deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-31091
Published: 2023-08-17
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pradeep Singh Dynamically Register Sidebars plugin <= 1.0.1 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/dynamically-register-sidebars/wordpress-dynamically-register-sidebars-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/dynamically-register-sidebars/wordpress-dynamically-register-sidebars-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-38838
Published: 2023-08-17
Description: SQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain sensitive information via the edit.php component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://kidus.com; http://minimati.com; https://github.com/kiduswb/minimati/issues/1
CVE: CVE-2023-38902
Published: 2023-08-17
Description: A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers v.EG_3.0(1)B11P219, EAP and RAP series wireless access points v.AP_3.0(1)B11P219, and NBC series wireless controllers v.AC_3.0(1)B11P219 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /cgi-bin/luci/api/cmd via the remoteIp field.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://gist.github.com/ZIKH26/18693c67ee7d2f8d2c60231b19194c37; https://gist.github.com/ZIKH26/18693c67ee7d2f8d2c60231b19194c37
CVE: CVE-2023-4394
Published: 2023-08-17
Description: A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak internal kernel information
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-400, CWE-416
References: https://access.redhat.com/security/cve/CVE-2023-4394; https://bugzilla.redhat.com/show_bug.cgi?id=2219263; https://patchwork.kernel.org/project/linux-btrfs/patch/[PII_REDACTED][PII_REDACTED]-1-r33s3n6@gmail.com/
CVE: CVE-2023-34412
Published: 2023-08-17
Description: A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an
authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://cert.vde.com/en/advisories/VDE-2023-012/; https://cert.vde.com/en/advisories/VDE-2023-029/; https://cert.vde.com/en/advisories/VDE-2023-012/
CVE: CVE-2023-40272
Published: 2023-08-17
Description: Apache Airflow Spark Provider, versions before 4.1.3, is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection giving an opportunity to read files on the Airflow server.
It is recommended to upgrade to a version that is not affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2023/08/17/1; http://www.openwall.com/lists/oss-security/2023/08/18/1; https://lists.apache.org/thread/t03gktyzyor20rh06okd91jtqmw6k1l7
CVE: CVE-2023-28693
Published: 2023-08-17
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Balasaheb Bhise Advanced Youtube Channel Pagination plugin <= 1.0 version.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/advanced-youtube-channel-pagination/wordpress-advanced-youtube-channel-pagination-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/advanced-youtube-channel-pagination/wordpress-advanced-youtube-channel-pagination-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-28783
Published: 2023-08-17
Description: Auth. (shop manager+) Stored Cross-Site Scripting (XSS) vulnerability in PHPRADAR Woocommerce Tip/Donation plugin <= 1.2 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/woo-tipdonation/wordpress-woocommerce-tip-donation-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woo-tipdonation/wordpress-woocommerce-tip-donation-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-31072
Published: 2023-08-17
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Praveen Goswami Advanced Category Template plugin <= 0.1 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/advanced-category-template/wordpress-advanced-category-template-plugin-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/advanced-category-template/wordpress-advanced-category-template-plugin-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-31079
Published: 2023-08-17
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Chris Roberts Tippy plugin <= 6.2.1 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/tippy/wordpress-tippy-plugin-6-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/tippy/wordpress-tippy-plugin-6-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-2914
Published: 2023-08-17
Description: The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, an integer overflow condition exists in the affected products. When the ThinManager processes incoming messages, a read access violation occurs and terminates the process. A malicious user could exploit this vulnerability by sending a crafted synchronization protocol message and causing a denial of service condition in the software.  
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-190
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140471; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140471
CVE: CVE-2023-2915
Published: 2023-08-17
Description: The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, a path traversal vulnerability exists when the ThinManager software processes a certain function. If exploited, an unauthenticated remote threat actor can delete arbitrary files with system privileges.   A malicious user could exploit this vulnerability by sending a specifically crafted synchronization protocol message resulting in a denial-of-service condition.  
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-22
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140471; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140471
CVE: CVE-2023-2917
Published: 2023-08-17
Description: The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability.  Due to an improper input validation, a path traversal vulnerability exists, via the filename field, when the ThinManager processes a certain function. If exploited, an unauthenticated remote attacker can upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed.  A malicious user could exploit this vulnerability by sending a crafted synchronization protocol message and potentially gain remote code execution abilities.

