deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-6051
Published: 2023-12-15
Description: An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when source code or installation packages are pulled from a specific tag.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-94, CWE-94
References: https://gitlab.com/gitlab-org/gitlab/-/issues/431345; https://hackerone.com/reports/2237165; https://gitlab.com/gitlab-org/gitlab/-/issues/431345
CVE: CVE-2023-6680
Published: 2023-12-15
Description: An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public key if they use Smartcard authentication. Smartcard authentication is an experimental feature and has to be manually enabled by an administrator.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295, CWE-295
References: https://gitlab.com/gitlab-org/gitlab/-/issues/421607; https://gitlab.com/gitlab-org/gitlab/-/issues/421607
CVE: CVE-2023-50089
Published: 2023-12-15
Description: A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/NoneShell/Vulnerabilities/blob/main/NETGEAR/WNR2000v4-1.0.0.70-Authorized-Command-Injection.md; https://www.netgear.com/about/security/; https://github.com/NoneShell/Vulnerabilities/blob/main/NETGEAR/WNR2000v4-1.0.0.70-Authorized-Command-Injection.md
CVE: CVE-2023-50917
Published: 2023-12-15
Description: MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://packetstormsecurity.com/files/176273/MajorDoMo-Remote-Code-Execution.html; http://packetstormsecurity.com/files/176669/MajorDoMo-Command-Injection.html; http://seclists.org/fulldisclosure/2023/Dec/19
CVE: CVE-2023-50918
Published: 2023-12-15
Description: app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/MISP/MISP/commit/92888b1376246c0f20c256aaa3c57b6f12115fa1; https://github.com/MISP/MISP/compare/v2.4.181...v2.4.182; https://github.com/MISP/MISP/commit/92888b1376246c0f20c256aaa3c57b6f12115fa1
CVE: CVE-2023-50719
Published: 2023-12-15
Description: XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the password hashes of all users to anyone with view right on the respective user profiles. By default, all user profiles are public. This vulnerability also affects any configurations used by extensions that contain passwords like API keys that are viewable for the attacker. Normally, such passwords aren't accessible but this vulnerability would disclose them as plain text.  This has been patched in XWiki 14.10.15, 15.5.2 and 15.7RC1. There are no known workarounds for this vulnerability.

CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-359, CWE-312
References: https://github.com/xwiki/xwiki-platform/commit/3e5272f2ef0dff06a8f4db10afd1949b2f9e6eea; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-p6cp-6r35-32mh; https://jira.xwiki.org/browse/XWIKI-21208
CVE: CVE-2023-50720
Published: 2023-12-15
Description: XWiki Platform is a generic wiki platform. Prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the email addresses of users even when obfuscation of email addresses is enabled. To demonstrate the vulnerability, search for `objcontent:email*` using XWiki's regular search interface. This has been fixed in XWiki 14.10.15, 15.5.2 and 15.7RC1 by not indexing email address properties when obfuscation is enabled. There are no known workarounds for this vulnerability.

