deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-30252
Published: 2024-04-04
Description: Livemarks is a browser extension that provides RSS feed bookmark folders. Versions of Livemarks prior to 3.7 are vulnerable to cross-site request forgery. A malicious website may be able to coerce the extension to send an authenticated GET request to an arbitrary URL. An authenticated request is a request where the cookies of the browser are sent along with the request. The `subscribe.js` script uses the first parameter from the current URL location as the URL of the RSS feed to subscribe to and checks that the RSS feed is valid XML. `subscribe.js` is accessible by an attacker website due to its use in `subscribe.html`, an HTML page that is declared as a `web_accessible_resource` in `manifest.json`. This issue may lead to `Privilege Escalation`. A CSRF breaks the integrity of servers running on a private network. A user of the browser extension may have a private server with dangerous functionality, which is assumed to be safe due to network segmentation. Upon receiving an authenticated request instantiated from an attacker, this integrity is broken. Version 3.7 fixes this issue by removing subscribe.html from `web_accessible_resources`.

CVSS Score: 2.6 (LOW)
CWE: CWE-352
References: https://github.com/nt1m/livemarks/blob/9c5233c82aa2f7c8bac348a08ff52881b00c4f95/manifest.json#L4; https://github.com/nt1m/livemarks/blob/9c5233c82aa2f7c8bac348a08ff52881b00c4f95/pages/subscribe/subscribe.js#L52; https://github.com/nt1m/livemarks/blob/9c5233c82aa2f7c8bac348a08ff52881b00c4f95/shared/feed-parser.js#L5
CVE: CVE-2024-30254
Published: 2024-04-04
Description: MesonLSP is an unofficial, unendorsed language server for meson written in C++. A vulnerability in versions prior to 4.1.4 allows overwriting arbitrary files if the attacker can make the victim either run the language server within a specific crafted project or `mesonlsp --full`. Version 4.1.4 contains a patch for this issue. As a workaround, avoid running `mesonlsp --full` and set the language server option `others.neverDownloadAutomatically` to `true`.


CVSS Score: 5.8 (MEDIUM)
CWE: CWE-22
References: https://github.com/JCWasmx86/mesonlsp/commit/594b[PII_REDACTED]911cd59389124ab8af30ce0a3a; https://github.com/JCWasmx86/mesonlsp/security/advisories/GHSA-48c5-35fh-846h; https://github.com/JCWasmx86/mesonlsp/commit/594b[PII_REDACTED]911cd59389124ab8af30ce0a3a
CVE: CVE-2023-38709
Published: 2024-04-04
Description: Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.

This issue affects Apache HTTP Server: through 2.4.58.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1284
References: http://seclists.org/fulldisclosure/2024/Jul/18; http://www.openwall.com/lists/oss-security/2024/04/04/3; https://httpd.apache.org/security/vulnerabilities_24.html
CVE: CVE-2024-22023
Published: 2024-04-04
Description: An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated attacker to send specially crafted XML requests in-order-to temporarily cause resource exhaustion thereby resulting in a limited-time DoS. 
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476, CWE-703
References: https://forums.ivanti.com/s/article/New-CVE-2024-21894-Heap-Overflow-CVE-2024-22052-Null-Pointer-Dereference-CVE-2024-22053-Heap-Overflow-and-CVE-2024-22023-XML-entity-expansion-or-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US; https://forums.ivanti.com/s/article/New-CVE-2024-21894-Heap-Overflow-CVE-2024-22052-Null-Pointer-Dereference-CVE-2024-22053-Heap-Overflow-and-CVE-2024-22023-XML-entity-expansion-or-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US
CVE: CVE-2024-22052
Published: 2024-04-04
Description: A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack 
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-703
References: https://forums.ivanti.com/s/article/New-CVE-2024-21894-Heap-Overflow-CVE-2024-22052-Null-Pointer-Dereference-CVE-2024-22053-Heap-Overflow-and-CVE-2024-22023-XML-entity-expansion-or-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US; https://forums.ivanti.com/s/article/New-CVE-2024-21894-Heap-Overflow-CVE-2024-22052-Null-Pointer-Dereference-CVE-2024-22053-Heap-Overflow-and-CVE-2024-22023-XML-entity-expansion-or-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US
CVE: CVE-2024-22053
Published: 2024-04-04
Description: A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x
 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack or in certain conditions read contents from memory. 
CVSS Score: 8.2 (HIGH)
CWE: CWE-787, CWE-703
References: https://forums.ivanti.com/s/article/New-CVE-2024-21894-Heap-Overflow-CVE-2024-22052-Null-Pointer-Dereference-CVE-2024-22053-Heap-Overflow-and-CVE-2024-22023-XML-entity-expansion-or-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US; https://forums.ivanti.com/s/article/New-CVE-2024-21894-Heap-Overflow-CVE-2024-22052-Null-Pointer-Dereference-CVE-2024-22053-Heap-Overflow-and-CVE-2024-22023-XML-entity-expansion-or-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US
CVE: CVE-2024-24795
Published: 2024-04-04
Description: HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack.

