deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-39046
Published: 2023-09-18
Description: An information leak in TonTon-Tei_waiting Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-668, CWE-668
References: http://tonton-teiwaiting.com; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39046.md; http://tonton-teiwaiting.com
CVE: CVE-2023-39049
Published: 2023-09-18
Description: An information leak in youmart-tokunaga v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-668
References: http://youmart-tokunaga.com; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39049.md; http://youmart-tokunaga.com
CVE: CVE-2023-39056
Published: 2023-09-18
Description: An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-668
References: http://coffee-jumbo.com; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39056.md; http://coffee-jumbo.com
CVE: CVE-2023-41443
Published: 2023-09-18
Description: SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /sys/menu/list.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Deng-JunFeng/cve-lists/tree/main/novel-plus/vuln; https://github.com/Deng-JunFeng/cve-lists/tree/main/novel-plus/vuln
CVE: CVE-2023-42446
Published: 2023-09-18
Description: Pow is a authentication and user management solution for Phoenix and Plug-based apps. Starting in version 1.0.14 and prior to version 1.0.34, use of `Pow.Store.Backend.MnesiaCache` is susceptible to session hijacking as expired keys are not being invalidated correctly on startup. A session may expire when all `Pow.Store.Backend.MnesiaCache` instances have been shut down for a period that is longer than a session's remaining TTL. Version 1.0.34 contains a patch for this issue. As a workaround, expired keys, including all expired sessions, can be manually invalidated.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-298, CWE-672
References: https://github.com/pow-auth/pow/issues/713; https://github.com/pow-auth/pow/security/advisories/GHSA-3cjh-p6pw-jhv9; https://github.com/pow-auth/pow/issues/713
CVE: CVE-2023-42454
Published: 2023-09-18
Description: SQLpage is a SQL-only webapp builder. Someone using SQLpage versions prior to 0.11.1, whose SQLpage instance is exposed publicly, with a database connection string specified in the `sqlpage/sqlpage.json` configuration file (not in an environment variable), with the web_root is the current working directory (the default), and with their database exposed publicly, is vulnerable to an attacker retrieving database connection information from SQLPage and using it to connect to their database directly. Version 0.11.0 fixes this issue. Some workarounds are available. Using an environment variable instead of the configuration file to specify the database connection string prevents exposing it on vulnerable versions. Using a different web root (that is not a parent of the SQLPage configuration directory) fixes the issue. One should also avoid exposing one's database publicly.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-200
References: https://github.com/lovasoa/SQLpage/issues/89; https://github.com/lovasoa/SQLpage/releases/tag/v0.11.1; https://github.com/lovasoa/SQLpage/security/advisories/GHSA-v5wf-jg37-r9m5
CVE: CVE-2021-26837
Published: 2023-09-19
Description: SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://community.helpsystems.com/knowledge-base/rjs/delivernow/overview/; https://susos.co/blog/f/cve-disclosure-sedric-louissaints-discovery-of-sql-injection-in; https://community.helpsystems.com/knowledge-base/rjs/delivernow/overview/
CVE: CVE-2023-40788
Published: 2023-09-19
Description: SpringBlade <=V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668
References: https://gist.github.com/kaliwin/89276ec7e97f9529c989bd77706c29c7; https://github.com/chillzhuang/SpringBlade; https://github.com/chillzhuang/SpringBlade/blob/master/blade-gateway/src/main/java/org/springblade/gateway/provider/AuthProvider.java
