability/84f53e27-d8d2-4fa3-91f9-447037508d30
CVE: CVE-2023-4836
Published: 2023-10-31
Description: The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://research.cleantalk.org/cve-2023-4836-user-private-files-idor-to-sensitive-data-and-private-files-exposure-leak-of-info-poc; https://wpscan.com/vulnerability/c17f2534-d791-4fe3-b45b-875777585dc6; https://research.cleantalk.org/cve-2023-4836-user-private-files-idor-to-sensitive-data-and-private-files-exposure-leak-of-info-poc
CVE: CVE-2023-5098
Published: 2023-10-31
Description: The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string "true", which could lead to a variety of outcomes, including DoS.
CVSS Score: 8.1 (HIGH)
References: https://wpscan.com/vulnerability/3167a83c-291e-4372-a42e-d842205ba722; https://wpscan.com/vulnerability/3167a83c-291e-4372-a42e-d842205ba722
CVE: CVE-2023-5211
Published: 2023-10-31
Description: The Fattura24 WordPress plugin before 6.2.8 does not sanitize or escape the 'id' parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/aa868380-cda7-4ec6-8a3f-d9fa692908f2; https://wpscan.com/vulnerability/aa868380-cda7-4ec6-8a3f-d9fa692908f2
CVE: CVE-2023-5229
Published: 2023-10-31
Description: The E2Pdf WordPress plugin before 1.20.20 does not sanitize and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/fb6ce636-9e0d-4c5c-bb95-dde1d2581245; https://wpscan.com/vulnerability/fb6ce636-9e0d-4c5c-bb95-dde1d2581245
CVE: CVE-2023-5237
Published: 2023-10-31
Description: The Memberlite Shortcodes WordPress plugin before 1.3.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://research.cleantalk.org/cve-2023-5237-memberlite-shortcodes-stored-xss-via-shortcode; https://wpscan.com/vulnerability/a46d686c-6234-4aa8-a656-00a65c55d0b0; https://research.cleantalk.org/cve-2023-5237-memberlite-shortcodes-stored-xss-via-shortcode
CVE: CVE-2023-5238
Published: 2023-10-31
Description: The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to an HTML Injection on the plugin in the search area of the website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/47a5fbfd-f47c-4356-8567-b29dadb48423; https://wpscan.com/vulnerability/47a5fbfd-f47c-4356-8567-b29dadb48423
CVE: CVE-2023-5243
Published: 2023-10-31
Description: The Login Screen Manager WordPress plugin through 3.5.2 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ad895200-a03a-4e92-b256-d6991547d38a; https://wpscan.com/vulnerability/ad895200-a03a-4e92-b256-d6991547d38a
CVE: CVE-2023-5307
Published: 2023-10-31
Description: The Photos and Files Contest Gallery WordPress plugin before 21.2.8.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks via certain headers.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://research.cleantalk.org/cve-2023-5307-photos-and-files-contest-gallery-contact-form-21-2-8-1-unauthenticated-stored-xss-via-http-headers; https://wpscan.com/vulnerability/6fac1e09-21ab-430d-b56d-195e7238c08c; https://research.cleantalk.org/cve-2023-5307-photos-and-files-contest-gallery-contact-form-21-2-8-1-unauthenticated-stored-xss-via-http-headers
CVE: CVE-2023-5360
Published: 2023-10-31
Description: The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/175992/WordPress-Royal-Elementor-Addons-And-Templates-Remote-Shell-Upload.html; https://wpscan.com/vulnerability/281518ff-7816-4007-b712-63aed7828b34; http://packetstormsecurity.com/files/175992/WordPress-Royal-Elementor-Addons-And-Templates-Remote-Shell-Upload.html
CVE: CVE-2023-5458
Published: 2023-10-31
Description: The CITS Support svg, webp Media and TTF,OTF File Upload WordPress plugin before 3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/47d15f1c-b9ca-494d-be8f-63c30e92f9b8; https://wpscan.com/vulnerability/47d15f1c-b9ca-494d-be8f-63c30e92f9b8
CVE: CVE-2023-5519
Published: 2023-10-31
Description: The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwanted bookings via CSRF attacks.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/ce564628-3d15-4bc5-8b8e-60b71786ac19; https://wpscan.com/vulnerability/ce564628-3d15-4bc5-8b8e-60b71786ac19
CVE: CVE-2023-22518
Published: 2023-10-31
Description: All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perform all administrative actions that are available to Confluence instance administrator leading to - but not limited to - full loss of confidentiality, integrity and availability. 

Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863, CWE-863
References: http://packetstormsecurity.com/files/176264/Atlassian-Confluence-Improper-Authorization-Code-Execution.html; https://confluence.atlassian.com/pages/viewpage.action?pageId=[PII_REDACTED]; https://jira.atlassian.com/browse/CONFSERVER-93142
CVE: CVE-2023-24410
Published: 2023-10-31
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contact Form - WPManageNinja LLC Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms fluentform allows SQL Injection.This issue affects Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms: from n/a through 4.3.25.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://patchstack.com/database/vulnerability/fluentform/wordpress-fluentform-plugin-4-3-25-sql-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/fluentform/wordpress-fluentform-plugin-4-3-25-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2023-31212
Published: 2023-10-31
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Database for Contact Form 7, WPforms, Elementor forms contact-form-entries allows SQL Injection.This issue affects Database for Contact Form 7, WPforms, Elementor forms: from n/a through 1.3.0.
CVSS Score: 8.5 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/vulnerability/contact-form-entries/wordpress-contact-form-entries-plugin-1-3-0-auth-sql-injection-sqli-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/contact-form-entries/wordpress-contact-form-entries-plugin-1-3-0-auth-sql-injection-sqli-vulnerability?_s_id=cve
CVE: CVE-2023-33927
Published: 2023-10-31
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Multiple Page Generator Plugin – MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.3.19.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/vulnerability/multiple-pages-generator-by-porthas/wordpress-multiple-page-generator-plugin-mpg-plugin-3-3-19-sql-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/multiple-pages-generator-by-porthas/wordpress-multiple-page-generator-plugin-mpg-plugin-3-3-19-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2023-35879
Published: 2023-10-31
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Product Vendors allows SQL Injection.This issue affects Product Vendors: from n/a through 2.1.78.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/vulnerability/woocommerce-product-vendors/wordpress-woocommerce-product-vendors-plugin-2-1-78-shop-manager-sql-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woocommerce-product-vendors/wordpress-woocommerce-product-vendors-plugin-2-1-78-shop-manager-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2023-36508
Published: 2023-10-31
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress contact-form-to-db allows SQL Injection.This issue affects Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress: from n/a through 1.7.1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/vulnerability/contact-form-to-db/wordpress-contact-form-to-db-by-bestwebsoft-plugin-1-7-1-sql-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/contact-form-to-db/wordpress-contact-form-to-db-by-bestwebsoft-plugin-1-7-1-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2023-37243
Published: 2023-10-31
Description: The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible to DLL hijacking, standard users can write a malicious DLL to it and elevate their privileges.

CVSS Score: 7.8 (HIGH)
CWE: CWE-379, CWE-379
References: https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0010.md; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0010.md
CVE: CVE-2023-37966
Published: 2023-10-31
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin Infotech User Activity Log user-activity-log allows SQL Injection.This issue affects User Activity Log: from n/a through 1.6.2.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/vulnerability/user-activity-log/wordpress-user-activity-log-plugin-1-6-2-sql-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/user-activity-log/wordpress-user-activity-log-plugin-1-6-2-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2023-40050
Published: 2023-10-31
Description: Upload profile either
through API or user interface in Chef Automate prior to and including version 4.10.29 using InSpec
check command with maliciously crafted profile allows remote code execution. 












CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94, CWE-434, CWE-94
References: https://community.progress.com/s/article/Product-Alert-Bulletin-October-2023-CHEF-Automate-CVE-2023-40050; https://docs.chef.io/automate/profiles/; https://docs.chef.io/release_notes_automate/
CVE: CVE-2023-42425
Published: 2023-10-31
Description: An issue in Turing Video Turing Edge+ EVC5FD v.1.38.6 allows remote attacker to execute arbitrary code and obtain sensitive information via the cloud connection components.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-295
References: http://turing.com; https://gist.github.com/stevenliuturing/306bb689737cec5d3a5760c34d65932c; http://turing.com
CVE: CVE-2023-42658
Published: 2023-10-31
Description: 
Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-917, CWE-94
References: https://community.progress.com/s/article/Product-Alert-Bulletin-October-2023-CHEF-Inspec-CVE-2023-42658; https://docs.chef.io/inspec/cli/; https://docs.chef.io/release_notes_inspec/
CVE: CVE-2023-46235
Published: 2023-10-31
Description: FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10.15, due to a lack of request sanitization in the logs, a malicious request containing XSS would be stored in a log file. When an administrator of the FOG server logged in and viewed the logs, they would be parsed as HTML and displayed accordingly. Version 1.5.10.15 contains a patch. As a workaround, view logs from an external text editor rather than the dashboard.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-80, CWE-79
References: https://github.com/FOGProject/fogproject/commit/2e2421f19620669b9930f72fb73a8dbc5efe4980; https://github.com/FOGProject/fogproject/security/advisories/GHSA-cvf7-7mvq-5694; https://github.com/FOGProject/fogproject/commit/2e2421f19620669b9930f72fb73a8dbc5efe4980
CVE: CVE-2023-46236
Published: 2023-10-31
Description: FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10, a server-side-request-forgery (SSRF) vulnerability allowed an unauthenticated user to trigger a GET request as the server to an arbitrary endpoint and URL scheme. This also allows remote access to files visible to the Apache user group. Other impacts vary based on server configuration. Version 1.5.10 contains a patch.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: https://github.com/FOGProject/fogproject/commit/9125f35ff649a3e7fd7771b1c8e5add3c726f763; https://github.com/FOGProject/fogproject/security/advisories/GHSA-8qg4-9363-873h; https://github.com/FOGProject/fogproject/commit/9125f35ff649a3e7fd7771b1c8e5add3c726f763
CVE: CVE-2023-46237
Published: 2023-10-31
Description: FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10, an endpoint intended to offer limited enumeration abilities to authenticated users was accessible to unauthenticated users. This enabled unauthenticated users to discover files and their respective paths that were visible to the Apache user group. Version 1.5.10 contains a patch for this issue.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-22
References: https://github.com/FOGProject/fogproject/commit/68d73740d7d40aee77cfda3fb8199d58bf04f48b; https://github.com/FOGProject/fogproject/security/advisories/GHSA-ffp9-rhfm-98c2; https://github.com/FOGProject/fogproject/commit/68d73740d7d40aee77cfda3fb8199d58bf04f48b
CVE: CVE-2023-46992
Published: 2023-10-31
Description: TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control. Attackers are able to reset serveral critical passwords without authentication by visiting specific pages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://github.com/AuroraHaaash/vul_report/blob/main/TOTOLINK%20A3300R/readme.md; https://github.com/AuroraHaaash/vul_report/blob/main/TOTOLINK%20A3300R/readme.md
CVE: CVE-2023-46993
Published: 2023-10-31
Description: In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/AuroraHaaash/vul_report/blob/main/TOTOLINK%20A3300R-Command%20Injection/readme.md; https://github.com/AuroraHaaash/vul_report/blob/main/TOTOLINK%20A3300R-Command%20Injection/readme.md
CVE: CVE-2023-46239
Published: 2023-10-31
Description: quic-go is an implementation of the QUIC protocol in Go. Starting in version 0.37.0 and prior to version 0.37.3, by serializing an ACK frame after the CRYTPO that allows a node to complete the handshake, a remote node could trigger a nil pointer dereference (leading to a panic) when the node attempted to drop the Handshake packet number space. An attacker can bring down a quic-go node with very minimal effort. Completing the QUIC handshake only requires sending and receiving a few packets. Version 0.37.3 contains a patch. Versions before 0.37.0 are not affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248, CWE-476
References: https://github.com/quic-go/quic-go/commit/b6a4725b60f1fe04e8f1ddcc3114e290fcea1617; https://github.com/quic-go/quic-go/releases/tag/v0.37.3; https://github.com/quic-go/quic-go/security/advisories/GHSA-3q6m-v84f-6p9h
CVE: CVE-2023-46240
Published: 2023-10-31
Description: CodeIgniter is a PHP full-stack web framework. Prior to CodeIgniter4 version 4.4.3, if an error or exception occurs, a detailed error report is displayed even if in the production environment. As a result, confidential information may be leaked. Version 4.4.3 contains a patch. As a workaround, replace `ini_set('display_errors', '0')` with `ini_set('display_errors', 'Off')` in `app/Config/Boot/production.php`.
