deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-25548
Published: 2023-04-18
Description: 
A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device
credentials on specific DCE endpoints not being properly secured when a hacker is using a low
privileged user. 

 Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)


CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf
CVE: CVE-2023-25549
Published: 2023-04-18
Description: 






A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that
allows for remote code execution when using a parameter of the DCE network settings
endpoint. 




 

 

 Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)


CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf
CVE: CVE-2023-25550
Published: 2023-04-18
Description: 








A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that
allows remote code execution via the “hostname” parameter when maliciously crafted hostname
syntax is entered.

 




 

 

 Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)


CVSS Score: 7.2 (HIGH)
CWE: CWE-94, CWE-94
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf
CVE: CVE-2023-25551
Published: 2023-04-18
Description: 










A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site
Scripting') vulnerability exists on a DCE file upload endpoint when tampering with parameters
over HTTP.



 




 

 

 Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf
CVE: CVE-2023-25552
Published: 2023-04-18
Description: 


A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized
content, changes or deleting of content, or performing unauthorized functions when tampering
the Device File Transfer settings on DCE endpoints. 

 

 Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)


CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf
CVE: CVE-2023-25553
Published: 2023-04-18
Description: 












A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site
Scripting') vulnerability exists on a DCE endpoint through the logging capabilities of the
webserver. 





 




 

 

 Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf
CVE: CVE-2023-25554
Published: 2023-04-18
Description: 




A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS
Command Injection') vulnerability exists that allows a local privilege escalation on the appliance
when a maliciously crafted Operating System command is entered on the device.

 

 

 Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)


CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf
CVE: CVE-2023-25555
Published: 2023-04-18
Description: 














A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS
Command Injection') vulnerability exists that could allow a user that knows the credentials to
execute unprivileged shell commands on the appliance over SSH. 

 





 




 

 

 Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)


CVSS Score: 5.6 (MEDIUM)
CWE: CWE-78
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf
CVE: CVE-2023-26048
Published: 2023-04-18
Description: Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` when the client sends a multipart request with a part that has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0` which should stream the whole part content to disk. An attacker client may send a large multipart request and cause the server to throw `OutOfMemoryError`. However, the server may be able to recover after the `OutOfMemoryError` and continue its service -- although it may take some time. This issue has been patched in versions 9.4.51, 10.0.14, and 11.0.14. Users are advised to upgrade. Users unable to upgrade may set the multipart parameter `maxRequestSize` which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://github.com/eclipse/jetty.project/issues/9076; https://github.com/eclipse/jetty.project/pull/9344; https://github.com/eclipse/jetty.project/pull/9345
CVE: CVE-2023-26049
Published: 2023-04-18
Description: Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE="b; JSESSIONID=1337; c=d"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 2.4 (LOW)
CWE: CWE-200
References: https://github.com/eclipse/jetty.project/pull/9339; https://github.com/eclipse/jetty.project/pull/9352; https://github.com/eclipse/jetty.project/security/advisories/GHSA-p26g-97m4-6q7c
CVE: CVE-2023-28003
Published: 2023-04-18
Description: 


A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to
maintain unauthorized access over a hijacked session in PME after the legitimate user has
signed out of their account.




