deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-6981
Published: 2024-01-03
Description: The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin for WordPress is vulnerable to SQL Injection via the 'group_id' parameter in all versions up to, and including, 6.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This can leveraged to achieve Reflected Cross-site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/wp-sms/wp-sms/commit/6656de201efe67c7983102c344a546eed976a819; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3015006%40wp-sms&new=3015006%40wp-sms&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/b8f53053-5150-4fba-b8d6-3d6c9df32c69?source=cve
CVE: CVE-2023-47473
Published: 2024-01-03
Description: Directory Traversal vulnerability in fuwushe.org iFair versions 23.8_ad0 and before allows an attacker to obtain sensitive information via a crafted script.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/THMOAS0/SSR123/blob/main/%E4%BC%81%E8%AF%ADiFair%20Any%20file%20read.pdf; https://www.yuque.com/ssr123/gxhh8t/xv5oxd5i5pxmxd1a?singleDoc; https://github.com/THMOAS0/SSR123/blob/main/%E4%BC%81%E8%AF%ADiFair%20Any%20file%20read.pdf
CVE: CVE-2023-6986
Published: 2024-01-03
Description: The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's embed_oembed_html shortcode in all versions up to 3.9.5 (exclusive) due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.svn.wordpress.org/embedpress/trunk/EmbedPress/Shortcode.php; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3014595%40embedpress&new=3014595%40embedpress&sfp_email=&sfph_mail=#file11; https://www.wordfence.com/threat-intel/vulnerabilities/id/ceae0115-268c-401b-876b-3477d10c10e6?source=cve
CVE: CVE-2023-50922
Published: 2024-01-03
Description: An issue was discovered on GL.iNet devices through 4.5.0. Attackers who are able to steal the AdminToken cookie can execute arbitrary code by uploading a crontab-formatted file to a specific directory and waiting for its execution. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Remote%20code%20execution%20due%20to%20gl_crontabs.md; https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Remote%20code%20execution%20due%20to%20gl_crontabs.md
CVE: CVE-2024-0207
Published: 2024-01-03
Description: HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://gitlab.com/wireshark/wireshark/-/issues/19502; https://www.wireshark.org/security/wnpa-sec-2024-03.html; https://gitlab.com/wireshark/wireshark/-/issues/19502
CVE: CVE-2024-0208
Published: 2024-01-03
Description: GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
CVSS Score: 7.8 (HIGH)
CWE: CWE-230
References: https://gitlab.com/wireshark/wireshark/-/issues/19496; https://www.wireshark.org/security/wnpa-sec-2024-01.html; https://gitlab.com/wireshark/wireshark/-/issues/19496
CVE: CVE-2024-0209
Published: 2024-01-03
Description: IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
CVSS Score: 7.8 (HIGH)
CWE: CWE-476, CWE-476
References: https://gitlab.com/wireshark/wireshark/-/issues/19501; https://www.wireshark.org/security/wnpa-sec-2024-02.html; https://gitlab.com/wireshark/wireshark/-/issues/19501
CVE: CVE-2024-0210
Published: 2024-01-03
Description: Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
CVSS Score: 7.8 (HIGH)
CWE: CWE-674, CWE-674
References: https://gitlab.com/wireshark/wireshark/-/issues/19504; https://www.wireshark.org/security/wnpa-sec-2024-04.html; https://gitlab.com/wireshark/wireshark/-/issues/19504
CVE: CVE-2024-0211
Published: 2024-01-03
Description: DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
CVSS Score: 7.8 (HIGH)
CWE: CWE-835, CWE-835
References: https://gitlab.com/wireshark/wireshark/-/issues/19557; https://www.wireshark.org/security/wnpa-sec-2024-05.html; https://gitlab.com/wireshark/wireshark/-/issues/19557
CVE: CVE-2023-38674
Published: 2024-01-03
Description: FPE in paddle.nanmedian in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.




CVSS Score: 4.7 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-006.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-006.md
CVE: CVE-2023-38675
Published: 2024-01-03
Description: FPE in paddle.linalg.matrix_rank in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.




CVSS Score: 4.7 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-007.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-007.md
CVE: CVE-2023-38676
Published: 2024-01-03
Description: Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.




CVSS Score: 4.7 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-008.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-008.md
CVE: CVE-2023-38677
Published: 2024-01-03
Description: FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.




CVSS Score: 4.7 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-009.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-009.md
CVE: CVE-2023-38678
Published: 2024-01-03
Description: OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.




CVSS Score: 4.7 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-010.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-010.md
CVE: CVE-2023-50921
Published: 2024-01-03
Description: An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the add_user interface in the system module to gain root privileges. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Add_user_vulnerability.md; https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Add_user_vulnerability.md
CVE: CVE-2023-52302
Published: 2024-01-03
Description: Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.




CVSS Score: 4.7 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-011.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-011.md
CVE: CVE-2023-52303
Published: 2024-01-03
Description: Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.




