deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-50784
Published: 2023-12-16
Description: A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacker to crash the server by sending an oversized packet (if a websocket port is open). Remote code execution might be possible on some uncommon, older platforms.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://forums.unrealircd.org/viewtopic.php?t=9340; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BV6TFYPQOKYRGPEAKOWSO6PSCBV6LUR3/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZT7QU4FCQBHYOYVD7FW5QAWNAQCSGLA/
CVE: CVE-2023-6885
Published: 2023-12-16
Description: A vulnerability was found in Tongda OA 2017 up to 11.10. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file general/vote/manage/delete.php. The manipulation of the argument DELETE_STR leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-248245 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/Martinzb/cve/blob/main/sql.md; https://vuldb.com/?ctiid.248245; https://vuldb.com/?id.248245
CVE: CVE-2023-6886
Published: 2023-12-17
Description: A vulnerability was found in xnx3 wangmarket 6.1. It has been rated as critical. Affected by this issue is some unknown functionality of the component Role Management Page. The manipulation leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-248246 is the identifier assigned to this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-94, CWE-94
References: https://github.com/xnx3/wangmarket/issues/8; https://vuldb.com/?ctiid.248246; https://vuldb.com/?id.248246
CVE: CVE-2023-6887
Published: 2023-12-17
Description: A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630. This affects an unknown part of the file /admin/upload/img of the component Image Upload Handler. The manipulation of the argument filename leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248247.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/daydust/vuln/blob/main/ForestBlog/Arbitrary_File_Upload_Vulnerability.md; https://vuldb.com/?ctiid.248247; https://vuldb.com/?id.248247
CVE: CVE-2023-6888
Published: 2023-12-17
Description: A vulnerability classified as critical was found in PHZ76 RtspServer 1.0.0. This vulnerability affects the function ParseRequestLine of the file RtspMesaage.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-248248. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-121, CWE-787
References: http://www.huiyao.love/2023/12/08/rtspserver-stackoverflow-vulnerability/; https://github.com/hu1y40/PoC/blob/main/rtspserver_stackoverflow_poc.py; https://vuldb.com/?ctiid.248248
CVE: CVE-2023-50965
Published: 2023-12-17
Description: In MicroHttpServer (aka Micro HTTP Server) through 4398570, _ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/starnight/MicroHttpServer/issues/5; https://github.com/starnight/MicroHttpServer/tree/43985708ef5fe7677392c54e229bd22e136c2665; https://github.com/starnight/MicroHttpServer/issues/5
CVE: CVE-2023-6891
Published: 2023-12-17
Description: A vulnerability has been found in PeaZip 9.4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality in the library dragdropfilesdll.dll of the component Library Handler. The manipulation leads to uncontrolled search path. An attack has to be approached locally. Upgrading to version 9.6.0 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-248251. NOTE: Vendor was contacted early, confirmed the existence of the flaw and immediately worked on a patched release.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-427
References: https://peazip.github.io/changelog.html; https://vuldb.com/?ctiid.248251; https://vuldb.com/?id.248251
CVE: CVE-2023-6893
Published: 2023-12-17
Description: A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK) and classified as problematic. Affected by this issue is some unknown functionality of the file /php/exportrecord.php. The manipulation of the argument downname with the input C:\ICPAS\Wnmp\WWW\php\conversion.php leads to path traversal. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-248252.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/willchen0011/cve/blob/main/download.md; https://vuldb.com/?ctiid.248252; https://vuldb.com/?id.248252
CVE: CVE-2023-6894
Published: 2023-12-17
Description: A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been classified as problematic. This affects an unknown part of the file access/html/system.html of the component Log File Handler. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-248253 was assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/willchen0011/cve/blob/main/unaccess.md; https://vuldb.com/?ctiid.248253; https://vuldb.com/?id.248253
CVE: CVE-2023-6895
Published: 2023-12-17
Description: A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondata[ip] with the input netstat -ano leads to os command injection. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.0 is able to address this issue. It is recommended to upgrade the affected component. VDB-248254 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78
References: https://github.com/willchen0011/cve/blob/main/rce.md; https://vuldb.com/?ctiid.248254; https://vuldb.com/?id.248254
CVE: CVE-2023-24380
Published: 2023-12-17
Description: Cross-Site Request Forgery (CSRF) vulnerability in Webbjocke Simple Wp Sitemap.This issue affects Simple Wp Sitemap: from n/a through 1.2.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/simple-wp-sitemap/wordpress-simple-wp-sitemap-plugin-1-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/simple-wp-sitemap/wordpress-simple-wp-sitemap-plugin-1-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-49751