CVE: CVE-2022-28357
Published: 2023-09-19
Description: NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://advisories.nats.io/CVE/CVE-2022-28357.txt; https://github.com/nats-io/nats-server/releases; https://advisories.nats.io/CVE/CVE-2022-28357.txt
CVE: CVE-2023-41599
Published: 2023-09-19
Description: An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://www.so1lupus.ltd/2023/08/28/Directory-traversal-in-JFinalCMS/; http://www.so1lupus.ltd/2023/08/28/Directory-traversal-in-JFinalCMS/
CVE: CVE-2023-5060
Published: 2023-09-19
Description: Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/librenms/librenms/commit/8fd8d9b06a11060de5dc69588a1a83594a7e6f72; https://huntr.dev/bounties/01b0917d-f92f-4903-9eca-bcfc46e847e3; https://github.com/librenms/librenms/commit/8fd8d9b06a11060de5dc69588a1a83594a7e6f72
CVE: CVE-2023-42399
Published: 2023-09-19
Description: Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jodit.com; https://github.com/xdan/jodit/issues/1017; https://xdsoft.net
CVE: CVE-2023-26143
Published: 2023-09-19
Description: Versions of the package blamer before 1.0.4 are vulnerable to Arbitrary Argument Injection via the blameByFile() API. The library does not sanitize for user input or validate the given file path conforms to a specific schema, nor does it properly pass command-line flags to the git binary using the double-dash POSIX characters (--) to communicate the end of options.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-88, CWE-88
References: https://gist.github.com/lirantal/14c3686370a86461f555d3f0703e02f9; https://github.com/kucherenko/blamer/commit/0965877f115753371a2570f10a63c455d2b2cde3; https://security.snyk.io/vuln/SNYK-JS-BLAMER-5731318
CVE: CVE-2023-5054
Published: 2023-09-19
Description: The Super Store Finder plugin for WordPress is vulnerable to unauthenticated arbitrary email creation and relay in versions up to, and including, 6.9.3. This is due to insufficient restrictions on the sendMail.php file that allows direct access. This makes it possible for unauthenticated attackers to send emails utilizing the vulnerable site's server, with arbitrary content. Please note that this vulnerability has already been publicly disclosed with an exploit which is why we are publishing the details without a patch available, we are attempting to initiate contact with the developer.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-862
References: https://superstorefinder.net/; https://superstorefinder.net/support/forums/topic/super-store-finder-for-wordpress-patch-notes/; https://www.wordfence.com/threat-intel/vulnerabilities/id/d31d0553-9378-4c7e-a258-12562aa6b388?source=cve
CVE: CVE-2023-5009
Published: 2023-09-19
Description: An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies. This was a bypass of [CVE-2023-3932](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3932) showing additional impact.
CVSS Score: 8.2 (HIGH)
CWE: CWE-863
References: https://gitlab.com/gitlab-org/gitlab/-/issues/425304; https://hackerone.com/reports/2147126; https://gitlab.com/gitlab-org/gitlab/-/issues/425304
CVE: CVE-2023-41387
Published: 2023-09-19
Description: A SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arbitrary files inside the app's container. The internal database of the framework is exposed to the local user if an app uses UIFileSharingEnabled and LSSupportsOpeningDocumentsInPlace properties. As a result, local users can obtain the same attack primitives as remote attackers by tampering with the internal database of the framework on the device.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: https://pub.dev/packages/flutter_downloader/changelog; https://seredynski.com/articles/exploiting-ios-apps-to-extract-session-tokens-and-overwrite-user-data; https://pub.dev/packages/flutter_downloader/changelog
CVE: CVE-2023-0773
Published: 2023-09-19
Description: The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device.

