deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-26133
Published: 2024-02-21
Description: EventStoreDB (ESDB) is an operational database built to store events. A vulnerability has been identified in the projections subsystem in versions 20 prior to 20.10.6, 21 prior to 21.10.11, 22 prior to 22.10.5, and 23 prior to 23.10.1. Only database instances that use custom projections are affected by this vulnerability. User passwords may become accessible to those who have access to the chunk files on disk, and users who have read access to system streams. Only users in the `$admins` group can access system streams by default. ESDB 23.10.1, 22.10.5, 21.10.11, and 20.10.6 contain a patch for this issue. Users should upgrade EventStoreDB, reset the passwords for current and previous members of `$admins` and `$ops` groups, and, if a password was reused in any other system, reset it in those systems to a unique password to follow best practices. If an upgrade cannot be done immediately, reset the passwords for current and previous members of `$admins` and `$ops` groups. Avoid creating custom projections until the patch has been applied.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-256, CWE-522
References: https://developers.eventstore.com/cloud/ops/#upgrading-eventstoredb-version; https://developers.eventstore.com/server/v22.10/upgrade-guide.html#upgrade-guide-for-eventstoredb-22-10; https://github.com/EventStore/EventStore/commit/6d4edee18c7fe886abffe58fa1f97d72681b24bf
CVE: CVE-2024-26138
Published: 2024-02-21
Description: The XWiki licensor application, which manages and enforce application licenses for paid extensions, includes the document `Licenses.Code.LicenseJSON` that provides information for admins regarding active licenses. This document is public and thus exposes this information publicly. The information includes the instance's id as well as first and last name and email of the license owner. This is a leak of information that isn't supposed to be public. The instance id allows associating data on the active installs data with the concrete XWiki instance. Active installs assures that "there's no way to find who's having a given UUID" (referring to the instance id). Further, the information who the license owner is and information about the obtained licenses can be used for targeted phishing attacks. Also, while user information is normally public, email addresses might only be displayed obfuscated,  depending on the configuration. This has been fixed in Application Licensing 1.24.2. There are no known workarounds besides upgrading.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://extensions.xwiki.org/xwiki/bin/view/Extension/Active%20Installs%202%20API; https://github.com/xwikisas/application-licensing/commit/d168fb88fc0d121bf95e769ea21c55c00bebe5a6; https://github.com/xwikisas/application-licensing/security/advisories/GHSA-4hfp-m9gv-m753
CVE: CVE-2024-1212
Published: 2024-02-21
Description: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://freeloadbalancer.com/; https://kemptechnologies.com/; https://support.kemptechnologies.com/hc/en-us/articles/[PII_REDACTED]8445-LoadMaster-Security-Vulnerability-CVE-2024-1212
CVE: CVE-2024-1704
Published: 2024-02-21
Description: A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It has been declared as critical. This vulnerability affects the function save/delete of the file /adminapi/system/crud. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254392. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/Echosssy/CVE/blob/main/%E4%BC%97%E9%82%A6%E7%A7%91%E6%8A%80CRMEB%20Mall%20business%20edition%20overrides%20any%20file.docx; https://vuldb.com/?ctiid.254392; https://vuldb.com/?id.254392
CVE: CVE-2024-1705
Published: 2024-02-21
Description: A vulnerability was found in Shopwind up to 4.6. It has been rated as critical. This issue affects the function actionCreate of the file /public/install/controllers/DefaultController.php of the component Installation. The manipulation leads to code injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-254393 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-94
References: https://note.zhaoj.in/share/QHdXavkw5eDm; https://vuldb.com/?ctiid.254393; https://vuldb.com/?id.254393
CVE: CVE-2024-1706
Published: 2024-02-21
