deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-47518
Published: 2023-11-14
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Matthew Muro Restrict Categories plugin <= 2.6.4 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/restrict-categories/wordpress-restrict-categories-plugin-2-6-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/restrict-categories/wordpress-restrict-categories-plugin-2-6-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-5189
Published: 2023-11-14
Description: A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-23, CWE-22
References: https://access.redhat.com/errata/RHSA-2023:7773; https://access.redhat.com/errata/RHSA-2024:1536; https://access.redhat.com/errata/RHSA-2024:2010
CVE: CVE-2023-31100
Published: 2023-11-15
Description: Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification.
This issue affects SecureCore™ Technology™ 4:


  *  from 4.3.0.0 before 4.3.0.203
  *  

from 

4.3.1.0 before 4.3.1.163
  *  

from 

4.4.0.0 before 4.4.0.217
  *  

from 

4.5.0.0 before 4.5.0.138
CVSS Score: 8.4 (HIGH)
CWE: CWE-284
References: https://phoenixtech.com/phoenix-security-notifications/cve-2023-31100/; https://www.phoenix.com/security-notifications/
CVE: CVE-2023-35080
Published: 2023-11-15
Description: A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to various security risks, including the escalation of privileges, denial of service, or information disclosure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release; https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release
CVE: CVE-2023-38043
Published: 2023-11-15
Description: A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service (DoS) condition on the user machine and, in some cases, resulting in a full compromise of the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-400
References: https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release; https://northwave-cybersecurity.com/vulnerability-notice/arbitrary-kernel-function-call-in-ivanti-secure-access-client; https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release
CVE: CVE-2023-38543
Published: 2023-11-15
Description: A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service (DoS) condition on the user machine.
CVSS Score: 7.8 (HIGH)
CWE: CWE-770
References: https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release; https://northwave-cybersecurity.com/vulnerability-notice/denial-of-service-in-ivanti-secure-access-client-driver; https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release
CVE: CVE-2023-38544
Published: 2023-11-15
Description: A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings. This vulnerability could be exploited to compromise the integrity and security of the network on the affected system.
CVSS Score: 5.5 (MEDIUM)
References: https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release; https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release
CVE: CVE-2023-39335
Published: 2023-11-15
Description: A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potential misuse of user accounts and resources.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://forums.ivanti.com/s/article/CVE-2023-39335?language=en_US; https://forums.ivanti.com/s/article/CVE-2023-39335?language=en_US
CVE: CVE-2023-39337
Published: 2023-11-15
Description: A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier to access and extract sensitive information, including device and environment configuration details, as well as secrets. This vulnerability poses a serious security risk, potentially exposing confidential data and system integrity.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://forums.ivanti.com/s/article/CVE-2023-39337?language=en_US; https://forums.ivanti.com/s/article/CVE-2023-39337?language=en_US
CVE: CVE-2023-41718
Published: 2023-11-15
Description: When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the affected system when having control over a specific file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release; https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release
CVE: CVE-2023-43582
Published: 2023-11-15
Description: Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-939, CWE-287
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-43588
Published: 2023-11-15
Description: Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.
CVSS Score: 3.5 (LOW)
CWE: CWE-449
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-43590
Published: 2023-11-15
Description: Link following  in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access.

CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-43591
Published: 2023-11-15
Description: Improper privilege management  in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-280
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-46121
Published: 2023-11-15
Description: yt-dlp is a youtube-dl fork with additional features and fixes. The Generic Extractor in yt-dlp is vulnerable to an attacker setting an arbitrary proxy for a request to an arbitrary url, allowing the attacker to MITM the request made from yt-dlp's HTTP session. This could lead to cookie exfiltration in some cases. Version 2023.11.14 removed the ability to smuggle `http_headers` to the Generic extractor, as well as other extractors that use the same pattern. Users are advised to upgrade. Users unable to upgrade should disable the Ggneric extractor (or only pass trusted sites with trusted content) and ake caution when using `--no-check-certificate`.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-444
References: https://github.com/yt-dlp/yt-dlp/commit/f04b5bedad7b281bee9814686bba1762bae092eb; https://github.com/yt-dlp/yt-dlp/releases/tag/2023.11.14; https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-3ch3-jhc6-5r8x
CVE: CVE-2023-43979
Published: 2023-11-15
Description: ETS Soft ybc_blog before v4.4.0 was discovered to contain a SQL injection vulnerability via the component Ybc_blogBlogModuleFrontController::getPosts().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2023/11/14/ybc_blog.html; https://security.friendsofpresta.org/modules/2023/11/14/ybc_blog.html
CVE: CVE-2023-47308
Published: 2023-11-15
Description: In the module "Newsletter Popup PRO with Voucher/Coupon code" (newsletterpop) before version 2.6.1 from Active Design for PrestaShop, a guest can perform SQL injection in affected versions. The method `NewsletterpopsendVerificationModuleFrontController::checkEmailSubscription()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2023-11-09-newsletterpop.md; https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2023-11-09-newsletterpop.md
CVE: CVE-2023-47309
Published: 2023-11-15
Description: Nukium nkmgls before version 3.0.2 is vulnerable to Cross Site Scripting (XSS) via NkmGlsCheckoutModuleFrontController::displayAjaxSavePhoneMobile.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://security.friendsofpresta.org/modules/2023/11/14/nkmgls.html; https://security.friendsofpresta.org/modules/2023/11/14/nkmgls.html
CVE: CVE-2023-47678
Published: 2023-11-15
Description: An improper access control vulnerability exists in RT-AC87U all versions. An attacker may read or write files that are not intended to be accessed by connecting to a target device via tftp.
CVSS Score: 9.1 (CRITICAL)
References: https://jvn.jp/en/vu/JVNVU96079387/; https://www.asus.com/event/network/EOL-product/; https://www.asus.com/support/
CVE: CVE-2023-5984
Published: 2023-11-15
Description: 
A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow
modified firmware to be uploaded when an authorized admin user begins a firmware update
procedure which could result in full control over the device.


