deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-20697
Published: 2023-06-20
Description: Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/khodakhah/nodcms/issues/41; https://github.com/khodakhah/nodcms/issues/41
CVE: CVE-2020-20703
Published: 2023-06-20
Description: Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/vim/vim/issues/5041; https://github.com/vim/vim/issues/5041
CVE: CVE-2020-20718
Published: 2023-06-20
Description: File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the save_file() parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/pluck-cms/pluck/issues/79; https://github.com/pluck-cms/pluck/issues/79
CVE: CVE-2020-20725
Published: 2023-06-20
Description: Cross Site Scripting vulnerability in taogogo taoCMS v.2.5 beta5.1 allows remote attacker to execute arbitrary code via the name field in admin.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/taogogo/taocms/issues/2; https://github.com/taogogo/taocms/issues/2
CVE: CVE-2020-20726
Published: 2023-06-20
Description: Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the cm/update_rows/user parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/GilaCMS/gila/issues/51; https://github.com/GilaCMS/gila/issues/51
CVE: CVE-2020-20735
Published: 2023-06-20
Description: File Upload vulnerability in LJCMS v.4.3.R60321 allows a remote attacker to execute arbitrary code via the ljcms/index.php parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/0xyu/PHP_Learning/issues/2; https://github.com/0xyu/PHP_Learning/issues/2
CVE: CVE-2020-20918
Published: 2023-06-20
Description: An issue discovered in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary php code via the hidden parameter to admin.php when editing a page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94, CWE-94
References: https://github.com/pluck-cms/pluck/issues/80; https://github.com/pluck-cms/pluck/issues/80
CVE: CVE-2020-20919
Published: 2023-06-20
Description: File upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary code and access sensitive information via the theme.php file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/pluck-cms/pluck/issues/85; https://github.com/pluck-cms/pluck/issues/85
CVE: CVE-2020-20969
Published: 2023-06-20
Description: File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcan_restoreitem.php file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-20969.md; https://github.com/pluck-cms/pluck/issues/86; https://github.com/pluck-cms/pluck/issues/86
CVE: CVE-2020-21052
Published: 2023-06-20
Description: Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute arbitrary code via the nickame parameter of the /post/addComment function.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/94fzb/zrlog/issues/56; https://github.com/94fzb/zrlog/issues/56
CVE: CVE-2020-21058
Published: 2023-06-20
Description: Cross Site Scripting vulnerability in Typora v.0.9.79 allows a remote attacker to execute arbitrary code via the mermaid sytax.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/typora/typora-issues/issues/2959; https://github.com/typora/typora-issues/issues/2959
CVE: CVE-2020-21174
Published: 2023-06-20
Description: File Upload vulenrability in liufee CMS v.2.0.7.1 allows a remote attacker to execute arbitrary code via the image suffix function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/liufee/cms/issues/44; https://github.com/liufee/cms/issues/44
CVE: CVE-2020-21246
Published: 2023-06-20
Description: Cross Site Scripting vulnerability in YiiCMS v.1.0 allows a remote attacker to execute arbitrary code via the news function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/yongshengli/yiicms/issues/6; https://github.com/yongshengli/yiicms/issues/6
CVE: CVE-2020-21252
Published: 2023-06-20
Description: Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/Neeke/HongCMS/issues/13; https://github.com/Neeke/HongCMS/issues/13
CVE: CVE-2020-21268
Published: 2023-06-20