Published: 2023-12-17
Description: Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu Block for Font Awesome.This issue affects Block for Font Awesome: from n/a through 1.4.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/block-for-font-awesome/wordpress-block-for-font-awesome-plugin-1-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/block-for-font-awesome/wordpress-block-for-font-awesome-plugin-1-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-49769
Published: 2023-12-17
Description: Cross-Site Request Forgery (CSRF) vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.4.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/integrate-google-drive/wordpress-integrate-google-drive-plugin-1-3-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/integrate-google-drive/wordpress-integrate-google-drive-plugin-1-3-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-49775
Published: 2023-12-17
Description: Cross-Site Request Forgery (CSRF) vulnerability in Denis Kobozev CSV Importer.This issue affects CSV Importer: from n/a through 0.3.8.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/csv-importer/wordpress-csv-importer-plugin-0-3-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/csv-importer/wordpress-csv-importer-plugin-0-3-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-6896
Published: 2023-12-17
Description: A vulnerability was found in SourceCodester Simple Image Stack Website 1.0. It has been rated as problematic. This issue affects some unknown processing. The manipulation of the argument search with the input sy2ap%22%3e%3cscript%3ealert(1)%3c%2fscript%3etkxh1 leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248255.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.248255; https://vuldb.com/?id.248255; https://www.yuque.com/u39434519/pfhiwd/vry762ncuczem3yi?singleDoc#
CVE: CVE-2023-49816
Published: 2023-12-17
Description: Cross-Site Request Forgery (CSRF) vulnerability in Innovative Solutions Fix My Feed RSS Repair.This issue affects Fix My Feed RSS Repair: from n/a through 1.4.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/fix-my-feed-rss-repair/wordpress-fix-my-feed-rss-repair-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/fix-my-feed-rss-repair/wordpress-fix-my-feed-rss-repair-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-49824
Published: 2023-12-17
Description: Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite Product Catalog Feed by PixelYourSite.This issue affects Product Catalog Feed by PixelYourSite: from n/a through 2.1.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/product-catalog-feed/wordpress-product-catalog-feed-by-pixelyoursite-plugin-2-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/product-catalog-feed/wordpress-product-catalog-feed-by-pixelyoursite-plugin-2-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-49834
Published: 2023-12-17
Description: Cross-Site Request Forgery (CSRF) vulnerability in realmag777 FOX – Currency Switcher Professional for WooCommerce.This issue affects FOX – Currency Switcher Professional for WooCommerce: from n/a through 1.4.1.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/woocommerce-currency-switcher/wordpress-fox-currency-switcher-professional-for-woocommerce-plugin-1-4-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woocommerce-currency-switcher/wordpress-fox-currency-switcher-professional-for-woocommerce-plugin-1-4-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-6898
Published: 2023-12-17
Description: A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-248256.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/Glunko/gaatitrack-courier-management-system_vulnerability/blob/main/sql_injection.md; https://vuldb.com/?ctiid.248256; https://vuldb.com/?id.248256
CVE: CVE-2023-6899
Published: 2023-12-17
Description: A vulnerability classified as problematic was found in rmountjoy92 DashMachine 0.5-4. Affected by this vulnerability is an unknown functionality of the file /settings/save_config of the component Config Handler. The manipulation of the argument value_template leads to code injection. The exploit has been disclosed to the public and may be used. The identifier VDB-248257 was assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94
References: https://treasure-blarney-085.notion.site/DashMachine-Unauthorized-RCE-931a35a81af9448ebe9fb4cd904d4a0c; https://vuldb.com/?ctiid.248257; https://vuldb.com/?id.248257
CVE: CVE-2023-6900
Published: 2023-12-17
Description: A vulnerability, which was classified as critical, has been found in rmountjoy92 DashMachine 0.5-4. Affected by this issue is some unknown functionality of the file /settings/delete_file. The manipulation of the argument file leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. VDB-248258 is the identifier assigned to this vulnerability.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-24, CWE-22
References: https://treasure-blarney-085.notion.site/DashMachine-Arbitrary-File-Deletion-ab44f2fe68e843c393ae9e0c1d487676; https://vuldb.com/?ctiid.248258; https://vuldb.com/?id.248258
CVE: CVE-2023-6901
Published: 2023-12-17
Description: A vulnerability, which was classified as critical, was found in codelyfe Stupid Simple CMS up to 1.2.3. This affects an unknown part of the file /terminal/handle-command.php of the component HTTP POST Request Handler. The manipulation of the argument command with the input whoami leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248259.
