[SECURITY] Fedora 37 Update: mcrouter-0.41.0.20231016-1.fc37

Mcrouter pronounced mc router is a memcached protocol router for scaling memcached deployments. Because the routing and feature logic are abstracted from the client in mcrouter deployments, the client may simply communicate with destination hosts through mcrouter over a TCP connection using...

ROS-20231024-03

The OAuth2 token vulnerability of the cloud-based software for creating and utilizing Nextcloud storage Nextcloud data storage software is related to the storage of OAuth2 tokens in plaintext. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to the server a...

SUSE CVE-2023-45148

Nextcloud is an open source home cloud server. When Memcached is used as memcache.distributed the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier than intended. Users are advised to upgrade to versions 25.0.11, 26.0.6 or 27.1.0. Users unable to upgra...

CVE-2023-45148

Nextcloud is an open source home cloud server. When Memcached is used as memcache.distributed the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier than intended. Users are advised to upgrade to versions 25.0.11, 26.0.6 or 27.1.0. Users unable to upgra...

Code injection

Nextcloud is an open source home cloud server. When Memcached is used as memcache.distributed the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier than intended. Users are advised to upgrade to versions 25.0.11, 26.0.6 or 27.1.0. Users unable to upgra...

CVE-2023-45148 Rate limiter not working reliable when Memcached is installed in Nextcloud

Nextcloud is an open source home cloud server. When Memcached is used as memcache.distributed the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier than intended. Users are advised to upgrade to versions 25.0.11, 26.0.6 or 27.1.0. Users unable to upgra...

CVE-2023-45148 Rate limiter not working reliable when Memcached is installed in Nextcloud

Nextcloud is an open source home cloud server. When Memcached is used as memcache.distributed the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier than intended. Users are advised to upgrade to versions 25.0.11, 26.0.6 or 27.1.0. Users unable to upgra...

CVE-2023-45148

Technical details about CVE-2023-45148 are not publicly available in the provided connected documents. Monitor for updates from Nextcloud advisories to obtain concrete affected versions, impact, and remediation information.

CVE-2023-45148 Rate limiter not working reliable when Memcached is installed in Nextcloud

Nextcloud is an open source home cloud server. When Memcached is used as memcache.distributed the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier than intended. Users are advised to upgrade to versions 25.0.11, 26.0.6 or 27.1.0. Users unable to upgra...

Rate limiter not working reliable when Memcached is installed

None...

PT-2023-6442 · Nextcloud +2 · Nextcloud +2

Name of the Vulnerable Software and Affected Versions: Nextcloud versions prior to 25.0.11 Nextcloud versions prior to 26.0.6 Nextcloud versions prior to 27.1.0 Description: The issue is related to the use of Memcached as memcache.distributed in Nextcloud, which can cause the rate limiting on the...

Use Memcached <= 1.0.5 - Settings Update via CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kaf, k3d, certificate-transparency, kubescape, conftest, kind, nghttp2, sigstore-scaffolding, stakater-reloader, weaviate, flux-helm-controller, pulumi-language-dotnet, frp, bom, gobuster, secrets-store-csi-driver, terraform-provider-azurerm, memcached-exporter, helm...

CVE-2023-41670

Cross-Site Request Forgery CSRF vulnerability in Palasthotel in person: Edward Bock Use Memcached plugin = 1.0.4 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Palasthotel in person: Edward Bock Use Memcached plugin = 1.0.4 versions...

CVE-2023-41670

The CVE-2023-41670 entry describes a Cross-Site Request Forgery (CSRF) vulnerability affecting the Palasthotel Memcached WordPress plugin versions up to 1.0.4. The vulnerability is due to CSRF in the plugin, allowing unauthorized actions within a user account. Connected sources (e.g., PT-2023-280...

CVE-2023-41670 WordPress Use Memcached Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Palasthotel in person: Edward Bock Use Memcached plugin = 1.0.4 versions...

CVE-2023-41670 WordPress Use Memcached Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Palasthotel in person: Edward Bock Use Memcached plugin = 1.0.4 versions...

PT-2023-28041 · Unknown · Palasthotel Memcached Plugin

Name of the Vulnerable Software and Affected Versions: Palasthotel Memcached plugin versions 1.0.4 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Palasthotel Memcached plugin. This allows for unauthorized actions on a user's account without their knowledge or consent...

WordPress Plugin use-memcached Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...