  
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-22
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140471; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140471
CVE: CVE-2023-34419
Published: 2023-08-17
Description: A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120
References: https://support.lenovo.com/us/en/product_security/LEN-134879; https://support.lenovo.com/us/en/product_security/LEN-134879
CVE: CVE-2023-3078
Published: 2023-08-17
Description: An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://support.lenovo.com/us/en/product_security/LEN-121183; https://support.lenovo.com/us/en/product_security/LEN-121183
CVE: CVE-2023-4028
Published: 2023-08-17
Description: A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://support.lenovo.com/us/en/product_security/LEN-134879; https://support.lenovo.com/us/en/product_security/LEN-134879
CVE: CVE-2023-4029
Published: 2023-08-17
Description: A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120
References: https://support.lenovo.com/us/en/product_security/LEN-134879; https://support.lenovo.com/us/en/product_security/LEN-134879
CVE: CVE-2023-4030
Published: 2023-08-17
Description: A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause the system to recover to insecure settings if the BIOS becomes corrupt.
CVSS Score: 8.4 (HIGH)
CWE: CWE-636
References: https://support.lenovo.com/us/en/product_security/LEN-134879; https://support.lenovo.com/us/en/product_security/LEN-134879
CVE: CVE-2023-37914
Published: 2023-08-17
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can view `Invitation.WebHome` can execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. This vulnerability has been patched on XWiki 14.4.8, 15.2-rc-1, and 14.10.6. Users are advised to upgrade. Users unable to upgrade may manually apply the patch on `Invitation.InvitationCommon` and `Invitation.InvitationConfig`, but there are otherwise no known workarounds for this vulnerability.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94
References: https://github.com/xwiki/xwiki-platform/commit/ff1d8a1790c6ee534c6a4478360a06efeb2d3591; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-7954-6m9q-gpvf; https://jira.xwiki.org/browse/XWIKI-20421
CVE: CVE-2023-40165
Published: 2023-08-17
Description: rubygems.org is the Ruby community's primary gem (library) hosting service. Insufficient input validation allowed malicious actors to replace any uploaded gem version that had a platform, version number, or gem name matching `/-\d/`, permanently replacing the legitimate upload in the canonical gem storage bucket, and triggering an immediate CDN purge so that the malicious gem would be served immediately. The maintainers have checked all gems matching the `/-\d/` pattern and can confirm that no unexpected `.gem`s were found. As a result, we believe this vulnerability was _not_ exploited. The easiest way to ensure that a user's applications were not exploited by this vulnerability is to check that all of your downloaded .gems have a checksum that matches the checksum recorded in the RubyGems.org database. RubyGems contributor Maciej Mensfeld wrote a tool to automatically check that all downloaded .gem files match the checksums recorded in the RubyGems.org database. You can use it by running: `bundle add bundler-integrity` followed by `bundle exec bundler-integrity`. Neither this tool nor anything else can prove you were not exploited, but the can assist your investigation by quickly comparing RubyGems API-provided checksums with the checksums of files on your disk. The issue has been patched with improved input validation and the changes are live. No action is required on the part of the user. Users are advised to validate their local gems.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20
References: https://github.com/rubygems/rubygems.org/commit/7e19c19247ddf5885a915710afc60ec6663d8502; https://github.com/rubygems/rubygems.org/security/advisories/GHSA-rxcq-2m4f-94wm; https://github.com/rubygems/rubygems.org/commit/7e19c19247ddf5885a915710afc60ec6663d8502
CVE: CVE-2023-26469
Published: 2023-08-17
Description: In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://packetstormsecurity.com/files/174248/Jorani-Remote-Code-Execution.html; https://github.com/Orange-Cyberdefense/CVE-repository/tree/master; https://jorani.org/security-features-in-lms.html
CVE: CVE-2023-38843
Published: 2023-08-17
Description: An issue in Atlos v.1.0 allows an authenticated attacker to execute arbitrary code via a crafted payload into the description field in the incident function.
CVSS Score: 8.0 (HIGH)
CWE: CWE-1236
References: https://gist.github.com/senzee1984/ff30f0914db39d2741ab17332f0fc6e1; https://github.com/atlosdotorg/atlos; https://gist.github.com/senzee1984/ff30f0914db39d2741ab17332f0fc6e1
