NVD disclosure day

Published threat advisories for April 19, 2023

CVE-2023-22894

Strapi User Detail Discovery Vulnerability

Halo Surface Signal: 3 out of 5 — possibly public-facing.

Strapi instances are vulnerable to user data discovery through the admin panel's query filter, potentially exposing sensitive details like password hashes. This requires administrative access to the affected system.

NVD modified: NVD date unavailable • CISA KEV

CVE advisoryKnown Exploit

CVE-2023-2136

Google Chrome Sandbox Escape Vulnerability.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

An integer overflow in Google Chrome's Skia component may allow an attacker to escape the browser sandbox. Affected organizations face risks including potential unauthorized access to data and system compromise. This vulnerability requires an attacker to have already compromised the renderer process.

NVD modified: NVD date unavailable • CISA KEV