CVSS Score: 6.7 (MEDIUM)
CWE: CWE-613
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-01.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-01.pdf
CVE: CVE-2023-28440
Published: 2023-04-18
Description: Discourse is an open source platform for community discussion. In affected versions a maliciously crafted request from a Discourse administrator can lead to a long-running request and eventual timeout. This has the greatest potential impact in shared hosting environments where admins are untrusted. This issue has been addressed in versions 3.0.3 and 3.1.0.beta4. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 2.7 (LOW)
CWE: CWE-400
References: https://github.com/discourse/discourse/security/advisories/GHSA-vm65-pv5h-6g3w; https://github.com/discourse/discourse/security/advisories/GHSA-vm65-pv5h-6g3w
CVE: CVE-2023-28839
Published: 2023-04-18
Description: Shoppingfeed PrestaShop is an add-on to the PrestaShop ecommerce platform to synchronize data. The module Shoppingfeed for PrestaShop is vulnerable to SQL injection between version 1.4.0 and 1.8.2 due to a lack of input sanitization. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-89
References: https://github.com/shoppingflux/module-prestashop/pull/209; https://github.com/shoppingflux/module-prestashop/security/advisories/GHSA-vfmq-w777-qvcf; https://github.com/shoppingflux/module-prestashop/pull/209
CVE: CVE-2023-28856
Published: 2023-04-18
Description: Redis is an open source, in-memory database that persists on disk. Authenticated users can use the `HINCRBYFLOAT` command to create an invalid hash field that will crash Redis on access in affected versions. This issue has been addressed in in versions 7.0.11, 6.2.12, and 6.0.19. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-617, CWE-617
References: https://github.com/redis/redis/commit/bc7fe41e5857a0854d524e2a63a028e9394d2a5c; https://github.com/redis/redis/pull/11149; https://github.com/redis/redis/security/advisories/GHSA-hjv8-vjf6-wcr6
CVE: CVE-2023-29411
Published: 2023-04-18
Description: 
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow
changes to administrative credentials, leading to potential remote code execution without
requiring prior authentication on the Java RMI interface. 




CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf
CVE: CVE-2023-29412
Published: 2023-04-18
Description: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command
Injection') vulnerability exists that could cause remote code execution when manipulating
internal methods through Java RMI interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf
CVE: CVE-2023-29413
Published: 2023-04-18
Description: 
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause
Denial-of-Service when accessed by an unauthenticated user on the Schneider UPS Monitor
service. 

 




CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf
CVE: CVE-2023-28004
Published: 2023-04-18
Description: 


A CWE-129: Improper validation of an array index vulnerability exists where a specially crafted
Ethernet request could result in denial of service or remote code execution. 

 

 




CVSS Score: 9.8 (CRITICAL)
CWE: CWE-129
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-02.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-02.pdf
CVE: CVE-2023-29002
Published: 2023-04-18
Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. When run in debug mode, Cilium will log the contents of the `cilium-secrets` namespace. This could include data such as TLS private keys for Ingress and GatewayAPI resources. An attacker with access to debug output from the Cilium containers could use the resulting output to intercept and modify traffic to and from the affected cluster. Output of the sensitive information would occur at Cilium agent restart, when secrets in the namespace are modified, and on creation of Ingress or GatewayAPI resources. This vulnerability is fixed in Cilium releases 1.11.16, 1.12.9, and 1.13.2. Users unable to upgrade should disable debug mode.
CVSS Score: 7.2 (HIGH)
CWE: CWE-532
References: https://github.com/cilium/cilium/security/advisories/GHSA-pg5p-wwp8-97g8; https://github.com/cilium/cilium/security/advisories/GHSA-pg5p-wwp8-97g8
CVE: CVE-2023-29196
Published: 2023-04-18
Description: Discourse is an open source platform for community discussion. This vulnerability is not exploitable on the default install of Discourse. A custom feature must be enabled for it to work at all, and the attacker’s payload must pass the CSP to be executed. However, if an attacker succeeds in embedding Javascript that does pass the CSP, it could result in session hijacking for any users that view the attacker’s post. The vulnerability is patched in the latest tests-passed, beta and stable branches. Users are advised to upgrade. Users unable to upgrade should enable and/or restore your site's CSP to the default one provided with Discourse. Remove any embed-able hosts configured.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-79
References: https://github.com/discourse/discourse/security/advisories/GHSA-986p-4x8q-8f48; https://github.com/discourse/discourse/security/advisories/GHSA-986p-4x8q-8f48
CVE: CVE-2023-29410
Published: 2023-04-18
Description: 
A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated
attacker to gain the same privilege as the application on the server when a malicious payload is
provided over HTTP for the server to execute. 