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/xwiki/xwiki-platform/commit/3e5272f2ef0dff06a8f4db10afd1949b2f9e6eea; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-2grh-gr37-2283; https://jira.xwiki.org/browse/XWIKI-20371
CVE: CVE-2023-50721
Published: 2023-12-15
Description: XWiki Platform is a generic wiki platform. Starting in 4.5-rc-1 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the search administration interface doesn't properly escape the id and label of search user interface extensions, allowing the injection of XWiki syntax containing script macros including Groovy macros that allow remote code execution, impacting the confidentiality, integrity and availability of the whole XWiki instance. This attack can be executed by any user who can edit some wiki page like the user's profile (editable by default) as user interface extensions that will be displayed in the search administration can be added on any document by any user.  The necessary escaping has been added in XWiki 14.10.15, 15.5.2 and 15.7RC1. As a workaround, the patch can be applied manually applied to the page `XWiki.SearchAdmin`.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94, CWE-95, CWE-94
References: https://github.com/xwiki/xwiki-platform/commit/62863736d78ffd60d822279c5fb7fb[PII_REDACTED]; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-7654-vfh6-rw6x; https://jira.xwiki.org/browse/XWIKI-21200
CVE: CVE-2023-50722
Published: 2023-12-15
Description: XWiki Platform is a generic wiki platform. Starting in 2.3 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, there is a reflected XSS or also direct remote code execution vulnerability in the code for displaying configurable admin sections. The code that can be passed through a URL parameter is only executed when the user who is visiting the crafted URL has edit right on at least one configuration section. While any user of the wiki could easily create such a section, this vulnerability doesn't require the attacker to have an account or any access on the wiki. It is sufficient to trick any admin user of the XWiki installation to visit the crafted URL. This vulnerability allows full remote code execution with programming rights and thus impacts the confidentiality, integrity and availability of the whole XWiki installation. This has been fixed in XWiki 14.10.15, 15.5.2 and 15.7RC1. The patch can be manually applied to the document `XWiki.ConfigurableClass`.

CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-352, CWE-79, CWE-352
References: https://github.com/xwiki/xwiki-platform/commit/5e14c8d08fd0c5b619833d35090b470aa4cb52b0; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-cp3j-273x-3jxc; https://jira.xwiki.org/browse/XWIKI-21167
CVE: CVE-2023-50723
Published: 2023-12-15
Description: XWiki Platform is a generic wiki platform. Starting in 2.3 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, anyone who can edit an arbitrary wiki page in an XWiki installation can gain programming right through several cases of missing escaping in the code for displaying sections in the administration interface. This impacts the confidentiality, integrity and availability of the whole XWiki installation. Normally, all users are allowed to edit their own user profile so this should be exploitable by all users of the XWiki instance. This has been fixed in XWiki 14.10.15, 15.5.2 and 15.7RC1. The patches can be manually applied to the `XWiki.ConfigurableClassMacros` and `XWiki.ConfigurableClass` pages.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94, CWE-95, CWE-94
References: https://github.com/xwiki/xwiki-platform/commit/0f367aaae4e0696f61cf5a67a75edd27d1d16db6; https://github.com/xwiki/xwiki-platform/commit/1157c1ecea395aac7f64cd8a6f484b1225416dc7; https://github.com/xwiki/xwiki-platform/commit/749f6aee1bfbcf191c3734ea0aa9eba3aa63240e
CVE: CVE-2023-4020
Published: 2023-12-15
Description: An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-125, CWE-787
References: https://community.silabs.com/069Vm0000004b95IAA; https://github.com/SiliconLabs/gecko_sdk/releases; https://community.silabs.com/069Vm0000004b95IAA
CVE: CVE-2023-50264
Published: 2023-12-15
Description: Bazarr manages and downloads subtitles. Prior to 1.3.1, Bazarr contains an arbitrary file read in /system/backup/download/ endpoint in bazarr/app/ui.py does not validate the user-controlled filename variable and uses it in the send_file function, which leads to an arbitrary file read on the system. This issue is fixed in version 1.3.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/morpheus65535/bazarr/commit/17add7fbb3ae1919a40d505470d499d46df9ae6b; https://github.com/morpheus65535/bazarr/releases/tag/v1.3.1; https://securitylab.github.com/advisories/GHSL-2023-192_GHSL-2023-194_bazarr/
CVE: CVE-2023-50265
Published: 2023-12-15
