Year Archive: 2023

EUVD Vulnerabilities (2023)

Browse security threats, CVE catalog items, and software security flaws mapped under the EUVD sequence for the year 2023.

EUVD-2023-53114

Actively Exploited

CRITICAL (9.8) CVSS 3.1 Source: mitre

An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no ...

Aliases:

CVE-2023-49105 GHSA-585g-f852-v6p4

Published: 2023-11-21 View Complete Profile →

EUVD-2023-2753

CRITICAL (9.1) CVSS 3.0 Source: GitHub_M

Cachet is an open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtr...

Aliases:

GHSA-hv79-p62r-wg3p CVE-2023-43661

Published: 2023-10-11 View Complete Profile →

EUVD-2023-1342

Actively Exploited

HIGH (7.2) CVSS 3.1 Source: mitre

Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitiv...

Aliases:

GHSA-jjqf-j4w7-92w8 CVE-2023-22894

Published: 2023-04-19 View Complete Profile →