deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-27040
Published: 2023-03-16
Description: Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74, CWE-74
References: https://www.exploit-db.com/exploits/50214; https://www.exploit-db.com/exploits/50214
CVE: CVE-2023-28100
Published: 2023-03-16
Description: Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but using the `TIOCLINUX` ioctl command instead of `TIOCSTI`. If a Flatpak app is run on a Linux virtual console such as `/dev/tty1`, it can copy text from the virtual console and paste it into the command buffer, from which the command might be run after the Flatpak app has exited. Ordinary graphical terminal emulators like xterm, gnome-terminal and Konsole are unaffected. This vulnerability is specific to the Linux virtual consoles `/dev/tty1`, `/dev/tty2` and so on. A patch is available in versions 1.10.8, 1.12.8, 1.14.4, and 1.15.4. As a workaround, don't run Flatpak on a Linux virtual console. Flatpak is primarily designed to be used in a Wayland or X11 graphical environment.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-20
References: https://github.com/flatpak/flatpak/commit/8e63de9a7d3124f91140fc74f8ca9ed73ed53be9; https://github.com/flatpak/flatpak/security/advisories/GHSA-7qpw-3vjv-xrqp; https://marc.info/?l=oss-security&m=[PII_REDACTED]9955&w=2
CVE: CVE-2023-28101
Published: 2023-03-16
Description: Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated permissions, they can hide those permissions from users of the `flatpak(1)` command-line interface by setting other permissions to crafted values that contain non-printable control characters such as `ESC`. A fix is available in versions 1.10.8, 1.12.8, 1.14.4, and 1.15.4. As a workaround, use a GUI like GNOME Software rather than the command-line interface, or only install apps whose maintainers you trust.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-116
References: https://github.com/flatpak/flatpak/commit/409e34187de2b2b2c4ef34c79f417be698830f6c; https://github.com/flatpak/flatpak/commit/6cac99dafe6003c8a4bd5666341c[PII_REDACTED]69; https://github.com/flatpak/flatpak/commit/7fe63f2e8f1fd2dafc31d45154cf0b191ebec66c
CVE: CVE-2023-28104
Published: 2023-03-16
Description: `silverstripe/graphql` serves Silverstripe data as GraphQL representations. In versions 4.2.2 and 4.1.1, an attacker could use a specially crafted graphql query to execute a denial of service attack against a website which has a publicly exposed graphql endpoint. This mostly affects websites with particularly large/complex graphql schemas. Users should upgrade to `silverstripe/graphql` 4.2.3 or 4.1.2 to remedy the vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://github.com/silverstripe/silverstripe-graphql/pull/526; https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.1.2; https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.2.3
CVE: CVE-2023-27041
Published: 2023-03-16
Description: School Registration and Fee System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at/bilal final/edit_user.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/forsean/bug_report/blob/main/vendors/hemedy99/School%20Registration%20and%20Fee%20System/SQLi-1.md; https://github.com/forsean/bug_report/blob/main/vendors/hemedy99/School%20Registration%20and%20Fee%20System/SQLi-1.md
CVE: CVE-2023-28105
Published: 2023-03-16
Description: go-used-util has commonly used utility functions for Go. Versions prior to 0.0.34 have a ZipSlip issue when using fsutil package to unzip files. When users use `zip.Unzip` to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. The issue has been fixed in version 0.0.34. There are no known workarounds.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/dablelv/go-huge-util/commit/0e308b0fac8973e6fa251b0ab095cdc5c1c0956b; https://github.com/dablelv/go-huge-util/security/advisories/GHSA-5g39-ppwg-6xx8; https://github.com/dablelv/go-huge-util/commit/0e308b0fac8973e6fa251b0ab095cdc5c1c0956b
CVE: CVE-2023-28106
Published: 2023-03-16
Description: Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-site scripting to send a malicious script to an unsuspecting user. Users may upgrade to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/c59d0bf1d03a5037b586fe06230694fa3818dbf2; https://github.com/pimcore/pimcore/pull/14669.patch; https://github.com/pimcore/pimcore/security/advisories/GHSA-x5j3-mq9g-8jc8
CVE: CVE-2023-28108
Published: 2023-03-16
Description: Pimcore is an open source data and experience management platform. Prior to version 10.5.19, quoting is not done properly in UUID DAO model. There is the theoretical possibility to inject custom SQL if the developer is using this methods with input data and not doing proper input validation in advance and so relies on the auto-quoting being done by the DAO class. Users should update to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually.
