rainbutterfly/cve_corpus huggingface dataset:
CVE-2023-4308 User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'
The User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘user-submitted-content’ parameter in versions up to, and including, 20230809 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: specialk
product: User Submitted Posts – Enable Users to Submit Posts from the Front End
default_status: unaffected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
baseScore: 7.2
baseSeverity: HIGH
Credits: lang: en
value: Ngô Thiên An
lang: en
value: Phan Trong Quan
Published: 2023-08-15T07:32:37.094Z
CVE-2023-4309 
Election Services Co. (ESC) Internet Election Service is vulnerable to SQL injection in multiple pages and parameters. These vulnerabilities allow an unauthenticated, remote attacker to read or modify data for any elections that share the same backend database. ESC deactivated older and unused elections and enabled web application firewall (WAF) protection for current and future elections on or around 2023-08-12.

Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Election Services Co. (ESC)
product: Internet Election Service
default_status: unknown
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Schema
Published: 2023-10-10T17:27:25.515Z
CVE-2023-4310 
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability which can be exploited through a malicious HTTP request. Successful exploitation of this vulnerability can allow an unauthenticated remote attacker to execute underlying operating system commands within the context of the site user. This issue is fixed in version 23.2.3.

Problem types: cwe_id: CWE-77
description: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products: vendor: BeyondTrust
product: Privileged Remote Access (PRA)
default_status: unaffected
vendor: BeyondTrust
product: Remote Support (RS)
default_status: unaffected
Published: 2023-09-05T20:15:57.824Z
CVE-2023-4311 Vrm 360 3D Model Viewer <= 1.2.1 - Contributor+ Arbitrary File Upload Leading to RCE
The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 is vulnerable to arbitrary file upload due to insufficient checks in a plugin shortcode.
Problem types: description: CWE-434 Unrestricted Upload of File with Dangerous Type
Affected products: vendor: Unknown
product: Vrm 360 3D Model Viewer
default_status: affected
Credits: lang: en
value: Jonatas Souza Villa Flor
lang: en
value: WPScan
Published: 2023-12-18T20:07:58.353Z
CVE-2023-4314 wpDataTables < 2.1.66 - Admin+ PHP Object Injection
The wpDataTables WordPress plugin before 2.1.66 does not validate the "Serialized PHP array" input data before deserializing the data. This allows admins to deserialize arbitrary data which may lead to remote code execution if a suitable gadget chain is present on the server. This is impactful in environments where admin users should not be allowed to execute arbitrary code, such as multisite.
Problem types: description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: Unknown
product: wpDataTables
default_status: unaffected
Credits: lang: en
value: Jonatas Souza Villa Flor
lang: en
value: WPScan
Published: 2023-09-11T19:46:06.952Z
CVE-2023-4315 Woo Custom Emails <= 2.2 - Reflected Cross-Site Scripting via wcemails_edit
The Woo Custom Emails for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wcemails_edit' parameter in versions up to, and including, 2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. CVE-2023-45004 appears to be a duplicate of this issue.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: mehulkaklotar
product: Woo Custom Emails
default_status: unaffected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
baseScore: 6.1
baseSeverity: MEDIUM
Credits: lang: en
value: Marco Wotschka
Published: 2023-08-31T05:33:09.002Z
CVE-2023-4316 Zod 3.22.2 - Regular expression Denial of Service
Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails.
Problem types: cwe_id: CWE-1333
description: CWE-1333 Inefficient Regular Expression Complexity
Affected products: vendor: Zod
product: Zod
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2023-09-28T20:34:09.161Z
CVE-2023-4317 Incorrect Authorization in GitLab
An issue has been discovered in GitLab affecting all versions starting from 9.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for a user with the Developer role to update a pipeline schedule from an unprotected branch to a protected branch.
Problem types: cwe_id: CWE-863
description: Incorrect Authorization
Affected products: vendor: GitLab
product: GitLab
cpes: cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
Credits: lang: en
value: Thanks [js_noob](https://hackerone.com/js_noob) for reporting this vulnerability through our HackerOne bug bounty program
Published: 2023-12-01T07:02:03.130Z
CVE-2023-4318 Herd Effects < 5.2.4 - Effect Deletion via CSRF
The Herd Effects WordPress plugin before 5.2.4 does not have CSRF when deleting its items, which could allow attackers to make logged in admins delete arbitrary effects via a CSRF attack
Problem types: description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Unknown
product: Herd Effects
default_status: unaffected
Credits: lang: en
value: Erwan LR (WPScan)
lang: en
value: WPScan
Published: 2023-09-11T19:46:05.630Z
CVE-2023-4320 Satellite: arithmetic overflow in satellite
An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity.
Problem types: cwe_id: CWE-613
description: Insufficient Session Expiration
Affected products: vendor: Red Hat
product: Red Hat Satellite 6.15 for RHEL 8
cpes: cpe:/a:redhat:satellite_utils:6.15::el8
cpe:/a:redhat:satellite_capsule:6.15::el8
cpe:/a:redhat:satellite:6.15::el8
cpe:/a:redhat:satellite_maintenance:6.15::el8
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.15 for RHEL 8
cpes: cpe:/a:redhat:satellite_utils:6.15::el8
cpe:/a:redhat:satellite_capsule:6.15::el8
cpe:/a:redhat:satellite:6.15::el8
cpe:/a:redhat:satellite_maintenance:6.15::el8
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.15 for RHEL 8
cpes: cpe:/a:redhat:satellite_utils:6.15::el8
cpe:/a:redhat:satellite_capsule:6.15::el8
cpe:/a:redhat:satellite:6.15::el8
cpe:/a:redhat:satellite_maintenance:6.15::el8
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
version: 3.1
Published: 2023-12-18T13:43:07.747Z
CVE-2023-4321 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: cockpit-hq
product: cockpit-hq/cockpit