Description: A vulnerability was determined in ZKTeco ZKBio Access IVS up to 3.3.2. This impacts an unknown function of the component Department Name Search Bar. This manipulation with the input <marquee>hi causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor explains: "ZKBio Access IVS is no longer maintained and the product has been replaced by ZKBio CVAccess, it is recommended to replace it with the latest version of ZKBio CVAccess." This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://gist.githubusercontent.com/whiteman007/8d3a09991de4ef336937ba91c07b7856/raw/adc00538d7a8c3c54bde4797a10d9b6af393711d/gistfile1.txt; https://vuldb.com/?ctiid.254396; https://vuldb.com/?id.254396
CVE: CVE-2024-25891
Published: 2024-02-21
Description: ChurchCRM 5.5.0 FRBidSheets.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/ChurchCRM/CRM/issues/6856; https://github.com/ChurchCRM/CRM/issues/6856
CVE: CVE-2024-25892
Published: 2024-02-21
Description: ChurchCRM 5.5.0 ConfirmReport.php is vulnerable to Blind SQL Injection (Time-based) via the familyId GET parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://github.com/ChurchCRM/CRM/issues/6858; https://github.com/ChurchCRM/CRM/issues/6858
CVE: CVE-2024-25893
Published: 2024-02-21
Description: ChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: https://github.com/ChurchCRM/CRM/issues/6856; https://github.com/ChurchCRM/CRM/issues/6856
CVE: CVE-2024-25894
Published: 2024-02-21
Description: ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the EventCount POST parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/ChurchCRM/CRM/issues/6849; https://github.com/ChurchCRM/CRM/issues/6849
CVE: CVE-2024-25895
Published: 2024-02-21
Description: A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 5.5.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter of /EventAttendance.php
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ChurchCRM/CRM/issues/6853; https://github.com/ChurchCRM/CRM/issues/6853
CVE: CVE-2024-25896
Published: 2024-02-21
Description: ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the EID POST parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/ChurchCRM/CRM/issues/6854; https://github.com/ChurchCRM/CRM/issues/6854
CVE: CVE-2024-25897
Published: 2024-02-21
Description: ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/ChurchCRM/CRM/issues/6856; https://github.com/ChurchCRM/CRM/issues/6856
CVE: CVE-2024-25898
Published: 2024-02-21
Description: A XSS vulnerability was found in the ChurchCRM v.5.5.0 functionality, edit your event, where malicious JS or HTML code can be inserted in the Event Sermon field in EventEditor.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/ChurchCRM/CRM/issues/6851; https://github.com/ChurchCRM/CRM/issues/6851
CVE: CVE-2024-26145
Published: 2024-02-21
Description: Discourse Calendar adds the ability to create a dynamic calendar in the first post of a topic on Discourse. Uninvited users are able to gain access to private events by crafting a request to update their attendance. This problem is resolved in commit dfc4fa15f340189f177a1d1ab2cc94ffed3c1190. As a workaround, one may use post visibility to limit access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://github.com/discourse/discourse-calendar/commit/dfc4fa15f340189f177a1d1ab2cc94ffed3c1190; https://github.com/discourse/discourse-calendar/security/advisories/GHSA-4hh7-6m34-p2jp; https://github.com/discourse/discourse-calendar/commit/dfc4fa15f340189f177a1d1ab2cc94ffed3c1190
CVE: CVE-2023-50975
Published: 2024-02-21
Description: The TD Bank TD Advanced Dashboard client through 3.0.3 for macOS allows arbitrary code execution because of the lack of electron::fuses::IsRunAsNodeEnabled (i.e., ELECTRON_RUN_AS_NODE can be used in production). This makes it easier for a compromised process to access banking information.
CVSS Score: 8.4 (HIGH)
CWE: CWE-276
References: https://gist.github.com/khronokernel/2598c067d0f49b0f0a4c8b01cf129d34; https://newsroom.ripeda.com/tag/macs-for-business/; https://www.electronjs.org/blog/statement-run-as-node-cves
CVE: CVE-2024-1707
Published: 2024-02-21
Description: A vulnerability, which was classified as problematic, was found in GARO WALLBOX GLB+ T2EV7 0.5. This affects an unknown part of the file /index.jsp#settings of the component Software Update Handler. The manipulation of the argument Reference leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-254397 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://drive.google.com/file/d/1spsElvU8rgCs4gUxc662SCBjTI9VAqth/view; https://github.com/strik3r0x1/Vulns/blob/main/GARO_GLBDCMB-T274WO_Stored_XSS.md; https://vuldb.com/?ctiid.254397
CVE: CVE-2024-22473
Published: 2024-02-21
Description: TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices. This defect may allow Signature Spoofing by Key Recreation.This issue affects Gecko SDK through v4.4.0.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-331, CWE-1279, CWE-331
