generated content from 2023-11-19

oasis-open · Nov 19, 2023 · 2ec14fd · 2ec14fd
1 parent 19d25b6
commit 2ec14fd
Show file tree

Hide file tree

Showing 42 changed files with 943 additions and 0 deletions.
diff --git a/mapping.csv b/mapping.csv
@@ -218015,3 +218015,44 @@ vulnerability,CVE-2023-26347,vulnerability--8b0b7289-ae0a-4f42-97f7-d83650b7f9ab
 vulnerability,CVE-2023-5444,vulnerability--38d7dabc-2bd0-472c-924c-6262ab5ee30e
 vulnerability,CVE-2023-5445,vulnerability--d01c2f2d-c714-4368-8fc3-fee2320b5807
 vulnerability,CVE-2023-43177,vulnerability--9b66ff36-2a22-4754-8aa7-9e16412782a8
+vulnerability,CVE-2023-38361,vulnerability--11f144c6-fdcc-4918-9d41-303344f1a9b2
+vulnerability,CVE-2023-40810,vulnerability--2fc34047-f222-4b07-b0f1-0bc4b9de0304
+vulnerability,CVE-2023-40813,vulnerability--416ea751-6900-47ca-808a-4c11655ef15f
+vulnerability,CVE-2023-40809,vulnerability--ccd58899-e270-4ba4-a63a-c50d5ee233c4
+vulnerability,CVE-2023-40363,vulnerability--611c069a-5713-4ca4-9ec5-cde7ce3ebd31
+vulnerability,CVE-2023-40812,vulnerability--051c01c6-4b7f-4d7e-b9ee-58d17819da28
+vulnerability,CVE-2023-40817,vulnerability--7d84afcb-4e43-4f8f-a3a8-d732f7069511
+vulnerability,CVE-2023-40815,vulnerability--90093707-21d6-49d6-a1ef-19e35561b065
+vulnerability,CVE-2023-40816,vulnerability--5be5729c-7bac-4c9e-8d8e-1de8776454aa
+vulnerability,CVE-2023-40814,vulnerability--fa978795-b242-4c72-a202-399bbf237cef
+vulnerability,CVE-2023-25985,vulnerability--f729a319-2f77-46c0-b17b-bbccbf2624b6
+vulnerability,CVE-2023-32504,vulnerability--57be23cf-8fe2-4c7c-ba31-4ac5c070df6e
+vulnerability,CVE-2023-32514,vulnerability--6e329812-c7de-4d34-bdb2-b08dad8d1bca
+vulnerability,CVE-2023-32245,vulnerability--50a6c390-ac9c-41dc-8aa3-91dd996a7f80
+vulnerability,CVE-2023-47664,vulnerability--76dcd607-cfc8-49ca-9267-56e00c24664d
+vulnerability,CVE-2023-47519,vulnerability--86f2f7c3-8612-4a82-b696-ec3f5faf4111
+vulnerability,CVE-2023-47651,vulnerability--66123673-9aad-4894-b4b1-2d98ead3535a
+vulnerability,CVE-2023-47672,vulnerability--86937f7c-252c-453f-b1dc-85dfba549789
+vulnerability,CVE-2023-47666,vulnerability--b1420a17-95d5-4fb9-a1d4-84f77ffe4b01
+vulnerability,CVE-2023-47553,vulnerability--64fa88d2-bed4-48df-a8d1-0b30ccba774c
+vulnerability,CVE-2023-47685,vulnerability--7fc7346f-989a-413b-934b-8c748b6d7719
+vulnerability,CVE-2023-47243,vulnerability--9183f61c-1bb0-491e-a83a-55b939a15bca
+vulnerability,CVE-2023-47649,vulnerability--f0498db5-5058-443d-b737-cc0b3cb62009
+vulnerability,CVE-2023-47531,vulnerability--96feb95c-9b8c-4498-8458-4e34505b31d8
+vulnerability,CVE-2023-47655,vulnerability--17420717-40f3-4a7f-aaef-a87b70c5faa8
+vulnerability,CVE-2023-47671,vulnerability--468266a9-68d6-47d6-9e09-0032e1ece0be
+vulnerability,CVE-2023-47551,vulnerability--a172e8cd-0e36-409e-9c50-87d169587ca6
+vulnerability,CVE-2023-47670,vulnerability--c8b7d35b-bb20-44fe-8fda-a6fdf01c84e8
+vulnerability,CVE-2023-47644,vulnerability--a5bca446-4df5-4bf9-984a-f3a6ed551b4a
+vulnerability,CVE-2023-47667,vulnerability--b15a8b5c-5d74-40c7-b386-de916bf338ab
+vulnerability,CVE-2023-47552,vulnerability--138ef6e2-3d63-4894-b54e-31cc895b8121
+vulnerability,CVE-2023-47556,vulnerability--ebce1038-ef34-49ae-9d1d-77d790c68d56
+vulnerability,CVE-2023-47650,vulnerability--b3c3049b-91d9-4f22-8c70-647da715ee55
+vulnerability,CVE-2023-31075,vulnerability--e0d57b41-6e5b-48ad-9af7-70307170df59
+vulnerability,CVE-2023-31089,vulnerability--d96e52c5-84ad-4d84-a867-823a2f3f6505
+vulnerability,CVE-2023-4214,vulnerability--520b5c35-e1ba-4bcb-b050-aecea9f4fcbb
+vulnerability,CVE-2023-48736,vulnerability--f46a88c9-8d23-44ee-95c3-1d1717abda83
+vulnerability,CVE-2023-48017,vulnerability--5b912146-10cb-4747-8823-070159600766
+vulnerability,CVE-2023-6187,vulnerability--92e1369f-48d7-4e3b-8bad-fc63dd4b636d
+vulnerability,CVE-2023-41129,vulnerability--eddac17b-fa14-4f99-a3f6-0c6ed62b839d
+vulnerability,CVE-2023-28780,vulnerability--0d5d75c5-441e-47a4-89df-9fa6ecc0d5c1
diff --git a/objects/vulnerability/vulnerability--051c01c6-4b7f-4d7e-b9ee-58d17819da28.json b/objects/vulnerability/vulnerability--051c01c6-4b7f-4d7e-b9ee-58d17819da28.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--3d555c98-7435-4316-80e0-ec7fe966e7e8",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--051c01c6-4b7f-4d7e-b9ee-58d17819da28",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-11-19T00:18:01.497939Z",
+            "modified": "2023-11-19T00:18:01.497939Z",
+            "name": "CVE-2023-40812",
