deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-48078
Published: 2023-11-17
Description: SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/esasadam06/Simple-CRUD-Functionality-SQLi-POC; https://github.com/esasadam06/Simple-CRUD-Functionality-SQLi-POC
CVE: CVE-2023-45382
Published: 2023-11-17
Description: In the module "SoNice Retour" (sonice_retour) up to version 2.1.0 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction, a guest can perform a path traversal to view all files on the information system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://common-services.com/fr/home-fr/; https://security.friendsofpresta.org/modules/2023/11/16/sonice_retour.html; https://common-services.com/fr/home-fr/
CVE: CVE-2023-45387
Published: 2023-11-17
Description: In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via `exportProduct::_addDataToDb().`
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://addons.prestashop.com/en/data-import-export/18662-product-catalog-csv-excel-xml-export-pro.html; https://security.friendsofpresta.org/modules/2023/11/16/exportproducts.html; https://addons.prestashop.com/en/data-import-export/18662-product-catalog-csv-excel-xml-export-pro.html
CVE: CVE-2023-48031
Published: 2023-11-17
Description: OpenSupports v4.11.0 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the comment function, an attacker can bypass security restrictions and upload a .bat file by manipulating the file's magic bytes to masquerade as an allowed type. This can enable the attacker to execute arbitrary code or establish a reverse shell, leading to unauthorized file writes or control over the victim's station via a crafted file upload operation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://bugplorer.github.io/cve-opensupports/; https://nitipoom-jar.github.io/CVE-2023-48031/; https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-48031
CVE: CVE-2023-48648
Published: 2023-11-17
Description: Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows unauthorized access because directories can be created with insecure permissions. File creation functions (such as the Mkdir() function) gives universal access (0777) to created folders by default. Excessive permissions can be granted when creating a directory with permissions greater than 0755 or when the permissions argument is not specified.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276, CWE-276
References: https://documentation.concretecms.org/developers/introduction/version-history/8513-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/922-release-notes; https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release
CVE: CVE-2023-48649
Published: 2023-11-17
Description: Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows stored XSS on the Admin page via an uploaded file name.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://documentation.concretecms.org/developers/introduction/version-history/8513-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/922-release-notes; https://github.com/concretecms/concretecms/pull/11695
CVE: CVE-2023-38130
Published: 2023-11-17
Description: Cross-site request forgery (CSRF) vulnerability in CubeCart prior to 6.5.3 allows a remote unauthenticated attacker to delete data in the system.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/; https://jvn.jp/en/jp/JVN22220399/; https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/
CVE: CVE-2023-42428
Published: 2023-11-17
Description: Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and files in the system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/; https://jvn.jp/en/jp/JVN22220399/; https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/
CVE: CVE-2023-47283
Published: 2023-11-17
Description: Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to obtain files in the system.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/; https://jvn.jp/en/jp/JVN22220399/; https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/
CVE: CVE-2023-47675
Published: 2023-11-17
Description: CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/; https://jvn.jp/en/jp/JVN22220399/; https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/
CVE: CVE-2023-48655
Published: 2023-11-17
Description: An issue was discovered in MISP before 2.4.176. app/Controller/Component/IndexFilterComponent.php does not properly filter out query parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-116
References: https://github.com/MISP/MISP/commit/158c8b2f788b75e0d26e9249a75e1be291e59d4b; https://github.com/MISP/MISP/compare/v2.4.175...v2.4.176; https://zigrin.com/advisories/misp-blind-sql-injection-in-array-input-parameters/
CVE: CVE-2023-48656
Published: 2023-11-17
Description: An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/MISP/MISP/commit/d6ad402b31547c95280a6d8320f8f87a8f609074; https://github.com/MISP/MISP/compare/v2.4.175...v2.4.176; https://zigrin.com/advisories/misp-blind-sql-injection-in-order-parameter/
CVE: CVE-2023-48657
Published: 2023-11-17