Published: 2023-08-14T10:26:07.663Z
CVE-2023-4322 Heap-based Buffer Overflow in radareorg/radare2
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
Problem types: cwe_id: CWE-122
description: CWE-122 Heap-based Buffer Overflow
Affected products: vendor: radareorg
product: radareorg/radare2
Published: 2023-08-14T15:27:40.797Z
CVE-2023-4323 Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup
Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:21:36.882Z
CVE-2023-4324 Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy  headers
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy  headers
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:38.873Z
CVE-2023-4325 Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities
Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:38.706Z
CVE-2023-4326 Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites
Problem types: cwe_id: CWE-327
description: CWE-327: Use of a Broken or Risky Cryptographic Algorithm
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:38.586Z
CVE-2023-4327 Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux
Problem types: cwe_id: CWE-522
description: CWE-522 Insufficiently Protected Credentials
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:38.370Z
CVE-2023-4328 Broadcom RAID Controller web interface is vulnerable  to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux
Broadcom RAID Controller web interface is vulnerable  to exposure of sensitive data and the keys used for encryption are accessible to any local user on Windows
Problem types: cwe_id: CWE-522
description: CWE-522 Insufficiently Protected Credentials
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:38.246Z
CVE-2023-4329 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:38.060Z
CVE-2023-4331 Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols
Problem types: cwe_id: CWE-327
description: CWE-327: Use of a Broken or Risky Cryptographic Algorithm
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:37.408Z
CVE-2023-4332 Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file
Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file
Problem types: cwe_id: CWE-732
description: CWE-732 Incorrect Permission Assignment for Critical Resource
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:37.323Z
CVE-2023-4333 Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server
Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server
Problem types: cwe_id: CWE-326
description: CWE-326 Inadequate Encryption Strength
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:37.222Z
CVE-2023-4334 Broadcom RAID Controller Web server (nginx) is serving private files without any authentication
Broadcom RAID Controller Web server (nginx) is serving private files without any authentication
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:37.123Z
CVE-2023-4335 Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux
Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:37.042Z
CVE-2023-4336 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:36.778Z
CVE-2023-4337 Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation
Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:36.690Z
CVE-2023-4338 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:36.445Z
CVE-2023-4339 Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions
Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:35.162Z
CVE-2023-4340 Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file
Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:35.073Z
CVE-2023-4341 Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI
Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:34.542Z
CVE-2023-4342 Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security  policy
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security  policy
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:34.363Z
CVE-2023-4343 Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter
Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:34.170Z
CVE-2023-4344 Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection
Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection
Problem types: cwe_id: CWE-331
description: CWE-331: Insufficient Entropy
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T18:25:34.072Z
CVE-2023-4345 Broadcom RAID Controller web interface is vulnerable client-side control bypass
Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user
Affected products: vendor: Broadcom
product: LSI Storage Authority (LSA)
default_status: affected
vendor: Intel
product: RAID Web Console 3 (RWC3)
default_status: unaffected
Credits: lang: en
value: Intel DCG
Published: 2023-08-15T17:46:38.983Z
CVE-2023-4346 

KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the device. The BCU key feature on the devices can be used to create a password for the device, but this password can often not be reset without entering the current password. If the device is configured to interface with a network, an attacker with access to that network could interface with the KNX installation, purge all devices without additional security options enabled, and set a BCU key, locking the device. Even if a device is not connected to a network, an attacker with physical access to the device could also exploit this vulnerability in the same way. 


Problem types: cwe_id: CWE-645
description: CWE-645 Overly Restrictive Account Lockout Mechanism
Affected products: vendor: KNX Association
product: KNX Protocol Connection Authorization Option 1
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: Felix Eberstaller
lang: en
value: Limes Security
Published: 2023-08-29T19:38:55.399Z
CVE-2023-4347 Cross-site Scripting (XSS) - Reflected in librenms/librenms
Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.8.0.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: librenms
product: librenms/librenms
Published: 2023-08-15T00:00:19.923Z
CVE-2023-4349 
Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2023-08-15T17:07:10.188Z
CVE-2023-4350 
Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)
Problem types: description: Inappropriate implementation
Affected products: vendor: Google
product: Chrome
Published: 2023-08-15T17:07:10.449Z
CVE-2023-4351 
Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has elicited a browser shutdown to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2023-08-15T17:07:10.692Z