deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-40671
Published: 2023-10-06
Description: Cross-Site Request Forgery (CSRF) vulnerability in 大侠wp DX-auto-save-images plugin <= 1.4.0 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/dx-auto-save-images/wordpress-dx-auto-save-images-plugin-1-4-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/dx-auto-save-images/wordpress-dx-auto-save-images-plugin-1-4-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-44761
Published: 2023-10-06
Description: Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS versions affected to 8.5.13 and below, and 9.0.0 through 9.2.1 allow a local attacker to execute arbitrary code via a crafted script to the Forms of the Data objects.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/sromanhu/ConcreteCMS-Stored-XSS---Forms; https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release; https://github.com/sromanhu/ConcreteCMS-Stored-XSS---Forms
CVE: CVE-2023-44762
Published: 2023-10-06
Description: A Cross Site Scripting (XSS) vulnerability in Concrete CMS from versions 9.2.0 to 9.2.2 allows an attacker to execute arbitrary code via a crafted script to the Tags from Settings - Tags.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/sromanhu/ConcreteCMS-Reflected-XSS---Tags; https://github.com/sromanhu/ConcreteCMS-Reflected-XSS---Tags
CVE: CVE-2023-44764
Published: 2023-10-06
Description: A Cross Site Scripting (XSS) vulnerability in Concrete CMS before 9.2.3 exists via the Name parameter during installation (aka Site of Installation or Settings).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://documentation.concretecms.org/developers/introduction/version-history/923-release-notes; https://github.com/sromanhu/ConcreteCMS-Stored-XSS---Site_Installation; https://documentation.concretecms.org/developers/introduction/version-history/923-release-notes
CVE: CVE-2023-44765
Published: 2023-10-06
Description: A Cross Site Scripting (XSS) vulnerability in Concrete CMS versions 8.5.12 and below, and 9.0 through 9.2.1 allows an attacker to execute arbitrary code via a crafted script to Plural Handle of the Data Objects from System & Settings.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/sromanhu/ConcreteCMS-Stored-XSS---Associations; https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release; https://github.com/sromanhu/ConcreteCMS-Stored-XSS---Associations
CVE: CVE-2023-44766
Published: 2023-10-06
Description: A Cross Site Scripting (XSS) vulnerability in Concrete CMS v.9.2.1 allows an attacker to execute arbitrary code via a crafted script to the SEO - Extra from Page Settings. NOTE: the vendor disputes this because this SEO-related header change can only be made by an admin, and allowing an admin to place JavaScript there is an intentional customization feature.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/sromanhu/ConcreteCMS-Stored-XSS---SEO; https://www.concretecms.org/about/project-news/security/security-advisory-2023-10-31-concrete-cms-rejects-cve-2023-44760-and-cve-2023-44766; https://github.com/sromanhu/ConcreteCMS-Stored-XSS---SEO
CVE: CVE-2023-44770
Published: 2023-10-06
Description: A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows an attacker to execute arbitrary code via a crafted script to the Organizer - Spare alias.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/sromanhu/ZenarioCMS--Reflected-XSS---Organizer-Alias/blob/main/README.md; https://github.com/sromanhu/ZenarioCMS--Reflected-XSS---Organizer-Alias/blob/main/README.md
CVE: CVE-2023-44771
Published: 2023-10-06
Description: A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Page Layout.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/sromanhu/ZenarioCMS--Stored-XSS---Page-Layout; https://github.com/sromanhu/ZenarioCMS--Stored-XSS---Page-Layout
CVE: CVE-2023-28791
Published: 2023-10-06
Description: Cross-Site Request Forgery (CSRF) vulnerability in Gangesh Matta Simple Org Chart plugin <= 2.3.4 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/simple-org-chart/wordpress-simple-org-chart-plugin-2-3-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/simple-org-chart/wordpress-simple-org-chart-plugin-2-3-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-29235
Published: 2023-10-06
Description: Cross-Site Request Forgery (CSRF) vulnerability in Fugu Maintenance Switch plugin <= 1.5.2 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/maintenance-switch/wordpress-maintenance-switch-plugin-1-5-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/maintenance-switch/wordpress-maintenance-switch-plugin-1-5-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-35897
Published: 2023-10-06
Description: IBM Spectrum Protect Client and IBM Storage Protect for Virtual Environments 8.1.0.0 through 8.1.19.0 could allow a local user to execute arbitrary code on the system using a specially crafted file, caused by a DLL hijacking flaw.  IBM X-Force ID:  259246.
CVSS Score: 8.4 (HIGH)
CWE: CWE-94, CWE-427
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/259246; https://www.ibm.com/support/pages/node/7037299; https://exchange.xforce.ibmcloud.com/vulnerabilities/259246
CVE: CVE-2023-38703
Published: 2023-10-06
Description: PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level media transport such as UDP and ICE. Currently a higher level transport is not synchronized with its lower level transport that may introduce use-after-free issue. This vulnerability affects applications that have SRTP capability (`PJMEDIA_HAS_SRTP` is set) and use underlying media transport other than UDP. This vulnerability’s impact may range from unexpected application termination to control flow hijack/memory corruption. The patch is available as a commit in the master branch.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-416
References: https://github.com/pjsip/pjproject/commit/6dc9b8c181aff39845f02b4626e0812820d4ef0d; https://github.com/pjsip/pjproject/security/advisories/GHSA-f76w-fh7c-pc66; https://lists.debian.org/debian-lts-announce/2023/12/msg00019.html
CVE: CVE-2023-42445
Published: 2023-10-06
Description: Gradle is a build tool with a focus on build automation and support for multi-language development. In some cases, when Gradle parses XML files, resolving XML external entities is not disabled. Combined with an Out Of Band XXE attack (OOB-XXE), just parsing XML can lead to exfiltration of local text files to a remote server. Gradle parses XML files for several purposes. Most of the time, Gradle parses XML files it generated or were already present locally. Only Ivy XML descriptors and Maven POM files can be fetched from remote repositories and parsed by Gradle. In Gradle 7.6.3 and 8.4, resolving XML external entities has been disabled for all use cases to protect against this vulnerability. Gradle will now refuse to parse XML files that have XML external entities.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://github.com/gradle/gradle/releases/tag/v7.6.3; https://github.com/gradle/gradle/releases/tag/v8.4.0; https://github.com/gradle/gradle/security/advisories/GHSA-mrff-q8qj-xvg8
