deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-41446
Published: 2022-11-23
Description: An access control issue in /Admin/dashboard.php of Record Management System using CodeIgniter v1.0 allows attackers to access and modify user data.
CVSS Score: 5.4 (MEDIUM)
References: https://drive.google.com/file/d/1Rre498CWp9pWyW9h5ran8GkW6TA2NztC/view?usp=sharing; https://github.com/RashidKhanPathan/CVE-2022-41446; https://ihexcoder.wixsite.com/secresearch/post/privilege-escalation-in-teachers-record-management-system-using-codeignitor
CVE: CVE-2022-43213
Published: 2022-11-23
Description: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editorder.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/Qrayyy/CVE/blob/main/Billing%20System%20Project%20v1.0/CVE-2022-43213%28sql%20in%20editorder.php%29.md; https://www.sourcecodester.com/php/14831/billing-system-project-php-source-code-free-download.html; https://github.com/Qrayyy/CVE/blob/main/Billing%20System%20Project%20v1.0/CVE-2022-43213%28sql%20in%20editorder.php%29.md
CVE: CVE-2022-45472
Published: 2022-11-23
Description: CAE LearningSpace Enterprise (with Intuity License) image 267r patch 639 allows DOM XSS, related to ontouchmove and onpointerup.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/nicbrinkley/CVE-2022-45472; https://www.caehealthcare.com/learningspace/enterprise/; https://github.com/nicbrinkley/CVE-2022-45472
CVE: CVE-2022-4019
Published: 2022-11-23
Description: A denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server via multiple large requests to one of the Playbooks API endpoints.

CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://hackerone.com/reports/1685979; https://mattermost.com/security-updates/; https://hackerone.com/reports/1685979
CVE: CVE-2022-4044
Published: 2022-11-23
Description: A denial-of-service vulnerability in Mattermost allows an authenticated user to crash the server via multiple large autoresponder messages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://hackerone.com/reports/1680241; https://mattermost.com/security-updates/; https://hackerone.com/reports/1680241
CVE: CVE-2021-46854
Published: 2022-11-23
Description: mod_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies blocks of 16 characters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-401
References: http://www.proftpd.org/docs/RELEASE_NOTES-1.3.7e; https://bugs.gentoo.org/811495; https://github.com/proftpd/proftpd/issues/1284
CVE: CVE-2022-4045
Published: 2022-11-23
Description: A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple requests to one of the API endpoints which could fetch a large amount of data. 

CVSS Score: 3.1 (LOW)
CWE: CWE-770, CWE-770
References: https://mattermost.com/security-updates/; https://mattermost.com/security-updates/
CVE: CVE-2022-45462
Published: 2022-11-23
Description: Alarm instance management has command injection when there is a specific command configured. It is only for logged-in users. We recommend you upgrade to version 2.0.6 or higher
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.openwall.com/lists/oss-security/2022/11/23/1; https://lists.apache.org/thread/2f126y32bf1v3mvxkdgt2jr5j3l1t01w; http://www.openwall.com/lists/oss-security/2022/11/23/1
CVE: CVE-2022-42895
Published: 2022-11-23
Description: There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely.
We recommend upgrading past commit  https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e https://www.google.com/url 


CVSS Score: 5.1 (MEDIUM)
CWE: CWE-824, CWE-824
References: https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e; https://kernel.dance/#b1a2cd50c0357f243b7435a732b4e62ba3157a2e; https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e
CVE: CVE-2022-42896
Published: 2022-11-23
Description: There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via Bluetooth if within proximity of the victim.

We recommend upgrading past commit   https://www.google.com/url  https://github.com/torvalds/linux/commit/711f8c3fb3db[PII_REDACTED]8586b970c87c61d9e4 https://www.google.com/url 


