deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-49923
Published: 2023-12-12
Description:  An issue was discovered by Elastic whereby the Documents API of App Search logged the raw contents of indexed documents at INFO log level. Depending on the contents of such documents, this could lead to the insertion of sensitive or private information in the App Search logs. Elastic has released 8.11.2 and 7.17.16 that resolves this issue by changing the log level at which these are logged to DEBUG, which is disabled by default.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://discuss.elastic.co/t/enterprise-search-8-11-2-7-17-16-security-update-esa-2023-31/349181; https://www.elastic.co/community/security; https://discuss.elastic.co/t/enterprise-search-8-11-2-7-17-16-security-update-esa-2023-31/349181
CVE: CVE-2023-49089
Published: 2023-12-12
Description: Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.0, Backoffice users with permissions to create packages can use path traversal and thereby write outside of the expected location. Versions 8.18.10, 10.8.1, and 12.3.0 contain a patch for this issue.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-6324-52pr-h4p5; https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-6324-52pr-h4p5
CVE: CVE-2023-49273
Published: 2023-12-12
Description: Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, users with low privileges (Editor, etc.) are able to access some unintended endpoints. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-cfr5-7p54-4qg8; https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-cfr5-7p54-4qg8
CVE: CVE-2023-49922
Published: 2023-12-12
Description: An issue was discovered by Elastic whereby Beats and Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that event to Elasticsearch failed with any 4xx HTTP status code except 409 or 429. Depending on the nature of the event that Beats or Elastic Agent attempted to ingest, this could lead to the insertion of sensitive or private information in the Beats or Elastic Agent logs. Elastic has released 8.11.3 and 7.17.16 that prevents this issue by limiting these types of logs to DEBUG level logging, which is disabled by default.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://discuss.elastic.co/t/beats-and-elastic-agent-8-11-3-7-17-16-security-update-esa-2023-30/349180; https://discuss.elastic.co/t/beats-and-elastic-agent-8-11-3-7-17-16-security-update-esa-2023-30/349180
CVE: CVE-2023-6687
Published: 2023-12-12
Description: An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that event to Elasticsearch failed with any 4xx HTTP status code except 409 or 429. Depending on the nature of the event that Elastic Agent attempted to ingest, this could lead to the insertion of sensitive or private information in the Elastic Agent logs. Elastic has released 8.11.3 and 7.17.16 that prevents this issue by limiting these types of logs to DEBUG level logging, which is disabled by default.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://discuss.elastic.co/t/beats-and-elastic-agent-8-11-3-7-17-16-security-update-esa-2023-30/349180; https://discuss.elastic.co/t/beats-and-elastic-agent-8-11-3-7-17-16-security-update-esa-2023-30/349180
CVE: CVE-2023-34064
Published: 2023-12-12
Description: Workspace ONE Launcher contains a Privilege Escalation Vulnerability. A malicious actor with physical access to Workspace ONE Launcher could utilize the Edge Panel feature to bypass setup to gain access to sensitive information.
CVSS Score: 4.6 (MEDIUM)
References: https://www.vmware.com/security/advisories/VMSA-2023-0027.html; https://www.vmware.com/security/advisories/VMSA-2023-0027.html
CVE: CVE-2023-41337
Published: 2023-12-12
Description: h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. In version 2.3.0-beta2 and prior, when h2o is configured to listen to multiple addresses or ports with each of them using different backend servers managed by multiple entities, a malicious backend entity that also has the opportunity to observe or inject packets exchanged between the client and h2o may misdirect HTTPS requests going to other backends and observe the contents of that HTTPS request being sent.

The attack involves a victim client trying to resume a TLS connection and an attacker redirecting the packets to a different address or port than that intended by the client. The attacker must already have been configured by the administrator of h2o to act as a backend to one of the addresses or ports that the h2o instance listens to. Session IDs and tickets generated by h2o are not bound to information specific to the server address, port, or the X.509 certificate, and therefore it is possible for an attacker to force the victim connection to wrongfully resume against a different server address or port on which the same h2o instance is listening.

Once a TLS session is misdirected to resume to a server address / port that is configured to use an attacker-controlled server as the backend, depending on the configuration, HTTPS requests from the victim client may be forwarded to the attacker's server.

An H2O instance is vulnerable to this attack only if the instance is configured to listen to different addresses or ports using the listen directive at the host level and the instance is configured to connect to backend servers managed by multiple entities.

