NVD disclosure day

Published threat advisories for January 2, 2024

CVE-2023-47458

SpringBlade Privilege Escalation via Missing Permissions Control

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

SpringBlade, a framework for building web applications and services, has a vulnerability that allows remote attackers to escalate privileges due to missing permission controls. This could lead to unauthorized access and modification of data or systems. It is important to determine if this technology is in use to manage

NVD modified: NVD date unavailable

CVE advisoryCRITICAL

CVE-2023-6436

Website template allows attackers to steal data or take control of services

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical flaw in Ekol Informatics Website Template lets attackers steal or alter your data by sending malicious code, potentially exposing sensitive information.

NVD modified: NVD date unavailable