Description: Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via the lastComment parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/easysoft/zentaopms/issues/40; https://github.com/easysoft/zentaopms/issues/40
CVE: CVE-2020-21325
Published: 2023-06-20
Description: An issue in WUZHI CMS v.4.1.0 allows a remote attacker to execute arbitrary code via the set_chache method of the function\common.func.php file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/wuzhicms/wuzhicms/issues/188; https://github.com/wuzhicms/wuzhicms/issues/188
CVE: CVE-2020-21366
Published: 2023-06-20
Description: Cross Site Request Forgery vulnerability in GreenCMS v.2.3 allows an attacker to gain privileges via the adduser function of index.php.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/GreenCMS/GreenCMS/issues/115; https://github.com/GreenCMS/GreenCMS/issues/115
CVE: CVE-2020-21400
Published: 2023-06-20
Description: SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/gaozhifeng/PHPMyWind/issues/11; https://github.com/gaozhifeng/PHPMyWind/issues/11
CVE: CVE-2020-21474
Published: 2023-06-20
Description: File Upload vulnerability in NucleusCMS v.3.71 allows a remote attacker to execute arbitrary code via the /nucleus/plugins/skinfiles/?dir=rsd parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/NucleusCMS/NucleusCMS/issues/95; https://github.com/NucleusCMS/NucleusCMS/issues/95
CVE: CVE-2020-21485
Published: 2023-06-20
Description: Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code via the path parameter in the browse board component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Alluxio/alluxio/issues/10552; https://github.com/Alluxio/alluxio/issues/10552
CVE: CVE-2020-21486
Published: 2023-06-20
Description: SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the _userlist function in framerwork/phpok_call.php file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/qinggan/phpok/issues/8; https://github.com/qinggan/phpok/issues/8
CVE: CVE-2020-21489
Published: 2023-06-20
Description: File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/liufee/cms/issues/46; https://github.com/liufee/cms/issues/46
CVE: CVE-2023-2533
Published: 2023-06-20
Description: A Cross-Site Request Forgery (CSRF) vulnerability has been identified in
PaperCut NG/MF, which, under specific conditions, could potentially enable
an attacker to alter security settings or execute arbitrary code. This could
be exploited if the target is an admin with a current login session. Exploiting
this would typically involve the possibility of deceiving an admin into clicking
a specially crafted malicious link, potentially leading to unauthorized changes.
CVSS Score: 8.4 (HIGH)
CWE: CWE-352, CWE-352
References: https://fluidattacks.com/advisories/arcangel/; https://www.papercut.com/kb/Main/SecurityBulletinJune2023; https://fluidattacks.com/advisories/arcangel/
CVE: CVE-2023-34541
Published: 2023-06-20
Description: Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/hwchase17/langchain/issues/4849; https://github.com/hwchase17/langchain/issues/4849
CVE: CVE-2023-34600
Published: 2023-06-20
Description: Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/costacoco/Adiscon/blob/main/README.md; https://loganalyzer.adiscon.com/; https://github.com/costacoco/Adiscon/blob/main/README.md
CVE: CVE-2023-3340
Published: 2023-06-20
Description: A vulnerability was found in SourceCodester Online School Fees System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajx.php of the component GET Parameter Handler. The manipulation of the argument name_startsWith leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232016.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/M9KJ-TEAM/CVEReport/blob/main/SQL.md; https://vuldb.com/?ctiid.232016; https://vuldb.com/?id.232016
CVE: CVE-2023-2400
Published: 2023-06-20
Description: Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8  and earlier allows an administrator to view users vaults of deleted users via database access.


