deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-0769
Published: 2024-01-21
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251666 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/c2dc/cve-reported/blob/main/CVE-2024-0769/CVE-2024-0769.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10371; https://vuldb.com/?ctiid.251666
CVE: CVE-2023-6531
Published: 2024-01-21
Description: A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-362
References: https://access.redhat.com/errata/RHSA-2024:2394; https://access.redhat.com/security/cve/CVE-2023-6531; https://bugzilla.redhat.com/show_bug.cgi?id=2253034
CVE: CVE-2024-23730
Published: 2024-01-21
Description: The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/run-llama/llama-hub/blob/v0.0.67/CHANGELOG.md; https://github.com/run-llama/llama-hub/pull/841/commits/9dc9c21a5c6d0226d1d2101c3121d4f085743d52; https://github.com/run-llama/llama-hub/releases/tag/v0.0.67
CVE: CVE-2024-23731
Published: 2024-01-21
Description: The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-88, CWE-88
References: https://github.com/embedchain/embedchain/compare/0.1.56...0.1.57; https://github.com/embedchain/embedchain/pull/1122; https://github.com/embedchain/embedchain/compare/0.1.56...0.1.57
CVE: CVE-2024-23732
Published: 2024-01-21
Description: The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to json.py.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333, CWE-1333
References: https://github.com/embedchain/embedchain/compare/0.1.56...0.1.57; https://github.com/embedchain/embedchain/pull/1122; https://github.com/embedchain/embedchain/compare/0.1.56...0.1.57
CVE: CVE-2023-52353
Published: 2024-01-21
Description: An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum.
CVSS Score: 7.5 (HIGH)
CWE: CWE-384, CWE-384
References: https://github.com/Mbed-TLS/mbedtls/issues/8654; https://github.com/Mbed-TLS/mbedtls/issues/8654
CVE: CVE-2024-0770
Published: 2024-01-21
Description: A vulnerability, which was classified as critical, was found in European Chemicals Agency IUCLID 7.10.3 on Windows. Affected is an unknown function of the file iuclid6.exe of the component Desktop Installer. The manipulation leads to incorrect default permissions. The attack needs to be approached locally. VDB-251670 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-276
References: https://imagebin.ca/v/7nx8zv3l62Kf; https://vuldb.com/?ctiid.251670; https://vuldb.com/?id.251670
CVE: CVE-2024-0771
Published: 2024-01-21
Description: A vulnerability has been found in Nsasoft Product Key Explorer 4.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Registration Handler. The manipulation of the argument Name/Key leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251671. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://vuldb.com/?ctiid.251671; https://vuldb.com/?id.251671; https://youtu.be/eecN5mC0avU
CVE: CVE-2024-23744
Published: 2024-01-21
Description: An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/Mbed-TLS/mbedtls/issues/8694; https://github.com/Mbed-TLS/mbedtls/issues/8694
CVE: CVE-2024-0772
Published: 2024-01-22
Description: A vulnerability was found in Nsasoft ShareAlarmPro 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the component Registration Handler. The manipulation of the argument Name/Key leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251672. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-787, CWE-787
References: https://vuldb.com/?ctiid.251672; https://vuldb.com/?id.251672; https://youtu.be/WIeWeuXbkiY
CVE: CVE-2024-0773
Published: 2024-01-22
Description: A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. Affected by this vulnerability is an unknown functionality of the file pages_client_signup.php. The manipulation of the argument Client Full Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251677 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://drive.google.com/drive/folders/1YjJFvxis3gLWX95990Y-nJMbWCQHB02U?usp=sharing; https://vuldb.com/?ctiid.251677; https://vuldb.com/?id.251677
CVE: CVE-2024-0774
Published: 2024-01-22
Description: A vulnerability was found in Any-Capture Any Sound Recorder 2.93. It has been declared as problematic. This vulnerability affects unknown code of the component Registration Handler. The manipulation of the argument User Name/Key Code leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-251674 is the identifier assigned to this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119