CVE: CVE-2023-38905
Published: 2023-08-17
Description: SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE, and DBMS_PIPE.RECEIVE_MESSAGE functions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/wealeson1/e24fc8575f4e051320d69e9a75080642; https://github.com/jeecgboot/jeecg-boot/issues/4737; https://gist.github.com/wealeson1/e24fc8575f4e051320d69e9a75080642
CVE: CVE-2023-39741
Published: 2023-08-17
Description: lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::write(int) function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://gist.github.com/huanglei3/ec9090096aa92445cf0a8baa8e929084; https://github.com/ckolivas/lrzip/issues/246; https://github.com/huanglei3/lrzip_poc/tree/main/lrzip_heap_overflow
CVE: CVE-2023-39743
Published: 2023-08-17
Description: lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3_decode_block src/libbz3.c.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://gist.github.com/huanglei3/ec9090096aa92445cf0a8baa8e929084; https://github.com/huanglei3/lrzip-next-poc/tree/main; https://github.com/pete4abw/lrzip-next/issues/132
CVE: CVE-2023-40313
Published: 2023-08-17
Description: A BeanShell interpreter in remote server mode runs in OpenMNS Horizon versions earlier than 32.0.2 and in related Meridian versions which could allow arbitrary remote Java code execution. The solution is to upgrade to Meridian 2023.1.6, 2022.1.19, 2021.1.30, 2020.1.38 or Horizon 32.0.2 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.
CVSS Score: 7.1 (HIGH)
CWE: CWE-94
References: https://docs.opennms.com/horizon/32/releasenotes/changelog.html; https://github.com/OpenNMS/opennms/pull/6368; https://docs.opennms.com/horizon/32/releasenotes/changelog.html
CVE: CVE-2023-31938
Published: 2023-08-17
Description: SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_detail.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug2-SQL-Injection-emp_id.md; https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug2-SQL-Injection-emp_id.md
CVE: CVE-2023-31939
Published: 2023-08-17
Description: SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomer_id parameter at customer_edit.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug4-SQL-Injection-costomer_id.md; https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug4-SQL-Injection-costomer_id.md
CVE: CVE-2023-31940
Published: 2023-08-17
Description: SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the page_id parameter at article_edit.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug7-SQL-Injection-page_id.md; https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug7-SQL-Injection-page_id.md
CVE: CVE-2023-31941
Published: 2023-08-17
Description: File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the employee_insert.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug1-File%20upload.md; https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug1-File%20upload.md
CVE: CVE-2023-31942
Published: 2023-08-17
Description: Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter in insert.php.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug9-XSS-description.md; https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug9-XSS-description.md
CVE: CVE-2023-31943
Published: 2023-08-17
Description: SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticket_id parameter at ticket_detail.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug6-SQL-Injection-ticket_id.md; https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug6-SQL-Injection-ticket_id.md
CVE: CVE-2023-31944
Published: 2023-08-17
Description: SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_edit.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug3-SQL-Injection-emp_id2.md; https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug3-SQL-Injection-emp_id2.md
CVE: CVE-2023-31945
Published: 2023-08-17
Description: SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at daily_expenditure_edit.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug5-SQL-Injection-id.md; https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug5-SQL-Injection-id.md
CVE: CVE-2023-31946
Published: 2023-08-17
Description: File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug8-File%20upload2.md; https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug8-File%20upload2.md
CVE: CVE-2023-36106
Published: 2023-08-17
Description: An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://gist.github.com/tztdsb/a653b6db328199ec0f55e54b4e466415#file-gistfile1-txt; https://gitee.com/KFCFans/PowerJob; https://gist.github.com/tztdsb/a653b6db328199ec0f55e54b4e466415#file-gistfile1-txt
CVE: CVE-2023-36844
Published: 2023-08-17
Description: A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables.

