Skip to content
OpenAdvisories

Archive

17 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /17 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low —
    GHSA-f2wx-xjfw-xjv6

    topgrade Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_all

    ### Summary https://github.com/advisories/GHSA-mc8h-8q98-g5hr https://github.com/XAMPPRocky/remove_dir_all/commit/7247a8b6ee59fc99bbb69ca6b3ca4bfd8c809ead `tempfile` v0.4.26 ships with affected `remove_dir_all` v0.5.3 and so blocks my deployment of v12 to ope…

    topgrade crates.io
  • Low 3.5
    CVE-2023-3613

    Guest accounts invited and added to channels by Welcomebot plugin

    Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invited to channels by default.

    Mattermost Mattermost Plugins
  • Low 3.1
    CVE-2023-3590

    Deleted attachments in Boards remain accessible

    Mattermost fails to delete card attachments in Boards, allowing an attacker to access deleted attachments.

    Mattermost Mattermost
  • Low 2.7
    CVE-2023-3587

    Inconsistent state in UI after boards permission change by system admin

    Mattermost fails to properly show information in the UI, allowing a system admin to modify a board state allowing any user with a valid sharing link to join the board with editor access, without the UI showing the updated permissions.

    Mattermost Mattermost
  • Low 3.1
    CVE-2023-3584

    Member can create team with team override scheme

    Mattermost fails to properly check the authorization of POST /api/v4/teams when passing a team override scheme ID in the request, allowing an authenticated attacker with knowledge of a Team Override Scheme ID to create a new team with said team override schem…

    Mattermost Mattermost
  • Low 3.5
    CVE-2023-3577

    Limited blind SSRF to localhost/intranet in interactive dialog implementation

    Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform a limited blind SSRF.

    Mattermost Mattermost
  • Low 3.5
    CVE-2022-4952

    OmniSharp csharp-language-server-protocol JSON Serializer SerializerBase.cs CreateSerializerSettings resource consumption

    A vulnerability has been found in OmniSharp csharp-language-server-protocol up to 0.19.6 and classified as problematic. This vulnerability affects the function CreateSerializerSettings of the file src/JsonRpc/Serialization/SerializerBase.cs of the component J…

    OmniSharp csharp-language-server-protocol