References: https://vuldb.com/?ctiid.251674; https://vuldb.com/?id.251674; https://youtu.be/f_4eHkISrZg
CVE: CVE-2024-0776
Published: 2024-01-22
Description: A vulnerability, which was classified as problematic, has been found in LinZhaoguan pb-cms 2.0. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation with the input <div onmouseenter="alert("xss)"> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251678 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/sweatxi/BugHub/blob/main/Pbcms%20Background%20recovery%20store%20xss.pdf; https://vuldb.com/?ctiid.251678; https://vuldb.com/?id.251678
CVE: CVE-2024-23750
Published: 2024-01-22
Description: MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://github.com/geekan/MetaGPT/issues/731; https://github.com/geekan/MetaGPT/issues/731
CVE: CVE-2024-23751
Published: 2024-01-22
Description: LlamaIndex (aka llama_index) through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQueryEngine, NLSQLRetriever, RetrieverQueryEngine, and PGVectorSQLQueryEngine. For example, an attacker might be able to delete this year's student records via "Drop the Students table" within English language input.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/run-llama/llama_index/issues/9957; https://github.com/run-llama/llama_index/issues/9957
CVE: CVE-2024-23752
Published: 2024-01-22
Description: GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17 allows attackers to trigger the generation of arbitrary Python code that is executed by SDFCodeExecutor. An attacker can create a dataframe that provides an English language specification of this Python code. NOTE: the vendor previously attempted to restrict code execution in response to a separate issue, CVE-2023-39660.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862, CWE-862
References: https://github.com/gventuri/pandas-ai/issues/868; https://github.com/gventuri/pandas-ai/issues/868
CVE: CVE-2024-23768
Published: 2024-01-22
Description: Dremio before 24.3.1 allows path traversal. An authenticated user who has no privileges on certain folders (and the files and datasets in these folders) can access these folders, files, and datasets. To be successful, the user must have access to the source and at least one folder in the source. Affected versions are: 24.0.0 through 24.3.0, 23.0.0 through 23.2.3, and 22.0.0 through 22.2.2. Fixed versions are: 24.3.1 and later, 23.2.4 and later, and 22.2.3 and later.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://docs.dremio.com/current/reference/bulletins/2024-01-12-01; https://docs.dremio.com/current/reference/bulletins/2024-01-12-01
CVE: CVE-2024-23770
Published: 2024-01-22
Description: darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.
CVSS Score: 5.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2024/01/25/1; https://github.com/emikulic/darkhttpd/commit/2b339828b2a42a5fda105ea84934957a7d23e35d; https://github.com/emikulic/darkhttpd/compare/v1.14...v1.15
CVE: CVE-2024-23771
Published: 2024-01-22
Description: darkhttpd before 1.15 uses strcmp (which is not constant time) to verify authentication, which makes it easier for remote attackers to bypass authentication via a timing side channel.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-203, CWE-203
References: http://www.openwall.com/lists/oss-security/2024/01/25/1; https://github.com/emikulic/darkhttpd/commit/f477619d49f3c4de9ad59bd194265a48ddc03f04; https://github.com/emikulic/darkhttpd/compare/v1.14...v1.15
CVE: CVE-2023-47352
Published: 2024-01-22
Description: Technicolor TC8715D devices have predictable default WPA2 security passwords. An attacker who scans for SSID and BSSID values may be able to predict these passwords.
CVSS Score: 8.8 (HIGH)
References: https://github.com/actuator/Technicolor/blob/main/TC8715D.png; https://github.com/actuator/cve/blob/main/Technicolor/CVE-2023-47352; https://i.ebayimg.com/images/g/d4EAAOSwV01kEM26/s-l1600.jpg
CVE: CVE-2024-21484
Published: 2024-01-22
Description: Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process. An attacker can decrypt ciphertexts by exploiting the Marvin security flaw. Exploiting this vulnerability requires the attacker to have access to a large number of ciphertexts encrypted with the same key. Workaround The vulnerability can be mitigated by finding and replacing RSA and RSAOAEP decryption with another crypto library.