CVSS Score: 8.0 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/torvalds/linux/commit/711f8c3fb3db[PII_REDACTED]8586b970c87c61d9e4; https://kernel.dance/#711f8c3fb3db[PII_REDACTED]8586b970c87c61d9e4; https://github.com/torvalds/linux/commit/711f8c3fb3db[PII_REDACTED]8586b970c87c61d9e4
CVE: CVE-2022-45149
Published: 2022-11-23
Description: A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user's CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-75862; https://bugzilla.redhat.com/show_bug.cgi?id=2142772; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DHYIIAUXUBHMBEDYU7TYNZXEN2W2SA2/
CVE: CVE-2022-45150
Published: 2022-11-23
Description: A reflected cross-site scripting vulnerability was discovered in Moodle. This flaw exists due to insufficient sanitization of user-supplied data in policy tool. An attacker can trick the victim to open a specially crafted link that executes an arbitrary HTML and script code in user's browser in context of vulnerable website. This vulnerability may allow an attacker to perform cross-site scripting (XSS) attacks to gain access potentially sensitive information and modification of web pages.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79, CWE-79
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76091; https://bugzilla.redhat.com/show_bug.cgi?id=2142773; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DHYIIAUXUBHMBEDYU7TYNZXEN2W2SA2/
CVE: CVE-2022-45151
Published: 2022-11-23
Description: The stored-XSS vulnerability was discovered in Moodle which exists due to insufficient sanitization of user-supplied data in several "social" user profile fields. An attacker could inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79, CWE-79
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76131; https://bugzilla.redhat.com/show_bug.cgi?id=2142774; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DHYIIAUXUBHMBEDYU7TYNZXEN2W2SA2/
CVE: CVE-2022-44139
Published: 2022-11-23
Description: Apartment Visitor Management System v1.0 is vulnerable to SQL Injection via /avms/index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/375978342/bug_report/blob/main/vendors/oretnom23/Apartment%20Visitor%20Management%20System/SQLi-1.md; https://github.com/375978342/bug_report/blob/main/vendors/oretnom23/Apartment%20Visitor%20Management%20System/SQLi-1.md
CVE: CVE-2022-44249
Published: 2022-11-23
Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the UploadFirmwareFile function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://brief-nymphea-813.notion.site/LR350-command-injection-UploadFirmwareFile-f006f70e9e6540529d262a8d34154d24; https://brief-nymphea-813.notion.site/LR350-command-injection-UploadFirmwareFile-f006f70e9e6540529d262a8d34154d24
CVE: CVE-2022-44250
Published: 2022-11-23
Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://brief-nymphea-813.notion.site/LR350-command-injection-setOpModeCfg-7133dfcdeb9c4dfb87d9b5f4490b9a07; https://brief-nymphea-813.notion.site/LR350-command-injection-setOpModeCfg-7133dfcdeb9c4dfb87d9b5f4490b9a07
CVE: CVE-2022-44251
Published: 2022-11-23
Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the ussd parameter in the setUssd function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://brief-nymphea-813.notion.site/LR350-command-injection-setUssd-f25d6489a0e44468bf455e7af1173fdb; https://brief-nymphea-813.notion.site/LR350-command-injection-setUssd-f25d6489a0e44468bf455e7af1173fdb
CVE: CVE-2022-44252
Published: 2022-11-23
Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the setUploadSetting function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://brief-nymphea-813.notion.site/LR350-command-injection-setUploadSetting-b6d3012a3c2f43adac79c44edd57c937; https://brief-nymphea-813.notion.site/LR350-command-injection-setUploadSetting-b6d3012a3c2f43adac79c44edd57c937
CVE: CVE-2022-44253
Published: 2022-11-23
Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://brief-nymphea-813.notion.site/LR350-bof-setDiagnosisCfg-bdae239f42e64a48a57b070b5bf17456; https://brief-nymphea-813.notion.site/LR350-bof-setDiagnosisCfg-bdae239f42e64a48a57b070b5bf17456
CVE: CVE-2022-44254
Published: 2022-11-23
Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter text in the setSmsCfg function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://brief-nymphea-813.notion.site/LR350-bof-setSmsCfg-fd30228720dc4119911ed0b31c7c26c7; https://brief-nymphea-813.notion.site/LR350-bof-setSmsCfg-fd30228720dc4119911ed0b31c7c26c7
CVE: CVE-2022-44255
Published: 2022-11-23
Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main function via long post data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://brief-nymphea-813.notion.site/LR350-bof-main-pre-authentication-9475d39331cd4d8bae67c8560ce279b7; https://brief-nymphea-813.notion.site/LR350-bof-main-pre-authentication-9475d39331cd4d8bae67c8560ce279b7
CVE: CVE-2022-44256
Published: 2022-11-23
Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://brief-nymphea-813.notion.site/LR350-bof-setLanguageCfg-ddd638b9bb2d4c72b8dba5125c293141; https://brief-nymphea-813.notion.site/LR350-bof-setLanguageCfg-ddd638b9bb2d4c72b8dba5125c293141
CVE: CVE-2022-44257
Published: 2022-11-23
Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter pppoeUser in the setOpModeCfg function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://brief-nymphea-813.notion.site/LR350-bof-setOpModeCfg-9dc3504e403f445b85d5db09176ac406; https://brief-nymphea-813.notion.site/LR350-bof-setOpModeCfg-9dc3504e403f445b85d5db09176ac406
CVE: CVE-2022-44258
Published: 2022-11-23
Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://brief-nymphea-813.notion.site/LR350-bof-setTracerouteCfg-cca08814d6b24733ade00b2dae1d4c1a; https://brief-nymphea-813.notion.site/LR350-bof-setTracerouteCfg-cca08814d6b24733ade00b2dae1d4c1a
CVE: CVE-2022-44259
Published: 2022-11-23
Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter week, sTime, and eTime in the setParentalRules function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://brief-nymphea-813.notion.site/LR350-bof-setParentalRules-fe0c0cc8b9bd44b48c527f76e69d402a; https://brief-nymphea-813.notion.site/LR350-bof-setParentalRules-fe0c0cc8b9bd44b48c527f76e69d402a
CVE: CVE-2022-44260
Published: 2022-11-23
Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter sPort/ePort in the setIpPortFilterRules function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://brief-nymphea-813.notion.site/LR350-bof-setIpPortFilterRules-0fad7347f4d74a919a79f5745a8c5421; https://brief-nymphea-813.notion.site/LR350-bof-setIpPortFilterRules-0fad7347f4d74a919a79f5745a8c5421
CVE: CVE-2022-44278
Published: 2022-11-23
Description: Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=user/manage_user&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Onetpaer/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-1.md; https://github.com/Onetpaer/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-1.md
CVE: CVE-2022-44280
Published: 2022-11-23
Description: Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=delete_img.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/Onetpaer/bug_report/blob/main/vendors/oretnom23/automotive-shop-management-system/delete-1.md; https://github.com/Onetpaer/bug_report/blob/main/vendors/oretnom23/automotive-shop-management-system/delete-1.md
CVE: CVE-2021-35246
Published: 2022-11-23
Description: The application fails to prevent users from connecting to it over unencrypted connections. An attacker able to modify a legitimate user's network traffic could bypass the application's use of SSL/TLS encryption and use the application as a platform for attacks against its users.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35246; https://documentation.solarwinds.com/en/success_center/ets/content/release_notes/ets_2022-4_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35246
CVE: CVE-2022-35501
Published: 2022-11-23
Description: Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://amasty.com; https://github.com/afine-com/CVE-2022-35501; http://amasty.com
CVE: CVE-2022-38113
Published: 2022-11-23
Description: This vulnerability discloses build and services versions in the server response header.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2022-4_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-38113; https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2022-4_release_notes.htm
CVE: CVE-2022-38114
Published: 2022-11-23
Description: This vulnerability occurs when a web server fails to correctly process the Content-Length of POST requests. This can lead to HTTP request smuggling or XSS.


