deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-48614
Published: 2023-12-10
Description: Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/SemanticMediaWiki/SemanticMediaWiki/issues/5262; https://www.semantic-mediawiki.org/wiki/Semantic_MediaWiki_4.0.2; https://github.com/SemanticMediaWiki/SemanticMediaWiki/issues/5262
CVE: CVE-2023-50453
Published: 2023-12-10
Description: An issue was discovered in Zammad before 6.2.0. It uses the public endpoint /api/v1/signshow for its login screen. This endpoint returns internal configuration data of user object attributes, such as selectable values, which should not be visible to the public.
CVSS Score: 5.3 (MEDIUM)
References: https://zammad.com/en/advisories/zaa-2023-08; https://zammad.com/en/advisories/zaa-2023-08
CVE: CVE-2023-50454
Published: 2023-12-10
Description: An issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish connections to external services without proper validation of hostname and certificate authority. This is exploitable by man-in-the-middle attackers.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://zammad.com/en/advisories/zaa-2023-04; https://zammad.com/en/advisories/zaa-2023-04
CVE: CVE-2023-50455
Published: 2023-12-10
Description: An issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address verification" feature, an attacker could send many requests for a known address to cause Denial Of Service (generation of many emails, which would also spam the victim).
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://zammad.com/en/advisories/zaa-2023-06; https://zammad.com/en/advisories/zaa-2023-06
CVE: CVE-2023-50456
Published: 2023-12-10
Description: An issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in generated notification emails via a crafted first or last name.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-601
References: https://zammad.com/en/advisories/zaa-2023-07; https://zammad.com/en/advisories/zaa-2023-07
CVE: CVE-2023-50457
Published: 2023-12-10
Description: An issue was discovered in Zammad before 6.2.0. When listing tickets linked to a knowledge base answer, or knowledge base answers of a ticket, a user could see entries for which they lack permissions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://zammad.com/en/advisories/zaa-2023-05; https://zammad.com/en/advisories/zaa-2023-05
CVE: CVE-2023-6656
Published: 2023-12-10
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22. It has been rated as critical. Affected by this issue is some unknown functionality of the file DFLIMG/DFLJPG.py. The manipulation leads to deserialization. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The identifier of this vulnerability is VDB-247364. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-502
References: https://github.com/bayuncao/vul-cve-1; https://vuldb.com/?ctiid.247364; https://vuldb.com/?id.247364
CVE: CVE-2023-6657
Published: 2023-12-10
Description: A vulnerability classified as critical has been found in SourceCodester Simple Student Attendance System 1.0. This affects an unknown part of the file /modals/student_form.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-247365 was assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/daydust/vuln/blob/main/Simple_Student_Attendance_System/student_form.php_SQL_injection.md; https://vuldb.com/?ctiid.247365; https://vuldb.com/?id.247365
CVE: CVE-2023-50463
Published: 2023-12-10
Description: The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when trust_header X-Forwarded-For is used, allows attackers to spoof their source IP address via an X-Forwarded-For header, which may bypass a protection mechanism (trusted_proxy directive in reverse_proxy or IP address range restrictions).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://caddyserver.com/v2; https://github.com/shift72/caddy-geo-ip/issues/4; https://github.com/shift72/caddy-geo-ip/tags
CVE: CVE-2023-6658
Published: 2023-12-10
Description: A vulnerability classified as critical was found in SourceCodester Simple Student Attendance System 1.0. This vulnerability affects unknown code of the file ajax-api.php?action=save_attendance. The manipulation of the argument class_id leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-247366 is the identifier assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/daydust/vuln/blob/main/Simple_Student_Attendance_System/ajax-api.php_SQL-injection.md; https://vuldb.com/?ctiid.247366; https://vuldb.com/?id.247366
CVE: CVE-2023-50465
Published: 2023-12-11
Description: A stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an SVG document uploaded by an authenticated user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Crypt0Cr33py/monicahqvuln; https://github.com/monicahq/monica/releases; https://www.monicahq.com
CVE: CVE-2023-6659
Published: 2023-12-11