CVSS Score: 2.7 (LOW)
CWE: CWE-459, CWE-459
References: https://devolutions.net/security/advisories/DEVO-2023-0014; https://devolutions.net/security/advisories/DEVO-2023-0014
CVE: CVE-2023-32274
Published: 2023-06-20
Description: 




Enphase Installer Toolkit versions 3.27.0 has hard coded credentials embedded in binary code in the Android application. An attacker can exploit this and gain access to sensitive information.








CVSS Score: 8.6 (HIGH)
CWE: CWE-798
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-171-02; https://www.cisa.gov/news-events/ics-advisories/icsa-23-171-02
CVE: CVE-2023-33869
Published: 2023-06-20
Description: 
Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands.





CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-171-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-171-01
CVE: CVE-2023-35166
Published: 2023-06-20
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute any wiki content with the right of the TipsPanel author by creating a tip UI extension. This has been patched in XWiki 15.1-rc-1 and 14.10.5.

CVSS Score: 9.9 (CRITICAL)
CWE: CWE-863
References: https://github.com/xwiki/xwiki-platform/commit/98208c5bb1e8cdf3ff1ac35d8b3d1cb3c28b3263#diff-4e3467d2ef3871a68b2f910e67cf84531751b32e0126321be83c0f1ed5d90b29L176-R178; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-h7cw-44vp-jq7h; https://jira.xwiki.org/browse/XWIKI-20281
CVE: CVE-2023-35885
Published: 2023-06-20
Description: CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-565, CWE-565
References: https://github.com/datackmy/FallingSkies-CVE-2023-35885; https://www.cloudpanel.io/docs/v2/changelog/; https://www.datack.my/fallingskies-cloudpanel-0-day/
CVE: CVE-2023-3220
Published: 2023-06-20
Description: An issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93340e10b9c5fc86730d149636e0aa8b47bb5a34; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93340e10b9c5fc86730d149636e0aa8b47bb5a34
CVE: CVE-2023-34563
Published: 2023-06-20
Description: netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/D2y6p/CVE/blob/main/Netgear/CVE-2023-34563/EN.md; https://www.netgear.com/about/security/; https://github.com/D2y6p/CVE/blob/main/Netgear/CVE-2023-34563/EN.md
CVE: CVE-2022-25883
Published: 2023-06-21
Description: Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333, CWE-1333, CWE-1333
References: https://github.com/npm/node-semver/blob/main/classes/range.js%23L97-L104; https://github.com/npm/node-semver/blob/main/internal/re.js%23L138; https://github.com/npm/node-semver/blob/main/internal/re.js%23L160
CVE: CVE-2023-3339
Published: 2023-06-21
Description: A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file exam-delete.php. The manipulation of the argument test_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232015.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/6rignard/CveReport/blob/main/Agro-School%20Management%20System%20exam-delete.php%20has%20Sqlinjection.pdf; https://vuldb.com/?ctiid.232015; https://vuldb.com/?id.232015
CVE: CVE-2023-34340
Published: 2023-06-21
Description: Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo.
This issue affects Apache Accumulo: 2.1.0.

Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1.



CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://accumulo.apache.org/release/accumulo-2.1.1/; https://lists.apache.org/thread/syy6jftvy9l6tlhn33o0rzwhh4rd0z4t; https://accumulo.apache.org/release/accumulo-2.1.1/
CVE: CVE-2023-34981
Published: 2023-06-21
Description: A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74 and 8.5.88 meant that, if a response did not include any HTTP headers no AJP SEND_HEADERS messare woudl be sent for the response which in turn meant that at least one AJP proxy (mod_proxy_ajp) would use the response headers from the previous request leading to an information leak.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://lists.apache.org/thread/j1ksjh9m9gx1q60rtk1sbzmxhvj5h5qz; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://lists.apache.org/thread/j1ksjh9m9gx1q60rtk1sbzmxhvj5h5qz
CVE: CVE-2023-3351
Published: 2023-06-21
Description: Rejected reason: Wrong year requested.
CVE: CVE-2022-3372
Published: 2023-06-21
Description: There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the CRSF token. This vulnerability could allow a remote attacker to access the administrator panel, being able to modify different parameters that are critical for industrial operations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/cross-site-request-forgery-csrf-riello-ups-netman-204; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/cross-site-request-forgery-csrf-riello-ups-netman-204
CVE: CVE-2022-45287
Published: 2023-06-21
Description: An access control issue in Registration.aspx of Temenos CWX 8.5.6 allows authenticated attackers to escalate privileges and perform arbitrary Administrative commands.
CVSS Score: 8.8 (HIGH)
References: http://cwx.com; http://temenos.com; https://github.com/WhiteBearVN/CWX-Registration-Broken-Access-Control/blob/main/README.md
CVE: CVE-2023-27439
Published: 2023-06-21
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gl_SPICE New Adman plugin <= 1.6.8 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/new-adman/wordpress-new-adman-plugin-1-6-8-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/new-adman/wordpress-new-adman-plugin-1-6-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-27443
Published: 2023-06-21
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Grant Kimball Simple Vimeo Shortcode plugin <= 2.9.1 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/the-very-simple-vimeo-shortcode/wordpress-simple-vimeo-shortcode-plugin-2-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/the-very-simple-vimeo-shortcode/wordpress-simple-vimeo-shortcode-plugin-2-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-27450
Published: 2023-06-21
Description: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Teplitsa of social technologies Leyka plugin <= 3.29.2 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/leyka/wordpress-leyka-plugin-3-29-2-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/leyka/wordpress-leyka-plugin-3-29-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-33584
Published: 2023-06-21
Description: Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the username and password fields during the login process, enabling an attacker to inject malicious SQL code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/172718/Enrollment-System-Project-1.0-Authentication-Bypass-SQL-Injection.html; https://github.com/sudovivek/My-CVE/blob/main/CVE-2023-33584_exploit.md; https://packetstormsecurity.com/files/cve/CVE-2023-33584
CVE: CVE-2023-27414
Published: 2023-06-21
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Popup Box Team Popup box plugin <= 3.4.4 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/ays-popup-box/wordpress-popup-box-plugin-3-4-4-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/ays-popup-box/wordpress-popup-box-plugin-3-4-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-27429
Published: 2023-06-21
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Automattic - Jetpack CRM team Jetpack CRM plugin <= 5.4.4 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/zero-bs-crm/wordpress-jetpack-crm-clients-leads-invoices-billing-email-marketing-automation-plugin-5-4-4-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/zero-bs-crm/wordpress-jetpack-crm-clients-leads-invoices-billing-email-marketing-automation-plugin-5-4-4-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-27432
Published: 2023-06-21
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WpSimpleTools Manage Upload Limit plugin <= 1.0.4 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wpsimpletools-upload-limit/wordpress-manage-upload-limit-plugin-1-0-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wpsimpletools-upload-limit/wordpress-manage-upload-limit-plugin-1-0-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-27243
Published: 2023-06-21
Description: An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the product API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312, CWE-312
References: http://dcap.com; http://makves.com; https://pastebin.com/L5BkBeEE
CVE: CVE-2023-33725
Published: 2023-06-21
Description: Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was discovered to contain a cross-site scripting (XSS) vulnerability via a customer signup with a crafted email address. This is fixed in 6.2.6.1-GA.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Contrast-Security-OSS/Burptrast/tree/main/docs/CVE-2023-33725; https://github.com/Contrast-Security-OSS/Burptrast/tree/main/docs/CVE-2023-33725
CVE: CVE-2023-0026
Published: 2023-06-21
Description: An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When a BGP update message is received over an established BGP session, and that message contains a specific, optional transitive attribute, this session will be torn down with an update message error. This issue cannot propagate beyond an affected system as the processing error occurs as soon as the update is received. This issue is exploitable remotely as the respective attribute can propagate through unaffected systems and intermediate AS (if any). Continuous receipt of a BGP update containing this attribute will create a sustained Denial of Service (DoS) condition. Some customers have experienced these BGP session flaps which prompted Juniper SIRT to release this advisory out of cycle before fixed releases are widely available as there is an effective workaround.

This issue affects:
Juniper Networks Junos OS
15.1R1 and later versions prior to 20.4R3-S8;
21.1 version 21.1R1 and later versions prior to 21.2R3-S6;
21.3 versions prior to 21.3R3-S5;
21.4 versions prior to 21.4R3-S4;
22.1 versions prior to 22.1R3-S4;
22.2 versions prior to 22.2R3-S2;
22.3 versions prior to 22.3R2-S2, 22.3R3-S1;
22.4 versions prior to 22.4R2-S1, 22.4R3;
23.1 versions prior to 23.1R1-S1, 23.1R2.

Juniper Networks Junos OS Evolved
All versions prior to 20.4R3-S8-EVO;
21.1 version 21.1R1-EVO and later versions prior to 21.2R3-S6-EVO;
21.3 versions prior to 21.3R3-S5-EVO;
21.4 versions prior to 21.4R3-S4-EVO;
22.1 versions prior to 22.1R3-S4-EVO;
22.2 versions prior to 22.2R3-S2-EVO;
22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;
22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO;
23.1 versions prior to 23.1R1-S1-EVO, 23.1R2-EVO.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://supportportal.juniper.net/JSA71542; https://www.juniper.net/documentation/us/en/software/junos/bgp/topics/topic-map/bgp-error-messages.html; https://supportportal.juniper.net/JSA71542