deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-4769
Published: 2023-04-03
Description: 
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the target path on host when a file is uploaded with an invalid character in its name. 


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]589--Resolved-Pentaho-BA-Server-Generation-of-Error-Message-Containing-Sensitive-Information-Versions-before-9-4-0-0-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-4769-; https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]589--Resolved-Pentaho-BA-Server-Generation-of-Error-Message-Containing-Sensitive-Information-Versions-before-9-4-0-0-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-4769-
CVE: CVE-2022-4770
Published: 2023-04-03
Description: 
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the full parametrized SQL query in an error message when an invalid character is used within a Pentaho Report (*.prpt). 


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]949--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Generation-of-Error-Message-Containing-Sensitive-Information-Versions-before-9-4-0-0-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-4770-; https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]949--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Generation-of-Error-Message-Containing-Sensitive-Information-Versions-before-9-4-0-0-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-4770-
CVE: CVE-2022-4771
Published: 2023-04-03
Description: 
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malicious URL to inject content into the Pentaho User Console through session variables. 


CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]717--Resolved-Pentaho-BA-Server-Improper-Neutralization-of-Input-During-Web-Page-Generation-Cross-site-Scripting-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-4771-; https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]717--Resolved-Pentaho-BA-Server-Improper-Neutralization-of-Input-During-Web-Page-Generation-Cross-site-Scripting-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-4771-
CVE: CVE-2023-29218
Published: 2023-04-03
Description: The Twitter Recommendation Algorithm through ec83d01 allows attackers to cause a denial of service (reduction of reputation score) by arranging for multiple Twitter accounts to coordinate negative signals regarding a target account, such as unfollowing, muting, blocking, and reporting, as exploited in the wild in March and April 2023. NOTE: Vendor states that allowing users to unfollow, mute, block, and report tweets and accounts and the impact of these negative engagements on Twitter’s ranking algorithm is a conscious design decision, rather than a security vulnerability.
CVSS Score: 7.5 (HIGH)
References: https://github.com/twitter/the-algorithm/issues/1386; https://github.com/twitter/the-algorithm/tree/ec83d01dcaebf369444d75ed04b3625a0a645eb9; https://steventey.com/blog/twitter-algorithm
CVE: CVE-2023-1611
Published: 2023-04-03
Description: A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=2181342; https://github.com/torvalds/linux/commit/2f1a6be12ab6c8470d5776e68644726c94257c54; https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
CVE: CVE-2023-24724
Published: 2023-04-03
Description: A stored cross site scripting (XSS) vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields. The product name is SAS Web Administration interface (SASAdmin). For the product release, the reported version is 9.4_M2 and the fixed version is 9.4_M3. For the SAS release, the reported version is 9.4 TS1M2 and the fixed version is 9.4 TS1M3.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://medium.com/%40williamamorim256/stored-xss-vulnerability-discovered-in-sas-9-4-admin-console-5680e9e4062c; https://owasp.org/www-community/attacks/xss/; https://support.sas.com/kb/55/539.html
CVE: CVE-2023-26916
Published: 2023-04-03
Description: libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476
References: https://github.com/CESNET/libyang/issues/1979; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6NQZHCJG3SBMFOQNIPRZGKDK3ARHLTTB/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2VWGCMYKQH4BTFEHX5VYEXXOPIKKFHS/
CVE: CVE-2023-0225
Published: 2023-04-03
Description: A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-732, CWE-732, CWE-732
References: https://security.gentoo.org/glsa/202309-06; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.samba.org/samba/security/CVE-2023-0225.html
CVE: CVE-2023-0614
Published: 2023-04-03
Description: The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-312
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXBPYIA4VWNOD437NAHZ3NXKAETLFB5S/; https://security.gentoo.org/glsa/202309-06; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-0922
Published: 2023-04-03
Description: The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXBPYIA4VWNOD437NAHZ3NXKAETLFB5S/; https://security.gentoo.org/glsa/202309-06; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-1579
Published: 2023-04-03
Description: Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://security.gentoo.org/glsa/202309-15; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://sourceware.org/bugzilla/show_bug.cgi?id=29988
CVE: CVE-2023-26855
Published: 2023-04-04
Description: The hashing algorithm of ChurchCRM v4.5.3 utilizes a non-random salt value which allows attackers to use precomputed hash tables or dictionary attacks to crack the hashed passwords.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330, CWE-330
References: https://github.com/ChurchCRM/CRM/issues/6449; https://github.com/ChurchCRM/CRM/issues/6449
CVE: CVE-2023-26976
Published: 2023-04-04
Description: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/AC6/205_1; https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/AC6/205_1
CVE: CVE-2023-1768
Published: 2023-04-04
Description: Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.
CVSS Score: 3.7 (LOW)
CWE: CWE-446
References: https://checkmk.com/werk/15423; https://checkmk.com/werk/15423
CVE: CVE-2023-1728
Published: 2023-04-04
Description: Unrestricted Upload of File with Dangerous Type vulnerability in Fernus Informatics LMS allows OS Command Injection, Server Side Include (SSI) Injection.This issue affects LMS: before 23.04.03.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.usom.gov.tr/bildirim/tr-23-0194; https://www.usom.gov.tr/bildirim/tr-23-0194
CVE: CVE-2023-1826
Published: 2023-04-04
Description: A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file php-ocls\admin\system_info\index.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-224841 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434, CWE-434
References: http://packetstormsecurity.com/files/171790/Online-Computer-And-Laptop-Store-1.0-Shell-Upload.html; https://vuldb.com/?ctiid.224841; https://vuldb.com/?id.224841
CVE: CVE-2020-36692
Published: 2023-04-04
Description: A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows execution of JavaScript code in the victim browser via a malicious form that must be manually submitted by the victim while logged in to SWA.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce; https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce
CVE: CVE-2022-4934
Published: 2023-04-04
Description: A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77, CWE-77
References: https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce; https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce
CVE: CVE-2023-1671
Published: 2023-04-04
Description: A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: http://packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.html; https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce; http://packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.html
CVE: CVE-2023-1827
Published: 2023-04-04
Description: A vulnerability has been found in SourceCodester Centralized Covid Vaccination Records System 1.0 and classified as critical. This vulnerability affects unknown code of the file /vaccinated/admin/maintenance/manage_location.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224842 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/ZERO-XX-ONE/bug_report/blob/main/SQLi.md; https://vuldb.com/?ctiid.224842; https://vuldb.com/?id.224842
CVE: CVE-2023-25940
Published: 2023-04-04
Description: 
Dell PowerScale OneFS version 9.5.0.0 contains improper link resolution before file access vulnerability in isi_gather_info. A high privileged local attacker could potentially exploit this vulnerability, leading to system takeover and it breaks the compliance mode guarantees.