CVSS Score: 7.2 (HIGH)
CWE: CWE-494
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-01.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-01.pdf
CVE: CVE-2023-5985
Published: 2023-11-15
Description: 


A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability
exists that could cause compromise of a user’s browser when an attacker with admin privileges
has modified system values.




CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-01.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-01.pdf
CVE: CVE-2023-5986
Published: 2023-11-15
Description: 
A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded input
attackers can cause the software’s web application to redirect to the chosen domain after a
successful login is performed. 



CVSS Score: 8.2 (HIGH)
CWE: CWE-601, CWE-601
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-02.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-02.pdf
CVE: CVE-2023-5987
Published: 2023-11-15
Description: 
A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)
vulnerability that could cause a vulnerability leading to a cross site scripting condition where
attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing
the injected payload.


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-02.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-02.pdf
CVE: CVE-2023-6032
Published: 2023-11-15
Description: 
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
vulnerability exists that could cause a file system enumeration and file download when an
attacker navigates to the Network Management Card via HTTPS.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-03.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-03.pdf
CVE: CVE-2023-40923
Published: 2023-11-15
Description: MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and save_setting parameters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2023/11/09/ordersexport.html; https://security.friendsofpresta.org/modules/2023/11/09/ordersexport.html
CVE: CVE-2023-41597
Published: 2023-11-15
Description: EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /admin/twitter.php?active_t.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/emlog/emlog/issues/238; https://github.com/emlog/emlog/issues/238
CVE: CVE-2023-47445
Published: 2023-11-15
Description: Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/termanix/PHPGrukul-Pre-School-Enrollment-System-v1.0/blob/main/CVE-2023-47445%20PHPGurukul-Pre-School-Enrollment-System-v1.0%20SQL%20Injection.md; https://github.com/termanix/PHPGrukul-Pre-School-Enrollment-System-v1.0/blob/main/CVE-2023-47445%20PHPGurukul-Pre-School-Enrollment-System-v1.0%20SQL%20Injection.md
CVE: CVE-2023-47446
Published: 2023-11-15
Description: Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting (XSS) on the profile.php page via fullname parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/termanix/PHPGrukul-Pre-School-Enrollment-System-v1.0/blob/main/CVE-2023-47446%20PHPGurukul-Pre-School-Enrollment-System-v1.0%20Stored%20XSS%20Vulnerability.md; https://github.com/termanix/PHPGrukul-Pre-School-Enrollment-System-v1.0/blob/main/CVE-2023-47446%20PHPGurukul-Pre-School-Enrollment-System-v1.0%20Stored%20XSS%20Vulnerability.md
CVE: CVE-2023-47580
Published: 2023-11-15
Description: Multiple improper restriction of operations within the bounds of a memory buffer issues exist in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file (X1, V8, or V9 file), information may be disclosed and/or arbitrary code may be executed.

CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://hakko-elec.co.jp/site/download/03tellus_inf/index.php; https://jvn.jp/en/vu/JVNVU93840158/; https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
CVE: CVE-2023-47581
Published: 2023-11-15
Description: Out-of-bounds read vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file (X1, V8, or V9 file), information may be disclosed and/or arbitrary code may be executed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://hakko-elec.co.jp/site/download/03tellus_inf/index.php; https://jvn.jp/en/vu/JVNVU93840158/; https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
CVE: CVE-2023-47582
Published: 2023-11-15
Description: Access of uninitialized pointer vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file (X1, V8, or V9 file), information may be disclosed and/or arbitrary code may be executed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-824
References: https://hakko-elec.co.jp/site/download/03tellus_inf/index.php; https://jvn.jp/en/vu/JVNVU93840158/; https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
CVE: CVE-2023-47583
Published: 2023-11-15
Description: Multiple out-of-bounds read vulnerabilities exist in TELLUS Simulator V4.0.17.0 and earlier. If a user opens a specially crafted file (X1 or V9 file), information may be disclosed and/or arbitrary code may be executed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://hakko-elec.co.jp/site/download/03tellus_inf/index.php; https://jvn.jp/en/vu/JVNVU93840158/; https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
CVE: CVE-2023-47584
Published: 2023-11-15
Description: Out-of-bounds write vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.

CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://hakko-elec.co.jp/site/download/03tellus_inf/index.php; https://jvn.jp/en/vu/JVNVU93840158/; https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
CVE: CVE-2023-47585
Published: 2023-11-15
Description: Out-of-bounds read vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://hakko-elec.co.jp/site/download/03tellus_inf/index.php; https://jvn.jp/en/vu/JVNVU93840158/; https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
CVE: CVE-2023-47586
Published: 2023-11-15
Description: Multiple heap-based buffer overflow vulnerabilities exist in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://hakko-elec.co.jp/site/download/03tellus_inf/index.php; https://jvn.jp/en/vu/JVNVU93840158/; https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
CVE: CVE-2023-4889
Published: 2023-11-15
Description: The Shareaholic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'shareaholic' shortcode in versions up to, and including, 9.7.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/2995413/shareaholic#file51; https://www.wordfence.com/threat-intel/vulnerabilities/id/ff6932c6-f3ec-46a8-a03b-95512eee5bf1?source=cve; https://plugins.trac.wordpress.org/changeset/2995413/shareaholic#file51
CVE: CVE-2023-6133
Published: 2023-11-15
Description: The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient blacklisting on the 'forminator_allowed_mime_types' function in versions up to, and including, 1.27.0. This makes it possible for authenticated attackers with administrator-level capabilities or above to upload arbitrary files on the affected site's server, but due to the htaccess configuration, remote code cannot be executed.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://plugins.trac.wordpress.org/browser/forminator/tags/1.27.0/library/fields/upload.php#L356; https://plugins.trac.wordpress.org/browser/forminator/tags/1.27.0/library/fields/upload.php#L372; https://plugins.trac.wordpress.org/changeset/2995007/forminator/trunk/library/helpers/helper-fields.php#file0
CVE: CVE-2023-46672
Published: 2023-11-15
Description: An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances.

The prerequisites for the manifestation of this issue are:

  *  Logstash  is configured to log in JSON format https://www.elastic.co/guide/en/logstash/current/running-logstash-command-line.html , which is not the default logging format.


  *  Sensitive data is stored in the Logstash keystore and referenced as a variable in Logstash configuration.
CVSS Score: 8.4 (HIGH)
CWE: CWE-532, CWE-532
References: https://discuss.elastic.co/t/logstash-8-11-1-security-update-esa-2023-26/347191; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-34062
Published: 2023-11-15
Description: In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack.

Specifically, an application is vulnerable if Reactor Netty HTTP Server is configured to serve static resources.



CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://spring.io/security/cve-2023-34062; https://spring.io/security/cve-2023-34062
CVE: CVE-2023-23549
Published: 2023-11-15
Description: Improper Input Validation in Checkmk <2.2.0p15, <2.1.0p37, <=2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames.
CVSS Score: 2.7 (LOW)
CWE: CWE-1284
References: https://checkmk.com/werk/16219; https://checkmk.com/werk/16219
CVE: CVE-2023-4602
Published: 2023-11-15
Description: The Namaste! LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'course_id'  parameter in versions up to, and including, 2.6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://drive.google.com/file/d/1wliD7YvLqL2xWnR6jLEnWgoWRKsv9dCI/view?usp=sharing; https://plugins.trac.wordpress.org/changeset/2966178/; https://www.wordfence.com/threat-intel/vulnerabilities/id/d014f512-9030-49ce-945d-4900594fb373?source=cve
CVE: CVE-2023-5245
Published: 2023-11-15
Description: FileUtil.extract() enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside the intended directory.

When creating an instance of TensorflowModel using the saved_model format and an exported tensorflow model, the apply() function invokes the vulnerable implementation of FileUtil.extract().

Arbitrary file creation can directly lead to code execution
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/combust/mleap/pull/866#issuecomment[PII_REDACTED]; https://research.jfrog.com/vulnerabilities/mleap-path-traversal-rce-xray-532656/; https://github.com/combust/mleap/pull/866#issuecomment[PII_REDACTED]