Users are recommended to upgrade to version 2.4.59, which fixes this issue.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-113, CWE-444
References: https://httpd.apache.org/security/vulnerabilities_24.html; http://seclists.org/fulldisclosure/2024/Jul/18; http://www.openwall.com/lists/oss-security/2024/04/04/5
CVE: CVE-2024-27316
Published: 2024-04-04
Description: HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: http://seclists.org/fulldisclosure/2024/Jul/18; http://www.openwall.com/lists/oss-security/2024/04/04/4; https://httpd.apache.org/security/vulnerabilities_24.html
CVE: CVE-2024-29386
Published: 2024-04-04
Description: projeqtor up to 11.2.0 was discovered to contain a SQL injection vulnerability via the component /view/criticalResourceExport.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://cve.anas-cherni.me/2024/04/04/cve-2024-29386/; https://cve.anas-cherni.me/2024/04/04/cve-2024-29386/
CVE: CVE-2024-29387
Published: 2024-04-04
Description: projeqtor up to 11.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /view/print.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://cve.anas-cherni.me/2024/04/04/cve-2024-29387/; https://cve.anas-cherni.me/2024/04/04/cve-2024-29387/
CVE: CVE-2024-30255
Published: 2024-04-04
Description: Envoy is a cloud-native, open source edge and service proxy. The HTTP/2 protocol stack in Envoy versions prior to 1.29.3, 1.28.2, 1.27.4, and 1.26.8 are vulnerable to CPU exhaustion due to flood of CONTINUATION frames. Envoy's HTTP/2 codec allows the client to send an unlimited number of CONTINUATION frames even after exceeding Envoy's header map limits. This allows an attacker to send a sequence of CONTINUATION frames without the END_HEADERS bit set causing CPU utilization, consuming approximately 1 core per 300Mbit/s of traffic and culminating in denial of service through CPU exhaustion. Users should upgrade to version 1.29.3, 1.28.2, 1.27.4, or 1.26.8 to mitigate the effects of the CONTINUATION flood. As a workaround, disable HTTP/2 protocol for downstream connections.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-390
References: http://www.openwall.com/lists/oss-security/2024/04/03/16; http://www.openwall.com/lists/oss-security/2024/04/05/3; https://github.com/envoyproxy/envoy/security/advisories/GHSA-j654-3ccm-vfmm
CVE: CVE-2023-45288
Published: 2024-04-04
Description: An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no memory is allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header frames we will process before closing a connection.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2024/04/03/16; http://www.openwall.com/lists/oss-security/2024/04/05/4; https://go.dev/cl/576155
CVE: CVE-2024-30264
Published: 2024-04-04
Description: Typebot is an open-source chatbot builder. A reflected cross-site scripting (XSS) in the sign-in page of typebot.io prior to version 2.24.0 may allow an attacker to hijack a user's account. The sign-in page takes the `redirectPath` parameter from the URL. If a user clicks on a link where the `redirectPath` parameter has a javascript scheme, the attacker that crafted the link may be able to execute arbitrary JavaScript with the privileges  of the user. Version 2.24.0 contains a patch for this issue.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://github.com/baptisteArno/typebot.io/blob/v2.23.0/apps/builder/src/features/auth/components/SignInForm.tsx#L35; https://github.com/baptisteArno/typebot.io/commit/d0be29e25732c410b561cbc3c5607c3c1d4b6c8e; https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-mx2f-9mcr-8j73
CVE: CVE-2024-30270
Published: 2024-04-04
Description: mailcow: dockerized is an open source groupware/email suite based on docker. A security vulnerability has been identified in mailcow affecting versions prior to 2024-04. This vulnerability is a combination of path traversal and arbitrary code execution, specifically targeting the `rspamd_maps()` function. It allows authenticated admin users to overwrite any file writable by the www-data user by exploiting improper path validation. The exploit chain can lead to the execution of arbitrary commands on the server. Version 2024-04 contains a patch for the issue.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-22
References: https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-4m8r-87gc-3vvp; https://mailcow.email/posts/2024/release-2024-04; https://www.sonarsource.com/blog/remote-code-execution-in-mailcow-always-sanitize-error-messages
