# CVEs published 2023-12-22

79 CVEs were published on December 22, 2023: 4 critical, 19 high. Days are UTC.

- [CVE-2023-51386](https://cve.now/CVE-2023-51386.md): Sandbox Accounts for Events vulnerable to privilege escalation to read running events data (CVSS 7.8, awslabs sandbox-accounts-for-events)
- [CVE-2023-51651](https://cve.now/CVE-2023-51651.md): Potential URI resolution path traversal in the AWS SDK for PHP (CVSS 6.0, aws-sdk-php · github.com/beam-cloud/beta9 +1)
- [CVE-2023-51451](https://cve.now/CVE-2023-51451.md): SSRF in symbolicator via invalid protocol (CVSS 4.3, getsentry symbolicator)
- [CVE-2023-50928](https://cve.now/CVE-2023-50928.md): sandbox-accounts-for-events security misconfiguration leads to budget exceed (CVSS 7.1, awslabs sandbox-accounts-for-events)
- [CVE-2023-51449](https://cve.now/CVE-2023-51449.md): Make the \`/file\` secure against file traversal attacks (CVSS 5.6, gradio-app gradio · gradio)
- [CVE-2023-51650](https://cve.now/CVE-2023-51650.md): Unauthorized access vulnerability on three interfaces (CVSS 7.5, dromara hertzbeat)
- [CVE-2023-51387](https://cve.now/CVE-2023-51387.md): Expression Injection Vulnerability in Hertzbeat (CVSS 7.2, dromara hertzbeat)
- [CVE-2023-50731](https://cve.now/CVE-2023-50731.md): MindsDB has arbitrary file write in file.py (CVSS 9.1, mindsdb)
- [CVE-2023-50924](https://cve.now/CVE-2023-50924.md): Stored XSS in Overview and Output fields (CVSS 7.3, engelsystem)
- [CVE-2023-50730](https://cve.now/CVE-2023-50730.md): Grackle has StackOverflowError in GraphQL query processing (CVSS 7.5, typelevel grackle · org.typelevel:grackle-core\_2.13 +11)
- [CVE-2023-50727](https://cve.now/CVE-2023-50727.md): Resque vulnerable to reflected XSS in Queue Endpoint (CVSS 6.3, resque)
- [CVE-2023-50725](https://cve.now/CVE-2023-50725.md): Resque vulnerable to reflected XSS in resque-web failed and queues lists (CVSS 6.3, resque)
- [CVE-2023-50712](https://cve.now/CVE-2023-50712.md): Improper Neutralization of Alternate XSS Syntax in iris-web (CVSS 4.6, dfir-iris iris-web)
- [CVE-2023-50714](https://cve.now/CVE-2023-50714.md): The Oauth2 PKCE implementation is vulnerable (CVSS 6.8, yiisoft yii2-authclient · yiisoft/yii2-authclient)
- [CVE-2023-50708](https://cve.now/CVE-2023-50708.md): yii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementation (CVSS 6.1, yiisoft yii2-authclient · yiisoft/yii2-authclient)
- [CVE-2023-43088](https://cve.now/CVE-2023-43088.md): Dell Client BIOS contains a pre-boot direct memory access (DMA) vulnerability. (CVSS 7.2, Dell CPG BIOS)
- [CVE-2023-39251](https://cve.now/CVE-2023-39251.md): Dell BIOS contains an Improper Input Validation vulnerability. (CVSS 6.7, Dell CPG BIOS)
- [CVE-2023-50259](https://cve.now/CVE-2023-50259.md): Blind SSRF in /home/testslack endpoint (CVSS 5.3, pymedusa Medusa)
- [CVE-2023-50258](https://cve.now/CVE-2023-50258.md): Blind SSRF in \`/home/testdiscord\` endpoint (CVSS 5.3, pymedusa Medusa)
- [CVE-2023-50254](https://cve.now/CVE-2023-50254.md): Deepin Reader RCE vulnerability due to a design flaw (CVSS 9.3, linuxdeepin developer-center)
- [CVE-2023-51649](https://cve.now/CVE-2023-51649.md): Nautobot missing object-level permissions enforcement when running Job Buttons (CVSS 3.5, nautobot)
- [CVE-2023-51448](https://cve.now/CVE-2023-51448.md): SQL Injection vulnerability when managing SNMP Notification Receivers (CVSS 8.8, cacti)
- [CVE-2023-50250](https://cve.now/CVE-2023-50250.md): Cross-Site Scripting vulnerability when Import xml template file (CVSS 5.4, cacti)
- [CVE-2023-49792](https://cve.now/CVE-2023-49792.md): Bruteforce protection can be bypassed with misconfigured proxy (CVSS 5.3, nextcloud security-advisories)
- [CVE-2023-51662](https://cve.now/CVE-2023-51662.md): Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL) (CVSS 6.0, snowflakedb snowflake-connector-net · Snowflake.Data)
- [CVE-2023-49791](https://cve.now/CVE-2023-49791.md): Workflows do not require password confirmation on API level (CVSS 5.4, nextcloud security-advisories)
- [CVE-2023-49790](https://cve.now/CVE-2023-49790.md): App PIN code can be bypassed in Nextcloud Files iOS (CVSS 4.3, nextcloud security-advisories)
- [CVE-2023-49088](https://cve.now/CVE-2023-49088.md): Cacti has incomplete fix for CVE-2023-39515 (CVSS 6.1, cacti)