Successful exploitation of this vulnerability could allow the attacker to gain complete control of the targeted device.

CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://global.uniview.com/About_Us/Security/Notice/202309/976482_140493_0.htm; https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0270; https://global.uniview.com/About_Us/Security/Notice/202309/976482_140493_0.htm
CVE: CVE-2023-32184
Published: 2023-09-19
Description: A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs opensuse-welcome if a custom layout is chosen
This issue affects opensuse-welcome: from 0.1 before 0.1.9+git.35.4b9444a.


CVSS Score: 7.8 (HIGH)
CWE: CWE-922
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32184; https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32184
CVE: CVE-2023-32186
Published: 2023-09-19
Description: A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2  allows attackers with access to K3s servers apiserver/supervisor port (TCP 6443) cause denial of service.
This issue affects RKE2: from 1.24.0 before 1.24.17+rke2r1, from v1.25.0 before v1.25.13+rke2r1, from v1.26.0 before v1.26.8+rke2r1, from v1.27.0 before v1.27.5+rke2r1, from v1.28.0 before v1.28.1+rke2r1.


CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32186; https://github.com/rancher/rke2/security/advisories/GHSA-p45j-vfv5-wprq; https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32186
CVE: CVE-2023-29245
Published: 2023-09-19
Description: A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, may allow an unauthenticated attacker to execute arbitrary SQL statements on the DBMS used by the web application by sending specially crafted malicious network packets.

Malicious users with extensive knowledge on the underlying system may be able to extract arbitrary information from the DBMS in an uncontrolled way, alter its structure and data, and/or affect its availability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89, CWE-89
References: https://security.nozominetworks.com/NN-2023:11-01; https://security.nozominetworks.com/NN-2023:11-01
CVE: CVE-2023-2567
Published: 2023-09-19
Description: A SQL Injection vulnerability has been found in Nozomi Networks Guardian and CMC, due to improper input validation in certain parameters used in the Query functionality.
Authenticated users may be able to execute arbitrary SQL statements on the DBMS used by the web application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://security.nozominetworks.com/NN-2023:9-01; https://security.nozominetworks.com/NN-2023:9-01
CVE: CVE-2023-32649
Published: 2023-09-19
Description: A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unauthenticated attacker to crash the IDS module by sending specially crafted malformed network packets.

During the (limited) time window before the IDS module is automatically restarted, network traffic may not be analyzed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1286, CWE-20
References: https://security.nozominetworks.com/NN-2023:10-01; https://security.nozominetworks.com/NN-2023:10-01
CVE: CVE-2022-47553
Published: 2023-09-19
Description: Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with sensitive information for the organisation, without being authenticated within the web server.
CVSS Score: 8.6 (HIGH)
CWE: CWE-285, CWE-863
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products
CVE: CVE-2022-47554
Published: 2023-09-19
Description: Exposure of sensitive information in ekorCCP and ekorRCI, potentially allowing a remote attacker to obtain critical information from various .xml files, including .xml files containing credentials, without being authenticated within the web server.
CVSS Score: 8.2 (HIGH)
CWE: CWE-200
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products
CVE: CVE-2022-47555
Published: 2023-09-19
Description: Operating system command injection in ekorCCP and ekorRCI, which could allow an authenticated attacker to execute commands, create new users with elevated privileges or set up a backdoor.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products
CVE: CVE-2022-47556
Published: 2023-09-19
Description: Uncontrolled resource consumption in ekorRCI, allowing an attacker with low-privileged access to the web server to send continuous legitimate web requests to a functionality that is not properly validated, in order to cause a denial of service (DoS) on the device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products
CVE: CVE-2022-47557
Published: 2023-09-19
Description: Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located to decrypt the credentials of privileged users, and subsequently gain access to the system to perform malicious actions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-916, CWE-916
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products
CVE: CVE-2022-47558
Published: 2023-09-19
Description: Devices ekorCCP and ekorRCI are vulnerable due to access to the FTP service using default credentials. Exploitation of this vulnerability can allow an attacker to modify critical files that could allow the creation of new users, delete or modify existing users, modify configuration files, install rootkits or backdoors.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-284, CWE-798
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products
CVE: CVE-2023-23957
Published: 2023-09-19
Description: An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://support.broadcom.com/external/content/SecurityAdvisories/0/22544; https://support.broadcom.com/external/content/SecurityAdvisories/0/22544
CVE: CVE-2023-41834
Published: 2023-09-19
Description: Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Flink Stateful Functions 3.1.0, 3.1.1 and 3.2.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted HTTP requests. Attackers could potentially inject malicious content into the HTTP response that is sent to the user's browser. 

