deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-41348
Published: 2022-10-12
Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via the onerror attribute of an IMG element, leading to information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://wiki.zimbra.com/wiki/Security_Center
CVE: CVE-2022-41349
Published: 2022-10-12
Description: In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/compose accepts an attachUrl parameter that is vulnerable to Reflected XSS. This allows executing arbitrary JavaScript on the victim's machine.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://wiki.zimbra.com/wiki/Security_Center
CVE: CVE-2022-41350
Published: 2022-10-12
Description: In Zimbra Collaboration Suite (ZCS) 8.8.15, /h/search?action=voicemail&action=listen accepts a phone parameter that is vulnerable to Reflected XSS. This allows executing arbitrary JavaScript on the victim's machine.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://wiki.zimbra.com/wiki/Security_Center
CVE: CVE-2022-41351
Published: 2022-10-12
Description: In Zimbra Collaboration Suite (ZCS) 8.8.15, at the URL /h/calendar, one can trigger XSS by adding JavaScript code to the view parameter and changing the value of the uncheck parameter to a string (instead of default value of 10).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://wiki.zimbra.com/wiki/Security_Center
CVE: CVE-2018-18446
Published: 2022-10-12
Description: dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 1 of 2).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://blog.getpaint.net/2018/10/22/paint-net-4-1-2-is-now-available/; https://www.dotpdn.com; https://www.getpaint.net
CVE: CVE-2018-18447
Published: 2022-10-12
Description: dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 2 of 2).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://blog.getpaint.net/2018/10/22/paint-net-4-1-2-is-now-available/; https://www.dotpdn.com; https://www.getpaint.net
CVE: CVE-2021-36369
Published: 2022-10-12
Description: An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2 tokens or SSH-Askpass. Thus, it allows an attacker to abuse a forwarded agent for logging on to another server unnoticed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-287
References: https://github.com/mkj/dropbear/pull/128; https://github.com/mkj/dropbear/releases; https://github.com/mkj/dropbear/releases/tag/DROPBEAR_2022.82
CVE: CVE-2022-39299
Published: 2022-10-12
Description: Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in possession of an arbitrary IDP signed XML element. Depending on the IDP used, fully unauthenticated attacks (e.g without access to a valid user) might also be feasible if generation of a signed message can be triggered. Users should upgrade to passport-saml version 3.2.2 or newer. The issue was also present in the beta releases of `node-saml` before version 4.0.0-beta.5. If you cannot upgrade, disabling SAML authentication may be done as a workaround.
CVSS Score: 7.4 (HIGH)
CWE: CWE-347, CWE-347
References: http://packetstormsecurity.com/files/169826/Node-saml-Root-Element-Signature-Bypass.html; https://github.com/node-saml/passport-saml/commit/8b7e3f5a91c8e5ac7e890a0c90bc7491ce33155e; https://github.com/node-saml/passport-saml/security/advisories/GHSA-m974-647v-whv7
CVE: CVE-2022-41316
Published: 2022-10-12
Description: HashiCorp Vault and Vault Enterprise’s TLS certificate auth method did not initially load the optionally configured CRL issued by the role's CA into memory on startup, resulting in the revocation list not being checked if the CRL has not yet been retrieved. Fixed in 1.12.0, 1.11.4, 1.10.7, and 1.9.10.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://discuss.hashicorp.com; https://discuss.hashicorp.com/t/hcsec-2022-24-vaults-tls-cert-auth-method-only-loaded-crl-after-first-request/45483; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-39282
Published: 2022-10-12
Description: FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using `/parallel` command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please upgrade to 2.8.1 where this issue is patched. If unable to upgrade, do not use parallel port redirection (`/parallel` command line switch) as a workaround.