CVSS Score: 4.7 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-012.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-012.md
CVE: CVE-2023-52304
Published: 2024-01-03
Description: Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.




CVSS Score: 8.2 (HIGH)
CWE: CWE-120, CWE-787
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-013.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-013.md
CVE: CVE-2023-52305
Published: 2024-01-03
Description: FPE in paddle.topk in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.




CVSS Score: 4.7 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-014.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-014.md
CVE: CVE-2023-52306
Published: 2024-01-03
Description: FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.




CVSS Score: 4.7 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-015.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-015.md
CVE: CVE-2023-52307
Published: 2024-01-03
Description: Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.




CVSS Score: 8.2 (HIGH)
CWE: CWE-120, CWE-787
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-016.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-016.md
CVE: CVE-2023-52308
Published: 2024-01-03
Description: FPE in paddle.amin in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.




CVSS Score: 4.7 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-017.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-017.md
CVE: CVE-2023-52309
Published: 2024-01-03
Description: Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.




CVSS Score: 8.2 (HIGH)
CWE: CWE-120, CWE-787
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-018.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-018.md
CVE: CVE-2023-52310
Published: 2024-01-03
Description: PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute arbitrary commands on the operating system.








CVSS Score: 9.6 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-019.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-019.md
CVE: CVE-2023-52311
Published: 2024-01-03
Description: PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the ability to execute arbitrary commands on the operating system.








CVSS Score: 9.6 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-020.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-020.md
CVE: CVE-2023-52312
Published: 2024-01-03
Description: Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.




CVSS Score: 4.7 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-021.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-021.md
CVE: CVE-2023-52313
Published: 2024-01-03
Description: FPE in paddle.argmin and paddle.argmax in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.




CVSS Score: 4.7 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-022.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-022.md
CVE: CVE-2023-52314
Published: 2024-01-03
Description: PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted in the ability to execute arbitrary commands on the operating system.








CVSS Score: 9.6 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-023.md; https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-023.md
CVE: CVE-2023-6621
Published: 2024-01-03
Description: The POST SMTP WordPress plugin before 2.8.7 does not sanitise and escape the msg parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/b49ca336-5bc2-4d72-a9a5-b8c020057928; https://wpscan.com/vulnerability/b49ca336-5bc2-4d72-a9a5-b8c020057928
CVE: CVE-2023-6747
Published: 2024-01-03
Description: The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom attributes in all versions up to, and including, 2.3.3 due to insufficient input sanitization and output escaping. This makes it possible for contributors and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://fooplugins.com/foogallery-wordpress-gallery-plugin/pricing/; https://plugins.trac.wordpress.org/browser/foogallery/tags/2.4.9/includes/class-gallery-advanced-settings.php?rev=3027668#L149; https://plugins.trac.wordpress.org/browser/foogallery/tags/2.4.9/includes/functions.php#L1609
CVE: CVE-2023-6984
Published: 2024-01-03
Description: The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.13. This is due to missing or incorrect nonce validation in the powerpack-lite-for-elementor/classes/class-pp-admin-settings.php file. This makes it possible for unauthenticated attackers to modify and reset plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-352, CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3015474%40powerpack-lite-for-elementor&new=3015474%40powerpack-lite-for-elementor&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/fe2cfc96-63f4-4e4b-bf49-6031594a4805?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3015474%40powerpack-lite-for-elementor&new=3015474%40powerpack-lite-for-elementor&sfp_email=&sfph_mail=
CVE: CVE-2023-7068
Published: 2024-01-03
Description: The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on theprint_packinglist action in all versions up to, and including, 4.3.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to export orders which can contain sensitive information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3014977%40print-invoices-packing-slip-labels-for-woocommerce&new=3014977%40print-invoices-packing-slip-labels-for-woocommerce&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/5abc282d-68c9-423c-a15c-d4d3f7035661?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3014977%40print-invoices-packing-slip-labels-for-woocommerce&new=3014977%40print-invoices-packing-slip-labels-for-woocommerce&sfp_email=&sfph_mail=
CVE: CVE-2023-51784
Published: 2024-01-03
Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick [1] to solve it.

[1]  https://github.com/apache/inlong/pull/9329
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.openwall.com/lists/oss-security/2024/01/03/1; https://lists.apache.org/thread/4nxbyl6mh5jgh0plk0qposbxwn6w9h8j; http://www.openwall.com/lists/oss-security/2024/01/03/1
CVE: CVE-2023-51785
Published: 2024-01-03
Description: Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick [1] to solve it.