+            "description": "OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-40812"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--0d5d75c5-441e-47a4-89df-9fa6ecc0d5c1.json b/objects/vulnerability/vulnerability--0d5d75c5-441e-47a4-89df-9fa6ecc0d5c1.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--730cd46e-e300-4840-8752-a35de62456f3",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0d5d75c5-441e-47a4-89df-9fa6ecc0d5c1",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-11-19T00:18:03.14258Z",
+            "modified": "2023-11-19T00:18:03.14258Z",
+            "name": "CVE-2023-28780",
+            "description": "Cross-Site Request Forgery (CSRF) vulnerability in Yoast Yoast Local Premium.This issue affects Yoast Local Premium: from n/a through 14.8.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-28780"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--11f144c6-fdcc-4918-9d41-303344f1a9b2.json b/objects/vulnerability/vulnerability--11f144c6-fdcc-4918-9d41-303344f1a9b2.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--2540f840-b455-4b1a-a7af-522b64f1b527",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--11f144c6-fdcc-4918-9d41-303344f1a9b2",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-11-19T00:18:01.324922Z",
+            "modified": "2023-11-19T00:18:01.324922Z",
+            "name": "CVE-2023-38361",
+            "description": "IBM CICS TX Advanced 10.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.  IBM X-Force ID:  260770.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-38361"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--138ef6e2-3d63-4894-b54e-31cc895b8121.json b/objects/vulnerability/vulnerability--138ef6e2-3d63-4894-b54e-31cc895b8121.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--d899bbf1-4fb7-43fb-9e36-5aba71df6b05",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--138ef6e2-3d63-4894-b54e-31cc895b8121",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-11-19T00:18:01.731235Z",
+            "modified": "2023-11-19T00:18:01.731235Z",
+            "name": "CVE-2023-47552",
+            "description": "Cross-Site Request Forgery (CSRF) vulnerability in Labib Ahmed Image Hover Effects – WordPress Plugin.This issue affects Image Hover Effects – WordPress Plugin: from n/a through 5.5.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-47552"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--17420717-40f3-4a7f-aaef-a87b70c5faa8.json b/objects/vulnerability/vulnerability--17420717-40f3-4a7f-aaef-a87b70c5faa8.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--d7d40f77-da94-46fd-803d-2f7a3e72c237",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--17420717-40f3-4a7f-aaef-a87b70c5faa8",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-11-19T00:18:01.719168Z",
+            "modified": "2023-11-19T00:18:01.719168Z",
+            "name": "CVE-2023-47655",
+            "description": "Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi ANAC XML Bandi di Gara.This issue affects ANAC XML Bandi di Gara: from n/a through 7.5.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-47655"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--2fc34047-f222-4b07-b0f1-0bc4b9de0304.json b/objects/vulnerability/vulnerability--2fc34047-f222-4b07-b0f1-0bc4b9de0304.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--f7f7d657-1470-4ac2-b3fc-42bdfe8bb303",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--2fc34047-f222-4b07-b0f1-0bc4b9de0304",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-11-19T00:18:01.454535Z",
+            "modified": "2023-11-19T00:18:01.454535Z",
+            "name": "CVE-2023-40810",
+            "description": "OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-40810"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--416ea751-6900-47ca-808a-4c11655ef15f.json b/objects/vulnerability/vulnerability--416ea751-6900-47ca-808a-4c11655ef15f.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--c19087f8-cc4b-4342-b8a2-285a4e60a4b2",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--416ea751-6900-47ca-808a-4c11655ef15f",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-11-19T00:18:01.459099Z",
+            "modified": "2023-11-19T00:18:01.459099Z",
+            "name": "CVE-2023-40813",
+            "description": "OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-40813"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--468266a9-68d6-47d6-9e09-0032e1ece0be.json b/objects/vulnerability/vulnerability--468266a9-68d6-47d6-9e09-0032e1ece0be.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--b464c1c0-370c-4094-8896-d9f6d80d3a5a",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--468266a9-68d6-47d6-9e09-0032e1ece0be",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-11-19T00:18:01.720469Z",
+            "modified": "2023-11-19T00:18:01.720469Z",