CVE: CVE-2023-43058
Published: 2023-10-06
Description: IBM Robotic Process Automation 23.0.9 is vulnerable to privilege escalation that affects ownership of projects.  IBM X-Force ID:  247527.
CVSS Score: 5.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/267527; https://www.ibm.com/support/pages/node/7047017; https://exchange.xforce.ibmcloud.com/vulnerabilities/267527
CVE: CVE-2023-43810
Published: 2023-10-06
Description: OpenTelemetry, also known as OTel for short, is a vendor-neutral open-source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, metrics, logs. Autoinstrumentation out of the box adds the label `http_method` that has unbound cardinality. It leads to the server's potential memory exhaustion when many malicious requests are sent. HTTP method for requests can be easily set by an attacker to be random and long. In order to be affected program has to be instrumented for HTTP handlers and does not filter any unknown HTTP methods on the level of CDN, LB, previous middleware, etc. This issue has been patched in version 0.41b0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/open-telemetry/opentelemetry-python-contrib/commit/6007e0c013071e7f8b9612d3bc68aeb9d600d74e; https://github.com/open-telemetry/opentelemetry-python-contrib/releases/tag/v0.41b0; https://github.com/open-telemetry/opentelemetry-python-contrib/security/advisories/GHSA-5rv5-6h4r-h22v
CVE: CVE-2023-40607
Published: 2023-10-06
Description: Cross-Site Request Forgery (CSRF) vulnerability in CLUEVO CLUEVO LMS, E-Learning Platform plugin <= 1.10.0 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/cluevo-lms/wordpress-cluevo-lms-plugin-1-10-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/cluevo-lms/wordpress-cluevo-lms-plugin-1-10-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-41650
Published: 2023-10-06
Description: Cross-Site Request Forgery (CSRF) vulnerability in Venugopal Remove/hide Author, Date, Category Like Entry-Meta plugin <= 2.1 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/removehide-author-date-category-like-entry-meta/wordpress-remove-hide-author-date-category-like-entry-meta-plugin-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/removehide-author-date-category-like-entry-meta/wordpress-remove-hide-author-date-category-like-entry-meta-plugin-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-41654
Published: 2023-10-06
Description: Cross-Site Request Forgery (CSRF) vulnerability in Andreas Heigl authLdap plugin <= 2.5.8 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/authldap/wordpress-authldap-plugin-2-5-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/authldap/wordpress-authldap-plugin-2-5-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-41659
Published: 2023-10-06
Description: Cross-Site Request Forgery (CSRF) vulnerability in Jules Colle, BDWM Responsive Gallery Grid plugin <= 2.3.10 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/responsive-gallery-grid/wordpress-responsive-gallery-grid-plugin-2-3-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/responsive-gallery-grid/wordpress-responsive-gallery-grid-plugin-2-3-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-41732
Published: 2023-10-06
Description: Cross-Site Request Forgery (CSRF) vulnerability in CodePeople CP Blocks plugin <= 1.0.20 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/cp-blocks/wordpress-cp-blocks-plugin-1-0-20-csrf-leading-to-plugin-settings-change-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/cp-blocks/wordpress-cp-blocks-plugin-1-0-20-csrf-leading-to-plugin-settings-change-vulnerability?_s_id=cve
CVE: CVE-2023-41801
Published: 2023-10-06
Description: Cross-Site Request Forgery (CSRF) vulnerability in AWP Classifieds Team Ad Directory & Listings by AWP Classifieds plugin <= 4.3 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/another-wordpress-classifieds-plugin/wordpress-classifieds-plugin-ad-directory-listings-plugin-4-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/another-wordpress-classifieds-plugin/wordpress-classifieds-plugin-ad-directory-listings-plugin-4-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-41950
Published: 2023-10-06
Description: Cross-Site Request Forgery (CSRF) vulnerability in Laposta - Roel Bousardt Laposta Signup Basic plugin <= 1.4.1 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/laposta-signup-basic/wordpress-laposta-signup-basic-plugin-1-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/laposta-signup-basic/wordpress-laposta-signup-basic-plugin-1-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-44146
Published: 2023-10-06
Description: Cross-Site Request Forgery (CSRF) vulnerability in Checkfront Inc. Checkfront Online Booking System plugin <= 3.6 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/checkfront-wp-booking/wordpress-checkfront-online-booking-system-plugin-3-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/checkfront-wp-booking/wordpress-checkfront-online-booking-system-plugin-3-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-39928
Published: 2023-10-06
Description: A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EEMDC5TQAANFH5D77QM34ZTUKXPFGVL/; https://security.gentoo.org/glsa/202401-33; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1831
CVE: CVE-2023-44233
Published: 2023-10-06
Description: Cross-Site Request Forgery (CSRF) vulnerability in FooPlugins Best WordPress Gallery Plugin – FooGallery plugin <= 2.2.44 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/foogallery/wordpress-foogallery-plugin-2-2-44-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/foogallery/wordpress-foogallery-plugin-2-2-44-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-44243
Published: 2023-10-06
Description: Cross-Site Request Forgery (CSRF) vulnerability in Dylan Blokhuis Instant CSS plugin <= 1.2.1 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/instant-css/wordpress-instant-css-plugin-1-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/instant-css/wordpress-instant-css-plugin-1-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-23365
Published: 2023-10-06
Description: A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the contents of unexpected files and expose sensitive data via a network.