CVSS Score: 3.5 (LOW)
CWE: CWE-908
References: https://github.com/FreeRDP/FreeRDP/releases/tag/2.8.1; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c45q-wcpg-mxjq; https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html
CVE: CVE-2022-39283
Published: 2022-10-12
Description: FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in version 2.8.1. If you cannot upgrade do not use the `/video` switch.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125, CWE-908
References: https://github.com/FreeRDP/FreeRDP/releases/tag/2.8.1; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6cf9-3328-qrvh; https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html
CVE: CVE-2022-39297
Published: 2022-10-12
Description: MelisCms provides a full CMS for Melis Platform, including templating system, drag'n'drop of plugins, SEO and many administration tools. Attackers can deserialize arbitrary data on affected versions of `melisplatform/melis-cms`, and ultimately leads to the execution of arbitrary PHP code on the system. Conducting this attack does not require authentication. Users should immediately upgrade to `melisplatform/melis-cms` >= 5.0.1. This issue was addressed by restricting allowed classes when deserializing user-controlled data.
CVSS Score: 7.7 (HIGH)
CWE: CWE-502, CWE-502
References: https://github.com/melisplatform/melis-cms/commit/d124b2474699a679a24ec52620cadceb3d4cec11; https://github.com/melisplatform/melis-cms/security/advisories/GHSA-m3m3-6gww-7gj9; https://github.com/melisplatform/melis-cms/commit/d124b2474699a679a24ec52620cadceb3d4cec11
CVE: CVE-2022-39298
Published: 2022-10-12
Description: MelisFront is the engine that displays website hosted on Melis Platform. It deals with showing pages, plugins, URL rewritting, search optimization and SEO, etc. Attackers can deserialize arbitrary data on affected versions of `melisplatform/melis-front`, and ultimately leads to the execution of arbitrary PHP code on the system. Conducting this attack does not require authentication. Users should immediately upgrade to `melisplatform/melis-front` >= 5.0.1. This issue was addressed by restricting allowed classes when deserializing user-controlled data.
CVSS Score: 7.7 (HIGH)
CWE: CWE-502
References: https://github.com/melisplatform/melis-front/commit/89ae612d5f1f7aa2fb621ee8de27dffe1feb851e; https://github.com/melisplatform/melis-front/security/advisories/GHSA-h479-2mv4-5c26; https://github.com/melisplatform/melis-front/commit/89ae612d5f1f7aa2fb621ee8de27dffe1feb851e
CVE: CVE-2022-3171
Published: 2022-10-12
Description: A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-h4h5-3hr4-j3g2; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBAUKJQL6O4TIWYBENORSY5P43TVB4M3/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MPCGUT3T5L6C3IDWUPSUO22QDCGQKTOP/
CVE: CVE-2022-42897
Published: 2022-10-13
Description: Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalation and control of the system. NOTE: ArrayOS AG 10.x is unaffected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_Remote_Injection_Vulnerability_in_Array_VPN_Product_ID-11961_%20V2.1.pdf; https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/fieldnotices.html; https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_Remote_Injection_Vulnerability_in_Array_VPN_Product_ID-11961_%20V2.1.pdf
CVE: CVE-2022-34020
Published: 2022-10-13
Description: Cross Site Request Forgery (CSRF) vulnerability in ResIOT ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 allows attackers to add new admin users to the platform or other unspecified impacts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html; https://securityblog101.blogspot.com/2022/09/cve-2022-34020.html; https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html
CVE: CVE-2022-40187
Published: 2022-10-13
Description: Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless access point and the known passphrase of FSSPORTS, an attacker could use this service to modify a device and steal intellectual property.