Using a crafted request an attacker is able to modify 

certain PHP environment variables leading to partial loss of integrity, which may allow chaining to other vulnerabilities.
This issue affects Juniper Networks Junos OS on EX Series:



  *  All versions prior to 20.4R3-S9;
  *  21.1 versions 21.1R1 and later;
  *  21.2 versions prior to 21.2R3-S7;
  *  21.3 versions 

prior to 

 21.3R3-S5;
  *  21.4 versions 

prior to 

21.4R3-S5;
  *  22.1 versions 

prior to 

22.1R3-S4;
  *  22.2 versions 

prior to 

22.2R3-S2;
  *  22.3 versions 

prior to 22.3R3-S1;
  *  22.4 versions 

prior to 

22.4R2-S2, 22.4R3;
  *  23.2 versions prior to 

23.2R1-S1, 23.2R2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-473
References: http://packetstormsecurity.com/files/174865/Juniper-SRX-Firewall-EX-Switch-Remote-Code-Execution.html; https://supportportal.juniper.net/JSA72300; http://packetstormsecurity.com/files/174865/Juniper-SRX-Firewall-EX-Switch-Remote-Code-Execution.html
CVE: CVE-2023-36845
Published: 2023-08-17
Description: A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series 

and SRX Series 

allows an unauthenticated, network-based attacker to remotely execute code.

Using a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution environment allowing the injection und execution of code.


This issue affects Juniper Networks Junos OS on EX Series


and 


SRX Series:



  *  All versions prior to 

20.4R3-S9;
  *  21.1 versions 21.1R1 and later;
  *  21.2 versions prior to 21.2R3-S7;
  *  21.3 versions prior to 21.3R3-S5;
  *  21.4 versions prior to 21.4R3-S5;
  *  22.1 versions 

prior to 

22.1R3-S4;
  *  22.2 versions 

prior to 

22.2R3-S2;
  *  22.3 versions 

prior to 

22.3R2-S2, 22.3R3-S1;
  *  22.4 versions 

prior to 

22.4R2-S1, 22.4R3;
  *  23.2 versions prior to 23.2R1-S1, 23.2R2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-473
References: http://packetstormsecurity.com/files/174865/Juniper-SRX-Firewall-EX-Switch-Remote-Code-Execution.html; http://packetstormsecurity.com/files/176969/Juniper-SRX-Firewall-EX-Switch-Remote-Code-Execution.html; https://supportportal.juniper.net/JSA72300
CVE: CVE-2023-36846
Published: 2023-08-17
Description: A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.



With a specific request to user.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of 

integrity

for a certain 

part of the file system, which may allow chaining to other vulnerabilities.


This issue affects Juniper Networks Junos OS on SRX Series:



  *  All versions prior to 20.4R3-S8;
  *  21.1 versions 21.1R1 and later;
  *  21.2 versions prior to 21.2R3-S6;
  *  21.3 versions 

prior to 

 21.3R3-S5;
  *  21.4 versions 

prior to 

21.4R3-S5;
  *  22.1 versions 

prior to 

22.1R3-S3;
  *  22.2 versions 

prior to 

22.2R3-S2;
  *  22.3 versions 

prior to 

22.3R2-S2, 22.3R3;
  *  22.4 versions 

prior to 

22.4R2-S1, 22.4R3.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://supportportal.juniper.net/JSA72300; https://supportportal.juniper.net/JSA72300; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36846