From 88a3da2e989feff63d9d156f10df435f6c003fa3 Mon Sep 17 00:00:00 2001 From: CVE Team Date: Mon, 25 Sep 2023 14:00:35 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2023/43xxx/CVE-2023-43256.json | 61 ++++++++++++++++++++++++++++++---- 2023/4xxx/CVE-2023-4916.json | 13 +++++--- 2023/5xxx/CVE-2023-5161.json | 18 ++++++++++ 2023/5xxx/CVE-2023-5162.json | 18 ++++++++++ 2023/5xxx/CVE-2023-5163.json | 18 ++++++++++ 2023/5xxx/CVE-2023-5164.json | 18 ++++++++++ 6 files changed, 136 insertions(+), 10 deletions(-) create mode 100644 2023/5xxx/CVE-2023-5161.json create mode 100644 2023/5xxx/CVE-2023-5162.json create mode 100644 2023/5xxx/CVE-2023-5163.json create mode 100644 2023/5xxx/CVE-2023-5164.json diff --git a/2023/43xxx/CVE-2023-43256.json b/2023/43xxx/CVE-2023-43256.json index 677174bc988..b519ccef84e 100644 --- a/2023/43xxx/CVE-2023-43256.json +++ b/2023/43xxx/CVE-2023-43256.json @@ -1,17 +1,66 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2023-43256", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2023-43256", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract sensitive files in the host machine by exploiting a non-sanitized user input." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://github.com/GladysAssistant/Gladys/commit/f27d0ea4689c3deca5739b5f9ed45a2ddbf00b7b", + "refsource": "MISC", + "name": "https://github.com/GladysAssistant/Gladys/commit/f27d0ea4689c3deca5739b5f9ed45a2ddbf00b7b" + }, + { + "url": "https://blog.moku.fr/cves/CVE-unassigned/", + "refsource": "MISC", + "name": "https://blog.moku.fr/cves/CVE-unassigned/" } ] } diff --git a/2023/4xxx/CVE-2023-4916.json b/2023/4xxx/CVE-2023-4916.json index 03d938f32ed..528f53c4798 100644 --- a/2023/4xxx/CVE-2023-4916.json +++ b/2023/4xxx/CVE-2023-4916.json @@ -11,7 +11,7 @@ "description_data": [ { "lang": "eng", - "value": "The Login with phone number plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.8. This is due to missing nonce validation on the 'lwp_update_password_action' function. This makes it possible for unauthenticated attackers to change user password via a forged request granted they can trick a site administrator into performing an action such as clicking on a link." + "value": "The Login with phone number plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.6. This is due to missing nonce validation on the 'lwp_update_password_action' function. This makes it possible for unauthenticated attackers to change user password via a forged request granted they can trick a site administrator into performing an action such as clicking on a link." } ] }, @@ -41,7 +41,7 @@ { "version_affected": "<=", "version_name": "*", - "version_value": "1.4.8" + "version_value": "1.5.6" } ] } @@ -60,9 +60,14 @@ "name": "https://www.wordfence.com/threat-intel/vulnerabilities/id/71083db7-377b-47a1-ac8b-83d8974a2654?source=cve" }, { - "url": "https://plugins.trac.wordpress.org/browser/login-with-phone-number/trunk/login-with-phonenumber.php#L2953", + "url": "https://plugins.trac.wordpress.org/browser/login-with-phone-number/trunk/login-with-phonenumber.php?rev=2965324#L2942", "refsource": "MISC", - "name": "https://plugins.trac.wordpress.org/browser/login-with-phone-number/trunk/login-with-phonenumber.php#L2953" + "name": "https://plugins.trac.wordpress.org/browser/login-with-phone-number/trunk/login-with-phonenumber.php?rev=2965324#L2942" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/login-with-phone-number/trunk/login-with-phonenumber.php?rev=2967707#L2948", + "refsource": "MISC", + "name": "https://plugins.trac.wordpress.org/browser/login-with-phone-number/trunk/login-with-phonenumber.php?rev=2967707#L2948" } ] }, diff --git a/2023/5xxx/CVE-2023-5161.json b/2023/5xxx/CVE-2023-5161.json new file mode 100644 index 00000000000..52f4d8f6b80 --- /dev/null +++ b/2023/5xxx/CVE-2023-5161.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2023-5161", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2023/5xxx/CVE-2023-5162.json b/2023/5xxx/CVE-2023-5162.json new file mode 100644 index 00000000000..929ef749ee1 --- /dev/null +++ b/2023/5xxx/CVE-2023-5162.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2023-5162", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2023/5xxx/CVE-2023-5163.json b/2023/5xxx/CVE-2023-5163.json new file mode 100644 index 00000000000..435df36c980 --- /dev/null +++ b/2023/5xxx/CVE-2023-5163.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2023-5163", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2023/5xxx/CVE-2023-5164.json b/2023/5xxx/CVE-2023-5164.json new file mode 100644 index 00000000000..35873a0f493 --- /dev/null +++ b/2023/5xxx/CVE-2023-5164.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2023-5164", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file