We have already fixed the vulnerability in the following version:
Music Station 5.3.22 and later

CVSS Score: 7.7 (HIGH)
CWE: CWE-22, CWE-552, CWE-22
References: https://www.qnap.com/en/security-advisory/qsa-23-28; https://www.qnap.com/en/security-advisory/qsa-23-28
CVE: CVE-2023-23366
Published: 2023-10-06
Description: A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the contents of unexpected files and expose sensitive data via a network.

We have already fixed the vulnerability in the following version:
Music Station 5.3.22 and later

CVSS Score: 7.7 (HIGH)
CWE: CWE-22, CWE-552, CWE-22
References: https://www.qnap.com/en/security-advisory/qsa-23-28; https://www.qnap.com/en/security-advisory/qsa-23-28
CVE: CVE-2023-23370
Published: 2023-10-06
Description: An insufficiently protected credentials vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to gain access to user accounts and access sensitive data used by the user account via unspecified vectors.

We have already fixed the vulnerability in the following version:
QVPN Windows 2.1.0.0518 and later

CVSS Score: 6.7 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://www.qnap.com/en/security-advisory/qsa-23-36; https://www.qnap.com/en/security-advisory/qsa-23-36
CVE: CVE-2023-23371
Published: 2023-10-06
Description: A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors.