- [CVE-2023-49085](https://cve.now/CVE-2023-49085.md): Cacti SQL Injection vulnerability (CVSS 8.8, cacti)
- [CVE-2023-42017](https://cve.now/CVE-2023-42017.md): IBM Planning Analytics file upload (CVSS 8.0, IBM Planning Analytics)
- [CVE-2023-48670](https://cve.now/CVE-2023-48670.md): Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. (CVSS 7.3, Dell SupportAssist Client Consumer)
- [CVE-2023-45165](https://cve.now/CVE-2023-45165.md): IBM AIX denial of service (CVSS 6.2, IBM AIX)
- [CVE-2023-48704](https://cve.now/CVE-2023-48704.md): Unauthenticated heap buffer overflow in Gorrila codec decompression (CVSS 7.0, ClickHouse)
- [CVE-2022-39337](https://cve.now/CVE-2022-39337.md): Permission bypass due to incorrect configuration in github.com/dromara/hertzbeat (CVSS 7.5, dromara hertzbeat)
- [CVE-2023-51661](https://cve.now/CVE-2023-51661.md): Filesystem sandbox not enforced in wasmer-cli (CVSS 8.4, wasmerio wasmer · wasmer-cli)
- [CVE-2023-7076](https://cve.now/CVE-2023-7076.md): slawkens MyAAC bugtracker.php cross site scripting (CVSS 3.5, slawkens MyAAC)
- [CVE-2023-7075](https://cve.now/CVE-2023-7075.md): code-projects Point of Sales and Inventory Management System checkout.php cross site scripting (CVSS 3.5, code-projects Point of Sales and Inventory Management System)
- [CVE-2023-7059](https://cve.now/CVE-2023-7059.md): SourceCodester School Visitor Log e-Book log-book.php cross site scripting (CVSS 3.5, SourceCodester School Visitor Log e-Book)
- [CVE-2023-7058](https://cve.now/CVE-2023-7058.md): SourceCodester Simple Student Attendance System path traversal (CVSS 6.3, SourceCodester Simple Student Attendance System)
- [CVE-2023-7057](https://cve.now/CVE-2023-7057.md): code-projects Faculty Management System yearlevel.php cross site scripting (CVSS 3.5, code-projects Faculty Management System)
- [CVE-2023-7056](https://cve.now/CVE-2023-7056.md): code-projects Faculty Management System subjects.php cross site scripting (CVSS 2.4, code-projects Faculty Management System)
- [CVE-2023-7055](https://cve.now/CVE-2023-7055.md): PHPGurukul Online Notes Sharing System Contact Information profile.php access control (CVSS 4.3, PHPGurukul Online Notes Sharing System)
- [CVE-2023-7054](https://cve.now/CVE-2023-7054.md): PHPGurukul Online Notes Sharing System add-notes.php unrestricted upload (CVSS 5.5, PHPGurukul Online Notes Sharing System)
- [CVE-2023-7053](https://cve.now/CVE-2023-7053.md): PHPGurukul Online Notes Sharing System signup.php weak password (CVSS 3.1, PHPGurukul Online Notes Sharing System)
- [CVE-2023-7052](https://cve.now/CVE-2023-7052.md): PHPGurukul Online Notes Sharing System profile.php cross-site request forgery (CVSS 4.3, PHPGurukul Online Notes Sharing System)
- [CVE-2022-47532](https://cve.now/CVE-2022-47532.md): FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users&section=cpanel&page=list request. (no CVSS)
- [CVE-2023-24609](https://cve.now/CVE-2023-24609.md): Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shared Key extension par (no CVSS)
- [CVE-2023-42465](https://cve.now/CVE-2023-42465.md): Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is (no CVSS)
- [CVE-2023-43116](https://cve.now/CVE-2023-43116.md): A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user t (no CVSS, github.com/buildkite/elastic-ci-stack-for-aws/v6)
- [CVE-2023-43741](https://cve.now/CVE-2023-43741.md): A time-of-check-time-of-use race condition vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the build (no CVSS, github.com/buildkite/elastic-ci-stack-for-aws/v6 · githu… +1)
- [CVE-2023-45957](https://cve.now/CVE-2023-45957.md): A stored cross-site scripting (XSS) vulnerability in the component admin/AdminRequestSqlController.php of thirty bees before 1.5.0 allows at (no CVSS)
- [CVE-2023-49356](https://cve.now/CVE-2023-49356.md): A stack buffer overflow vulnerability in MP3Gain v1.6.2 allows an attacker to cause a denial of service via the WriteMP3GainAPETag function (CVSS 7.5)
- [CVE-2023-49391](https://cve.now/CVE-2023-49391.md): An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on A (CVSS 7.5, github.com/free5gc/amf)
- [CVE-2023-50147](https://cve.now/CVE-2023-50147.md): There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlink A3700R router devi (no CVSS)
