deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-6741
Published: 2024-01-16
Description: The WP Customer Area WordPress plugin before 8.2.1 does not properly validate users capabilities in some of its AJAX actions, allowing malicious users to edit other users' account address.
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/9debe1ea-18ad-44c4-8078-68eb66d36c4a/; https://wpscan.com/vulnerability/9debe1ea-18ad-44c4-8078-68eb66d36c4a/
CVE: CVE-2023-6824
Published: 2024-01-16
Description: The WP Customer Area WordPress plugin before 8.2.1 does not properly validates user capabilities in some of its AJAX actions, allowing any users to retrieve other user's account address.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://wpscan.com/vulnerability/a224b984-770a-4534-b689-0701b582b388/; https://wpscan.com/vulnerability/a224b984-770a-4534-b689-0701b582b388/
CVE: CVE-2023-7083
Published: 2024-01-16
Description: The Voting Record WordPress plugin through 2.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://magos-securitas.com/txt/CVE-2023-7083.txt; https://wpscan.com/vulnerability/ba77704a-32a1-494b-b2c0-e1c2a3f98adc/; https://magos-securitas.com/txt/CVE-2023-7083.txt
CVE: CVE-2023-7084
Published: 2024-01-16
Description: The Voting Record WordPress plugin through 2.0 is missing sanitisation as well as escaping, which could allow any authenticated users, such as subscriber to perform Stored XSS attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://magos-securitas.com/txt/CVE-2023-7084.txt; https://wpscan.com/vulnerability/5e51e239-919b-4e74-a7ee-195f3817f907/; https://magos-securitas.com/txt/CVE-2023-7084.txt
CVE: CVE-2023-7125
Published: 2024-01-16
Description: The Community by PeepSo WordPress plugin before 6.3.1.2 does not have CSRF check when creating a user post (visible on their wall in their profile page), which could allow attackers to make logged in users perform such action via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/cac12b64-ed25-4ee2-933f-8ff722605271/; https://wpscan.com/vulnerability/cac12b64-ed25-4ee2-933f-8ff722605271/
CVE: CVE-2023-7151
Published: 2024-01-16
Description: The Product Enquiry for WooCommerce WordPress plugin before 3.2 does not sanitise and escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4992a4a9-f21a-46e2-babf-954acfc7c5b4/; https://wpscan.com/vulnerability/4992a4a9-f21a-46e2-babf-954acfc7c5b4/
CVE: CVE-2023-7154
Published: 2024-01-16
Description: The Hubbub Lite (formerly Grow Social) WordPress plugin before 1.32.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0ed423dd-4a38-45e0-8645-3f4215a3f15c/; https://wpscan.com/vulnerability/0ed423dd-4a38-45e0-8645-3f4215a3f15c/
CVE: CVE-2024-0187
Published: 2024-01-16
Description: The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated URLs before outputting them back attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b4600411-bee1-4cc8-aee9-0a613ac9b55b/; https://wpscan.com/vulnerability/b4600411-bee1-4cc8-aee9-0a613ac9b55b/
CVE: CVE-2024-0233
Published: 2024-01-16
Description: The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not properly sanitise and escape a parameter before outputting it back in pages, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-116
References: https://wpscan.com/vulnerability/04a708a0-b6f3-47d1-aac9-0bb17f57c61e/; https://wpscan.com/vulnerability/04a708a0-b6f3-47d1-aac9-0bb17f57c61e/
CVE: CVE-2024-0235
Published: 2024-01-16
Description: The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve email addresses of any users on the blog
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/e370b99a-f485-42bd-96a3-60432a15a4e9/; https://wpscan.com/vulnerability/e370b99a-f485-42bd-96a3-60432a15a4e9/
CVE: CVE-2024-0236
Published: 2024-01-16
Description: The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve the settings of arbitrary virtual events, including any meeting password set (for example for Zoom)
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/09aeb6f2-6473-4de7-8598-e417049896d7/; https://wpscan.com/vulnerability/09aeb6f2-6473-4de7-8598-e417049896d7/
CVE: CVE-2024-0237
Published: 2024-01-16
Description: The EventON WordPress plugin through 4.5.8, EventON WordPress plugin before 2.2.7 do not have authorisation in some AJAX actions, allowing unauthenticated users to update virtual events settings, such as meeting URL, moderator, access details etc
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/73d1b00e-1f17-4d9a-bfc8-6bc43a46b90b/; https://wpscan.com/vulnerability/73d1b00e-1f17-4d9a-bfc8-6bc43a46b90b/
