First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-51418

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

Missing Authorization vulnerability in Joris van Montfort JVM rich text icons.This issue affects JVM rich text icons: from n/a through 1.2.6.

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Joris van Montfort	JVM rich text icons	<= 1.2.6
jorisvm	jvm_gutenberg_rich_text_icons	1.2.6

References

Timeline

Published: Apr 17, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2023

CVE-2023-514199.8Unrestricted Upload of File with Dangerous Type vulnerability in Bertha.Ai BERTHA AI. Your AI co-pilot for WordPress and Chrome.This issue a CVE-2023-51425.3A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER CVE-2023-514208.8Improper Control of Generation of Code ('Code Injection') vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affect CVE-2023-514218.8Unrestricted Upload of File with Dangerous Type vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D CVE-2023-514228.8Deserialization of Untrusted Data vulnerability in Saleswonder Team Webinar Plugin: Create live/evergreen/automated/instant webinars, stream CVE-2023-514239.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saleswonder Team Webinar Plugin: Creat CVE-2023-514249.8Improper Privilege Management vulnerability in Saleswonder Team WebinarIgnition allows Privilege Escalation.This issue affects WebinarIgniti CVE-2023-514259.8Improper Privilege Management vulnerability in Jacques Malgrange Rencontre – Dating Site allows Privilege Escalation.This issue affects Renc CVE-2023-514267.1Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.CVE-2023-514277.1Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.CVE-2023-514287.1Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.CVE-2023-514295.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.

CVE-2023-51418: High severity, CVSS 7.7 | Vulnix