CVSS Score: 7.3 (HIGH)
CWE: CWE-78
References: https://github.com/g1an123/POC/blob/main/README.md; https://vuldb.com/?ctiid.248259; https://vuldb.com/?id.248259
CVE: CVE-2023-50271
Published: 2023-12-17
Description: 
A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH). This vulnerability could be exploited locally or remotely to disclose information.


CVSS Score: 7.2 (HIGH)
CWE: CWE-200
References: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbux04551en_us; https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbux04551en_us
CVE: CVE-2023-6902
Published: 2023-12-17
Description: A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. This vulnerability affects unknown code of the file /file-manager/upload.php. The manipulation of the argument file leads to unrestricted upload. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-248260.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-434
References: https://github.com/g1an123/POC/blob/main/Unauthorized%20file%20upload%20getshell.md; https://vuldb.com/?ctiid.248260; https://vuldb.com/?id.248260
CVE: CVE-2023-3907
Published: 2023-12-17
Description: A privilege escalation vulnerability in GitLab EE affecting all versions from 16.0 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows a project Maintainer to use a Project Access Token to escalate their role to Owner
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-286
References: https://gitlab.com/gitlab-org/gitlab/-/issues/418878; https://hackerone.com/reports/2058934; https://gitlab.com/gitlab-org/gitlab/-/issues/418878
CVE: CVE-2023-6903
Published: 2023-12-17
Description: A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file /admin/singlelogin.php?submit=1. The manipulation of the argument loginId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-248265 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/willchen0011/cve/blob/main/NS-ASG-sql.md; https://vuldb.com/?ctiid.248265; https://vuldb.com/?id.248265
CVE: CVE-2023-6904
Published: 2023-12-17
Description: A vulnerability classified as problematic was found in Jahastech NxFilter 4.3.2.5. This vulnerability affects unknown code of the file /config,admin.jsp. The manipulation of the argument admin_name leads to cross-site request forgery. The attack can be initiated remotely. VDB-248266 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://vuldb.com/?ctiid.248266; https://vuldb.com/?id.248266; https://vuldb.com/?ctiid.248266
CVE: CVE-2023-50976
Published: 2023-12-18
Description: Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862, CWE-862
References: https://github.com/redpanda-data/redpanda/compare/v23.1.20...v23.1.21; https://github.com/redpanda-data/redpanda/compare/v23.2.17...v23.2.18; https://github.com/redpanda-data/redpanda/issues/15048
CVE: CVE-2023-6905
Published: 2023-12-18
Description: A vulnerability, which was classified as problematic, has been found in Jahastech NxFilter 4.3.2.5. This issue affects some unknown processing of the file user,adap.jsp?actionFlag=test&id=1 of the component Bind Request Handler. The manipulation leads to ldap injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-248267. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-90
References: https://vuldb.com/?ctiid.248267; https://vuldb.com/?id.248267; https://vuldb.com/?ctiid.248267
CVE: CVE-2023-50979
Published: 2023-12-18
Description: Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-203
References: https://github.com/weidai11/cryptopp/issues/1247; https://github.com/weidai11/cryptopp/issues/1247
CVE: CVE-2023-50980
Published: 2023-12-18
Description: gf2n.cpp in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (application crash) via DER public-key data for an F(2^m) curve, if the degree of each term in the polynomial is not strictly decreasing.