Description: An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/MISP/MISP/commit/08bd23281ead288de678de666ef43ed6de1899fc; https://github.com/MISP/MISP/compare/v2.4.175...v2.4.176; https://zigrin.com/advisories/misp-time-based-sql-injection-in-logs-index/
CVE: CVE-2023-48658
Published: 2023-11-17
Description: An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, underscore, dash, period, and space.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/MISP/MISP/commit/168621521b57b[PII_REDACTED]186f84a6aa3e71f0d; https://github.com/MISP/MISP/compare/v2.4.175...v2.4.176; https://zigrin.com/advisories/misp-time-based-sql-injection-in-logs-index/
CVE: CVE-2023-48659
Published: 2023-11-17
Description: An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/MISP/MISP/commit/37ecf81b84a01baa4d4b1fade4de94a9018c32ed; https://github.com/MISP/MISP/compare/v2.4.175...v2.4.176; https://zigrin.com/advisories/misp-reflected-cross-site-scripting-in-galaxies/
CVE: CVE-2023-38313
Published: 2023-11-17
Description: An issue was discovered in OpenNDS Captive Portal before 10.1.2. it has a do_binauth NULL pointer dereference that can be triggered with a crafted GET HTTP request with a missing client redirect query string parameter. Triggering this issue results in crashing openNDS (a Denial-of-Service condition). The issue occurs when the client is about to be authenticated, and can be triggered only when the BinAuth option is set. Affected OpenNDS Captive Portal before version 10.1.2 fixed infixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on28. August 2023 by updating OpenNDS to version 10.1.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/openNDS/openNDS/releases/tag/v10.1.2; https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80; https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs
CVE: CVE-2023-38314
Published: 2023-11-17
Description: An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a NULL pointer dereference in preauthenticated() that can be triggered with a crafted GET HTTP request with a missing redirect query string parameter. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). Affected OpenNDS Captive Portal before version 10.1.2 fixed infixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on28. August 2023 by updating OpenNDS to version 10.1.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/openNDS/openNDS/releases/tag/v10.1.2; https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80; https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs
CVE: CVE-2023-38315
Published: 2023-11-17
Description: An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a try_to_authenticate NULL pointer dereference that can be triggered with a crafted GET HTTP with a missing client token query string parameter. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/openNDS/openNDS/releases/tag/v10.1.2; https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80; https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs
CVE: CVE-2023-38316
Published: 2023-11-17
Description: An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-116
References: https://github.com/openNDS/openNDS/releases/tag/v10.1.2; https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80; https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs
CVE: CVE-2023-38320
Published: 2023-11-17
Description: An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a show_preauthpage NULL pointer dereference that can be triggered with a crafted GET HTTP with a missing User-Agent header. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). This problem was fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/openNDS/openNDS/releases/tag/v10.1.2; https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80; https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.2vJg3d85.dpbs
CVE: CVE-2023-38322
Published: 2023-11-17
Description: An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a do_binauth NULL pointer dereference that be triggered with a crafted GET HTTP request with a missing User-Agent HTTP header. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). The issue occurs when the client is about to be authenticated, and can be triggered only when the BinAuth option is set. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/openNDS/openNDS/releases/tag/v10.1.2; https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80; https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs
CVE: CVE-2023-38324
Published: 2023-11-17
Description: An issue was discovered in OpenNDS before 10.1.2. It allows users to skip the splash page sequence (and directly authenticate) when it is using the default FAS key and OpenNDS is configured as FAS. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.
CVSS Score: 5.3 (MEDIUM)
References: https://cwe.mitre.org/data/definitions/1390.html; https://github.com/openNDS/openNDS/blob/master/ChangeLog; https://github.com/openNDS/openNDS/releases/tag/v10.1.2
CVE: CVE-2023-39544
Published: 2023-11-17
Description: CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.


CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://jpn.nec.com/security-info/secinfo/nv23-009_en.html; https://jpn.nec.com/security-info/secinfo/nv23-009_en.html
CVE: CVE-2023-39545
Published: 2023-11-17
Description: CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.


CVSS Score: 8.8 (HIGH)
CWE: CWE-552, CWE-552
References: https://jpn.nec.com/security-info/secinfo/nv23-009_en.html; https://jpn.nec.com/security-info/secinfo/nv23-009_en.html
CVE: CVE-2023-39546
Published: 2023-11-17
Description: CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.


CVSS Score: 8.8 (HIGH)
CWE: CWE-836
References: https://jpn.nec.com/security-info/secinfo/nv23-009_en.html; https://jpn.nec.com/security-info/secinfo/nv23-009_en.html
CVE: CVE-2023-39547
Published: 2023-11-17
Description: CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.


CVSS Score: 8.8 (HIGH)
CWE: CWE-294, CWE-294
References: https://jpn.nec.com/security-info/secinfo/nv23-009_en.html; https://jpn.nec.com/security-info/secinfo/nv23-009_en.html
CVE: CVE-2023-39548
Published: 2023-11-17
Description: CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.


CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://jpn.nec.com/security-info/secinfo/nv23-009_en.html; https://jpn.nec.com/security-info/secinfo/nv23-009_en.html
CVE: CVE-2023-41101
Published: 2023-11-17
Description: An issue was discovered in the captive portal in OpenNDS before version 10.1.3. get_query in http_microhttpd.c does not validate the length of the query string of GET requests. This leads to a stack-based buffer overflow in versions 9.x and earlier, and to a heap-based buffer overflow in versions 10.x and later. Attackers may exploit the issue to crash OpenNDS (Denial-of-Service condition) or to inject and execute arbitrary bytecode (Remote Code Execution). Affected OpenNDS before version 10.1.3 fixed in OpenWrt master and OpenWrt 23.05 on 23. November by updating OpenNDS to version 10.2.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/openNDS/openNDS/commit/c294cf30e0a2512062c66e6becb674557b4aed8d; https://github.com/openNDS/openNDS/releases/tag/v10.1.3; https://github.com/openwrt/routing/commit/88c98c910acccab694b3afb6d36d70ca429118a6
CVE: CVE-2023-41102
Published: 2023-11-17
Description: An issue was discovered in the captive portal in OpenNDS before version 10.1.3. It has multiple memory leaks due to not freeing up allocated memory. This may lead to a Denial-of-Service condition due to the consumption of all available memory. Affected OpenNDS before version 10.1.3 fixed in OpenWrt master and OpenWrt 23.05 on 23. November by updating OpenNDS to version 10.2.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-400
References: https://github.com/openNDS/openNDS/commit/31dbf4aa069c5bb39a7926d86036ce3b04312b51; https://github.com/openNDS/openNDS/releases/tag/v10.1.3; https://github.com/openwrt/routing/commit/ad787a920ccb9dacf5b01d52bce36ac14a5ecd89
CVE: CVE-2023-47797
Published: 2023-11-17
Description: Reflected cross-site scripting (XSS) vulnerability on a content page’s edit page in Liferay Portal 7.4.3.94 through 7.4.3.95 allows remote attackers to inject arbitrary web script or HTML via the `p_l_back_url_title` parameter.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-47797; https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-47797
CVE: CVE-2023-44325
Published: 2023-11-17
Description: Adobe Animate versions 23.0.2 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb23-61.html; https://helpx.adobe.com/security/products/animate/apsb23-61.html
CVE: CVE-2023-44326
Published: 2023-11-17
Description: Adobe Dimension versions 3.4.9 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb23-62.html; https://helpx.adobe.com/security/products/dimension/apsb23-62.html
CVE: CVE-2023-47757
Published: 2023-11-17
Description: Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in AWeber AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth allows Accessing Functionality Not Properly Constrained by ACLs, Cross-Site Request Forgery.This issue affects AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth: from n/a through 7.3.9.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862, CWE-352
References: https://patchstack.com/database/vulnerability/aweber-web-form-widget/wordpress-aweber-plugin-7-3-9-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/aweber-web-form-widget/wordpress-aweber-plugin-7-3-9-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-5444
Published: 2023-11-17
Description: 
A Cross Site Request Forgery vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2 allows a remote low privilege user to successfully add a new user with administrator privileges to the ePO server. This impacts the dashboard area of the user interface. To exploit this the attacker must change the HTTP payload post submission, prior to it reaching the ePO server.


CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: https://kcm.trellix.com/agent/index?page=content&id=SB10410; https://kcm.trellix.com/agent/index?page=content&id=SB10410
CVE: CVE-2023-5445
Published: 2023-11-17
Description: 
An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged user to modify the URL parameter for the purpose of redirecting URL request(s) to a malicious site. This impacts the dashboard area of the user interface. A user would need to be logged into ePO to trigger this vulnerability. To exploit this the attacker must change the HTTP payload post submission, prior to it reaching the ePO server.


CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://kcm.trellix.com/corporate/index?page=content&id=SB10410; https://kcm.trellix.com/corporate/index?page=content&id=SB10410
CVE: CVE-2023-47066
Published: 2023-11-17
Description: Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb23-66.html; https://helpx.adobe.com/security/products/after_effects/apsb23-66.html
CVE: CVE-2023-47067
Published: 2023-11-17
Description: Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb23-66.html; https://helpx.adobe.com/security/products/after_effects/apsb23-66.html
CVE: CVE-2023-47068
Published: 2023-11-17
Description: Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb23-66.html; https://helpx.adobe.com/security/products/after_effects/apsb23-66.html
CVE: CVE-2023-47069
Published: 2023-11-17
Description: Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb23-66.html; https://helpx.adobe.com/security/products/after_effects/apsb23-66.html