Description: Bazarr manages and downloads subtitles. Prior to 1.3.1, the /api/swaggerui/static endpoint in bazarr/app/ui.py does not validate the user-controlled filename variable and uses it in the send_file function, which leads to an arbitrary file read on the system. This issue is fixed in version 1.3.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/morpheus65535/bazarr/commit/17add7fbb3ae1919a40d505470d499d46df9ae6b; https://github.com/morpheus65535/bazarr/releases/tag/v1.3.1; https://securitylab.github.com/advisories/GHSL-2023-192_GHSL-2023-194_bazarr/
CVE: CVE-2023-50266
Published: 2023-12-15
Description: Bazarr manages and downloads subtitles. In version 1.2.4, the proxy method in bazarr/bazarr/app/ui.py does not validate the user-controlled protocol and url variables and passes them to requests.get() without any sanitization, which leads to a blind server-side request forgery (SSRF). This issue allows for crafting GET requests to internal and external resources on behalf of the server. 1.3.1 contains a partial fix, which limits the vulnerability to HTTP/HTTPS protocols.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/morpheus65535/bazarr/commit/17add7fbb3ae1919a40d505470d499d46df9ae6b; https://github.com/morpheus65535/bazarr/releases/tag/v1.3.1; https://securitylab.github.com/advisories/GHSL-2023-192_GHSL-2023-194_bazarr/
CVE: CVE-2023-50469
Published: 2023-12-15
Description: Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 v2.2.2.6 was discovered to contain a buffer overflow via the ApCliEncrypType parameter at /apply.cgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/forever-more-cjy/overflow/blob/main/LBT-T310%20Buffer%20overflow.md; https://github.com/forever-more-cjy/overflow/blob/main/LBT-T310%20Buffer%20overflow.md
CVE: CVE-2023-50728
Published: 2023-12-15
Description: octokit/webhooks is a GitHub webhook events toolset for Node.js. Starting in 9.26.0 and prior to 9.26.3, 10.9.2, 11.1.2, and 12.0.4, there is a problem caused by an issue with error handling in the @octokit/webhooks library because the error can be undefined in some cases. The resulting request was found to cause an uncaught exception that ends the nodejs process.  The bug is fixed in octokit/webhooks.js 9.26.3, 10.9.2, 11.1.2, and 12.0.4, app.js 14.02, octokit.js 3.1.2, and Protobot 12.3.3.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-755
References: https://github.com/octokit/app.js/releases/tag/v14.0.2; https://github.com/octokit/octokit.js/releases/tag/v3.1.2; https://github.com/octokit/webhooks.js/releases/tag/v10.9.2
CVE: CVE-2023-27317
Published: 2023-12-15
Description: ONTAP 9 versions 9.12.1P8, 9.13.1P4, and 9.13.1P5 are susceptible to a 
vulnerability which will cause all SAS-attached FIPS 140-2 drives to 
become unlocked after a system reboot or power cycle or a single 
SAS-attached FIPS 140-2 drive to become unlocked after reinsertion. This
 could lead to disclosure of sensitive information to an attacker with 
physical access to the unlocked drives. 


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/; https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-28022
Published: 2023-12-15
Description: HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.

CVSS Score: 3.5 (LOW)
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108433; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108433
CVE: CVE-2020-17483
Published: 2023-12-16
Description: An improper access control vulnerability exists in Uffizio's GPS Tracker all versions that lead to sensitive information disclosure of all the connected devices. By visiting the vulnerable host at port 9000, we see it responds with a JSON body that has all the details about the devices which have been deployed.
CVSS Score: 7.5 (HIGH)
References: https://www.cisa.gov/news-events/ics-advisories/icsa-21-287-02; https://www.uffizio.com/; https://www.cisa.gov/news-events/ics-advisories/icsa-21-287-02
CVE: CVE-2020-17484
Published: 2023-12-16
Description: An Open Redirection vulnerability exists in Uffizio's GPS Tracker all versions allows an attacker to construct a URL within the application that causes a redirection to an arbitrary external domain.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://www.cisa.gov/news-events/ics-advisories/icsa-21-287-02; https://www.uffizio.com/; https://www.cisa.gov/news-events/ics-advisories/icsa-21-287-02
CVE: CVE-2020-17485
Published: 2023-12-16
Description: A Remote Code Execution vulnerability exist in Uffizio's GPS Tracker all versions. The web server can be compromised by uploading and executing a web/reverse shell. An attacker could then run commands, browse system files, and browse local resources
CVSS Score: 9.8 (CRITICAL)
References: https://www.cisa.gov/news-events/ics-advisories/icsa-21-287-02; https://www.uffizio.com/; https://www.cisa.gov/news-events/ics-advisories/icsa-21-287-02
CVE: CVE-2021-42794
Published: 2023-12-16
Description: An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior. The application allows a client to provide a malicious connection string that could allow an adversary to port scan the LAN, depending on the hosts' responses.