CVSS Score: 8.0 (HIGH)
CWE: CWE-276, CWE-276
References: https://github.com/atredispartners/advisories/blob/master/ATREDIS-2022-0003.md; https://wiki.eclipse.org/TCF; https://www.bushnellgolf.com/products/launch-monitors/launch-pro/
CVE: CVE-2022-42899
Published: 2022-10-13
Description: Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues when opening crafted SKP files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58* for MicroStation and 10.17.01.19* for Bentley View.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.bentley.com/legal/common-vulnerability-exposure-be-2022-0017/; https://www.bentley.com/legal/common-vulnerability-exposure-be-2022-0017/
CVE: CVE-2022-42900
Published: 2022-10-13
Description: Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read issues when opening crafted FBX files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58* for MicroStation and 10.17.01.19* for Bentley View.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.bentley.com/legal/common-vulnerability-exposure-be-2022-0019/; https://www.bentley.com/legal/common-vulnerability-exposure-be-2022-0019/
CVE: CVE-2022-42901
Published: 2022-10-13
Description: Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when opening crafted XMT files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58* for MicroStation and 10.17.01.19* for Bentley View.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-787, CWE-125, CWE-787
References: https://www.bentley.com/legal/common-vulnerability-exposure-be-2022-0018/; https://www.bentley.com/legal/common-vulnerability-exposure-be-2022-0018/
CVE: CVE-2022-42902
Published: 2022-10-13
Description: In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code execution in lava_server/lavatable.py. Due to improper input sanitization, an anonymous user can force the lava-server-gunicorn service to execute user-provided code on the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://git.lavasoftware.org/lava/lava/-/commit/e66b74cd6c175ff8826b8f[PII_REDACTED]be228b52?merge_request_iid=1834; https://git.lavasoftware.org/lava/lava/-/merge_requests/1834; https://lists.debian.org/debian-lts-announce/2022/11/msg00019.html
CVE: CVE-2022-42906
Published: 2022-10-13
Description: powerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbitrary code execution. git repositories can contain per-repository configuration that changes the behavior of git, including running arbitrary commands. When using powerline-gitstatus, changing to a directory automatically runs git commands in order to display information about the current repository in the prompt. If an attacker can convince a user to change their current directory to one controlled by the attacker, such as in a shared filesystem or extracted archive, powerline-gitstatus will run arbitrary commands under the attacker's control. NOTE: this is similar to CVE-2022-20001.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://github.com/jaspernbrouwer/powerline-gitstatus/issues/45; https://github.com/jaspernbrouwer/powerline-gitstatus/releases/tag/v1.3.2; https://lists.debian.org/debian-lts-announce/2023/01/msg00017.html
CVE: CVE-2022-3470
Published: 2022-10-13
Description: A vulnerability was found in SourceCodester Human Resource Management System. It has been classified as critical. Affected is an unknown function of the file getstatecity.php. The manipulation of the argument sc leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-210714 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-707, CWE-89
References: https://github.com/Hanfu-l/POC-Exp/blob/main/The%20Human%20Resource%20Management%20System%20sc%20parameter%20is%20injected.pdf; https://vuldb.com/?id.210714; https://github.com/Hanfu-l/POC-Exp/blob/main/The%20Human%20Resource%20Management%20System%20sc%20parameter%20is%20injected.pdf
CVE: CVE-2022-3471
Published: 2022-10-13
Description: A vulnerability was found in SourceCodester Human Resource Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file city.php. The manipulation of the argument searccity leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-210715.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-707, CWE-89
References: https://github.com/Hanfu-l/POC-Exp/blob/main/The%20Human%20Resource%20Management%20System%20searccity%20parameter%20is%20injected.pdf; https://vuldb.com/?id.210715; https://github.com/Hanfu-l/POC-Exp/blob/main/The%20Human%20Resource%20Management%20System%20searccity%20parameter%20is%20injected.pdf
CVE: CVE-2022-3472
Published: 2022-10-13
Description: A vulnerability was found in SourceCodester Human Resource Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file city.php. The manipulation of the argument cityedit leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210716.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-707, CWE-89
References: https://github.com/Hanfu-l/POC-Exp/blob/main/The%20Human%20Resource%20Management%20System%20cityedit%20parameter%20is%20injected.pdf; https://vuldb.com/?id.210716; https://github.com/Hanfu-l/POC-Exp/blob/main/The%20Human%20Resource%20Management%20System%20cityedit%20parameter%20is%20injected.pdf
CVE: CVE-2022-3473
Published: 2022-10-13
Description: A vulnerability classified as critical has been found in SourceCodester Human Resource Management System. This affects an unknown part of the file getstatecity.php. The manipulation of the argument ci leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-210717 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-707, CWE-89