CVSS Score: 7.9 (HIGH)
CWE: CWE-89
References: https://github.com/pimcore/pimcore/commit/08e7ba56ae983c3c67ec563b6989b16ef8f35275.patch; https://github.com/pimcore/pimcore/pull/14633; https://github.com/pimcore/pimcore/security/advisories/GHSA-xc9p-r5qj-8xm9
CVE: CVE-2023-28109
Published: 2023-03-16
Description: Play With Docker is a browser-based Docker playground. Versions 0.0.2 and prior are vulnerable to domain hijacking.
Because CORS configuration was not correct, an attacker could use `play-with-docker.com` as an example and set the origin header in an http request as `evil-play-with-docker.com`. The domain would echo in response header, which successfully bypassed the CORS policy and retrieved basic user information. This issue has been fixed in commit ed82247c9ab7990ad76ec2bf1498c2b2830b6f1a. There are no known workarounds.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://github.com/play-with-docker/play-with-docker/commit/ed82247c9ab7990ad76ec2bf1498c2b2830b6f1a; https://github.com/play-with-docker/play-with-docker/security/advisories/GHSA-vq59-5x26-h639; https://github.com/play-with-docker/play-with-docker/commit/ed82247c9ab7990ad76ec2bf1498c2b2830b6f1a
CVE: CVE-2023-28110
Published: 2023-03-16
Description: Jumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, refactoring coco's SSH/SFTP service and Web Terminal service. Prior to version 2.28.8, using illegal tokens to connect to a Kubernetes cluster through Koko can result in the execution of dangerous commands that may disrupt the Koko container environment and affect normal usage. The vulnerability has been fixed in v2.28.8.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-77
References: https://github.com/jumpserver/jumpserver/releases/tag/v2.28.8; https://github.com/jumpserver/jumpserver/security/advisories/GHSA-6x5p-jm59-jh29; https://github.com/jumpserver/jumpserver/releases/tag/v2.28.8
CVE: CVE-2023-0811
Published: 2023-03-16
Description: 
Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program. 


CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01; https://www.ia.omron.com/product/vulnerability/OMSR-2023-001_en.pdf; https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01
CVE: CVE-2023-1256
Published: 2023-03-16
Description: The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states.
CVSS Score: 9.8 (CRITICAL)
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-04; https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-04
CVE: CVE-2023-0598
Published: 2023-03-16
Description: 
GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to insert malicious configuration files in the expected web server execution path and gain full control of the HMI software. 


CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://digitalsupport.ge.com/s/article/iFIX-Secure-Deployment-Guide?language=en_US; https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-03; https://digitalsupport.ge.com/s/article/iFIX-Secure-Deployment-Guide?language=en_US
CVE: CVE-2022-43441
Published: 2023-03-16
Description: A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-915, CWE-913
References: https://github.com/TryGhost/node-sqlite3/security/advisories/GHSA-jqv5-7xpx-qj74; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1645; https://github.com/TryGhost/node-sqlite3/security/advisories/GHSA-jqv5-7xpx-qj74
CVE: CVE-2022-43604
Published: 2023-03-16
Description: An out-of-bounds write vulnerability exists in the GetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c. A specially crafted EtherNet/IP request can lead to an out-of-bounds write, potentially causing the server to crash or allow for remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1661; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1661; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1661
CVE: CVE-2022-43605
Published: 2023-03-16
Description: An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c. A specially crafted EtherNet/IP request can lead to an out of bounds write, potentially causing the server to crash or allow for remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1662; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1662; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1662
CVE: CVE-2022-43606
Published: 2023-03-16
Description: A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the server to crash. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-824
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1663; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1663; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1663
CVE: CVE-2023-1390
Published: 2023-03-16
Description: A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1050
References: https://gist.github.com/netspooky/bee2d07022f6350bb88eaa48e571d9b5; https://github.com/torvalds/linux/commit/b[PII_REDACTED]8fdd256599daf00d5be72b5f3e7c6; https://infosec.exchange/%40_mattata/[PII_REDACTED]1122360
CVE: CVE-2023-21449
Published: 2023-03-16
Description: Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03
CVE: CVE-2023-21452
Published: 2023-03-16
Description: Improper usage of implicit intent in Bluetooth prior to SMR Mar-2023 Release 1 allows attacker to get MAC address of connected device.
CVSS Score: 3.3 (LOW)
CWE: CWE-285
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03
CVE: CVE-2023-21453
Published: 2023-03-16
Description: Improper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows local attackers access to protected data.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03
CVE: CVE-2023-21454
Published: 2023-03-16
Description: Improper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical attacker to access users text history on the lockscreen.