+            "name": "CVE-2023-47671",
+            "description": "Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy Vertical scroll recent.This issue affects Vertical scroll recent post: from n/a through 14.0.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-47671"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--50a6c390-ac9c-41dc-8aa3-91dd996a7f80.json b/objects/vulnerability/vulnerability--50a6c390-ac9c-41dc-8aa3-91dd996a7f80.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--99dc077b-455d-4ac1-827f-7f582279c967",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--50a6c390-ac9c-41dc-8aa3-91dd996a7f80",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-11-19T00:18:01.668673Z",
+            "modified": "2023-11-19T00:18:01.668673Z",
+            "name": "CVE-2023-32245",
+            "description": "Cross-Site Request Forgery (CSRF) vulnerability in WPDeveloper Essential Addons for Elementor Pro.This issue affects Essential Addons for Elementor Pro: from n/a through 5.4.8.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-32245"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--520b5c35-e1ba-4bcb-b050-aecea9f4fcbb.json b/objects/vulnerability/vulnerability--520b5c35-e1ba-4bcb-b050-aecea9f4fcbb.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--7464cf07-afef-42d1-a2c3-6ae7e96828b6",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--520b5c35-e1ba-4bcb-b050-aecea9f4fcbb",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-11-19T00:18:01.938029Z",
+            "modified": "2023-11-19T00:18:01.938029Z",
+            "name": "CVE-2023-4214",
+            "description": "The AppPresser plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 4.2.5. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-4214"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--57be23cf-8fe2-4c7c-ba31-4ac5c070df6e.json b/objects/vulnerability/vulnerability--57be23cf-8fe2-4c7c-ba31-4ac5c070df6e.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--eab91ccf-bd05-4a36-a550-fe5369ecff3b",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--57be23cf-8fe2-4c7c-ba31-4ac5c070df6e",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-11-19T00:18:01.624459Z",
+            "modified": "2023-11-19T00:18:01.624459Z",
+            "name": "CVE-2023-32504",
+            "description": "Cross-Site Request Forgery (CSRF) vulnerability in Kainex Wise Chat.This issue affects Wise Chat: from n/a through 3.1.3.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-32504"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--5b912146-10cb-4747-8823-070159600766.json b/objects/vulnerability/vulnerability--5b912146-10cb-4747-8823-070159600766.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--3cf3b177-5738-4459-9b78-644dc213be76",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--5b912146-10cb-4747-8823-070159600766",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-11-19T00:18:02.037049Z",
+            "modified": "2023-11-19T00:18:02.037049Z",
+            "name": "CVE-2023-48017",
+            "description": "Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Management.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-48017"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--5be5729c-7bac-4c9e-8d8e-1de8776454aa.json b/objects/vulnerability/vulnerability--5be5729c-7bac-4c9e-8d8e-1de8776454aa.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--43ae54dd-5b3a-4119-9125-b237438da85e",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--5be5729c-7bac-4c9e-8d8e-1de8776454aa",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-11-19T00:18:01.503922Z",
+            "modified": "2023-11-19T00:18:01.503922Z",
+            "name": "CVE-2023-40816",
+            "description": "OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-40816"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--611c069a-5713-4ca4-9ec5-cde7ce3ebd31.json b/objects/vulnerability/vulnerability--611c069a-5713-4ca4-9ec5-cde7ce3ebd31.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--46e355b3-3715-4d99-8948-0b8f0e6c0675",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--611c069a-5713-4ca4-9ec5-cde7ce3ebd31",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-11-19T00:18:01.496241Z",
+            "modified": "2023-11-19T00:18:01.496241Z",
+            "name": "CVE-2023-40363",
+            "description": "IBM InfoSphere Information Server 11.7 could allow an authenticated user to change installation files due to incorrect file permission settings.  IBM X-Force ID:  263332.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-40363"
+                }
+            ]
+        }
+    ]
+}