{"vulnerability": "cve-2021-2317", "sightings": [{"uuid": "6874b904-22d6-4407-b7aa-7cd3d98ac6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23173", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12088", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-23173\n\ud83d\udd25 CVSS Score: 2.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The affected product is vulnerable to an improper access control, which may allow an authenticated user to gain unauthorized access to sensitive data.\n\ud83d\udccf Published: 2022-01-07T22:39:52.978Z\n\ud83d\udccf Modified: 2025-04-16T16:48:14.120Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/uscert/ics/advisories/icsma-22-006-01", "creation_timestamp": "2025-04-16T16:55:57.000000Z"}, {"uuid": "b9c7aed3-0d50-4069-b54a-6e99894753a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23177", "type": "seen", "source": "https://t.me/cibsecurity/48588", "content": "\u203c CVE-2021-23177 \u203c\n\nAn improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to change the ACL of a file on the system and gain more privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-23T20:21:36.000000Z"}, {"uuid": "bb813a64-930e-45c0-aaa9-50163f6b9165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23174", "type": "seen", "source": "https://t.me/cibsecurity/36510", "content": "\u203c CVE-2021-23174 \u203c\n\nAuthenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerability discovered in Download Monitor WordPress plugin (versions <= 4.4.6) Vulnerable parameters: &post_title, &downloadable_file_version[0].\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-28T22:28:13.000000Z"}, {"uuid": "d9588010-c770-4664-b092-96dbc477c1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23175", "type": "seen", "source": "https://t.me/cibsecurity/34569", "content": "\u203c CVE-2021-23175 \u203c\n\nNVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply individual user access controls for users on the same device, which, with user intervention, may lead to escalation of privileges, information disclosure, data tampering, and denial of service, affecting other resources beyond the intended security authority of GameStream.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-23T18:19:21.000000Z"}]}