Description: A vulnerability, which was classified as critical, has been found in Campcodes Web-Based Student Clearance System 1.0. This issue affects some unknown processing of the file /libsystem/login.php. The manipulation of the argument student leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247367.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Kidjing/cve/blob/main/sql1.md; https://vuldb.com/?ctiid.247367; https://vuldb.com/?id.247367
CVE: CVE-2023-48417
Published: 2023-12-11
Description: Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://source.android.com/docs/security/bulletin/chromecast/2023-12-01; https://source.android.com/docs/security/bulletin/chromecast/2023-12-01
CVE: CVE-2023-48424
Published: 2023-12-11
Description: U-Boot shell vulnerability resulting in Privilege escalation in a production device
CVSS Score: 9.8 (CRITICAL)
References: https://source.android.com/docs/security/bulletin/chromecast/2023-12-01; https://source.android.com/docs/security/bulletin/chromecast/2023-12-01
CVE: CVE-2023-48425
Published: 2023-12-11
Description: U-Boot vulnerability resulting in persistent Code Execution 
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://source.android.com/docs/security/bulletin/chromecast/2023-12-01; https://source.android.com/docs/security/bulletin/chromecast/2023-12-01
CVE: CVE-2023-6181
Published: 2023-12-11
Description: An oversight in BCB handling of reboot reason that allows for persistent code execution
CVSS Score: 9.8 (CRITICAL)
References: https://source.android.com/docs/security/bulletin/chromecast/2023-12-01; https://source.android.com/docs/security/bulletin/chromecast/2023-12-01
CVE: CVE-2023-49355
Published: 2023-12-11
Description: decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the " []-1.2e[PII_REDACTED]" input. NOTE: this is not the same as CVE-2023-50246. The CVE-2023-50246 71c2ab5 reference mentions -10E[PII_REDACTED], which is not in normalized scientific notation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/jqlang/jq/blob/88f01a741c8d63c4d1b5bc3ef61520c6eb93edaa/src/decNumber/decNumber.c#L3764; https://github.com/jqlang/jq/tree/88f01a741c8d63c4d1b5bc3ef61520c6eb93edaa; https://github.com/linzc21/bug-reports/blob/main/reports/jq/1.7-37-g88f01a7/heap-buffer-overflow/CVE-2023-49355.md
CVE: CVE-2023-5500
Published: 2023-12-11
Description: This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code ('Code Injection') to gain full control of the affected device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://cert.vde.com/en/advisories/VDE-2023-049/; https://cert.vde.com/en/advisories/VDE-2023-049/
CVE: CVE-2023-49964
Published: 2023-12-11
Description: An issue was discovered in Hyland Alfresco Community Edition through 7.2.0. By inserting malicious content in the folder.get.html.ftl file, an attacker may perform SSTI (Server-Side Template Injection) attacks, which can leverage FreeMarker exposed objects to bypass restrictions and achieve RCE (Remote Code Execution). NOTE: this issue exists because of an incomplete fix for CVE-2020-12873.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://github.com/mbadanoiu/CVE-2023-49964; https://www.alfresco.com/products/community/download; https://github.com/mbadanoiu/CVE-2023-49964
CVE: CVE-2023-6185
Published: 2023-12-11
Description: Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins.

In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to run arbitrary gstreamer plugins depending on what plugins are installed on the target system.
CVSS Score: 8.3 (HIGH)
References: https://lists.debian.org/debian-lts-announce/2023/12/msg00026.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QB7UB6CTWQUDOE657OVVRSDYUY3IPBJG/; https://www.debian.org/security/2023/dsa-5574
CVE: CVE-2023-6186
Published: 2023-12-11
Description: Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning.

In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning the user.
CVSS Score: 8.3 (HIGH)
CWE: CWE-281
References: https://lists.debian.org/debian-lts-announce/2023/12/msg00026.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QB7UB6CTWQUDOE657OVVRSDYUY3IPBJG/; https://www.debian.org/security/2023/dsa-5574
CVE: CVE-2023-49417
Published: 2023-12-11
Description: TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/cnitlrt/iot_vuln/tree/master/totolink/A7000R/setOpModeCfg; https://github.com/cnitlrt/iot_vuln/tree/master/totolink/A7000R/setOpModeCfg
CVE: CVE-2023-49418
Published: 2023-12-11
Description: TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/cnitlrt/iot_vuln/tree/master/totolink/A7000R/setIpPortFilterRules; https://github.com/cnitlrt/iot_vuln/tree/master/totolink/A7000R/setIpPortFilterRules
CVE: CVE-2023-6194
Published: 2023-12-11
Description: In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit
document type definition (DTD) references to external entities.
This means that if a user chooses to use a malicious report definition XML file containing an external entity reference
to generate a report then Eclipse Memory Analyzer may access external files or URLs defined via a DTD in the report definition.