CVSS Score: 2.4 (LOW)
CWE: CWE-285
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03
CVE: CVE-2023-21455
Published: 2023-03-16
Description: Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03
CVE: CVE-2023-21456
Published: 2023-03-16
Description: Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03
CVE: CVE-2023-21457
Published: 2023-03-16
Description: Improper access control vulnerability in Bluetooth prior to SMR Mar-2023 Release 1 allows attackers to send file via Bluetooth without related permission.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03
CVE: CVE-2023-21458
Published: 2023-03-16
Description: Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off Do not disturb via unprotected intent.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03
CVE: CVE-2023-21459
Published: 2023-03-16
Description: Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-416
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03
CVE: CVE-2023-21460
Published: 2023-03-16
Description: Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03
CVE: CVE-2023-21461
Published: 2023-03-16
Description: Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-285
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03
CVE: CVE-2023-21462
Published: 2023-03-16
Description: The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-215
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03
CVE: CVE-2023-21463
Published: 2023-03-16
Description: Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker to get sensitive information of secret mode in Samsung Internet application with specific conditions.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03
CVE: CVE-2023-21464
Published: 2023-03-16
Description: Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure improper status.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-281
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03
CVE: CVE-2023-21465
Published: 2023-03-16
Description: Improper access control vulnerability in BixbyTouch prior to version 3.2.02.5 in China models allows untrusted applications access local files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03
CVE: CVE-2023-22880
Published: 2023-03-16
Description: Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability. A recent update to the Microsoft Edge WebView2 runtime used by the affected Zoom clients, transmitted text to Microsoft’s online Spellcheck service instead of the local Windows Spellcheck. Updating Zoom remediates this vulnerability by disabling the feature. Updating Microsoft Edge WebView2 Runtime to at least version 109.0.1481.0 and restarting Zoom remediates this vulnerability by updating Microsoft’s telemetry behavior.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-200
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-22881
Published: 2023-03-16
Description: Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-22882
Published: 2023-03-16
Description: Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-22883
Published: 2023-03-16
Description: Zoom Client for IT Admin Windows installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain during the installation process to escalate their privileges to the SYSTEM user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-367
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-23935
Published: 2023-03-16
Description: Discourse is an open-source messaging platform. In versions 3.0.1 and prior on the `stable` branch and versions 3.1.0.beta2 and prior on the `beta` and `tests-passed` branches, the count of personal messages displayed for a tag is a count of all personal messages regardless of whether the personal message is visible to a given user. As a result, any users can technically poll a sensitive tag to determine if a new personal message is created even if the user does not have access to the personal message.

In the patched versions, the count of personal messages tagged with a given tag is hidden by default. To revert to the old behaviour of displaying the count of personal messages for a given tag, an admin may enable the `display_personal_messages_tag_counts` site setting.
CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: https://github.com/discourse/discourse/commit/f31f0b70f82c43d93220ce6fc0d4f57440452f37; https://github.com/discourse/discourse/security/advisories/GHSA-rf8j-mf8c-82v7; https://github.com/discourse/discourse/commit/f31f0b70f82c43d93220ce6fc0d4f57440452f37
CVE: CVE-2023-27494
Published: 2023-03-16
Description: Streamlit, software for turning data scripts into web applications, had a cross-site scripting (XSS) vulnerability in versions 0.63.0 through 0.80.0. Users of hosted Streamlit app(s) were vulnerable to a reflected XSS vulnerability. An attacker could craft a malicious URL with Javascript payloads to a Streamlit app. The attacker could then trick the user into visiting the malicious URL and, if successful, the server would render the malicious javascript payload as-is, leading to XSS. Version 0.81.0 contains a patch for this vulnerability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://github.com/streamlit/streamlit/commit/afcf880c60e5d7538936cc2d9721b9e1bc02b075; https://github.com/streamlit/streamlit/security/advisories/GHSA-9c6g-qpgj-rvxw; https://github.com/streamlit/streamlit/commit/afcf880c60e5d7538936cc2d9721b9e1bc02b075
CVE: CVE-2023-28113
Published: 2023-03-16
Description: russh is a Rust SSH client and server library. Starting in version 0.34.0 and prior to versions 0.36.2 and 0.37.1, Diffie-Hellman key validation is insufficient, which can lead to insecure shared secrets and therefore breaks confidentiality. Connections between a russh client and server or those of a russh peer with some other misbehaving peer are most likely to be problematic. These may vulnerable to eavesdropping. Most other implementations reject such keys, so this is mainly an interoperability issue in such a case. This issue is fixed in versions 0.36.2 and 0.37.1
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-358, CWE-347
References: https://github.com/warp-tech/russh/blob/master/russh/src/kex/dh/groups.rs#L72-L76; https://github.com/warp-tech/russh/blob/master/russh/src/kex/dh/groups.rs#L78-L81; https://github.com/warp-tech/russh/commit/d831a3716d3719dc76f091fcea9d94bd4ef97c6e