CVE: CVE-2024-31204
Published: 2024-04-04
Description: mailcow: dockerized is an open source groupware/email suite based on docker. A security vulnerability has been identified in mailcow affecting versions prior to 2024-04. This vulnerability resides in the exception handling mechanism, specifically when not operating in DEV_MODE. The system saves exception details into a session array without proper sanitization or encoding. These details are later rendered into HTML and executed in a JavaScript block within the user's browser, without adequate escaping of HTML entities. This flaw allows for Cross-Site Scripting (XSS) attacks, where attackers can inject malicious scripts into the admin panel by triggering exceptions with controlled input. The exploitation method involves using any function that might throw an exception with user-controllable argument. This issue can lead to session hijacking and unauthorized administrative actions, posing a significant security risk. Version 2024-04 contains a fix for the issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-fp6h-63w4-5hcm; https://www.sonarsource.com/blog/remote-code-execution-in-mailcow-always-sanitize-error-messages; https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-fp6h-63w4-5hcm
CVE: CVE-2024-3311
Published: 2024-04-04
Description: A vulnerability was found in Dreamer CMS up to 4.1.3.0. It has been declared as critical. Affected by this vulnerability is the function ZipUtils.unZipFiles of the file controller/admin/ThemesController.java. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.3.1 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-259369 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://gitee.com/iteachyou/dreamer_cms/releases/tag/Latest_Stable_Release_4.1.3.1; https://gitee.com/y[PII_REDACTED]/poc-public/issues/I9BA5R; https://vuldb.com/?ctiid.259369
CVE: CVE-2024-3314
Published: 2024-04-04
Description: A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Users.php. The manipulation leads to sql injection. The attack may be initiated remotely. The identifier VDB-259385 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://vuldb.com/?ctiid.259385; https://vuldb.com/?id.259385; https://vuldb.com/?submit.309526
CVE: CVE-2024-3315
Published: 2024-04-04
Description: A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file classes/user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-259386 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/adminininin/blob/blob/main/README.md; https://vuldb.com/?ctiid.259386; https://vuldb.com/?id.259386
CVE: CVE-2024-29049
Published: 2024-04-04
Description: Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29049; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29049
CVE: CVE-2024-29981
Published: 2024-04-04
Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021, CWE-1021
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29981; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29981
CVE: CVE-2024-3316
Published: 2024-04-04
Description: A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/category/view_category.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259387.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/adminininin/blob/blob/main/2.md; https://vuldb.com/?ctiid.259387; https://vuldb.com/?id.259387
CVE: CVE-2024-21894
Published: 2024-04-04
Description: A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack. In certain conditions this may lead to execution of arbitrary code 
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-703
References: https://forums.ivanti.com/s/article/SA-CVE-2024-21894-Heap-Overflow-CVE-2024-22052-Null-Pointer-Dereference-CVE-2024-22053-Heap-Overflow-and-CVE-2024-22023-XML-entity-expansion-or-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US; https://forums.ivanti.com/s/article/SA-CVE-2024-21894-Heap-Overflow-CVE-2024-22052-Null-Pointer-Dereference-CVE-2024-22053-Heap-Overflow-and-CVE-2024-22023-XML-entity-expansion-or-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US
CVE: CVE-2024-27981
Published: 2024-04-04
Description: A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.0.28 and earlier) allows a malicious actor with UniFi Network Application Administrator credentials to escalate privileges to root on the host device.