CVSS Score: 6.7 (MEDIUM)
CWE: CWE-59
References: https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security; https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security
CVE: CVE-2023-25941
Published: 2023-04-04
Description: 
Dell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability. A low-privileged local attacker could potentially exploit this vulnerability, leading to Denial of service, escalation of privileges, and information disclosure. This vulnerability breaks the compliance mode guarantee.


CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security; https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security
CVE: CVE-2023-25942
Published: 2023-04-04
Description: 
Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability. A malicious network user with low privileges could potentially exploit this vulnerability in SMB, leading to a potential denial of service.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-664
References: https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security; https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security
CVE: CVE-2022-41633
Published: 2023-04-04
Description: Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin <= 6.0.2.0 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/peepso-core/wordpress-community-by-peepso-plugin-6-0-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/peepso-core/wordpress-community-by-peepso-plugin-6-0-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-23685
Published: 2023-04-04
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in RadiusTheme Portfolio – WordPress Portfolio plugin <= 2.8.10 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/tlp-portfolio/wordpress-portfolio-wordpress-portfolio-plugin-plugin-2-8-10-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/tlp-portfolio/wordpress-portfolio-wordpress-portfolio-plugin-plugin-2-8-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-23686
Published: 2023-04-04
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Brett Shumaker Simple Staff List plugin <= 2.2.2 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/simple-staff-list/wordpress-simple-staff-list-plugin-2-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/simple-staff-list/wordpress-simple-staff-list-plugin-2-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-23821
Published: 2023-04-04
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marcin Pietrzak Interactive Polish Map plugin <= 1.2 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/interactive-polish-map/wordpress-interactive-polish-map-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/interactive-polish-map/wordpress-interactive-polish-map-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-23878
Published: 2023-04-04
Description: Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS plugin <= 4.3.9 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-google-map-plugin/wordpress-wordpress-plugin-for-google-maps-wp-maps-plugin-4-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-google-map-plugin/wordpress-wordpress-plugin-for-google-maps-wp-maps-plugin-4-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-47870
Published: 2023-04-04
Description: A Cross Site Scripting (XSS) vulnerability in the web SQL monitor login page in Redgate SQL Monitor 12.1.31.893 allows remote attackers to inject arbitrary web Script or HTML via the returnUrl parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://packetstormsecurity.com/files/171647/SQL-Monitor-12.1.31.893-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/171647/SQL-Monitor-12.1.31.893-Cross-Site-Scripting.html
CVE: CVE-2023-23870
Published: 2023-04-04
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Responsive Vertical Icon Menu plugin <= 1.5.8 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wpdevart-vertical-menu/wordpress-responsive-vertical-icon-menu-plugin-1-5-8-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/wpdevart-vertical-menu/wordpress-responsive-vertical-icon-menu-plugin-1-5-8-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-23977
Published: 2023-04-04
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Team Heateor WordPress Social Comments Plugin for Vkontakte Comments and Disqus Comments plugin <= 1.6.1 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/heateor-social-comments/wordpress-vkontakte-comments-and-disqus-comments-plugin-1-6-1-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/heateor-social-comments/wordpress-vkontakte-comments-and-disqus-comments-plugin-1-6-1-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-25303
Published: 2023-04-04
Description: ATLauncher <= 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/ATLauncher/ATLauncher/security/advisories/GHSA-7cff-8xv4-mvx6; https://quiltmc.org/en/blog/2023-02-04-five-installer-vulnerabilities/; https://github.com/ATLauncher/ATLauncher/security/advisories/GHSA-7cff-8xv4-mvx6
CVE: CVE-2023-25305
Published: 2023-04-04