References: https://community.silabs.com/068Vm000001FrjT; https://community.silabs.com/068Vm000001FrjT
CVE: CVE-2024-24476
Published: 2024-02-21
Description: A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://gist.github.com/[PII_REDACTED]/369ba0ccffe255cf8142208b6142be2b; https://github.com/wireshark/wireshark/commit/108217f4bb1afb8b25fc705c2722b3e328b1ad78; https://gitlab.com/wireshark/wireshark/-/issues/19344
CVE: CVE-2024-24479
Published: 2024-02-21
Description: A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://gist.github.com/[PII_REDACTED]/c50ad17e9a1a18990043a7cd27814c78; https://github.com/wireshark/wireshark/commit/c3720cff158c265dec2a0c6104b1d65954ae6bfd; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZT2BX7UARZVVWKITSZMHW7BHXGIKRSR2/
CVE: CVE-2024-25381
Published: 2024-02-21
Description: There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Ox130e07d/CVE-2024-25381/blob/main/description; https://github.com/emlog/emlog/issues/285; https://github.com/Ox130e07d/CVE-2024-25381/blob/main/description
CVE: CVE-2023-6533
Published: 2024-02-21
Description: Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by the end device will not be acknowledged by the controller. This vulnerability exists in PC Controller v5.54.0, and earlier.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-248, CWE-419
References: https://community.silabs.com/068Vm000001HdNm; https://community.silabs.com/068Vm000001HdNm
CVE: CVE-2023-6640
Published: 2024-02-21
Description: Malformed S2 Nonce Get Command Class packets can be sent to crash PC Controller v5.54.0 and earlier.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-248
References: https://community.silabs.com/068Vm000001HdNm; https://community.silabs.com/068Vm000001HdNm
CVE: CVE-2024-25249
Published: 2024-02-21
Description: An issue in He3 App for macOS version 2.0.17, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/intbjw; https://github.com/intbjw/CVE-2024-25249; https://www.electronjs.org/blog/statement-run-as-node-cves
CVE: CVE-2024-25461
Published: 2024-02-21
Description: Directory Traversal vulnerability in Terrasoft, Creatio Terrasoft CRM v.7.18.4.1532 allows a remote attacker to obtain sensitive information via a crafted request to the terrasoft.axd component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://safe-surf.ru/specialists/news/697426/; https://safe-surf.ru/upload/ALRT/ALRT-20230808.1.pdf; https://safe-surf.ru/specialists/news/697426/
CVE: CVE-2024-26310
Published: 2024-02-21
Description: Archer Platform 6.8 before 6.14 P2 (6.14.0.2) contains an improper access control vulnerability. A remote authenticated malicious user could potentially exploit this to gain access to API information that should only be accessible with extra privileges.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://archerirm.com; https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/716134; https://archerirm.com
CVE: CVE-2024-26311
Published: 2024-02-21
Description: Archer Platform 6.x before 6.14 P2 HF1 (6.14.0.2.1) contains a reflected XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this by tricking a victim application user into supplying malicious JavaScript code to the vulnerable web application. This code is then reflected to the victim and gets executed by the web browser in the context of the vulnerable web application.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-79
References: https://archerirm.com; https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/716134; https://archerirm.com
CVE: CVE-2023-24330
Published: 2024-02-21
Description: Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1_FW130B06 allows attackers to run arbitrary commands via crafted POST request to /HNAP1/.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://github.com/caoyebo/CVE/tree/main/dlink%20882%20-%20CVE-2023-24330; https://github.com/caoyebo/CVE/tree/main/dlink%20882%20-%20CVE-2023-24330
CVE: CVE-2023-24331
Published: 2024-02-21
Description: Command Injection vulnerability in D-Link Dir 816 with firmware version DIR-816_A2_v1.10CNB04 allows attackers to run arbitrary commands via the urlAdd parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/caoyebo/CVE/tree/main/Dlink%20816%20-%20CVE-2023-24331; https://github.com/caoyebo/CVE/tree/main/Dlink%20816%20-%20CVE-2023-24331
CVE: CVE-2023-24332
Published: 2024-02-21
Description: A stack overflow vulnerability in Tenda AC6 with firmware version US_AC6V5.0re_V03.03.02.01_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/PowerSaveSet.