A patch is available at commit[PII_REDACTED]7a47e5150da0f4a66a609fad2ef0ab. As a workaround, one may stop using using host-level listen directives in favor of global-level ones.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-347
References: https://github.com/h2o/h2o/commit/[PII_REDACTED]7a47e5150da0f4a66a609fad2ef0ab; https://github.com/h2o/h2o/security/advisories/GHSA-5v5r-rghf-rm6q; https://github.com/h2o/h2o/commit/[PII_REDACTED]7a47e5150da0f4a66a609fad2ef0ab
CVE: CVE-2023-49274
Published: 2023-12-12
Description: Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a user enumeration attack is possible when SMTP is not set up correctly, but reset password is enabled. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this issue.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-8qp8-9rpw-j46c; https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-8qp8-9rpw-j46c
CVE: CVE-2023-49278
Published: 2023-12-12
Description: Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a brute force exploit can be used to collect valid usernames. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-307
References: https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-7x74-h8cw-qhxq; https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-7x74-h8cw-qhxq
CVE: CVE-2023-49279
Published: 2023-12-12
Description: Umbraco is an ASP.NET content management system (CMS). Starting in version 7.0.0 and prior to versions 7.15.11, 8.18.9, 10.7.0, 11.5.0, and 12.2.0, a user with access to the backoffice can upload SVG files that include scripts. If the user can trick another user to load the media directly in a browser, the scripts can be executed. Versions 7.15.11, 8.18.9, 10.7.0, 11.5.0, and 12.2.0 contain a patch for this issue. Some workarounds are available. Implement the server side file validation or serve all media from an different host (e.g cdn) than where Umbraco is hosted.
CVSS Score: 3.7 (LOW)
CWE: CWE-79
References: https://docs.umbraco.com/umbraco-cms/reference/security/serverside-file-validation; https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-6xmx-85x3-4cv2; https://docs.umbraco.com/umbraco-cms/reference/security/serverside-file-validation
CVE: CVE-2023-50247
Published: 2023-12-12
Description: h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. The QUIC stack (quicly), as used by H2O up to commit 43f86e5 (in version 2.3.0-beta and prior), is susceptible to a state exhaustion attack. When H2O is serving HTTP/3, a remote attacker can exploit this vulnerability to progressively increase the memory retained by the QUIC stack. This can eventually cause H2O to abort due to memory exhaustion. The vulnerability has been resolved in commit d67e81d03be12a9d53dc8271af6530f40164cd35. HTTP/1 and HTTP/2 are not affected by this vulnerability as they do not use QUIC. Administrators looking to mitigate this issue without upgrading can disable HTTP/3 support.
CVSS Score: 3.7 (LOW)
CWE: CWE-770
References: https://github.com/h2o/h2o/commit/d67e81d03be12a9d53dc8271af6530f40164cd35; https://github.com/h2o/h2o/security/advisories/GHSA-2ch5-p59c-7mv6; https://github.com/h2o/h2o/commit/d67e81d03be12a9d53dc8271af6530f40164cd35
CVE: CVE-2023-48225
Published: 2023-12-12
Description: Laf is a cloud development platform. Prior to version 1.0.0-beta.13, the control of LAF app enV is not strict enough, and in certain scenarios of privatization environment, it may lead to sensitive information leakage in secret and configmap. In ES6 syntax, if an obj directly references another obj, the name of the obj itself will be used as the key, and the entire object structure will be integrated intact. When constructing the deployment instance of the app, env was found from the database and directly inserted into the template, resulting in controllability here. Sensitive information in the secret and configmap can be read through the k8s envFrom field. In a privatization environment, when `namespaceConf. fixed` is marked, it may lead to the leakage of sensitive information in the system. As of time of publication, it is unclear whether any patches or workarounds exist.
CVSS Score: 8.9 (HIGH)
CWE: CWE-200
References: https://github.com/labring/laf/blob/main/server/src/application/environment.controller.ts#L50; https://github.com/labring/laf/blob/main/server/src/instance/instance.service.ts#L306; https://github.com/labring/laf/security/advisories/GHSA-hv2g-gxx4-fwxp
CVE: CVE-2023-50251
Published: 2023-12-12
Description: php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when parsing the attributes passed to a `use` tag inside an svg document, an attacker can cause the system to go to an infinite recursion. Depending on the system configuration and attack pattern this could exhaust the memory available to the executing process and/or to the server itself. An attacker sending multiple request to a system to render the above payload can potentially cause resource exhaustion to the point that the system is unable to handle incoming request. Version 0.5.1 contains a patch for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-674
References: https://github.com/dompdf/php-svg-lib/commit/88163cbe562d9b391b3a352e54d9c89d02d77ee0; https://github.com/dompdf/php-svg-lib/security/advisories/GHSA-ff5x-7qg5-vwf2; https://github.com/dompdf/php-svg-lib/commit/88163cbe562d9b391b3a352e54d9c89d02d77ee0
CVE: CVE-2023-50252
Published: 2023-12-12
Description: php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when handling `<use>` tag that references an `<image>` tag, it merges the attributes from the `<use>` tag to the `<image>` tag. The problem pops up especially when the `href` attribute from the `<use>` tag has not been sanitized. This can lead to an unsafe file read that can cause PHAR Deserialization vulnerability in PHP prior to version 8. Version 0.5.1 contains a patch for this issue. 
CVSS Score: 8.3 (HIGH)
CWE: CWE-15, CWE-502
References: https://github.com/dompdf/php-svg-lib/commit/08ce6a96d63ad7216315fae34a61c886dd2dc030; https://github.com/dompdf/php-svg-lib/security/advisories/GHSA-jq98-9543-m4cr; https://github.com/dompdf/php-svg-lib/commit/08ce6a96d63ad7216315fae34a61c886dd2dc030
CVE: CVE-2023-5379
Published: 2023-12-12
Description: A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size attribute in ajp-listener, JBoss EAP is marked in an error state by mod_cluster in httpd, causing JBoss EAP to close the TCP connection without returning an AJP response. This happens because mod_proxy_cluster marks the JBoss EAP instance as an error worker when the TCP connection is closed from the backend after sending the AJP request without receiving an AJP response, and stops forwarding. This issue could allow a malicious user could to repeatedly send requests that exceed the max-header-size, causing a Denial of Service (DoS).
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://access.redhat.com/errata/RHSA-2025:9582; https://access.redhat.com/errata/RHSA-2025:9583; https://access.redhat.com/security/cve/CVE-2023-5379
CVE: CVE-2023-5764
Published: 2023-12-12
Description: A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data.
CVSS Score: 7.1 (HIGH)
CWE: CWE-1336
References: https://access.redhat.com/errata/RHSA-2023:7773; https://access.redhat.com/security/cve/CVE-2023-5764; https://bugzilla.redhat.com/show_bug.cgi?id=2247629
CVE: CVE-2023-6710
Published: 2023-12-12
Description: A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias' parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script on the alias parameter on the URL, it adds a new virtual host and adds the script to the cluster-manager page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://access.redhat.com/errata/RHSA-2024:1316; https://access.redhat.com/errata/RHSA-2024:1317; https://access.redhat.com/errata/RHSA-2024:2387
CVE: CVE-2023-3517
Published: 2023-12-12
Description: 
Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including 
8.3.x does not restrict JNDI identifiers during the creation of XActions, allowing control of system level data sources.