CVSS Score: 5.3 (MEDIUM)
References: https://www.aveva.com/en/products/edge/; https://www.cisa.gov/news-events/ics-advisories/icsa-22-326-01; https://www.exploit-db.com/docs/english/17254-connection-string-parameter-pollution-attacks.pdf
CVE: CVE-2021-42796
Published: 2023-12-16
Description: An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticated arbitrary commands to be executed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.aveva.com/en/products/edge/; https://www.cisa.gov/news-events/ics-advisories/icsa-22-326-01; https://www.aveva.com/en/products/edge/
CVE: CVE-2021-42797
Published: 2023-12-16
Description: Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user account configured for accessing external DB resources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.aveva.com/en/products/edge/; https://www.cisa.gov/news-events/ics-advisories/icsa-22-326-01; https://www.aveva.com/en/products/edge/
CVE: CVE-2022-24351
Published: 2023-12-16
Description: TOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29, Kernel 5.3 before version 05.36.29, Kernel 5.4 version before 05.44.13, and Kernel 5.5 before version 05.52.13 allows an attacker to alter data and code used by the remainder of the boot process.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-367
References: https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2023038; https://www.insyde.com/security-pledge
CVE: CVE-2023-31813
Published: 2023-12-16
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-2804. Reason: This record is a duplicate of CVE-2023-2804. Notes: All CVE users should reference CVE-2023-2804 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2023-39340
Published: 2023-12-16
Description: A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific request which may lead to Denial of Service (DoS) of the appliance.
CVSS Score: 7.5 (HIGH)
References: https://forums.ivanti.com/s/article/Security-fix-release-Ivanti-Connect-Secure-22-6R2-and-22-6R2-1?language=en_US; https://forums.ivanti.com/s/article/Security-fix-release-Ivanti-Connect-Secure-22-6R2-and-22-6R2-1?language=en_US
CVE: CVE-2023-6848
Published: 2023-12-16
Description: A vulnerability was found in kalcaddle kodbox up to 1.48. It has been declared as critical. Affected by this vulnerability is the function check of the file plugins/officeViewer/controller/libreOffice/index.class.php. The manipulation of the argument soffice leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.48.04 is able to address this issue. The identifier of the patch is 63a4d5708d210f119c24afd941d01a943e25334c. It is recommended to upgrade the affected component. The identifier VDB-248209 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-77
References: https://github.com/kalcaddle/kodbox/commit/63a4d5708d210f119c24afd941d01a943e25334c; https://github.com/kalcaddle/kodbox/releases/tag/1.48.04; https://note.zhaoj.in/share/pf838kAzQyTQ
CVE: CVE-2023-6849
Published: 2023-12-16
Description: A vulnerability was found in kalcaddle kodbox up to 1.48. It has been rated as critical. Affected by this issue is the function cover of the file plugins/fileThumb/app.php. The manipulation of the argument path leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.48.04 is able to address this issue. The patch is identified as 63a4d5708d210f119c24afd941d01a943e25334c. It is recommended to upgrade the affected component. VDB-248210 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-918
References: https://github.com/kalcaddle/kodbox/commit/63a4d5708d210f119c24afd941d01a943e25334c; https://github.com/kalcaddle/kodbox/releases/tag/1.48.04; https://note.zhaoj.in/share/jSsPAWT1pKsq
CVE: CVE-2023-6850
Published: 2023-12-16