We have already fixed the vulnerability in the following version:
QVPN Windows 2.2.0.0823 and later

CVSS Score: 5.2 (MEDIUM)
CWE: CWE-311, CWE-319, CWE-319
References: https://www.qnap.com/en/security-advisory/qsa-23-39; https://www.qnap.com/en/security-advisory/qsa-23-39
CVE: CVE-2023-32971
Published: 2023-10-06
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.0.1.2425 build 20230609 and later
QTS 5.1.0.2444 build 20230629 and later
QTS 4.5.4.2467 build 20230718 and later
QuTS hero h5.0.1.2515 build 20230907 and later
QuTS hero h5.1.0.2424 build 20230609 and later
QuTS hero h4.5.4.2476 build 20230728 and later
QuTScloud c5.1.0.2498 and later

CVSS Score: 3.8 (LOW)
CWE: CWE-120, CWE-121, CWE-787
References: https://www.qnap.com/en/security-advisory/qsa-23-37; https://www.qnap.com/en/security-advisory/qsa-23-37
CVE: CVE-2023-32972
Published: 2023-10-06
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.0.1.2425 build 20230609 and later
QTS 5.1.0.2444 build 20230629 and later
QTS 4.5.4.2467 build 20230718 and later
QuTS hero h5.0.1.2515 build 20230907 and later
QuTS hero h5.1.0.2424 build 20230609 and later
QuTS hero h4.5.4.2476 build 20230728 and later
QuTScloud c5.1.0.2498 and later

CVSS Score: 3.8 (LOW)
CWE: CWE-120, CWE-121, CWE-787
References: https://www.qnap.com/en/security-advisory/qsa-23-37; https://www.qnap.com/en/security-advisory/qsa-23-37
CVE: CVE-2023-44807
Published: 2023-10-06
Description: D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Archerber/bug_submit/blob/main/D-Link/DIR-820l/bug2.md; https://www.dlink.com/en/security-bulletin/; https://github.com/Archerber/bug_submit/blob/main/D-Link/DIR-820l/bug2.md
CVE: CVE-2023-44384
Published: 2023-10-06
Description: Discourse-jira is a Discourse plugin allows Jira projects, issue types, fields and field options will be synced automatically. An administrator user can make an SSRF attack by setting the Jira URL to an arbitrary location and enabling the `discourse_jira_verbose_log` site setting. A moderator user could manipulate the request path to the Jira API, allowing them to perform arbitrary GET requests using the Jira API credentials, potentially with elevated permissions, used by the application. 
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-691, CWE-918
References: https://github.com/discourse/discourse-jira/commit/8a2d3ad228883199fd5f081cc93d173c88e2e48f; https://github.com/discourse/discourse-jira/pull/50; https://github.com/discourse/discourse-jira/security/advisories/GHSA-pmv5-h2x6-35fh
CVE: CVE-2023-45239
Published: 2023-10-06
Description: A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent to tac_plus to inject shell commands and gain remote code execution on the tac_plus server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-790
References: https://github.com/facebook/tac_plus/pull/41; https://github.com/facebook/tac_plus/security/advisories/GHSA-p334-5r3g-4vx3; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X4J7ZYMFZB4G4OU5EDJPQLP6F6RKDGIH/
CVE: CVE-2023-5214
Published: 2023-10-06
Description: In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://www.puppet.com/security/cve/cve-2023-5214-privilege-escalation-puppet-bolt; https://www.puppet.com/security/cve/cve-2023-5214-privilege-escalation-puppet-bolt
CVE: CVE-2023-5366
Published: 2023-10-06
Description: A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses.
CVSS Score: 7.1 (HIGH)
CWE: CWE-345, CWE-345
References: http://www.openwall.com/lists/oss-security/2024/02/08/4; https://access.redhat.com/security/cve/CVE-2023-5366; https://bugzilla.redhat.com/show_bug.cgi?id=2006347
CVE: CVE-2023-21244
Published: 2023-10-06
Description: In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://android.googlesource.com/platform/frameworks/base/+/20aedba4998373addc2befcc455a118585559fef; https://android.googlesource.com/platform/frameworks/base/+/3a448067ac9ebdf669951e90678c2daa592a81d3; https://android.googlesource.com/platform/frameworks/base/+/5a3d0c131175d923cf35c7beb3ee77a9e6485dad
CVE: CVE-2023-21252
Published: 2023-10-06
Description: In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
References: https://android.googlesource.com/platform/packages/modules/Wifi/+/044ab0684153c4effb9f4fda47df43ccdc77bda8; https://android.googlesource.com/platform/packages/modules/Wifi/+/50b08ee30e04d185e5ae97a5f717d436fd5a90f3; https://source.android.com/security/bulletin/2023-10-01
CVE: CVE-2023-21253
Published: 2023-10-06
Description: In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://android.googlesource.com/platform/frameworks/base/+/84df68840b6f2407146e722ebd95a7d8bc6e3529; https://android.googlesource.com/platform/tools/apksig/+/039f815895f62c9f8af23df66622b66246f3f61e; https://android.googlesource.com/platform/tools/apksig/+/41d[PII_REDACTED]85fd32ae0bb70dc85f5fd0e2be7