CVSS Score: 2.8 (LOW)
CWE: CWE-611, CWE-611
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=582631; https://gitlab.eclipse.org/security/cve-assignement/-/issues/15; https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/169
CVE: CVE-2023-6671
Published: 2023-12-11
Description: A vulnerability has been discovered on OJS, that consists in a CSRF (Cross-Site Request Forgery) attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-request-forgery-open-journal-systems; https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-request-forgery-open-journal-systems
CVE: CVE-2023-6538
Published: 2023-12-11
Description: SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in Storage, Server or combined Server+Storage administrative roles are able to access SMU configuration backup, that would normally be barred to those specific administrative roles. 
CVSS Score: 7.6 (HIGH)
CWE: CWE-285
References: https://knowledge.hitachivantara.com/Security/System_Management_Unit_(SMU)_versions_prior_to_14.8.7825.01%2C_used_to_manage_Hitachi_Vantara_NAS_products_is_susceptible_to_unintended_information_disclosure_via_unprivileged_access_to_SMU_configuration_backup_data.; https://knowledge.hitachivantara.com/Security/System_Management_Unit_(SMU)_versions_prior_to_14.8.7825.01%2C_used_to_manage_Hitachi_Vantara_NAS_products_is_susceptible_to_unintended_information_disclosure_via_unprivileged_access_to_SMU_configuration_backup_data.
CVE: CVE-2023-48715
Published: 2023-12-11
Description: Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.2.99.103 of Tuleap Community Edition and prior to versions 15.2-4 and 15.1-8 of Tuleap Enterprise Edition, the name of the releases are not properly escaped on the edition page of a release. A malicious user with the ability to create a FRS release could force a victim having write permissions in the FRS to execute uncontrolled code. Tuleap Community Edition 15.2.99.103, Tuleap Enterprise Edition 15.2-4, and Tuleap Enterprise Edition 15.1-8 contain a fix for this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Enalean/tuleap/commit/ea71ec7ee062aae8d1fa7a7325aaa759205c17d8; https://github.com/Enalean/tuleap/security/advisories/GHSA-3m7g-7787-wc68; https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=ea71ec7ee062aae8d1fa7a7325aaa759205c17d8
CVE: CVE-2023-49795
Published: 2023-12-11
Description: MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a server-side request forgery vulnerability in `file.py`. This can lead to limited information disclosure. Users should use MindsDB's `staging` branch or v23.11.4.1, which contain a fix for the issue.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://github.com/mindsdb/mindsdb/commit/8d13c9c28ebcf3b36509eb679378004d4648d8fe; https://github.com/mindsdb/mindsdb/security/advisories/GHSA-34mr-6q8x-g9r6; https://github.com/mindsdb/mindsdb/commit/8d13c9c28ebcf3b36509eb679378004d4648d8fe
CVE: CVE-2023-6679
Published: 2023-12-11
Description: A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the  Linux kernel. This issue could be exploited to trigger a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://access.redhat.com/errata/RHSA-2024:0439; https://access.redhat.com/errata/RHSA-2024:0448; https://access.redhat.com/errata/RHSA-2024:0461
CVE: CVE-2023-5749
Published: 2023-12-11
Description: The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape user input before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/3931daac-3899-4169-8625-4c95fd2adafc; https://wpscan.com/vulnerability/3931daac-3899-4169-8625-4c95fd2adafc
CVE: CVE-2023-5750
Published: 2023-12-11
Description: The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape a parameter before outputting it back in the page containing a specific content, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/cf323f72-8374-40fe-9e2e-810e46de1ec8; https://wpscan.com/vulnerability/cf323f72-8374-40fe-9e2e-810e46de1ec8
CVE: CVE-2023-5757
Published: 2023-12-11
Description: The WP Crowdfunding WordPress plugin before 2.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/2adc5995-03a9-4860-b00b-7f8d7fe18058; https://wpscan.com/vulnerability/2adc5995-03a9-4860-b00b-7f8d7fe18058
CVE: CVE-2023-5907
Published: 2023-12-11
Description: The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root outside of the WordPress root directory, giving access to system files and directories even in a multisite setup, where site administrators should not be allowed to modify the sites files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-552
References: https://wpscan.com/vulnerability/f250226f-4a05-4d75-93c4-5444a4ce919e; https://wpscan.com/vulnerability/f250226f-4a05-4d75-93c4-5444a4ce919e
CVE: CVE-2023-5940
Published: 2023-12-11
Description: The WP Not Login Hide (WPNLH) WordPress plugin through 1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d594c00d-2905-449b-80cd-95965a96cd4b; https://wpscan.com/vulnerability/d594c00d-2905-449b-80cd-95965a96cd4b