CVSS Score: 7.5 (HIGH)
CWE: CWE-203, CWE-203
References: https://github.com/kjur/jsrsasign/issues/598; https://github.com/kjur/jsrsasign/releases/tag/11.0.0; https://people.redhat.com/~hkario/marvin/
CVE: CVE-2024-22113
Published: 2024-01-22
Description: Open redirect vulnerability in Access analysis CGI An-Analyzer released in 2023 December 31 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary websites and conduct phishing attacks via a specially crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://jvn.jp/en/jp/JVN73587943/; https://www.anglers-net.com/anlog/update/; https://jvn.jp/en/jp/JVN73587943/
CVE: CVE-2017-20189
Published: 2024-01-22
Description: In Clojure before 1.9.0, classes can be used to construct a serialized object that executes arbitrary code upon deserialization. This is relevant if a server deserializes untrusted objects.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://clojure.atlassian.net/browse/CLJ-2204; https://github.com/clojure/clojure/commit/271674c9b484d798484d134a5ac40a6df15d3ac3; https://github.com/frohoff/ysoserial/pull/68/files
CVE: CVE-2023-52354
Published: 2024-01-22
Description: chasquid before 1.13 allows SMTP smuggling because LF-terminated lines are accepted.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444, CWE-444
References: https://blitiri.com.ar/p/chasquid/relnotes/#113-2023-12-24; https://blitiri.com.ar/p/chasquid/relnotes/#113-2023-12-24
CVE: CVE-2024-0775
Published: 2024-01-22
Description: A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/security/cve/CVE-2024-0775; https://bugzilla.redhat.com/show_bug.cgi?id=2259414; https://scm.linefinity.com/common/linux-stable/commit/4c0b4818b1f636bc96359f7817a2d8bab6370162
CVE: CVE-2024-22233
Published: 2024-01-22
Description: In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.

Specifically, an application is vulnerable when all of the following are true:

  *  the application uses Spring MVC
  *  Spring Security 6.1.6+ or 6.2.1+ is on the classpath


Typically, Spring Boot applications need the org.springframework.boot:spring-boot-starter-web and org.springframework.boot:spring-boot-starter-security dependencies to meet all conditions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://spring.io/security/cve-2024-22233/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-36771
Published: 2024-01-22
Description: CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations this allows local users to view the authentication token via the process list and gain code execution as another user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-214, CWE-200
References: http://packetstormsecurity.com/files/176790/CloudLinux-CageFS-7.1.1-1-Token-Disclosure.html; http://seclists.org/fulldisclosure/2024/Jan/24; https://blog.cloudlinux.com/cagefs-lve-wrappers-and-bsock-have-been-rolled-out-to-100
CVE: CVE-2020-36772
Published: 2024-01-22
Description: CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command. This allows local users to read and write arbitrary files of certain file formats outside the CageFS environment.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-73, CWE-610
References: http://packetstormsecurity.com/files/176791/CloudLinux-CageFS-7.0.8-2-Insufficiently-Restricted-Proxy-Command.html; http://seclists.org/fulldisclosure/2024/Jan/25; https://blog.cloudlinux.com/lve-manager-lve-stats-lve-utils-and-alt-python27-cllib-have-been-rolled-out-to-100
CVE: CVE-2023-44395
Published: 2024-01-22
Description: Autolab is a course management service that enables instructors to offer autograded programming assignments to their students over the Web. Path traversal vulnerabilities were discovered in Autolab's assessment functionality in versions of Autolab prior to 2.12.0, whereby instructors can perform arbitrary file reads. Version 2.12.0 contains a patch. There are no feasible workarounds for this issue.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://github.com/autolab/Autolab/releases/tag/v2.12.0; https://github.com/autolab/Autolab/security/advisories/GHSA-h8wq-ghfq-5hfx; https://www.stackhawk.com/blog/rails-path-traversal-guide-examples-and-prevention/
CVE: CVE-2024-0706
Published: 2024-01-22
Description: Rejected reason: ***REJECT*** This was a false positive report.