CVE: CVE-2024-0238
Published: 2024-01-16
Description: The EventON Premium WordPress plugin before 4.5.6, EventON WordPress plugin before 2.2.8 do not have authorisation in an AJAX action, and does not ensure that the post to be updated belong to the plugin, allowing unauthenticated users to update arbitrary post metadata.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-862, CWE-79
References: https://wpscan.com/vulnerability/774655ac-b201-4d9f-8790-9eff8564bc91/; https://wpscan.com/vulnerability/774655ac-b201-4d9f-8790-9eff8564bc91/
CVE: CVE-2024-0239
Published: 2024-01-16
Description: The Contact Form 7 Connector WordPress plugin before 1.2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against administrators.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b9a4a3e3-7cdd-4354-8541-4219bd41c854/; https://wpscan.com/vulnerability/b9a4a3e3-7cdd-4354-8541-4219bd41c854/
CVE: CVE-2024-0576
Published: 2024-01-16
Description: A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been declared as critical. This vulnerability affects the function setIpPortFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument sPort leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250792. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/6/README.md; https://vuldb.com/?ctiid.250792; https://vuldb.com/?id.250792
CVE: CVE-2024-0577
Published: 2024-01-16
Description: A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been rated as critical. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument lang leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250793 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/7/README.md; https://vuldb.com/?ctiid.250793; https://vuldb.com/?id.250793
CVE: CVE-2024-0578
Published: 2024-01-16
Description: A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-250794 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/8/README.md; https://vuldb.com/?ctiid.250794; https://vuldb.com/?id.250794
CVE: CVE-2023-4969
Published: 2024-01-16
Description: A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://blog.trailofbits.com; https://kb.cert.org/vuls/id/446598; https://registry.khronos.org/OpenCL/specs/3.0-unified/html/OpenCL_API.html#_fundamental_memory_regions
CVE: CVE-2024-0579
Published: 2024-01-16
Description: A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20[PII_REDACTED]. Affected by this vulnerability is the function formMapDelDevice of the file /boafrm/formMapDelDevice. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://github.com/jylsec/vuldb/blob/main/TOTOLINK/X2000R/1/README.md; https://vuldb.com/?ctiid.250795; https://vuldb.com/?id.250795
CVE: CVE-2023-22502
Published: 2024-01-16
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2023-22507
Published: 2024-01-16
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2023-22510
Published: 2024-01-16
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2023-22512
Published: 2024-01-16
Description: This High severity DoS (Denial of Service) vulnerability was introduced in version 5.6.0 of Confluence Data Center and Server. With a CVSS Score of 7.5, this vulnerability allows an unauthenticated attacker to cause a resource to be unavailable for its intended users by temporarily or indefinitely disrupting services of a vulnerable host (Confluence instance) connected to a network, which has no impact to confidentiality, no impact to integrity, high impact to availability, and requires no user interaction. Atlassian recommends that Confluence Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: Confluence Data Center and Server 7.19: Upgrade to a release greater than or equal to 7.19.14 Confluence Data Center and Server 8.5: Upgrade to a release greater than or equal to 8.5.1 Confluence Data Center and Server 8.6 or above: No need to upgrade, you're already on a patched version See the release notes (https://confluence.atlassian.com/doc/confluence-release-notes-327.html ). You can download the latest version of Confluence Data Center and Server from the download center (https://www.atlassian.com/software/confluence/download-archives ]). This vulnerability was reported via our Bug Bounty program.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://confluence.atlassian.com/pages/viewpage.action?pageId=[PII_REDACTED]; https://jira.atlassian.com/browse/CONFSERVER-91258
CVE: CVE-2023-22514
Published: 2024-01-16
Description: This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for Windows. 
	