CVE: CVE-2023-5955
Published: 2023-12-11
Description: The Contact Form Email WordPress plugin before 1.3.44 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/1b5fce7e-14fc-4548-8747-96fdd58fdd98; https://wpscan.com/vulnerability/1b5fce7e-14fc-4548-8747-96fdd58fdd98
CVE: CVE-2023-6035
Published: 2023-12-11
Description: The EazyDocs WordPress plugin before 2.3.4 does not properly sanitize and escape "data" parameter before using it in an SQL statement via an AJAX action, which could allow any authenticated users, such as subscribers, to perform SQL Injection attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/44f5a29a-05f9-40d2-80f2-6fb2bda60d79; https://wpscan.com/vulnerability/44f5a29a-05f9-40d2-80f2-6fb2bda60d79
CVE: CVE-2023-49488
Published: 2023-12-11
Description: A cross-site scripting (XSS) vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Hebing123/cve/issues/1; https://github.com/Hebing123/cve/issues/1
CVE: CVE-2023-49490
Published: 2023-12-11
Description: XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /admin.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/dayrui/xunruicms/issues/2; https://github.com/dayrui/xunruicms/issues/2
CVE: CVE-2023-49494
Published: 2023-12-11
Description: DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component select_media_post_wangEditor.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://dedecms.com; https://github.com/Hebing123/cve/issues/3; http://dedecms.com
CVE: CVE-2023-49796
Published: 2023-12-11
Description: MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a limited file write vulnerability in `file.py` Users should use MindsDB's `staging` branch or v23.11.4.1, which contain a fix for the issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/mindsdb/mindsdb/commit/8d13c9c28ebcf3b36509eb679378004d4648d8fe; https://github.com/mindsdb/mindsdb/security/advisories/GHSA-crhp-7c74-cg4c; https://github.com/mindsdb/mindsdb/commit/8d13c9c28ebcf3b36509eb679378004d4648d8fe
CVE: CVE-2020-12613
Published: 2023-12-11
Description: An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. An attacker can spawn a process with multiple users as part of the security token (prior to Avecto elevation). When Avecto elevates the process, it removes the user who is launching the process, but not the second user. Therefore this second user still retains access and can give permission to the process back to the first user.
CVSS Score: 8.8 (HIGH)
References: https://www.beyondtrust.com/support/changelog/privilege-management-for-windows-5-6-sr1; https://www.beyondtrust.com/trust-center/security-advisories/bt22-11; https://www.beyondtrust.com/support/changelog/privilege-management-for-windows-5-6-sr1
CVE: CVE-2023-45292
Published: 2023-12-11
Description: When using the default implementation of Verify to check a Captcha, verification can be bypassed. For example, if the first parameter is a non-existent id, the second parameter is an empty string, and the third parameter is true, the function will always consider the Captcha to be correct.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-345
References: https://github.com/mojocn/base64Captcha/commit/5ab86bd6f333aad3936f912fc52b411168dcd4a7; https://github.com/mojocn/base64Captcha/commit/9b11012caca58925f1e47c770f79f2fa47e3ad13; https://github.com/mojocn/base64Captcha/issues/120
CVE: CVE-2023-49802
Published: 2023-12-11
Description: The LinkedCustomFields plugin for MantisBT allows users to link values between two custom fields, creating linked drop-downs. Prior to version 2.0.1, cross-site scripting in the MantisBT LinkedCustomFields plugin allows Javascript execution, when a crafted Custom Field is linked via the plugin and displayed when reporting a new Issue or editing an existing one. This issue is fixed in version 2.0.1. As a workaround, one may utilize MantisBT's default Content Security Policy, which blocks script execution.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/mantisbt-plugins/LinkedCustomFields/commit/30e5ae751e40d7ae18bfd794fd48671477b3d286; https://github.com/mantisbt-plugins/LinkedCustomFields/issues/10; https://github.com/mantisbt-plugins/LinkedCustomFields/pull/11
CVE: CVE-2021-3187
Published: 2023-12-11
Description: An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script (that executes as root from a temporary directory) during install time. (This applies to macOS before 10.15.5, or Security Update 2020-003 on Mojave and High Sierra, Later versions of macOS are not vulnerable.)
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://www.beyondtrust.com/docs/release-notes/privilege-management/index.htm; https://www.beyondtrust.com/trust-center/security-advisories/bt22-06; https://www.beyondtrust.com/docs/release-notes/privilege-management/index.htm