Description: A vulnerability was found in kalcaddle KodExplorer up to 4.51.03. It has been declared as critical. This vulnerability affects unknown code of the file /index.php?pluginApp/to/yzOffice/getFile of the component API Endpoint Handler. The manipulation of the argument path/file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.52.01 is able to address this issue. The patch is identified as 5cf233f7556b442100cf67b5e92d57ceabb126c6. It is recommended to upgrade the affected component. VDB-248218 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/kalcaddle/KodExplorer/commit/5cf233f7556b442100cf67b5e92d57ceabb126c6; https://github.com/kalcaddle/KodExplorer/releases/tag/4.52.01; https://note.zhaoj.in/share/L38RNzUOwOtN
CVE: CVE-2023-6889
Published: 2023-12-16
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/1037a8f012e0d9ec4bf4c8107972f6695e381392; https://huntr.com/bounties/52897778-fad7-4169-bf04-a68a0646df0c; https://github.com/thorsten/phpmyfaq/commit/1037a8f012e0d9ec4bf4c8107972f6695e381392
CVE: CVE-2023-6890
Published: 2023-12-16
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/97d90ebbe11ebc6081bf49a2ba4b60f227cd1b43; https://huntr.com/bounties/2cf11678-8793-4fa1-b21a-f135564a105d; https://github.com/thorsten/phpmyfaq/commit/97d90ebbe11ebc6081bf49a2ba4b60f227cd1b43
CVE: CVE-2023-6851
Published: 2023-12-16
Description: A vulnerability was found in kalcaddle KodExplorer up to 4.51.03. It has been rated as critical. This issue affects the function unzipList of the file plugins/zipView/app.php of the component ZIP Archive Handler. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.52.01 is able to address this issue. The patch is named 5cf233f7556b442100cf67b5e92d57ceabb126c6. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-248219.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-94
References: https://github.com/kalcaddle/KodExplorer/commit/5cf233f7556b442100cf67b5e92d57ceabb126c6; https://github.com/kalcaddle/KodExplorer/releases/tag/4.52.01; https://note.zhaoj.in/share/D44UjzoFXYfi
CVE: CVE-2023-6852
Published: 2023-12-16
Description: A vulnerability classified as critical has been found in kalcaddle KodExplorer up to 4.51.03. Affected is an unknown function of the file plugins/webodf/app.php. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.52.01 is able to address this issue. The name of the patch is 5cf233f7556b442100cf67b5e92d57ceabb126c6. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-248220.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/kalcaddle/KodExplorer/commit/5cf233f7556b442100cf67b5e92d57ceabb126c6; https://github.com/kalcaddle/KodExplorer/releases/tag/4.52.01; https://note.zhaoj.in/share/P6lQNyqQn3zY
CVE: CVE-2023-6853
Published: 2023-12-16
Description: A vulnerability classified as critical was found in kalcaddle KodExplorer up to 4.51.03. Affected by this vulnerability is the function index of the file plugins/officeLive/app.php. The manipulation of the argument path leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.52.01 is able to address this issue. The identifier of the patch is 5cf233f7556b442100cf67b5e92d57ceabb126c6. It is recommended to upgrade the affected component. The identifier VDB-248221 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/kalcaddle/KodExplorer/commit/5cf233f7556b442100cf67b5e92d57ceabb126c6; https://github.com/kalcaddle/KodExplorer/releases/tag/4.52.01; https://note.zhaoj.in/share/oaYHbDTnPiU3
CVE: CVE-2023-6559
Published: 2023-12-16
Description: The MW WP Form plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 5.0.3. This is due to the plugin not properly validating the path of an uploaded file prior to deleting it. This makes it possible for unauthenticated attackers to delete arbitrary files, including the wp-config.php file, which can make site takeover and remote code execution possible.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://plugins.trac.wordpress.org/changeset/3007879/mw-wp-form; https://www.wordfence.com/threat-intel/vulnerabilities/id/412d555c-9bbd-42f5-8020-ccfc18755a79?source=cve; https://plugins.trac.wordpress.org/changeset/3007879/mw-wp-form