	This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 7.8, and a CVSS Vector of: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H which allows an unauthenticated attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires user interaction. 
	
	Atlassian recommends that Sourcetree for Mac and Sourcetree for Windows customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:
		
		Sourcetree for Mac and Sourcetree for Windows 3.4: Upgrade to a release greater than or equal to 3.4.15
		
		
	
	See the release notes (https://www.sourcetreeapp.com/download-archives). You can download the latest version of Sourcetree for Mac and Sourcetree for Windows from the download center (https://www.sourcetreeapp.com/download-archives). 
	
	This vulnerability was reported via our Penetration Testing program.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://confluence.atlassian.com/pages/viewpage.action?pageId=[PII_REDACTED]; https://jira.atlassian.com/browse/SRCTREE-8076
CVE: CVE-2023-22520
Published: 2024-01-16
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2023-22525
Published: 2024-01-16
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2023-37523
Published: 2024-01-16
Description: Missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower could allow an attacker to execute a malicious script on the user's browser.

CVSS Score: 5.6 (MEDIUM)
CWE: CWE-79
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109754; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109754
CVE: CVE-2024-22625
Published: 2024-01-16
Description: Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_category.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/GaoZzr/CVE_report/blob/main/Supply_Management_System/SQLi-1.md; https://github.com/GaoZzr/CVE_report/blob/main/Supply_Management_System/SQLi-1.md
CVE: CVE-2024-22626
Published: 2024-01-16
Description: Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_retailer.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/GaoZzr/CVE_report/blob/main/Supply_Management_System/SQLi-2.md; https://github.com/GaoZzr/CVE_report/blob/main/Supply_Management_System/SQLi-2.md
CVE: CVE-2024-22627
Published: 2024-01-16
Description: Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_distributor.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/GaoZzr/CVE_report/blob/main/Supply_Management_System/SQLi-3.md; https://github.com/GaoZzr/CVE_report/blob/main/Supply_Management_System/SQLi-3.md
CVE: CVE-2024-22628
Published: 2024-01-16
Description: Budget and Expense Tracker System v1.0 is vulnerable to SQL Injection via /expense_budget/admin/?page=reports/budget&date_start=2023-12-28&date_end=
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/GaoZzr/CVE_report/blob/main/budget-and-expense-tracker-system/SQLi-1.md; https://github.com/GaoZzr/CVE_report/blob/main/budget-and-expense-tracker-system/SQLi-1.md
CVE: CVE-2024-23347
Published: 2024-01-16
Description: Prior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside of a package.json file included as part of that project. Those scripts would have the ability to execute arbitrary code on the system as the application.
CVSS Score: 7.8 (HIGH)
References: https://www.facebook.com/security/advisories/cve-2024-23347; https://www.facebook.com/security/advisories/cve-2024-23347
CVE: CVE-2023-49351
Published: 2024-01-16
Description: A stack-based buffer overflow vulnerability in /bin/webs binary in Edimax BR6478AC V2 firmware veraion v1.23 allows attackers to overwrite other values located on the stack due to an incorrect use of the strcpy() function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/countfatcode/temp/blob/main/formUSBAccount/formUSBAccount.md; https://github.com/countfatcode/temp/blob/main/formUSBAccount/formUSBAccount.md
CVE: CVE-2023-51381
Published: 2024-01-16
Description: Rejected reason: This CVE ID has been rejected or withdrawn by GitHub.
CVE: CVE-2023-52041
Published: 2024-01-16
Description: An issue discovered in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary code via the sub_410118 function of the shttpd program.
CVSS Score: 9.8 (CRITICAL)
References: https://kee02p.github.io/2024/01/13/CVE-2023-52041/; https://kee02p.github.io/2024/01/13/CVE-2023-52041/
CVE: CVE-2023-7234
Published: 2024-01-16
Description: 
OPCUAServerToolkit will write a log message once an OPC UA client has successfully connected containing the client's self-defined description field.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-117, CWE-116
References: https://integrationobjects.com//ask-a-question/; https://www.cisa.gov/news-events/ics-advisories/icsa-24-016-02; https://integrationobjects.com//ask-a-question/
CVE: CVE-2024-0200
Published: 2024-01-16
Description: An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection. This vulnerability could lead to the execution of user-controlled methods and remote code execution. To exploit this bug, an actor would need to be logged into an account on the GHES instance with the organization owner role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.8.13, 3.9.8, 3.10.5, and 3.11.3. This vulnerability was reported via the GitHub Bug Bounty program.