Users should upgrade to Apache Flink Stateful Functions version 3.3.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74, CWE-113, CWE-74
References: http://www.openwall.com/lists/oss-security/2023/09/19/3; https://lists.apache.org/thread/cvxcsdyjqc3lysj1tz7s06zwm36zvwrm; http://www.openwall.com/lists/oss-security/2023/09/19/3
CVE: CVE-2023-4092
Published: 2023-09-19
Description: SQL injection vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to read sensitive data from the database, modify data (insert/update/delete), perform database administration operations and, in some cases, execute commands on the operating system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea
CVE: CVE-2022-47559
Published: 2023-09-19
Description: Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affecting availability, privacy and integrity.
CVSS Score: 8.6 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products
CVE: CVE-2023-31808
Published: 2023-09-19
Description: Technicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords. One account has administrative privileges, allowing for unrestricted access over the WAN interface if Remote Administration is enabled.
CVSS Score: 7.2 (HIGH)
CWE: CWE-798
References: https://www.kb.cert.org/vuls/id/913565; https://www.kb.cert.org/vuls/id/913565
CVE: CVE-2023-41179
Published: 2023-09-19
Description: A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation.

Note that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94, CWE-94
References: https://jvn.jp/en/vu/JVNVU90967486/; https://success.trendmicro.com/jp/solution/000294706; https://success.trendmicro.com/solution/000294994
CVE: CVE-2023-4093
Published: 2023-09-19
Description: Reflected and persistent XSS vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to inject malicious JavaScript code, compromise the victim's browser and take control of it, redirect the user to malicious domains or access information being viewed by the legitimate user.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea
CVE: CVE-2023-4094
Published: 2023-09-19
Description: ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the login form.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1390, CWE-287
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea
CVE: CVE-2023-4095
Published: 2023-09-19
Description: User enumeration vulnerability in Arconte Áurea 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to obtain a list of registered users in the application, obtaining the necessary information to perform more complex attacks on the platform.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204, CWE-203
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea
CVE: CVE-2023-4096
Published: 2023-09-19
Description: Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brute force attack on the emailed PIN number in order to change the password of a legitimate user.
CVSS Score: 8.6 (HIGH)
CWE: CWE-640
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea
CVE: CVE-2023-3892
Published: 2023-09-19
Description: Improper Restriction of XML External Entity Reference vulnerability in MIM Assistant and Client DICOM RTst Loading modules allows XML Entity Linking / XML External Entities Blowup.




In order to take advantage of this vulnerability, an attacker must 
craft a malicious XML document, embed this document into specific 3rd 
party private RTst metadata tags, transfer the now compromised 
DICOM object to MIM, and force MIM to archive and load the data.

Users on either version are strongly encouraged to update to an unaffected version (7.2.11+, 7.3.4+).

This issue was found and analyzed by MIM Software's internal security team.  We are unaware of any proof of concept or actual exploit available in the wild.


For more information, visit  https://www.mimsoftware.com/cve-2023-3892 https://www.mimsoftware.com/cve-2023-3892 




This issue affects MIM Assistant: 7.2.10, 7.3.3; MIM Client: 7.2.10, 7.3.3.



CVSS Score: 5.6 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://www.mimsoftware.com/cve-2023-3892; https://www.mimsoftware.com/cve-2023-3892
CVE: CVE-2023-41890
Published: 2023-09-19
Description: Sustainsys.Saml2 library adds SAML2P support to ASP.NET web sites, allowing the web site to act as a SAML2 Service Provider. 
Prior to versions 1.0.3 and 2.9.2, when a response is processed, the issuer of the Identity Provider is not sufficiently validated. This could allow a malicious identity provider to craft a Saml2 response that is processed as if issued by another identity provider. It is also possible for a malicious end user to cause stored state intended for one identity provider to be used when processing the response from another provider. An application is impacted if they rely on any of these features in their authentication/authorization logic: the issuer of the generated identity and claims; or items in the stored request state (AuthenticationProperties). This issue is patched in versions 2.9.2 and 1.0.3. The `AcsCommandResultCreated` notification can be used to add the validation required if an upgrade to patched packages is not possible.
CVSS Score: 7.5 (HIGH)
CWE: CWE-289, CWE-294
References: https://github.com/Sustainsys/Saml2/issues/712; https://github.com/Sustainsys/Saml2/issues/713; https://github.com/Sustainsys/Saml2/security/advisories/GHSA-fv2h-753j-9g39