Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In versions of FreeBSD 13-RELEASE before 13-RELEASE-p5, under certain circumstances the cap_net libcasper(3) service incorrectly validates that updated constraints are strictly subsets of the active constraints. When only a list of resolvable domain names was specified without setting any other limitations, an application could submit a new list of domains including include entries not previously listed. This could permit the application to resolve domain names that were previously restricted.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
🎯 Demo real: - Scan contra WordPress + Gravity Forms 2.10.5 - Detección de CVE-2023-5978 (Critical) - Hallazgos confirmados en NASA VDP: https://nasa.gov, https://usgeo.gov, https://globe.gov 💡 ¿Por qué HTScanner?
Post summary
The tweet reports a scanner’s detection of CVE-2023-5978 on WordPress/Gravity Forms, noting potential findings at NASA sites, but offers no exploit details, patches, or signs of active exploitation.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | freebsd | freebsd | - | - | - |
| OS | freebsd | freebsd | 13.2 | - | - |
| OS | freebsd | freebsd | 13.2 | - | - |
| OS | freebsd | freebsd | 13.2 | - | - |
| OS | freebsd | freebsd | 13.2 | - | - |
| OS | freebsd | freebsd | 13.2 | - | - |