- [CVE-2023-51011](https://cve.now/CVE-2023-51011.md): TOTOlink EX1800T v9.1.0cu.2112\_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanPriDns parameter’ of the setLan (no CVSS)
- [CVE-2023-51012](https://cve.now/CVE-2023-51012.md): TOTOlink EX1800T v9.1.0cu.2112\_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanGateway parameter’ of the setLa (no CVSS)
- [CVE-2023-51013](https://cve.now/CVE-2023-51013.md): TOTOlink EX1800T v9.1.0cu.2112\_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanNetmask parameter’ of the setLa (no CVSS)
- [CVE-2023-51014](https://cve.now/CVE-2023-51014.md): TOTOLINK EX1800T V9.1.0cu.2112\_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanSecDns parameter’ of the setLan (CVSS 8.8)
- [CVE-2023-51015](https://cve.now/CVE-2023-51015.md): TOTOLINX EX1800T v9.1.0cu.2112\_B20220316 is vulnerable to arbitrary command execution in the ‘enable parameter’ of the setDmzCfg interface o (no CVSS)
- [CVE-2023-51016](https://cve.now/CVE-2023-51016.md): TOTOlink EX1800T v9.1.0cu.2112\_B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootScheCfg interface of the (no CVSS)
- [CVE-2023-51017](https://cve.now/CVE-2023-51017.md): TOTOlink EX1800T v9.1.0cu.2112\_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConf (no CVSS)
- [CVE-2023-51018](https://cve.now/CVE-2023-51018.md): TOTOlink EX1800T v9.1.0cu.2112\_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘opmode’ parameter of the setWiFiA (CVSS 9.8)
- [CVE-2023-51019](https://cve.now/CVE-2023-51019.md): TOTOlink EX1800T v9.1.0cu.2112\_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘key5g’ parameter of the setWiFiEx (no CVSS)
- [CVE-2023-51020](https://cve.now/CVE-2023-51020.md): TOTOlink EX1800T v9.1.0cu.2112\_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langType’ parameter of the setLan (no CVSS)
- [CVE-2023-51021](https://cve.now/CVE-2023-51021.md): TOTOlink EX1800T v9.1.0cu.2112\_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘merge’ parameter of the setRptWiz (no CVSS)
- [CVE-2023-51022](https://cve.now/CVE-2023-51022.md): TOTOlink EX1800T v9.1.0cu.2112\_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langFlag’ parameter of the setLan (no CVSS)
- [CVE-2023-51023](https://cve.now/CVE-2023-51023.md): TOTOlink EX1800T v9.1.0cu.2112\_B20220316 is vulnerable to arbitrary command execution in the ‘host\_time’ parameter of the NTPSyncWithHost in (no CVSS)
- [CVE-2023-51024](https://cve.now/CVE-2023-51024.md): TOTOlink EX1800T v9.1.0cu.2112\_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg in (no CVSS)
- [CVE-2023-51025](https://cve.now/CVE-2023-51025.md): TOTOlink EX1800T V9.1.0cu.2112\_B20220316 is vulnerable to an unauthorized arbitrary command execution in the ‘admuser’ parameter of the setP (CVSS 8.8)
- [CVE-2023-51026](https://cve.now/CVE-2023-51026.md): TOTOlink EX1800T V9.1.0cu.2112\_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ parameter of the setRebootS (no CVSS)
- [CVE-2023-51027](https://cve.now/CVE-2023-51027.md): TOTOlink EX1800T V9.1.0cu.2112\_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode’ parameter of the s (no CVSS)
- [CVE-2023-51028](https://cve.now/CVE-2023-51028.md): TOTOLINK EX1800T 9.1.0cu.2112\_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the setWi (no CVSS)
- [CVE-2023-51033](https://cve.now/CVE-2023-51033.md): TOTOlink EX1200L V9.3.5u.6146\_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface. (no CVSS)
- [CVE-2023-51034](https://cve.now/CVE-2023-51034.md): TOTOlink EX1200L V9.3.5u.6146\_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface. (CVSS 8.8)
- [CVE-2023-51035](https://cve.now/CVE-2023-51035.md): TOTOLINK EX1200L V9.3.5u.6146\_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface. (no CVSS)
- [CVE-2023-51704](https://cve.now/CVE-2023-51704.md): An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. (no CVSS)
- [CVE-2023-51707](https://cve.now/CVE-2023-51707.md): MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets. (CVSS 9.8)
- [CVE-2023-51708](https://cve.now/CVE-2023-51708.md): Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view config (no CVSS)
- [CVE-2023-51713](https://cve.now/CVE-2023-51713.md): make\_ftp\_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backsla (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-12-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.