rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-36874 
Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and Serial number.
Problem types: cwe_id: CWE-280
description: CWE-280: Improper Handling of Insufficient Permissions or Privileges
Affected products: vendor: Samsung Mobile
product: Waterplugin
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
version: 3.1
Published: 2022-09-09T14:40:00.000Z
CVE-2022-36875 
Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file without permission.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: Samsung Mobile
product: com.samsung.android.waterplugin
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 6.6
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
version: 3.1
Published: 2022-09-09T14:40:00.000Z
CVE-2022-36876 
Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.
Problem types: cwe_id: CWE-285
description: CWE-285 Improper Authorization
Affected products: vendor: Samsung Mobile
product: Samsung Pass
CVSS v3.1: attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 1.8
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2022-09-09T14:39:58.000Z
CVE-2022-36877 
Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log.
Problem types: cwe_id: CWE-200
description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Samsung Mobile
product: Samsung Members
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 2.8
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
version: 3.1
Published: 2022-09-09T14:39:57.000Z
CVE-2022-36878 
Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log.
Problem types: cwe_id: CWE-200
description: CWE-200:Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Samsung Mobile
product: Find My Mobile
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 3.3
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2022-09-09T14:39:57.000Z
CVE-2022-36879 
An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-27T03:27:41.000Z
CVE-2022-36880 
The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e-mail message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-27T03:32:30.000Z
CVE-2022-36881 
Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enabling man-in-the-middle attacks.
Affected products: vendor: Jenkins project
product: Jenkins Git client Plugin
Published: 2022-07-27T14:20:49.000Z
CVE-2022-36882 
A cross-site request forgery (CSRF) vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit.
Affected products: vendor: Jenkins project
product: Jenkins Git Plugin
Published: 2022-07-27T14:20:59.000Z
CVE-2022-36883 
A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit.
Affected products: vendor: Jenkins project
product: Jenkins Git Plugin
Published: 2022-07-27T14:21:12.000Z
CVE-2022-36884 
The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an attacker-specified Git repository.
Affected products: vendor: Jenkins project
product: Jenkins Git Plugin
Published: 2022-07-27T14:21:25.000Z
CVE-2022-36885 
Jenkins GitHub Plugin 1.34.4 and earlier uses a non-constant time comparison function when checking whether the provided and computed webhook signatures are equal, allowing attackers to use statistical methods to obtain a valid webhook signature.
Affected products: vendor: Jenkins project
product: Jenkins GitHub Plugin
Published: 2022-07-27T14:21:38.000Z
CVE-2022-36886 
A cross-site request forgery (CSRF) vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job.
Affected products: vendor: Jenkins project
product: Jenkins External Monitor Job Type Plugin
Published: 2022-07-27T14:21:51.000Z
CVE-2022-36887 
A cross-site request forgery (CSRF) vulnerability in Jenkins Job Configuration History Plugin 1155.v28a_46a_cc06a_5 and earlier allows attackers to delete entries from job, agent, and system configuration history, or restore older versions of job, agent, and system configurations.
Affected products: vendor: Jenkins project
product: Jenkins Job Configuration History Plugin
Published: 2022-07-27T14:22:04.000Z
CVE-2022-36888 
A missing permission check in Jenkins HashiCorp Vault Plugin 354.vdb_858fd6b_f48 and earlier allows attackers with Overall/Read permission to obtain credentials stored in Vault with attacker-specified path and keys.
Affected products: vendor: Jenkins project
product: Jenkins HashiCorp Vault Plugin
Published: 2022-07-27T14:22:14.000Z
CVE-2022-36889 
Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the application path of the applications when configuring a deployment, allowing attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller file system to the selected service.
Affected products: vendor: Jenkins project
product: Jenkins Deployer Framework Plugin
Published: 2022-07-27T14:22:27.000Z
CVE-2022-36890 
Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the name of files in methods implementing form validation, allowing attackers with Item/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
Affected products: vendor: Jenkins project
product: Jenkins Deployer Framework Plugin
Published: 2022-07-27T14:22:40.000Z
CVE-2022-36891 
A missing permission check in Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier allows attackers with Item/Read permission but without Deploy Now/Deploy permission to read deployment logs.
Affected products: vendor: Jenkins project
product: Jenkins Deployer Framework Plugin
Published: 2022-07-27T14:22:53.000Z
CVE-2022-36892 
Jenkins rhnpush-plugin Plugin 0.5.1 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents.
