{"vulnerability": "cve-2023-2391", "sightings": [{"uuid": "b26f5af8-5901-4c77-a2dd-f5a14698b3c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2023-23913", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113795675409849063", "content": "", "creation_timestamp": "2025-01-09T00:56:47.923461Z"}, {"uuid": "4db73715-aafb-44d5-a08c-9ac418d959b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23913", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbivkaqlq2e", "content": "", "creation_timestamp": "2025-01-09T01:15:35.449093Z"}, {"uuid": "73b5bf11-c72c-4dc4-a6a1-9a596d4968b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23913", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbk6pfcgf2k", "content": "", "creation_timestamp": "2025-01-09T01:38:37.224651Z"}, {"uuid": "f35881a6-41e2-46fb-96bb-5899b1aaf021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23913", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/864", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-23913\n\ud83d\udd39 Description: There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method, data-remote or data-disable-with attribute.\n\ud83d\udccf Published: 2025-01-09T00:33:47.769Z\n\ud83d\udccf Modified: 2025-01-09T00:33:47.769Z\n\ud83d\udd17 References:\n1. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033263\n2. https://discuss.rubyonrails.org/t/cve-2023-23913-dom-based-cross-site-scripting-in-rails-ujs-for-contenteditable-html-elements/82468\n3. https://github.com/rails/rails/commit/5037a13614d71727af8a175063bcf6ba1a74bdbd\n4. https://security.netapp.com/advisory/ntap-20240605-0007/\n5. https://www.debian.org/security/2023/dsa-5389", "creation_timestamp": "2025-01-09T01:13:47.000000Z"}, {"uuid": "94b09bfd-a48c-42b6-8366-c0ec2151fa58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23912", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8521", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-23912\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code execution vulnerability.\n\ud83d\udccf Published: 2023-02-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T19:02:10.197Z\n\ud83d\udd17 References:\n1. https://community.ui.com/releases/Security-Advisory-Bulletin-028-028/696e4e3b-718c-4da4-9a21-965a85633b5f", "creation_timestamp": "2025-03-24T19:23:34.000000Z"}, {"uuid": "6d9cc1cb-3759-4007-935e-21274d64129e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23913", "type": "seen", "source": "https://t.me/cvedetector/14756", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-23913 - Rails-ujs Clipboard API DOM XSS\", \n  \"Content\": \"CVE ID : CVE-2023-23913 \nPublished : Jan. 9, 2025, 1:15 a.m. | 21\u00a0minutes ago \nDescription : There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method, data-remote or data-disable-with attribute. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T02:41:57.000000Z"}, {"uuid": "390895bb-3928-4138-97e1-d771929cd9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23913", "type": "seen", "source": "https://t.me/ctinow/135573", "content": "https://ift.tt/a3hDr8E\nInternet Bug Bounty: [CVE-2023-23913] DOM Based Cross-site Scripting in rails-ujs for contenteditable HTML Elements", "creation_timestamp": "2023-09-08T01:57:51.000000Z"}, {"uuid": "b8ce3fd5-d506-4d52-95d9-de0d8f82a152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23915", "type": "seen", "source": "https://t.me/ctinow/95567", "content": "Internet Bug Bounty: CVE-2023-23915: HSTS amnesia with --parallel\n\nhttps://ift.tt/tcBDm0U", "creation_timestamp": "2023-02-24T22:26:10.000000Z"}, {"uuid": "56cd4e93-65e5-4d23-8f18-e5f626570c16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23914", "type": "seen", "source": "https://t.me/ctinow/95566", "content": "Internet Bug Bounty: CVE-2023-23914: HSTS ignored on multiple requests\n\nhttps://ift.tt/HfdrR46", "creation_timestamp": "2023-02-24T22:26:08.000000Z"}, {"uuid": "e750cc65-bb65-493e-a102-f248c4e829a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-2391", "type": "seen", "source": "https://t.me/cibsecurity/63111", "content": "\u203c CVE-2023-2391 \u203c\n\nA vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=time_zone.htm of the component Web Management Interface. The manipulation of the argument ntp.server2 leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227669 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-29T00:27:54.000000Z"}, {"uuid": "af033be1-cb06-4540-96d6-220f83f391d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23911", "type": "seen", "source": "https://t.me/cibsecurity/59855", "content": "\u203c CVE-2023-23911 \u203c\n\nAn improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-11T00:27:33.000000Z"}, {"uuid": "cdf7835f-9fce-48a1-905a-eb95c341e571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23919", "type": "seen", "source": "https://t.me/cibsecurity/58812", "content": "\u203c CVE-2023-23919 \u203c\n\nA cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread. This in turn could be used to cause a denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T22:18:35.000000Z"}, {"uuid": "70577d8d-f28f-4670-905a-ad8ab0cbc5bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23918", "type": "seen", "source": "https://t.me/cibsecurity/58811", "content": "\u203c CVE-2023-23918 \u203c\n\nA privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3 that made it possible to bypass the experimental Permissions (https://nodejs.org/api/permissions.html) feature in Node.js and access non authorized modules by using process.mainModule.require(). This only affects users who had enabled the experimental permissions option with --experimental-policy.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T22:18:34.000000Z"}, {"uuid": "1cf9beb0-19bd-4d3c-bcf1-01b4573201dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23916", "type": "seen", "source": "https://t.me/cibsecurity/58818", "content": "\u203c CVE-2023-23916 \u203c\n\nAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a \"malloc bomb\", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T22:18:41.000000Z"}, {"uuid": "cde24c54-2655-4372-bbd8-82a42d793e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23917", "type": "seen", "source": "https://t.me/cibsecurity/58816", "content": "\u203c CVE-2023-23917 \u203c\n\nA prototype pollution vulnerability exists in Rocket.Chat server <5.2.0 that could allow an attacker to a RCE under the admin account. Any user can create their own server in your cloud and become an admin so this vulnerability could affect the cloud infrastructure. This attack vector also may increase the impact of XSS to RCE which is dangerous for self-hosted users as well.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T22:18:39.000000Z"}, {"uuid": "93726e60-957e-4529-a718-dd4016193658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23915", "type": "seen", "source": "https://t.me/cibsecurity/58815", "content": "\u203c CVE-2023-23915 \u203c\n\nA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T22:18:38.000000Z"}, {"uuid": "45adf140-8ed1-49a9-997a-56733c626a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23914", "type": "seen", "source": "https://t.me/cibsecurity/58806", "content": "\u203c CVE-2023-23914 \u203c\n\nA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T22:18:28.000000Z"}, {"uuid": "1c895309-57f1-4d51-9f1a-ca7e0e8fa47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23912", "type": "seen", "source": "https://t.me/cibsecurity/57866", "content": "\u203c CVE-2023-23912 \u203c\n\nA vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code execution vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T22:26:20.000000Z"}, {"uuid": "4f24c85d-c8dd-4319-90c6-c4cf90ff1a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-23914", "type": "seen", "source": "https://gist.github.com/yogiraj07/33fab9d752cfdb05988f9b38072d6c46", "content": "", "creation_timestamp": "2026-06-09T21:42:07.000000Z"}, {"uuid": "0fb8513c-d7ee-46bf-a431-c51b88c8e7e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-23914", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqocdj3uno2y", "content": "", "creation_timestamp": "2026-07-15T08:26:03.464277Z"}]}