CVSS Score: 8.5 (HIGH)
CWE: CWE-99
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]533; https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]533
CVE: CVE-2023-50263
Published: 2023-12-12
Description: Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. In Nautobot 1.x and 2.0.x prior to 1.6.7 and 2.0.6, the URLs `/files/get/?name=...` and `/files/download/?name=...` are used to provide admin access to files that have been uploaded as part of a run request for a Job that has FileVar inputs. Under normal operation these files are ephemeral and are deleted once the Job in question runs. 

In the default implementation used in Nautobot, as provided by `django-db-file-storage`, these URLs do not by default require any user authentication to access; they should instead be restricted to only users who have permissions to view Nautobot's `FileProxy` model instances.

Note that no URL mechanism is provided for listing or traversal of the available file `name` values, so in practice an unauthenticated user would have to guess names to discover arbitrary files for download, but if a user knows the file name/path value, they can access it without authenticating, so we are considering this a vulnerability.

Fixes are included in Nautobot 1.6.7 and Nautobot 2.0.6. No known workarounds are available other than applying the patches included in those versions.
CVSS Score: 3.7 (LOW)
CWE: CWE-200, CWE-306
References: https://github.com/nautobot/nautobot/commit/458280c359a4833a20da294eaf4b8d55edc91cee; https://github.com/nautobot/nautobot/commit/7c4cf3137f45f1541f09f2f6a7f8850cd3a2eaee; https://github.com/nautobot/nautobot/pull/4959
CVE: CVE-2023-6753
Published: 2023-12-13
Description: Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/mlflow/mlflow/commit/1c6309f884798fbf56017a3cc808016869ee8de4; https://huntr.com/bounties/b397b83a-527a-47e7-b912-a12a17a6cfb4; https://github.com/mlflow/mlflow/commit/1c6309f884798fbf56017a3cc808016869ee8de4
CVE: CVE-2023-42483
Published: 2023-12-13
Description: A TOCTOU race condition in Samsung Mobile Processor Exynos 9820, Exynos 980, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, and Exynos 1380 can cause unexpected termination of a system.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-367
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE: CVE-2023-43122
Published: 2023-12-13
Description: Samsung Mobile Processor and Wearable Processor (Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920) allow Information Disclosure in the Bootloader.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-787
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE: CVE-2023-45864
Published: 2023-12-13
Description: A race condition issue discovered in Samsung Mobile Processor Exynos 9820, 980, 1080, 2100, 2200, 1280, and 1380 allows unintended modifications of values within certain areas.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE: CVE-2023-45800
Published: 2023-12-13
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hanbiro Hanbiro groupware allows Information Elicitation.This issue affects Hanbiro groupware: from V3.8.79 before V3.8.81.1.


CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://hanbiro.com/; https://hanbiro.com/
CVE: CVE-2023-47573
Published: 2023-12-13
Description: An issue discovered in Relyum RELY-PCIe 22.2.1 devices. The authorization mechanism is not enforced in the web interface, allowing a low-privileged user to execute administrative functions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://www.relyum.com/web/support/vulnerability-report/; https://www.relyum.com/web/support/vulnerability-report/
CVE: CVE-2023-47574
Published: 2023-12-13
Description: An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices. There is a Weak SMB configuration with signing disabled.
CVSS Score: 5.9 (MEDIUM)
References: https://www.relyum.com/web/support/vulnerability-report/; https://www.relyum.com/web/support/vulnerability-report/
CVE: CVE-2023-47575
Published: 2023-12-13
Description: An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices. The web interfaces of the Relyum devices are susceptible to reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.relyum.com/web/support/vulnerability-report/; https://www.relyum.com/web/support/vulnerability-report/
CVE: CVE-2023-47576
Published: 2023-12-13
Description: An issue was discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices, allowing authenticated command injection through the web interface.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://www.relyum.com/web/support/vulnerability-report/; https://www.relyum.com/web/support/vulnerability-report/
CVE: CVE-2023-47577
Published: 2023-12-13
Description: An issue discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 allows for unauthorized password changes due to no check for current password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://www.relyum.com/web/support/vulnerability-report/; https://www.relyum.com/web/support/vulnerability-report/
CVE: CVE-2023-47578
Published: 2023-12-13
Description: Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery (CSRF) attacks due to the absence of CSRF protection in the web interface.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.relyum.com/web/support/vulnerability-report/; https://www.relyum.com/web/support/vulnerability-report/
CVE: CVE-2023-47579
Published: 2023-12-13
Description: Relyum RELY-PCIe 22.2.1 devices suffer from a system group misconfiguration, allowing read access to the central password hash file of the operating system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://www.relyum.com/web/support/vulnerability-report/; https://www.relyum.com/web/support/vulnerability-report/
CVE: CVE-2023-45801
Published: 2023-12-13
Description: Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0.


CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-287
References: http://www.nadatel.com/; http://www.nadatel.com/
CVE: CVE-2022-27488
Published: 2023-12-13
Description: A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x FortiRecorder version 6.4.0 through 6.4.2, 6.0.x, 2.7.x, 2.6.x, FortiNDR version 1.x.x allows a remote unauthenticated attacker to execute commands on the CLI via tricking an authenticated administrator to execute malicious GET requests.
CVSS Score: 8.3 (HIGH)
CWE: CWE-352, CWE-352
References: https://fortiguard.com/psirt/FG-IR-22-038; https://fortiguard.com/psirt/FG-IR-22-038
CVE: CVE-2023-36639
Published: 2023-12-13
Description: A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiPAM versions 1.0.0 through 1.0.3 allows attacker to execute unauthorized code or commands  via specially crafted API requests.
CVSS Score: 7.2 (HIGH)
CWE: CWE-134
References: https://fortiguard.com/psirt/FG-IR-23-138; https://fortiguard.com/psirt/FG-IR-23-138
CVE: CVE-2023-40716
Published: 2023-12-13
Description: An improper neutralization of special elements used in an OS command vulnerability [CWE-78]  in the command line interpreter of FortiTester 2.3.0 through 7.2.3 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments when running execute restore/backup .
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: https://fortiguard.com/psirt/FG-IR-22-345; https://fortiguard.com/psirt/FG-IR-22-345
CVE: CVE-2023-41673
Published: 2023-12-13
Description: An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests.
CVSS Score: 7.1 (HIGH)
CWE: CWE-285
References: https://fortiguard.com/psirt/FG-IR-23-270; https://fortiguard.com/psirt/FG-IR-23-270
CVE: CVE-2023-41678
Published: 2023-12-13
Description: A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands via specifically crafted request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: https://fortiguard.com/psirt/FG-IR-23-196; https://fortiguard.com/psirt/FG-IR-23-196