References: https://github.com/Hanfu-l/POC-Exp/blob/main/The%20Human%20Resource%20Management%20System%20ci%20parameter%20is%20injected.pdf; https://vuldb.com/?id.210717; https://github.com/Hanfu-l/POC-Exp/blob/main/The%20Human%20Resource%20Management%20System%20ci%20parameter%20is%20injected.pdf
CVE: CVE-2022-2828
Published: 2022-10-13
Description: In affected versions of Octopus Server it is possible to reveal information about teams via the API due to an Insecure Direct Object Reference (IDOR) vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://advisories.octopus.com/post/2022/sa2022-19/; https://advisories.octopus.com/post/2022/sa2022-19/
CVE: CVE-2021-20030
Published: 2022-10-13
Description: SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing application's binaries and configuration files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0021; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0021
CVE: CVE-2022-35080
Published: 2022-10-13
Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_load at /lib/png.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/Cvjark/Poc/blob/main/swftools/png2swf/CVE-2022-35080.md; https://github.com/matthiaskramm/swftools/issues/183; https://github.com/Cvjark/Poc/blob/main/swftools/png2swf/CVE-2022-35080.md
CVE: CVE-2022-35081
Published: 2022-10-13
Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_read_header at /src/png2swf.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/Cvjark/Poc/blob/main/swftools/png2swf/CVE-2022-35081.md; https://github.com/matthiaskramm/swftools/issues/183; https://github.com/Cvjark/Poc/blob/main/swftools/png2swf/CVE-2022-35081.md
CVE: CVE-2022-37208
Published: 2022-10-13
Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/AgainstTheLight/CVE-2022-37208; https://github.com/AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql5.md; https://github.com/AgainstTheLight/CVE-2022-37208
CVE: CVE-2022-24697
Published: 2022-10-13
Description: Kylin's cube designer function has a command injection vulnerability when overwriting system parameters in the configuration overwrites menu. RCE can be implemented by closing the single quotation marks around the parameter value of “-- conf=” to inject any operating system command into the command line parameters. This vulnerability affects Kylin 2 version 2.6.5 and earlier, Kylin 3 version 3.1.2 and earlier, and Kylin 4 version 4.0.1 and earlier.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: http://www.openwall.com/lists/oss-security/2022/12/30/1; https://lists.apache.org/thread/07mnn9c7o314wrhrwjr10w9j5s82voj4; http://www.openwall.com/lists/oss-security/2022/12/30/1
CVE: CVE-2022-38902
Published: 2022-10-13
Description: A Cross-site scripting (XSS) vulnerability in the Blog module - add new topic functionality in Liferay Digital Experience Platform 7.3.10 SP3 allows remote attackers to inject arbitrary JS script or HTML into the name field of newly created topic.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://liferay.com; https://drive.proton.me/urls/D27RQ14NGW#b71d8XrBl2Mu; https://www.offensity.com/en/blog/authenticated-persistent-xss-in-liferay-dxp-cms-cve-2022-38901-and-cve-2022-38902/
CVE: CVE-2022-42889
Published: 2022-10-13
Description: Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation. Starting with version 1.5 and continuing through 1.9, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - "script" - execute expressions using the JVM script execution engine (javax.script) - "dns" - resolve dns records - "url" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Text 1.10.0, which disables the problematic interpolators by default.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://packetstormsecurity.com/files/171003/OX-App-Suite-Cross-Site-Scripting-Server-Side-Request-Forgery.html; http://packetstormsecurity.com/files/176650/Apache-Commons-Text-1.9-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2023/Feb/3
CVE: CVE-2022-41473
Published: 2022-10-13
Description: RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Search function.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/ralap-z/rpcms/issues/1; https://github.com/ralap-z/rpcms/issues/1
CVE: CVE-2022-41474
Published: 2022-10-13
Description: RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily change the password of any account.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/ralap-z/rpcms/issues/3; https://github.com/ralap-z/rpcms/issues/3
CVE: CVE-2022-41475
Published: 2022-10-13
Description: RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add an administrator account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/ralap-z/rpcms/issues/2; https://github.com/ralap-z/rpcms/issues/2
CVE: CVE-2022-41489
Published: 2022-10-13
Description: WAYOS LQ_09 22.03.17V was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to send crafted requests to the server from the affected device. This vulnerability is exploitable due to a lack of authentication in the component Usb_upload.htm.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/wayos/wayos_LQ-09%2022_enterprise-class/3_csrf.md; https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/wayos/wayos_LQ-09%2022_enterprise-class/3_csrf.md