CVSS Score: 7.5 (HIGH)
CWE: CWE-209
References: https://codeigniter4.github.io/userguide/general/errors.html#error-reporting; https://github.com/codeigniter4/CodeIgniter4/commit/423569fc31e29f51635a2e59c89770333f0e7563; https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-hwxf-qxj7-7rfj
CVE: CVE-2023-46245
Published: 2023-10-31
Description: Kimai is a web-based multi-user time-tracking application. Versions prior to 2.1.0 are vulnerable to a Server-Side Template Injection (SSTI) which can be escalated to Remote Code Execution (RCE). The vulnerability arises when a malicious user uploads a specially crafted Twig file, exploiting the software's PDF and HTML rendering functionalities. Version 2.1.0 enables security measures for custom Twig templates.
CVSS Score: 7.2 (HIGH)
CWE: CWE-1336
References: https://github.com/kimai/kimai/commit/38e37f1c2e91e1acb221ec5c13f11b735bd50ae4; https://github.com/kimai/kimai/security/advisories/GHSA-fjhg-96cp-6fcw; https://github.com/kimai/kimai/commit/38e37f1c2e91e1acb221ec5c13f11b735bd50ae4
CVE: CVE-2023-46248
Published: 2023-10-31
Description: Cody is an artificial intelligence (AI) coding assistant. The Cody AI VSCode extension versions 0.10.0 through 0.14.0 are vulnerable to Remote Code Execution under certain conditions. An attacker in control of a malicious repository could modify the Cody configuration file `.vscode/cody.json` and overwrite Cody commands. If a user with the extension installed opens this malicious repository and runs a Cody command such as /explain or /doc, this could allow arbitrary code execution on the user's machine. The vulnerability is rated as critical severity, but with low exploitability. It requires the user to have a malicious repository loaded and execute the overwritten command in VS Code. The issue is exploitable regardless of the user blocking code execution on a repository through VS Code Workspace Trust. The issue was found during a regular 3rd party penetration test. The maintainers of Cody do not have evidence of open source repositories having malicious `.vscode/cody.json` files to exploit this vulnerability. The issue is fixed in version 0.14.1 of the Cody VSCode extension. In case users can't promptly upgrade, they should not open any untrusted repositories with the Cody extension loaded.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-15
References: https://github.com/sourcegraph/cody/pull/1414; https://github.com/sourcegraph/cody/security/advisories/GHSA-8wmq-fwv7-xmwq; https://github.com/sourcegraph/cody/pull/1414
CVE: CVE-2023-46249
Published: 2023-10-31
Description: authentik is an open-source Identity Provider. Prior to versions 2023.8.4 and 2023.10.2, when the default admin user has been deleted, it is potentially possible for an attacker to set the password of the default admin user without any authentication. authentik uses a blueprint to create the default admin user, which can also optionally set the default admin users' password from an environment variable. When the user is deleted, the `initial-setup` flow used to configure authentik after the first installation becomes available again. authentik 2023.8.4 and 2023.10.2 fix this issue. As a workaround, ensure the default admin user (Username `akadmin`) exists and has a password set. It is recommended to use a very strong password for this user, and store it in a secure location like a password manager. It is also possible to deactivate the user to prevent any logins as akadmin.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-287, CWE-306
References: https://github.com/goauthentik/authentik/commit/261879022d25016d58867cf1f24e90b81ad618d0; https://github.com/goauthentik/authentik/commit/ea75741ec22ecef34bc7073f1163e17a8a2bf9fc; https://github.com/goauthentik/authentik/releases/tag/version%2F2023.10.2
CVE: CVE-2023-46250
Published: 2023-10-31
Description: pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions 3.7.0 through 3.16.4 can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage. That is, for example, the case when the pypdf-user manipulates an incoming malicious PDF e.g. by merging it with another PDF or by adding annotations. The issue was fixed in version 3.17.0. As a workaround, apply the patch manually by modifying `pypdf/generic/_data_structures.py`.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-835
References: https://github.com/py-pdf/pypdf/commit/9b23ac3c[PII_REDACTED]011d551d521690de9a3e2d; https://github.com/py-pdf/pypdf/pull/2264; https://github.com/py-pdf/pypdf/security/advisories/GHSA-wjcc-cq79-p63f