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-444, CWE-79, CWE-444
References: https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2022-4_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-38114; https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2022-4_release_notes.htm
CVE: CVE-2022-38115
Published: 2022-11-23
Description: Insecure method vulnerability in which allowed HTTP methods are disclosed. E.g., OPTIONS, DELETE, TRACE, and PUT


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-650, CWE-436
References: https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2022-4_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-38115; https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2022-4_release_notes.htm
CVE: CVE-2009-1142
Published: 2022-11-23
Description: An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://bugs.gentoo.org/264577; https://github.com/vmware/open-vm-tools/releases/tag/2009.03.18-154848; https://bugs.gentoo.org/264577
CVE: CVE-2009-1143
Published: 2022-11-23
Description: An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).
CVSS Score: 7.0 (HIGH)
CWE: CWE-59, CWE-59
References: https://bugs.gentoo.org/264577; https://github.com/vmware/open-vm-tools/releases/tag/2009.03.18-154848; https://bugs.gentoo.org/264577
CVE: CVE-2021-35284
Published: 2022-11-23
Description: SQL Injection vulnerability in function get_user in login_manager.php in rizalafani cms-php v1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/rizalafani/cms-php/issues/1; https://github.com/rizalafani/cms-php/issues/1
CVE: CVE-2022-23740
Published: 2022-11-23
Description: CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterprise Server that enabled remote code execution. To exploit this vulnerability, an attacker would need permission to create and build GitHub Pages using GitHub Actions. This vulnerability affected only version 3.7.0 of GitHub Enterprise Server and was fixed in version 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVSS Score: 8.8 (HIGH)
CWE: CWE-88, CWE-88
References: https://docs.github.com/en/enterprise-server%403.7/admin/release-notes#3.7.1; https://docs.github.com/en/enterprise-server%403.7/admin/release-notes#3.7.1
CVE: CVE-2022-36111
Published: 2022-11-23
Description: immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1, a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a genuine immudb server and requires the client to perform a specific list of verified operations resulting in acceptance of an invalid state value. This vulnerability only affects immudb client SDKs, the immudb server itself is not affected by this vulnerability. This issue has been patched in version 1.4.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-345
References: https://github.com/codenotary/immudb/releases/tag/v1.4.1; https://github.com/codenotary/immudb/security/advisories/GHSA-672p-m5jq-mrh8; https://github.com/codenotary/immudb/tree/master/docs/security/vulnerabilities/linear-fake
CVE: CVE-2022-39833
Published: 2022-11-23
Description: FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://gist.github.com/DylanGrl/4b4e0d53bb7626b2ab3f834ec5a2b23c; https://www.filecloud.com/supportdocs/fcdoc/latest/server/security-advisories/2022-security-advisories/advisory-2022-10-01-unauthorized-access-and-potential-remote-code-execution; https://gist.github.com/DylanGrl/4b4e0d53bb7626b2ab3f834ec5a2b23c
CVE: CVE-2022-40304
Published: 2022-11-23
Description: An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415, CWE-415
References: http://seclists.org/fulldisclosure/2022/Dec/21; http://seclists.org/fulldisclosure/2022/Dec/24; http://seclists.org/fulldisclosure/2022/Dec/25
CVE: CVE-2022-40771
Published: 2022-11-23
Description: Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://manageengine.com; https://www.manageengine.com/products/service-desk/CVE-2022-40771.html; https://manageengine.com
CVE: CVE-2022-40772
Published: 2022-11-23
Description: Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module.
CVSS Score: 6.5 (MEDIUM)
References: https://manageengine.com; https://www.manageengine.com/products/service-desk/CVE-2022-40772.html; https://manageengine.com
CVE: CVE-2022-41922
Published: 2022-11-23
Description: `yiisoft/yii` before version 1.1.27 are vulnerable to Remote Code Execution (RCE) if the application calls `unserialize()` on arbitrary user input. This has been patched in 1.1.27.
CVSS Score: 8.1 (HIGH)
CWE: CWE-502
References: https://github.com/yiisoft/yii/commit/ed67b7cc57216557c5c595c6650cdd2d3aa41c52; https://github.com/yiisoft/yii/security/advisories/GHSA-442f-wcwq-fpcf; https://github.com/yiisoft/yii/commit/ed67b7cc57216557c5c595c6650cdd2d3aa41c52
CVE: CVE-2021-43258
Published: 2022-11-23
Description: CartView.php in ChurchInfo 1.3.0 allows attackers to achieve remote code execution through insecure uploads. This requires authenticated access tot he ChurchInfo application. Once authenticated, a user can add names to their cart, and compose an email. Uploading an attachment for the email stores the attachment on the site in the /tmp_attach/ folder where it can be accessed with a GET request. There are no limitations on files that can be attached, allowing for malicious PHP code to be uploaded and interpreted by the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: http://www.churchdb.org/; https://github.com/rapid7/metasploit-framework/pull/17257; https://sourceforge.net/projects/churchinfo/files/
CVE: CVE-2022-41875
Published: 2022-11-23
Description: A remote code execution (RCE) vulnerability in Optica allows unauthenticated attackers to execute arbitrary code via specially crafted JSON payloads. Specially crafted JSON payloads may lead to RCE (remote code execution) on the attacked system running Optica. The vulnerability was patched in v. 0.10.2, where the call to the function `oj.load` was changed to `oj.safe_load`.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-502
References: https://github.com/airbnb/optica/security/advisories/GHSA-cf87-4h6x-phh6; https://github.com/ohler55/oj/blob/develop/pages/Security.md; https://www.rubydoc.info/gems/oj/3.0.2/Oj.safe_load