Description: PolyMC Launcher <= 1.4.3 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/PolyMC/PolyMC/security/advisories/GHSA-3rfr-g9g9-7gx2; https://quiltmc.org/en/blog/2023-02-04-five-installer-vulnerabilities/; https://github.com/PolyMC/PolyMC/security/advisories/GHSA-3rfr-g9g9-7gx2
CVE: CVE-2023-25355
Published: 2023-04-04
Description: CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run commands as the `daemon` user on a sipXcom server can overwrite a service file, and escalate their privileges to `root`.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276, CWE-276
References: https://seclists.org/fulldisclosure/2023/Mar/5; https://seclists.org/fulldisclosure/2023/Mar/5
CVE: CVE-2023-25356
Published: 2023-04-04
Description: CoreDial sipXcom up to and including 21.04 is vulnerable to Improper Neutralization of Argument Delimiters in a Command. XMPP users are able to inject arbitrary arguments into a system command, which can be used to read files from, and write files to, the sipXcom server. This can also be leveraged to gain remote command execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-88, CWE-88
References: https://seclists.org/fulldisclosure/2023/Mar/5; https://seclists.org/fulldisclosure/2023/Mar/5
CVE: CVE-2023-26866
Published: 2023-04-04
Description: GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete takeover.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/lionelmusonza/CVE-2023-26866; https://github.com/lionelmusonza/CVE-2023-26866
CVE: CVE-2023-28848
Published: 2023-04-04
Description: user_oidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform. A vulnerability in versions 1.0.0 until 1.3.0 effectively allowed an attacker to bypass the state protection as they could just copy the expected state token from the first request to their second request. Users should upgrade user_oidc to 1.3.0 to receive a patch for the issue. No known workarounds are available.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-352
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-52hv-xw32-wf7f; https://github.com/nextcloud/user_oidc/pull/580; https://hackerone.com/reports/1878381
CVE: CVE-2023-28997
Published: 2023-04-04
Description: The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious server administrator can recover and modify the contents of end-to-end encrypted files. Users should upgrade the Nextcloud Desktop client to 3.6.5 to receive a patch. No known workarounds are available.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-323
References: https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_DanieleCoppola.pdf; https://github.com/nextcloud/desktop/pull/5324; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-4p33-rw27-j5fc
CVE: CVE-2023-28998
Published: 2023-04-04
Description: The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious server administrator can gain full access to an end-to-end encrypted folder. They can decrypt files, recover the folder structure, and add new files.​ Users should upgrade the Nextcloud Desktop client to 3.6.5 to receive a patch. No known workarounds are available.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-325
References: https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_DanieleCoppola.pdf; https://github.com/nextcloud/desktop/pull/5323; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-jh3g-wpwv-cqgr
CVE: CVE-2023-28999
Published: 2023-04-04
Description: Nextcloud is an open-source productivity platform. In Nextcloud Desktop client 3.0.0 until 3.8.0, Nextcloud Android app 3.13.0 until 3.25.0, and Nextcloud iOS app 3.0.5 until 4.8.0, a malicious server administrator can gain full access to an end-to-end encrypted folder. They can decrypt files, recover the folder structure and add new files.​ This issue is fixed in Nextcloud Desktop 3.8.0, Nextcloud Android 3.25.0, and Nextcloud iOS 4.8.0. No known workarounds are available.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-325, CWE-311
References: https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_DanieleCoppola.pdf; https://github.com/nextcloud/desktop/pull/5560; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8875-wxww-3rr8
CVE: CVE-2023-29000
Published: 2023-04-04
Description: The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.7.0, by trusting that the server will return a certificate that belongs to the keypair of the user, a malicious server could get the desktop client to encrypt files with a key known to the attacker. This issue is fixed in Nextcloud Desktop 3.7.0. No known workarounds are available.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-295
References: https://github.com/nextcloud/desktop/pull/4949; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h82x-98q3-7534; https://hackerone.com/reports/1679267
CVE: CVE-2022-48435
Published: 2023-04-04
Description: In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file
CVSS Score: 3.3 (LOW)
CWE: CWE-532
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/