Affected Products:
UniFi Network Application (Version 8.0.28 and earlier) .
 
Mitigation:
Update UniFi Network Application to Version 8.1.113 or later.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://community.ui.com/releases/Security-Advisory-Bulletin-038-038/9d13fead-47de-4372-b2c1-745b8d6b0399; https://community.ui.com/releases/Security-Advisory-Bulletin-038-038/9d13fead-47de-4372-b2c1-745b8d6b0399
CVE: CVE-2024-31206
Published: 2024-04-04
Description: dectalk-tts is a Node package to interact with the aeiou Dectalk web API. In `dectalk-tts@1.0.0`, network requests to the third-party API are sent over HTTP, which is unencrypted. Unencrypted traffic can be easily intercepted and modified by attackers. Anyone who uses the package could be the victim of a man-in-the-middle (MITM) attack. The network request was upgraded to HTTPS in version `1.0.1`. There are no workarounds, but some precautions include not sending any sensitive information and carefully verifying the API response before saving it.
CVSS Score: 8.2 (HIGH)
CWE: CWE-300, CWE-319, CWE-598
References: https://github.com/JstnMcBrd/dectalk-tts/blob/b3e92156cbb699218ac9b9c7d8979abd0e635767/src/index.ts#L18; https://github.com/JstnMcBrd/dectalk-tts/commit/3600d8ac156f27da553ac4ead46d16989a350105; https://github.com/JstnMcBrd/dectalk-tts/issues/3
CVE: CVE-2024-31210
Published: 2024-04-04
Description: WordPress is an open publishing platform for the Web. It's possible for a file of a type other than a zip file to be submitted as a new plugin by an administrative user on the Plugins -> Add New -> Upload Plugin screen in WordPress. If FTP credentials are requested for installation (in order to move the file into place outside of the `uploads` directory) then the uploaded file remains temporary available in the Media Library despite it not being allowed. If the `DISALLOW_FILE_EDIT` constant is set to `true` on the site _and_ FTP credentials are required when uploading a new theme or plugin, then this technically allows an RCE when the user would otherwise have no means of executing arbitrary PHP code. This issue _only_ affects Administrator level users on single site installations, and Super Admin level users on Multisite installations where it's otherwise expected that the user does not have permission to upload or execute arbitrary PHP code. Lower level users are not affected. Sites where the `DISALLOW_FILE_MODS` constant is set to `true` are not affected. Sites where an administrative user either does not need to enter FTP credentials or they have access to the valid FTP credentials, are not affected. The issue was fixed in WordPress 6.4.3 on January 30, 2024 and backported to versions 6.3.3, 6.2.4, 6.1.5, 6.0.7, 5.9.9, 5.8.9, 5.7.11, 5.6.13, 5.5.14, 5.4.15, 5.3.17, 5.2.20, 5.1.18, 5.0.21, 4.9.25, 2.8.24, 4.7.28, 4.6.28, 4.5.31, 4.4.32, 4.3.33, 4.2.37, and 4.1.40. A workaround is available. If the `DISALLOW_FILE_MODS` constant is defined as `true` then it will not be possible for any user to upload a plugin and therefore this issue will not be exploitable.

CVSS Score: 7.6 (HIGH)
CWE: CWE-434
References: https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-x79f-xrjv-jx5r; https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-x79f-xrjv-jx5r
CVE: CVE-2024-31211
Published: 2024-04-04
Description: WordPress is an open publishing platform for the Web. Unserialization of instances of the `WP_HTML_Token` class allows for code execution via its `__destruct()` magic method. This issue was fixed in WordPress 6.4.2 on December 6th, 2023. Versions prior to 6.4.0 are not affected.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-502
References: https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-m257-q4m5-j653; https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-m257-q4m5-j653
CVE: CVE-2024-31212
Published: 2024-04-04
Description: InstantCMS is a free and open source content management system. A SQL injection vulnerability affects instantcms v2.16.2 in which an attacker with administrative privileges can cause the application to execute unauthorized SQL code. The vulnerability exists in index_chart_data action, which receives an input from user and passes it unsanitized to the core model `filterFunc` function that further embeds this data in an SQL statement. This allows attackers to inject unwanted SQL code into the statement. The `period` should be escaped before inserting it in the query. As of time of publication, a patched version is not available.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20, CWE-89, CWE-89
References: https://github.com/instantsoft/icms2/blob/4691a1524780e74107f6009b48d91e17a81b0fa1/system/controllers/admin/actions/index_chart_data.php#L190; https://github.com/instantsoft/icms2/blob/4691a1524780e74107f6009b48d91e17a81b0fa1/system/core/model.php#L744; https://github.com/instantsoft/icms2/security/advisories/GHSA-qx95-w566-73fw
CVE: CVE-2024-31498
Published: 2024-04-04
Description: Yubico ykman-gui (aka YubiKey Manager GUI) before 1.2.6 on Windows, when Edge is not used, allows privilege escalation because browser windows can open as Administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://www.yubico.com/support/security-advisories/ysa-2024-01/; https://www.yubico.com/support/security-advisories/ysa-2024-01/
CVE: CVE-2024-3320
Published: 2024-04-05
Description: A vulnerability was found in SourceCodester eLearning System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument page leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-259388.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/qqqyc/vuln/blob/main/eLearning%20System-XSS-01.md; https://vuldb.com/?ctiid.259388; https://vuldb.com/?id.259388
CVE: CVE-2024-3321
Published: 2024-04-05
Description: A vulnerability classified as problematic has been found in SourceCodester eLearning System 1.0. This affects an unknown part of the component Maintenance Module. The manipulation of the argument Subject Code/Description leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259389 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/qqqyc/vuln/blob/main/eLearning%20System-XSS-04.md; https://vuldb.com/?ctiid.259389; https://vuldb.com/?id.259389
CVE: CVE-2023-5973
Published: 2024-04-05
Description: Brocade
 Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not 
properly represent the portName to the user if the portName contains 
reserved characters. This could allow an authenticated user to alter the
 UI of the Brocade Switch and change ports display.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-346, CWE-346
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.broadcom.com/external/content/SecurityAdvisories/0/23214; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/