CVSS Score: 8.1 (HIGH)
CWE: CWE-121
References: https://github.com/caoyebo/CVE/tree/main/Tenda%20AC6%20-%20CVE-2023-24332; https://github.com/caoyebo/CVE/tree/main/Tenda%20AC6%20-%20CVE-2023-24332
CVE: CVE-2023-24333
Published: 2024-02-21
Description: A stack overflow vulnerability in Tenda AC21 with firmware version US_AC21V1.0re_V16.03.08.15_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/openSchedWifi.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/caoyebo/CVE/tree/main/TENDA%20AC21%20-%20CVE-2023-24333; https://github.com/caoyebo/CVE/tree/main/TENDA%20AC21%20-%20CVE-2023-24333
CVE: CVE-2023-24334
Published: 2024-02-21
Description: A stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.07.45_cn_TDC01 allows attackers to run arbitrary commands via schedStartTime parameter.
CVSS Score: 8.0 (HIGH)
CWE: CWE-121
References: https://github.com/caoyebo/CVE/tree/main/TENDA%20AC23%20-%20CVE-2023-24334; https://github.com/caoyebo/CVE/tree/main/TENDA%20AC23%20-%20CVE-2023-24334
CVE: CVE-2023-37177
Published: 2024-02-21
Description: SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the /admin/convert/export_z3950.php endpoint.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html; https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html
CVE: CVE-2023-38844
Published: 2024-02-21
Description: SQL injection vulnerability in PMB v.7.4.7 and earlier allows a remote attacker to execute arbitrary code via the thesaurus parameter in export_skos.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html; https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html
CVE: CVE-2024-23654
Published: 2024-02-21
Description: discourse-ai is the AI plugin for the open-source discussion platform Discourse. Prior to commit 94ba0dadc2cf38e8f81c3936974c167219878edd, interactions with different AI services are vulnerable to admin-initiated SSRF attacks. Versions of the plugin that include commit 94ba0dadc2cf38e8f81c3936974c167219878edd contain a patch. As a workaround, one may disable the discourse-ai plugin.

CVSS Score: 4.1 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://github.com/discourse/discourse-ai/commit/94ba0dadc2cf38e8f81c3936974c167219878edd; https://github.com/discourse/discourse-ai/security/advisories/GHSA-32cj-rm2q-22cc; https://github.com/discourse/discourse-ai/commit/94ba0dadc2cf38e8f81c3936974c167219878edd
CVE: CVE-2024-25124
Published: 2024-02-21
Description: Fiber is a web framework written in go. Prior to version 2.52.1, the CORS middleware allows for insecure configurations that could potentially expose the application to multiple CORS-related vulnerabilities. Specifically, it allows setting the Access-Control-Allow-Origin header to a wildcard (`*`) while also having the Access-Control-Allow-Credentials set to true, which goes against recommended security best practices. The impact of this misconfiguration is high as it can lead to unauthorized access to sensitive user data and expose the system to various types of attacks listed in the PortSwigger article linked in the references. Version 2.52.1 contains a patch for this issue. As a workaround, users may manually validate the CORS configurations in their implementation to ensure that they do not allow a wildcard origin when credentials are enabled. The browser fetch api, as well as browsers and utilities that enforce CORS policies, are not affected by this.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-346, CWE-942, CWE-346
References: http://blog.portswigger.net/2016/10/exploiting-cors-misconfigurations-for.html; https://codeql.github.com/codeql-query-help/javascript/js-cors-misconfiguration-for-credentials; https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSNotSupportingCredentials
CVE: CVE-2023-51828
Published: 2024-02-21
Description: A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attackers to execute arbitrary SQL commands via the query parameter in get_next_notice function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html; https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html
CVE: CVE-2023-52153
Published: 2024-02-21
Description: A SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to inject arbitrary SQL commands via the PmbOpac-LOGIN cookie value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html; https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html
CVE: CVE-2023-52154
Published: 2024-02-21
Description: File Upload vulnerability in pmb/camera_upload.php in PMB 7.4.7 and earlier allows attackers to run arbitrary code via upload of crafted PHTML files.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html; https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html
CVE: CVE-2023-52155
Published: 2024-02-21
Description: A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via the sauvegardes variable through the /admin/sauvegarde/run.php endpoint.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html; https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html
CVE: CVE-2023-3509
Published: 2024-02-21
Description: An issue has been discovered in GitLab affecting all versions before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. It was possible for group members with sub-maintainer role to change the title of privately accessible deploy keys associated with projects in the group.
CVSS Score: 3.7 (LOW)
CWE: CWE-863
References: https://gitlab.com/gitlab-org/gitlab/-/issues/416945; https://hackerone.com/reports/2037814; https://gitlab.com/gitlab-org/gitlab/-/issues/416945