deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-39303
Published: 2024-02-02
Description: An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.3.2578 build 20231110 and later
QuTS hero h5.1.3.2578 build 20231110 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://www.qnap.com/en/security-advisory/qsa-23-33; https://www.qnap.com/en/security-advisory/qsa-23-33
CVE: CVE-2023-41273
Published: 2024-02-02
Description: A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.2.2533 build 20230926 and later
QuTS hero h5.1.2.2534 build 20230927 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-122, CWE-787
References: https://www.qnap.com/en/security-advisory/qsa-23-38; https://www.qnap.com/en/security-advisory/qsa-23-38
CVE: CVE-2023-41274
Published: 2024-02-02
Description: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service (DoS) attack via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.2.2533 build 20230926 and later
QuTS hero h5.1.2.2534 build 20230927 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://www.qnap.com/en/security-advisory/qsa-23-38; https://www.qnap.com/en/security-advisory/qsa-23-38
CVE: CVE-2023-41275
Published: 2024-02-02
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.2.2533 build 20230926 and later
QuTS hero h5.1.2.2534 build 20230927 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-122
References: https://www.qnap.com/en/security-advisory/qsa-23-38; https://www.qnap.com/en/security-advisory/qsa-23-38
CVE: CVE-2023-41276
Published: 2024-02-02
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.2.2533 build 20230926 and later
QuTS hero h5.1.2.2534 build 20230927 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-122
References: https://www.qnap.com/en/security-advisory/qsa-23-38; https://www.qnap.com/en/security-advisory/qsa-23-38
CVE: CVE-2023-41277
Published: 2024-02-02
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.2.2533 build 20230926 and later
QuTS hero h5.1.2.2534 build 20230927 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-121
References: https://www.qnap.com/en/security-advisory/qsa-23-38; https://www.qnap.com/en/security-advisory/qsa-23-38
CVE: CVE-2023-41278
Published: 2024-02-02
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.2.2533 build 20230926 and later
QuTS hero h5.1.2.2534 build 20230927 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-121
References: https://www.qnap.com/en/security-advisory/qsa-23-38; https://www.qnap.com/en/security-advisory/qsa-23-38
CVE: CVE-2023-41279
Published: 2024-02-02
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.2.2533 build 20230926 and later
QuTS hero h5.1.2.2534 build 20230927 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-121
References: https://www.qnap.com/en/security-advisory/qsa-23-38; https://www.qnap.com/en/security-advisory/qsa-23-38
CVE: CVE-2023-41280
Published: 2024-02-02
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.2.2533 build 20230926 and later
QuTS hero h5.1.2.2534 build 20230927 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-121
References: https://www.qnap.com/en/security-advisory/qsa-23-38; https://www.qnap.com/en/security-advisory/qsa-23-38
CVE: CVE-2023-41281
Published: 2024-02-02
Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 build 20231128 and later
QuTS hero h5.1.4.2596 build 20231128 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-77, CWE-78, CWE-78
References: https://www.qnap.com/en/security-advisory/qsa-23-53; https://www.qnap.com/en/security-advisory/qsa-23-53
CVE: CVE-2023-41282
Published: 2024-02-02
Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 build 20231128 and later
QuTS hero h5.1.4.2596 build 20231128 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-77, CWE-78, CWE-78
References: https://www.qnap.com/en/security-advisory/qsa-23-53; https://www.qnap.com/en/security-advisory/qsa-23-53
CVE: CVE-2023-41283
Published: 2024-02-02
Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 build 20231128 and later
QuTS hero h5.1.4.2596 build 20231128 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://www.qnap.com/en/security-advisory/qsa-23-53; https://www.qnap.com/en/security-advisory/qsa-23-53
CVE: CVE-2023-41292
Published: 2024-02-02
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 build 20231128 and later
QuTS hero h5.1.4.2596 build 20231128 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 3.8 (LOW)
CWE: CWE-120
References: https://www.qnap.com/en/security-advisory/qsa-23-46; https://www.qnap.com/en/security-advisory/qsa-23-46
CVE: CVE-2023-45025
Published: 2024-02-02
Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 build 20231128 and later
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h5.1.4.2596 build 20231128 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 9.0 (CRITICAL)
CWE: CWE-77, CWE-78
References: https://www.qnap.com/en/security-advisory/qsa-23-47; https://www.qnap.com/en/security-advisory/qsa-23-47
CVE: CVE-2023-45026
Published: 2024-02-02
Description: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 build 20240116 and later
QuTS hero h5.1.5.2647 build 20240118 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://www.qnap.com/en/security-advisory/qsa-24-02; https://www.qnap.com/en/security-advisory/qsa-24-02
CVE: CVE-2023-45027
Published: 2024-02-02
Description: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 build 20240116 and later
QuTS hero h5.1.5.2647 build 20240118 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://www.qnap.com/en/security-advisory/qsa-24-02; https://www.qnap.com/en/security-advisory/qsa-24-02
CVE: CVE-2023-45028
Published: 2024-02-02
Description: An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service (DoS) attack via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 build 20240116 and later
QuTS hero h5.1.5.2647 build 20240118 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-770, CWE-770
References: https://www.qnap.com/en/security-advisory/qsa-24-02; https://www.qnap.com/en/security-advisory/qsa-24-02
CVE: CVE-2023-45035
Published: 2024-02-02
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 build 20231128 and later
QuTS hero h5.1.4.2596 build 20231128 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 3.8 (LOW)
CWE: CWE-120
References: https://www.qnap.com/en/security-advisory/qsa-23-46; https://www.qnap.com/en/security-advisory/qsa-23-46
CVE: CVE-2023-45036
Published: 2024-02-02
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.3.2578 build 20231110 and later
QuTS hero h5.1.3.2578 build 20231110 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 3.8 (LOW)
CWE: CWE-120
References: https://www.qnap.com/en/security-advisory/qsa-23-46; https://www.qnap.com/en/security-advisory/qsa-23-46
CVE: CVE-2023-45037
Published: 2024-02-02
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.3.2578 build 20231110 and later
QuTS hero h5.1.3.2578 build 20231110 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 3.8 (LOW)
CWE: CWE-120
References: https://www.qnap.com/en/security-advisory/qsa-23-46; https://www.qnap.com/en/security-advisory/qsa-23-46
CVE: CVE-2023-47561
Published: 2024-02-02
Description: A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.