CVSS Score: 7.2 (HIGH)
CWE: CWE-470, CWE-470
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.5; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.3; https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.13
CVE: CVE-2024-0507
Published: 2024-01-16
Description: An attacker with access to a Management Console user account with the editor role could escalate privileges through a command injection vulnerability in the Management Console. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in versions 3.11.3, 3.10.5, 3.9.8, and 3.8.13 This vulnerability was reported via the GitHub Bug Bounty program.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-77
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.5; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.3; https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.13
CVE: CVE-2024-22491
Published: 2024-01-16
Description: A Stored Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/cui2shark/security/blob/main/A%20stored%20cross-site%20scripting%20%28XSS%29%20vulnerability%20was%20discovered%20in%20beetl-bbs%20post%20save.md; https://github.com/cui2shark/security/blob/main/A%20stored%20cross-site%20scripting%20%28XSS%29%20vulnerability%20was%20discovered%20in%20beetl-bbs%20post%20save.md
CVE: CVE-2023-5097
Published: 2024-01-16
Description: Improper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal.This issue affects Workforce Access: before 8.7.
CVSS Score: 7.0 (HIGH)
CWE: CWE-22, CWE-20
References: https://www.hypr.com/security-advisories; https://www.hypr.com/security-advisories
CVE: CVE-2023-6334
Published: 2024-01-16
Description: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows Overflow Buffers.This issue affects Workforce Access: before 8.7.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120, CWE-119
References: https://www.hypr.com/security-advisories; https://www.hypr.com/security-advisories
CVE: CVE-2023-6335
Published: 2024-01-16
Description: Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.


CVSS Score: 6.4 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://www.hypr.com/security-advisories; https://www.hypr.com/security-advisories
CVE: CVE-2023-6336
Published: 2024-01-16
Description: Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.


CVSS Score: 7.2 (HIGH)
CWE: CWE-59, CWE-59
References: https://www.hypr.com/security-advisories; https://www.hypr.com/security-advisories
CVE: CVE-2024-0599
Published: 2024-01-16
Description: A vulnerability was found in Jspxcms 10.2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file src\main\java\com\jspxcms\core\web\back\InfoController.java of the component Document Management Page. The manipulation of the argument title leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250837 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/sweatxi/BugHub/blob/main/Jspxcms.pdf; https://vuldb.com/?ctiid.250837; https://vuldb.com/?id.250837
CVE: CVE-2023-48926
Published: 2024-01-16
Description: An issue in 202 ecommerce Advanced Loyalty Program: Loyalty Points before v2.3.4 for PrestaShop allows unauthenticated attackers to arbitrarily change an order status.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://github.com/202ecommerce/security-advisories/security/advisories/GHSA-jp2c-mj65-qpmw; https://github.com/202ecommerce/security-advisories/security/advisories/GHSA-jp2c-mj65-qpmw
CVE: CVE-2022-31021
Published: 2024-01-16
Description: Ursa is a cryptographic library for use with blockchains. A weakness in the Hyperledger AnonCreds specification that is not mitigated in the Ursa and AnonCreds implementations is that the Issuer does not publish a key correctness proof demonstrating that a generated private key is sufficient to meet the unlinkability guarantees of AnonCreds. The Ursa and AnonCreds CL-Signatures implementations always generate a sufficient private key. A malicious issuer could in theory create a custom CL Signature implementation (derived from the Ursa or AnonCreds CL-Signatures implementations) that uses weakened private keys such that presentations from holders could be shared by verifiers to the issuer who could determine the holder to which the credential was issued. This vulnerability could impact holders of AnonCreds credentials implemented using the CL-signature scheme in the Ursa and AnonCreds implementations of CL Signatures. The ursa project has has moved to end-of-life status and no fix is expected.
CVSS Score: 3.3 (LOW)
CWE: CWE-829
References: https://github.com/hyperledger/ursa/security/advisories/GHSA-2q6j-gqc4-4gw3; https://www.brics.dk/RS/98/29/BRICS-RS-98-29.pdf; https://github.com/hyperledger/ursa/security/advisories/GHSA-2q6j-gqc4-4gw3