Backdoor Masquerading as Legitimate Plugin

As part of our product lineup, we offer security monitoring and malware removal services to our Wordfence Care and Response customers. In the event of a security incident, our incident response team will investigate the root cause, find and remove malware from your site, and help with other...

Mattermost Incorrect Authorization vulnerability

Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots...

GHSA-RP65-JPC7-8H8P Mattermost Incorrect Authorization vulnerability

Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots...

CVE-2023-5159

Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots...

Design/Logic Flaw

Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots...

CVE-2023-5159 A User Manager role with user edit permissions could manage/update bots

Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots...

CVE-2023-5159 A User Manager role with user edit permissions could manage/update bots

Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots...

CVE-2023-5159

Mattermost (CVE-2023-5159) describes an improper permissions check when managing or updating a bot, allowing a User Manager with user-edit rights to manage/update bots. Affected component: bot permission verification logic; root cause: insufficient permission verification. Impact stated: privileg...

CVE-2023-5159 A User Manager role with user edit permissions could manage/update bots

Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots...

CVE-2023-5159

Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots...

CVE-2023-5159: Incorrect Authorization

Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots...

allennlp (>=0.8.0, <=0.8.2), dastro-bot (>=1.1.4, <=1.1.5) +3 more potentially affected by CVE-2023-41419 via gevent (1.3.6)

gevent PYPI version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on gevent and may be impacted: - allennlp =0.8.0, =1.1.4, =0.8.1, =0.7.0, =0.5.2, =1.0.1 Source cves: CVE-2023-41419 Source advisory: OSV:GHSA-X7M3-JPRG-WC5G...

allennlp (>=0.8.0, <=0.8.2), dastro-bot (>=1.1.4, <=1.1.5) +3 more potentially affected by CVE-2023-41419 via gevent (1.3.6)

gevent PYPI version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on gevent and may be impacted: - allennlp =0.8.0, =1.1.4, =0.8.1, =0.7.0, =0.5.2, =1.0.1 Source cves: CVE-2023-41419 Source advisory: OSV:PYSEC-2023-177...

Malware in bot-asuna-temp

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-8229 Malicious code in bot-asuna-temp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 096dc7ed406d4e0afeeb0e58c2d2aa55ab9d832c7ae8b91194e6f82243ca90eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-bot-asuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a11398483bdb1e63dc33177aba0b472a6fba5ea548f7e7bea526beb89f23551 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bot-asuna-temp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 096dc7ed406d4e0afeeb0e58c2d2aa55ab9d832c7ae8b91194e6f82243ca90eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in fca-bot-asuna

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-8233 Malicious code in fca-bot-asuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a11398483bdb1e63dc33177aba0b472a6fba5ea548f7e7bea526beb89f23551 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/integrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f1d37dda5bbd9abe0b6406a408e4cc6d849f90c1602e3455ce8de0b9fc50fa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...