We have already fixed the vulnerability in the following version:
Photo Station 6.4.2 ( 2023/12/15 ) and later

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.qnap.com/en/security-advisory/qsa-24-08; https://www.qnap.com/en/security-advisory/qsa-24-08
CVE: CVE-2023-47562
Published: 2024-02-02
Description: An OS command injection vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network.

We have already fixed the vulnerability in the following version:
Photo Station 6.4.2 ( 2023/12/15 ) and later

CVSS Score: 7.4 (HIGH)
CWE: CWE-77, CWE-78, CWE-77
References: https://www.qnap.com/en/security-advisory/qsa-24-08; https://www.qnap.com/en/security-advisory/qsa-24-08
CVE: CVE-2023-47564
Published: 2024-02-02
Description: An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network.

We have already fixed the vulnerability in the following versions:
Qsync Central 4.4.0.15 ( 2024/01/04 ) and later
Qsync Central 4.3.0.11 ( 2024/01/11 ) and later

CVSS Score: 8.0 (HIGH)
CWE: CWE-732
References: https://www.qnap.com/en/security-advisory/qsa-24-03; https://www.qnap.com/en/security-advisory/qsa-24-03
CVE: CVE-2023-47566
Published: 2024-02-02
Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 build 20240116 and later
QuTS hero h5.1.5.2647 build 20240118 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: https://www.qnap.com/en/security-advisory/qsa-24-04; https://www.qnap.com/en/security-advisory/qsa-24-04
CVE: CVE-2023-47567
Published: 2024-02-02
Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 build 20240116 and later
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h5.1.5.2647 build 20240118 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 4.7 (MEDIUM)
CWE: CWE-78
References: https://www.qnap.com/en/security-advisory/qsa-24-05; https://www.qnap.com/en/security-advisory/qsa-24-05
CVE: CVE-2023-47568
Published: 2024-02-02
Description: A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 build 20240116 and later
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h5.1.5.2647 build 20240118 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later

CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.qnap.com/en/security-advisory/qsa-24-05; https://www.qnap.com/en/security-advisory/qsa-24-05
CVE: CVE-2023-50359
Published: 2024-02-02
Description: An unchecked return value vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated administrators to place the system in a state that could lead to a crash or other unintended behaviors via unspecified vectors.

We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 build 20240116 and later
QuTS hero h5.1.5.2647 build 20240118 and later