Affected products: vendor: Jenkins project
product: Jenkins rhnpush-plugin Plugin
Published: 2022-07-27T14:23:09.000Z
CVE-2022-36893 
Jenkins rpmsign-plugin Plugin 0.5.0 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents.
Affected products: vendor: Jenkins project
product: Jenkins rpmsign-plugin Plugin
Published: 2022-07-27T14:23:22.000Z
CVE-2022-36894 
An arbitrary file write vulnerability in Jenkins CLIF Performance Testing Plugin 64.vc0d66de1dfb_f and earlier allows attackers with Overall/Read permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.
Affected products: vendor: Jenkins project
product: Jenkins CLIF Performance Testing Plugin
Published: 2022-07-27T14:23:33.000Z
CVE-2022-36895 
A missing permission check in Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins Compuware Topaz Utilities Plugin
Published: 2022-07-27T14:23:45.000Z
CVE-2022-36896 
A missing permission check in Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin
Published: 2022-07-27T14:23:58.000Z
CVE-2022-36897 
A missing permission check in Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins Compuware Xpediter Code Coverage Plugin
Published: 2022-07-27T14:24:12.000Z
CVE-2022-36898 
A missing permission check in Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins Compuware ISPW Operations Plugin
Published: 2022-07-27T14:24:25.000Z
CVE-2022-36899 
Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties.
Affected products: vendor: Jenkins project
product: Jenkins Compuware ISPW Operations Plugin
Published: 2022-07-27T14:24:38.000Z
CVE-2022-36900 
Jenkins Compuware zAdviser API Plugin 1.0.3 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties.
Affected products: vendor: Jenkins project
product: Jenkins Compuware zAdviser API Plugin
Published: 2022-07-27T14:24:50.000Z
CVE-2022-36901 
Jenkins HTTP Request Plugin 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.
Affected products: vendor: Jenkins project
product: Jenkins HTTP Request Plugin
Published: 2022-07-27T14:25:00.000Z
CVE-2022-36902 
Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape several fields of Moded Extended Choice parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected products: vendor: Jenkins project
product: Jenkins Dynamic Extended Choice Parameter Plugin
Published: 2022-07-27T14:25:15.000Z
CVE-2022-36903 
A missing permission check in Jenkins Repository Connector Plugin 2.2.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins Repository Connector Plugin
Published: 2022-07-27T14:25:27.000Z
CVE-2022-36904 
Jenkins Repository Connector Plugin 2.2.0 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
Affected products: vendor: Jenkins project
product: Jenkins Repository Connector Plugin
Published: 2022-07-27T14:25:41.000Z
CVE-2022-36905 
Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.2 and earlier does not perform URL validation for the Repository Base URL of List maven artifact versions parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected products: vendor: Jenkins project
product: Jenkins Maven Metadata Plugin for Jenkins CI server Plugin
Published: 2022-07-27T14:25:53.000Z
CVE-2022-36906 
A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password.
Affected products: vendor: Jenkins project
product: Jenkins OpenShift Deployer Plugin
Published: 2022-07-27T14:26:07.000Z
CVE-2022-36907 
A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password.
Affected products: vendor: Jenkins project
product: Jenkins OpenShift Deployer Plugin
Published: 2022-07-27T14:26:18.000Z
CVE-2022-36908 
A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system to an attacker-specified URL.
Affected products: vendor: Jenkins project
product: Jenkins OpenShift Deployer Plugin
Published: 2022-07-27T14:26:31.000Z
CVE-2022-36909 
A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system to an attacker-specified URL.
Affected products: vendor: Jenkins project
product: Jenkins OpenShift Deployer Plugin
Published: 2022-07-27T14:26:41.000Z
CVE-2022-36910 
Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to reindex the database and to obtain information about jobs otherwise inaccessible to them.
Affected products: vendor: Jenkins project
product: Jenkins Lucene-Search Plugin
Published: 2022-07-27T14:26:54.000Z
CVE-2022-36911 
A cross-site request forgery (CSRF) vulnerability in Jenkins Openstack Heat Plugin 1.5 and earlier allows attackers to connect to an attacker-specified URL.