CVSS Score: 7.5 (HIGH)
References: https://github.com/weidai11/cryptopp/issues/1248; https://github.com/weidai11/cryptopp/issues/1248
CVE: CVE-2023-50981
Published: 2023-12-18
Description: ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop) via crafted DER public-key data associated with squared odd numbers, such as the square of[PII_REDACTED][PII_REDACTED][PII_REDACTED]16504853.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: https://github.com/weidai11/cryptopp/issues/1249; https://github.com/weidai11/cryptopp/issues/1249
CVE: CVE-2023-6906
Published: 2023-12-18
Description: A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313_B20191024. Affected is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag with the input ie8 leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-248268. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/unpWn4bL3/iot-security/blob/main/1.md; https://vuldb.com/?ctiid.248268; https://vuldb.com/?id.248268
CVE: CVE-2023-6907
Published: 2023-12-18
Description: A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /file-manager/delete.php of the component Deletion Interface. The manipulation of the argument file leads to improper authentication. The exploit has been disclosed to the public and may be used. The identifier VDB-248269 was assigned to this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-287
References: https://github.com/g1an123/POC/blob/main/Unauthorized%20file%20deletion.md; https://vuldb.com/?ctiid.248269; https://vuldb.com/?id.248269
CVE: CVE-2023-6908
Published: 2023-12-18
Description: A vulnerability, which was classified as problematic, was found in DFIRKuiper Kuiper 2.3.4. This affects the function unzip_file of the file kuiper/app/controllers/case_management.py of the component TAR Archive Handler. The manipulation of the argument dst_path leads to path traversal. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version 2.3.5 is able to address this issue. The identifier of the patch is 94fa135153002f651f5526c55a7240e083db8d73. It is recommended to upgrade the affected component. The identifier VDB-248277 was assigned to this vulnerability.
CVSS Score: 3.1 (LOW)
CWE: CWE-22
References: https://github.com/DFIRKuiper/Kuiper/commit/94fa135153002f651f5526c55a7240e083db8d73; https://github.com/DFIRKuiper/Kuiper/pull/106; https://github.com/DFIRKuiper/Kuiper/releases/tag/v2.3.5
CVE: CVE-2023-6909
Published: 2023-12-18
Description: Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-29
References: https://github.com/mlflow/mlflow/commit/1da75dfcecd4d169e34809ade55748384e8af6c1; https://huntr.com/bounties/11209efb-0f84-482f-add0-587ea6b7e850; https://github.com/mlflow/mlflow/commit/1da75dfcecd4d169e34809ade55748384e8af6c1
CVE: CVE-2023-6483
Published: 2023-12-18
Description: The vulnerability exists in ADiTaaS (Allied Digital Integrated Tool-as-a-Service) version 5.1 due to an improper authentication vulnerability in the ADiTaaS backend API. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable platform.

Successful exploitation of this vulnerability could allow the attacker to gain full access to the customers’ data and completely compromise the targeted platform.

CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0365; https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0365
CVE: CVE-2023-41314
Published: 2023-12-18
Description: The api /api/snapshot and /api/get_log_file would allow unauthenticated access.
It could allow a DoS attack or get arbitrary files from FE node.
Please upgrade to 2.0.3 to fix these issues.
CVSS Score: 8.2 (HIGH)
CWE: CWE-863
References: https://lists.apache.org/thread/tgvpvz3yw7zgodl1sb3sv3jbbz8t5zb4; https://lists.apache.org/thread/tgvpvz3yw7zgodl1sb3sv3jbbz8t5zb4
CVE: CVE-2023-6911
Published: 2023-12-18
Description: Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a malicious payload into the Registry feature of the Management Console.

CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2021/WSO2-2020-1225/; https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2021/WSO2-2020-1225/