 




CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-02.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-02.pdf
CVE: CVE-2023-30538
Published: 2023-04-18
Description: Discourse is an open source platform for community discussion. Due to the improper sanitization of SVG files, an attacker can execute arbitrary JavaScript on the users’ browsers by uploading a crafted SVG file. This issue is patched in the latest stable and tests-passed versions of Discourse. Users are advised to upgrade. For users unable to upgrade there are two possible workarounds: enable CDN handing of uploads (and ensure the CDN sanitizes SVG files) or disable SVG file uploads by ensuring that the `authorized extensions` site setting does not include `svg` (or reset that setting to the default, by default Discourse doesn't enable SVG uploads by users). 
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/discourse/discourse/security/advisories/GHSA-w5mv-4pjf-xj43; https://github.com/discourse/discourse/security/advisories/GHSA-w5mv-4pjf-xj43
CVE: CVE-2023-30606
Published: 2023-04-18
Description: Discourse is an open source platform for community discussion. In affected versions a user logged as an administrator can call arbitrary methods on the `SiteSetting` class, notably `#clear_cache!` and `#notify_changed!`, which when done on a multisite instance, can affect the entire cluster resulting in a denial of service. Users not running in multisite environments are not affected. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://github.com/discourse/discourse/security/advisories/GHSA-jj93-w3mv-3jvv; https://github.com/discourse/discourse/security/advisories/GHSA-jj93-w3mv-3jvv
CVE: CVE-2023-30608
Published: 2023-04-18
Description: sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://github.com/andialbrecht/sqlparse/commit/c457abd5f097dd13fb21543381e7cfafe7d31cfb; https://github.com/andialbrecht/sqlparse/commit/e75e[PII_REDACTED]2a1eb67772b1adfee2db11b85a; https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2
CVE: CVE-2021-28254
Published: 2023-04-19
Description: A deserialization vulnerability in the destruct() function of Laravel v8.5.9 allows attackers to execute arbitrary commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://s1mple-top.github.io/2021/03/09/Laravel8-new-pop-chain-mining-process/; https://s1mple-top.github.io/2021/03/09/Laravel8-new-pop-chain-mining-process/
CVE: CVE-2023-27043
Published: 2023-04-19
Description: The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20, CWE-1286
References: http://python.org; https://github.com/python/cpython/issues/102988; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/
CVE: CVE-2023-29510
Published: 2023-04-19
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In XWiki, every user can add translations that are only applied to the current user. This also allows overriding existing translations. Such translations are often included in privileged contexts without any escaping which allows remote code execution for any user who has edit access on at least one document which could be the user's own profile where edit access is enabled by default. A mitigation for this vulnerability is part of XWiki 14.10.2 and XWiki 15.0 RC1: translations with user scope now require script right. This means that regular users cannot exploit this anymore as users don't have script right by default anymore starting with XWiki 14.10. There are no known workarounds apart from upgrading to a patched versions.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-74
References: https://github.com/xwiki/xwiki-platform/commit/d06ff8a58480abc7f63eb1d4b8b366024d990643; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-4v38-964c-xjmw; https://jira.xwiki.org/browse/XWIKI-19749
CVE: CVE-2023-29512
Published: 2023-04-19
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on a page (e.g., it's own user page), can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the information loaded from attachments in `imported.vm`, `importinline.vm`, and `packagelist.vm`. This page is installed by default. This vulnerability has been patched in XWiki 15.0-rc-1, 14.10.1, 14.4.8, and 13.10.11. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-74
References: https://github.com/xwiki/xwiki-platform/commit/e4bbdc23fea0be4ef1921d1a58648028ce753344; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-hg5x-3w3x-7g96; https://jira.xwiki.org/browse/XWIKI-20267
CVE: CVE-2023-29513
Published: 2023-04-19
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. If guest has view right on any document. It's possible to create a new user using the `distribution/firstadminuser.wiki` in the wrong context. This vulnerability has been patched in XWiki 15.0-rc-1 and 14.10.1. There is no known workaround other than upgrading.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-fp36-mjw5-fmgx; https://jira.xwiki.org/browse/XWIKI-19852; https://jira.xwiki.org/browse/XWIKI-20400
CVE: CVE-2023-29514
Published: 2023-04-19
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on any document (e.g., their own user profile) can execute code with programming rights, leading to remote code execution. This vulnerability has been patched in XWiki 13.10.11, 14.4.8, 14.10.1 and 15.0 RC1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-74
References: https://github.com/xwiki/xwiki-platform/commit/7bf7094f8ffac095f5d66809af7554c9cc44de09; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9j36-3cp4-rh4j; https://jira.xwiki.org/browse/XWIKI-20268