Affected products: vendor: Jenkins project
product: Jenkins Openstack Heat Plugin
Published: 2022-07-27T14:27:06.000Z
CVE-2022-36912 
A missing permission check in Jenkins Openstack Heat Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
Affected products: vendor: Jenkins project
product: Jenkins Openstack Heat Plugin
Published: 2022-07-27T14:27:18.000Z
CVE-2022-36913 
Jenkins Openstack Heat Plugin 1.5 and earlier does not perform permission checks in methods implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
Affected products: vendor: Jenkins project
product: Jenkins Openstack Heat Plugin
Published: 2022-07-27T14:27:28.000Z
CVE-2022-36914 
Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
Affected products: vendor: Jenkins project
product: Jenkins Files Found Trigger Plugin
Published: 2022-07-27T14:27:41.000Z
CVE-2022-36915 
Jenkins Android Signing Plugin 2.2.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents.
Affected products: vendor: Jenkins project
product: Jenkins Android Signing Plugin
Published: 2022-07-27T14:27:55.000Z
CVE-2022-36916 
A cross-site request forgery (CSRF) vulnerability in Jenkins Google Cloud Backup Plugin 0.6 and earlier allows attackers to request a manual backup.
Affected products: vendor: Jenkins project
product: Jenkins Google Cloud Backup Plugin
Published: 2022-07-27T14:28:08.000Z
CVE-2022-36917 
A missing permission check in Jenkins Google Cloud Backup Plugin 0.6 and earlier allows attackers with Overall/Read permission to request a manual backup.
Affected products: vendor: Jenkins project
product: Jenkins Google Cloud Backup Plugin
Published: 2022-07-27T14:28:21.000Z
CVE-2022-36918 
Jenkins Buckminster Plugin 1.1.1 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
Affected products: vendor: Jenkins project
product: Jenkins Buckminster Plugin
Published: 2022-07-27T14:28:34.000Z
CVE-2022-36919 
A missing permission check in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins Coverity Plugin
Published: 2022-07-27T14:28:45.000Z
CVE-2022-36920 
A cross-site request forgery (CSRF) vulnerability in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins Coverity Plugin
Published: 2022-07-27T14:29:01.000Z
CVE-2022-36921 
A missing permission check in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins Coverity Plugin
Published: 2022-07-27T14:29:16.000Z
CVE-2022-36922 
Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not escape the search query parameter displayed on the 'search' result page, resulting in a reflected cross-site scripting (XSS) vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins Lucene-Search Plugin
Published: 2022-07-27T14:29:29.000Z
CVE-2022-36923 
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated attackers to obtain a user's API key, and then access external APIs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-10T14:17:09.000Z
CVE-2022-36924 Local Privilege Escalation in Zoom Rooms Installer for Windows
The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user.
Problem types: cwe_id: CWE-427
description: CWE-427: Uncontrolled Search Path Element
Affected products: vendor: Zoom Video Communications Inc
product: Zoom Rooms Installer for Windows
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
Published: 2022-11-17T22:37:00.188Z
CVE-2022-36925 Insecure key generation for Zoom Rooms for macOS Clients
Zoom Rooms for macOS clients before version 5.11.4 contain an insecure key generation mechanism. The encryption key used for IPC between the Zoom Rooms daemon service and the Zoom Rooms client was generated using parameters that could be obtained by a local low-privileged application. That key can then be used to interact with the daemon service to execute privileged functions and cause a local denial of service.
Problem types: cwe_id: CWE-321
description: CWE-321: Use of Hard-coded Cryptographic Key
Affected products: vendor: Zoom Video Communications Inc
product: Zoom Rooms for macOS
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 4.4
baseSeverity: MEDIUM
Published: 2023-01-09T00:00:00.000Z
CVE-2022-36926 Local Privilege Escalation in Zoom Rooms for macOS Clients
Zoom Rooms for macOS clients before version 5.11.3 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.
Problem types: cwe_id: CWE-78
description: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: Zoom Video Communications Inc
product: Zoom Rooms for macOS
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
Published: 2023-01-09T00:00:00.000Z
CVE-2022-36927 Local Privilege Escalation in Zoom Rooms for macOS Clients
Zoom Rooms for macOS clients before version 5.11.3 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.
Problem types: cwe_id: CWE-367
description: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products: vendor: Zoom Video Communications Inc
product: Zoom Rooms for macOS
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
Published: 2023-01-09T00:00:00.000Z