[1]  https://github.com/apache/inlong/pull/9331
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: http://www.openwall.com/lists/oss-security/2024/01/03/2; https://lists.apache.org/thread/g0yjmtjqvp8bnf1j0tdsk0nhfozjdjno; http://www.openwall.com/lists/oss-security/2024/01/03/2
CVE: CVE-2024-0201
Published: 2024-01-03
Description: The Product Expiry for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_settings' function in versions up to, and including, 2.5. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update plugin settings. CVE-2023-52179 appears to be a duplicate of this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/product-expiry-for-woocommerce/tags/2.5/product-expiry-for-woocommerce.php#L263; https://plugins.trac.wordpress.org/browser/product-expiry-for-woocommerce/tags/2.6/product-expiry-for-woocommerce.php?rev=3014924#L263; https://www.wordfence.com/threat-intel/vulnerabilities/id/c4006612-770a-482f-a8c2-e62f607914a9?source=cve
CVE: CVE-2023-37608
Published: 2024-01-03
Description: An issue in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensitive information because there is an automaticsystems super admin account with astech as its hardcoded password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798, CWE-798
References: https://github.com/CQURE/CVEs/tree/main/CVE-2023-37608; https://www.automatic-systems.com/range/; http://automatic-systems.com
CVE: CVE-2023-39655
Published: 2024-01-03
Description: A host header injection vulnerability exists in the NPM package @perfood/couch-auth versions <= 0.20.0. By sending a specially crafted host header in the forgot password request, it is possible to send password reset links to users which, once clicked, lead to an attacker-controlled server and thus leak the password reset token. This may allow an attacker to reset other users' passwords and take over their accounts.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-74, CWE-74
References: https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-39655; https://www.npmjs.com/package/%40perfood/couch-auth; https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-39655
CVE: CVE-2023-50092
Published: 2024-01-03
Description: APIIDA API Gateway Manager for Broadcom Layer7 v2023.2 is vulnerable to Cross Site Scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://apiida.com/product/apiida-api-gateway-manager/; https://senscybersecurity.nl/cve-2023-50092-explained/; https://apiida.com/product/apiida-api-gateway-manager/
CVE: CVE-2023-37607
Published: 2024-01-03
Description: Directory Traversal in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensitive information via csvServer.php?file= with a .. in the dir parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/CQURE/CVEs/blob/main/CVE-2023-37607/README.md; https://www.automatic-systems.com/range/; http://automatic-systems.com
CVE: CVE-2023-50093
Published: 2024-01-03
Description: APIIDA API Gateway Manager for Broadcom Layer7 v2023.2.2 is vulnerable to Host Header Injection.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74, CWE-74
References: https://apiida.com/product/apiida-api-gateway-manager/; https://senscybersecurity.nl/cve-2023-50093-explained/; https://apiida.com/product/apiida-api-gateway-manager/
CVE: CVE-2023-45559
Published: 2024-01-03
Description: An issue in Tamaki_hamanoki Line v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.
CVSS Score: 8.2 (HIGH)
References: http://tamakihamanoki.com; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-45559.md; http://tamakihamanoki.com
CVE: CVE-2023-30617
Published: 2024-01-03
Description: Kruise provides automated management of large-scale applications on Kubernetes. Starting in version 0.8.0 and prior to versions 1.3.1, 1.4.1, and 1.5.2, an attacker who has gained root privilege of the node that kruise-daemon run can leverage the kruise-daemon pod to list all secrets in the entire cluster. After that, the attacker can leverage the "captured" secrets (e.g. the kruise-manager service account token) to gain extra privileges such as pod modification. Versions 1.3.1, 1.4.1, and 1.5.2 fix this issue. A workaround is available. For users that do not require imagepulljob functions, they can modify kruise-daemon-role to drop the cluster level secret get/list privilege.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-250, CWE-269, CWE-269
References: https://github.com/openkruise/kruise/security/advisories/GHSA-437m-7hj5-9mpw; https://github.com/openkruise/kruise/security/advisories/GHSA-437m-7hj5-9mpw
CVE: CVE-2023-46738
Published: 2024-01-03
Description: CubeFS is an open-source cloud-native file storage system. A security vulnerability was found in CubeFS HandlerNode in versions prior to 3.3.1 that could allow authenticated users to send maliciously-crafted requests that would crash the ObjectNode and deny other users from using it. The root cause was improper handling of incoming HTTP requests that could allow an attacker to control the ammount of memory that the ObjectNode would allocate. A malicious request could make the ObjectNode allocate more memory that the machine had available, and the attacker could exhaust memory by way of a single malicious request. An attacker would need to be authenticated in order to invoke the vulnerable code with their malicious request and have permissions to delete objects. In addition, the attacker would need to know the names of existing buckets of the CubeFS deployment - otherwise the request would be rejected before it reached the vulnerable code. As such, the most likely attacker is an inside user or an attacker that has breached the account of an existing user in the cluster. The issue has been patched in v3.3.1. There is no other mitigation besides upgrading.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/cubefs/cubefs/commit/dd46c24873c8f3df48d0a598b704ef9bd24b1ec1; https://github.com/cubefs/cubefs/security/advisories/GHSA-qc6v-g3xw-grmx; https://github.com/cubefs/cubefs/commit/dd46c24873c8f3df48d0a598b704ef9bd24b1ec1