CVE: CVE-2024-22895
Published: 2024-01-22
Description: DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/zzq66/cve5; https://github.com/zzq66/cve5
CVE: CVE-2024-0778
Published: 2024-01-22
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930. Affected by this issue is the function setNatConfig of the file /Interface/DevManage/VM.php. The manipulation of the argument natAddress/natPort/natServerPort leads to os command injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251696. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
CVSS Score: 8.0 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/dezhoutorizhao/cve/blob/main/rce.md; https://vuldb.com/?ctiid.251696; https://vuldb.com/?id.251696
CVE: CVE-2024-0781
Published: 2024-01-22
Description: A vulnerability, which was classified as problematic, was found in CodeAstro Internet Banking System 1.0. This affects an unknown part of the file pages_client_signup.php. The manipulation of the argument Client Full Name with the input <meta http-equiv="refresh" content="0; url=https://vuldb.com" /> leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251697 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-601
References: https://drive.google.com/drive/folders/1f61RXqelSDY0T92aLjmb8BhgAHt_eeUS; https://vuldb.com/?ctiid.251697; https://vuldb.com/?id.251697
CVE: CVE-2024-0782
Published: 2024-01-22
Description: A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. This vulnerability affects unknown code of the file pass-profile.php. The manipulation of the argument First Name/Last Name/User Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251698 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://drive.google.com/drive/folders/1ecVTReqCS_G8svyq3MG79E2y59psMcPn?usp=sharing; https://vuldb.com/?ctiid.251698; https://vuldb.com/?id.251698
CVE: CVE-2022-45790
Published: 2024-01-22
Description: The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.
CVSS Score: 8.6 (HIGH)
CWE: CWE-307, CWE-307
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-262-05; https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/; https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-010_en.pdf
CVE: CVE-2022-45791
Published: 2024-01-22
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2022-45792
Published: 2024-01-22
Description: Project files may contain malicious contents which the software will use to create files on the filesystem. This allows directory traversal and overwriting files with the privileges of the logged-in user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/; https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/
CVE: CVE-2022-45795
Published: 2024-01-22
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-0204
Published: 2024-01-22
Description: Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-425, CWE-425
References: http://packetstormsecurity.com/files/176683/GoAnywhere-MFT-Authentication-Bypass.html; http://packetstormsecurity.com/files/176974/Fortra-GoAnywhere-MFT-Unauthenticated-Remote-Code-Execution.html; https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml
CVE: CVE-2024-0783
Published: 2024-01-22
Description: A vulnerability was found in Project Worlds Online Admission System 1.0 and classified as critical. This issue affects some unknown processing of the file documents.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251699.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/keru6k/Online-Admission-System-RCE-PoC; https://github.com/keru6k/Online-Admission-System-RCE-PoC/blob/main/poc.py; https://vuldb.com/?ctiid.251699
CVE: CVE-2024-0784
Published: 2024-01-22
Description: A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function of the file /system/role/list. The manipulation of the argument dataScope leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vulnerability is VDB-251700.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/biantaibao/octopus_SQL/blob/main/report.md; https://vuldb.com/?ctiid.251700; https://vuldb.com/?id.251700
CVE: CVE-2023-45193
Published: 2024-01-22
Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used.  IBM X-Force ID:  268759.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/268759; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/7105501
CVE: CVE-2023-47746
Published: 2024-01-22
Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query.  IBM X-Force ID:  272644.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-770
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/272644; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/7105505
CVE: CVE-2023-48118
Published: 2024-01-22
Description: SQL Injection vulnerability in Quest Analytics LLC IQCRM v.2023.9.5 allows a remote attacker to execute arbitrary code via a crafted request to the Common.svc WSDL page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/el-dud3rino/CVE-Disclosures/blob/main/Quest%20Analytics%20IQCRM/Proof%20of%20Concept; https://github.com/el-dud3rino/CVE-Disclosures/blob/main/README.md; https://www.quest-analytics.com/