CVSS Score: 3.4 (LOW)
CWE: CWE-252, CWE-252
References: https://www.qnap.com/en/security-advisory/qsa-24-07; https://www.qnap.com/en/security-advisory/qsa-24-07
CVE: CVE-2023-51838
Published: 2024-02-02
Description: Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327, CWE-327
References: https://github.com/Ylianst/MeshCentral/tree/master; https://github.com/tianjk99/Cryptographic-Misuses/blob/main/Bug_MeshCentral.md; https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-51838.md
CVE: CVE-2023-6387
Published: 2024-02-02
Description: A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a denial of service or remote code execution
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-787, CWE-131
References: https://community.silabs.com/069Vm000000WNKuIAO; https://github.com/SiliconLabs/gecko_sdk/releases/tag/v4.4.0; https://community.silabs.com/069Vm000000WNKuIAO
CVE: CVE-2024-1185
Published: 2024-02-02
Description: A vulnerability classified as problematic has been found in Nsasoft NBMonitor Network Bandwidth Monitor 1.6.5.0. This affects an unknown part of the component Registration Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252675. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.3 (LOW)
CWE: CWE-404
References: https://fitoxs.com/vuldb/11-exploit-perl.txt; https://vuldb.com/?ctiid.252675; https://vuldb.com/?id.252675
CVE: CVE-2024-22107
Published: 2024-02-02
Description: An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method systemSettingsDnsDataAction at /opt/webapp/src/AppBundle/Controller/React/SystemSettingsController.php is vulnerable to command injection via the /old/react/v1/api/system/dns/data endpoint. An authenticated attacker can abuse it to inject an arbitrary command and compromise the platform.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77, CWE-77
References: https://adepts.of0x.cc/gtbcc-pwned/; https://x-c3ll.github.io/cves.html; https://adepts.of0x.cc/gtbcc-pwned/
CVE: CVE-2024-22108
Published: 2024-02-02
Description: An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at /opt/webapp/lib/PureApi/CCApi.class.php is vulnerable to an unauthenticated SQL injection via /ccapi.php that an attacker can abuse in order to change the Administrator password to a known value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://adepts.of0x.cc/gtbcc-pwned/; https://x-c3ll.github.io/cves.html; https://adepts.of0x.cc/gtbcc-pwned/
CVE: CVE-2024-23824
Published: 2024-02-02
Description: mailcow is a dockerized email package, with multiple containers linked in one bridged network. The application is vulnerable to pixel flood attack, once the payload has been successfully uploaded in the logo the application goes slow and doesn't respond in the admin page. It is tested on the versions 2023-12a and prior and patched in version 2024-01.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-400
References: https://github.com/0xbunniee/MailCow-Pixel-Flood-Attack; https://github.com/mailcow/mailcow-dockerized/commit/7f6f7e0e9ff608618e5b144bcf18d279610aa3ed; https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-45rv-3c5p-w4h7
CVE: CVE-2024-23831
Published: 2024-02-02
Description: LedgerSMB is a free web-based double-entry accounting system. When a LedgerSMB database administrator has an active session in /setup.pl, an attacker can trick the admin into clicking on a link which automatically submits a request to setup.pl without the admin's consent.  This request can be used to create a new user account with full application (/login.pl) privileges, leading to privilege escalation.  The vulnerability is patched in versions 1.10.30 and 1.11.9.

CVSS Score: 7.5 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/ledgersmb/LedgerSMB/commit/8c2ae5be68a782d62cb9c0e17c0127bf30ef4165; https://github.com/ledgersmb/LedgerSMB/security/advisories/GHSA-98ff-f638-qxjm; https://github.com/ledgersmb/LedgerSMB/commit/8c2ae5be68a782d62cb9c0e17c0127bf30ef4165
CVE: CVE-2024-24029
Published: 2024-02-02
Description: JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://gitee.com/heyewei/JFinalcms/issues/I8VE52; https://gitee.com/heyewei/JFinalcms/issues/I8VE52
CVE: CVE-2024-24160
Published: 2024-02-02
Description: MRCMS 3.0 contains a Cross-Site Scripting (XSS) vulnerability via /admin/system/saveinfo.do.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/wy876/cve/issues/1; https://github.com/wy876/cve/issues/1
CVE: CVE-2024-24161
Published: 2024-02-02
Description: MRCMS 3.0 contains an Arbitrary File Read vulnerability in /admin/file/edit.do as the incoming path parameter is not filtered.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-552
References: https://github.com/wy876/cve/issues/2; https://github.com/wy876/cve/issues/2
CVE: CVE-2024-24470
Published: 2024-02-02
Description: Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the update_post.php component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/tang-0717/cms/blob/main/1.md; https://github.com/tang-0717/cms/blob/main/1.md
CVE: CVE-2024-24757
Published: 2024-02-02
Description: open-irs is an issue response robot that reponds to issues in the installed repository. The `.env` file was accidentally uploaded when working with git actions. This problem is fixed in 1.0.1. Discontinuing all sensitive keys and turning into secrets.

CVSS Score: 7.6 (HIGH)
CWE: CWE-200
References: https://github.com/Degamisu/open-irs/security/advisories/GHSA-7r69-3vwh-wcfr; https://github.com/Degamisu/open-irs/security/advisories/GHSA-7r69-3vwh-wcfr
CVE: CVE-2024-24760
Published: 2024-02-02
Description: mailcow is a dockerized email package, with multiple containers linked in one bridged network. A security vulnerability has been identified in mailcow affecting versions < 2024-01c. This vulnerability potentially allows attackers on the same subnet to connect to exposed ports of a Docker container, even when the port is bound to 127.0.0.1. The vulnerability has been addressed by implementing additional iptables/nftables rules. These rules drop packets for Docker containers on ports 3306, 6379, 8983, and 12345, where the input interface is not `br-mailcow` and the output interface is `br-mailcow`.
CVSS Score: 8.8 (HIGH)
CWE: CWE-610
References: https://github.com/mailcow/mailcow-dockerized/commit/087481ac12bfa5dd715f3630f0b1697be94f7e88; https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-gmpj-5xcm-xxx6; https://github.com/mailcow/mailcow-dockerized/commit/087481ac12bfa5dd715f3630f0b1697be94f7e88