diff --git a/advisories/github-reviewed/2022/05/GHSA-5xmg-w578-gq5j/GHSA-5xmg-w578-gq5j.json b/advisories/github-reviewed/2022/05/GHSA-5xmg-w578-gq5j/GHSA-5xmg-w578-gq5j.json new file mode 100644 index 00000000000..2b37e975ae8 --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-5xmg-w578-gq5j/GHSA-5xmg-w578-gq5j.json @@ -0,0 +1,72 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5xmg-w578-gq5j", + "modified": "2025-04-12T03:38:48Z", + "published": "2022-05-17T03:12:54Z", + "aliases": [ + "CVE-2013-5583" + ], + "summary": "Joomla! Cross-site Scripting vulnerability", + "details": "Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "joomla/joomla-cms" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "3.1.6" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 3.1.5" + } + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5583" + }, + { + "type": "WEB", + "url": "https://github.com/joomla/joomla-cms/commit/c00c033d33d901e1ca6be9061a44e55acd041b1f" + }, + { + "type": "PACKAGE", + "url": "https://github.com/joomla/joomla-cms" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20130810034709/http://disse.cting.org/2013/08/05/joomla-core-3_1_5_reflected-xss-vulnerability" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20130810103125/http://www.securityfocus.com/bid/61600" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "LOW", + "github_reviewed": true, + "github_reviewed_at": "2025-04-12T03:38:48Z", + "nvd_published_at": "2013-12-29T04:25:00Z" + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2022/05/GHSA-6p8h-36qp-8h72/GHSA-6p8h-36qp-8h72.json b/advisories/github-reviewed/2022/05/GHSA-6p8h-36qp-8h72/GHSA-6p8h-36qp-8h72.json new file mode 100644 index 00000000000..5b36cc3e8d9 --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-6p8h-36qp-8h72/GHSA-6p8h-36qp-8h72.json @@ -0,0 +1,73 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6p8h-36qp-8h72", + "modified": "2025-04-12T03:37:21Z", + "published": "2022-05-17T01:32:13Z", + "aliases": [ + "CVE-2013-5323" + ], + "summary": "Static Info Tables (static_info_tables) extension TYPO3 vulnerable to Cross-site Scripting", + "details": "Cross-site scripting (XSS) vulnerability in the Static Info Tables (static_info_tables) extension before 2.3.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "sjbr/static-info-tables" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.3.1" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5323" + }, + { + "type": "WEB", + "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82212" + }, + { + "type": "PACKAGE", + "url": "https://github.com/TYPO3-extensions/static_info_tables" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20130425011655/http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-004" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20200229090743/http://www.securityfocus.com/bid/58056" + }, + { + "type": "WEB", + "url": "http://typo3.org/extensions/repository/view/static_info_tables" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "LOW", + "github_reviewed": true, + "github_reviewed_at": "2025-04-12T03:37:21Z", + "nvd_published_at": "2013-08-20T18:14:00Z" + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2022/05/GHSA-r3rw-h5v8-ff6h/GHSA-r3rw-h5v8-ff6h.json b/advisories/github-reviewed/2022/05/GHSA-r3rw-h5v8-ff6h/GHSA-r3rw-h5v8-ff6h.json new file mode 100644 index 00000000000..b528e03e4b4 --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-r3rw-h5v8-ff6h/GHSA-r3rw-h5v8-ff6h.json @@ -0,0 +1,73 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r3rw-h5v8-ff6h", + "modified": "2025-04-12T03:37:03Z", + "published": "2022-05-17T01:32:14Z", + "aliases": [ + "CVE-2013-5322" + ], + "summary": "CoolURI extension for TYPO3 vulnerable to SQL Injection", + "details": "SQL injection vulnerability in the CoolURI extension before 1.0.30 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "bednee/cooluri" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.0.30" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5322" + }, + { + "type": "WEB", + "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82213" + }, + { + "type": "PACKAGE", + "url": "https://github.com/bednee/cooluri" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20131204041535/http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-003" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20131211015313/http://www.securityfocus.com/bid/58055" + }, + { + "type": "WEB", + "url": "http://typo3.org/extensions/repository/view/cooluri" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2025-04-12T03:37:03Z", + "nvd_published_at": "2013-08-20T18:14:00Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-5xmg-w578-gq5j/GHSA-5xmg-w578-gq5j.json b/advisories/unreviewed/2022/05/GHSA-5xmg-w578-gq5j/GHSA-5xmg-w578-gq5j.json deleted file mode 100644 index 08ec0c7e543..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-5xmg-w578-gq5j/GHSA-5xmg-w578-gq5j.json +++ /dev/null @@ -1,35 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-5xmg-w578-gq5j", - "modified": "2025-04-11T04:17:29Z", - "published": "2022-05-17T03:12:54Z", - "aliases": [ - "CVE-2013-5583" - ], - "details": "Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.", - "severity": [], - "affected": [], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5583" - }, - { - "type": "WEB", - "url": "http://disse.cting.org/2013/08/05/joomla-core-3_1_5_reflected-xss-vulnerability" - }, - { - "type": "WEB", - "url": "http://www.securityfocus.com/bid/61600" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-79" - ], - "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2013-12-29T04:25:00Z" - } -} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-6p8h-36qp-8h72/GHSA-6p8h-36qp-8h72.json b/advisories/unreviewed/2022/05/GHSA-6p8h-36qp-8h72/GHSA-6p8h-36qp-8h72.json deleted file mode 100644 index bcac590a44a..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-6p8h-36qp-8h72/GHSA-6p8h-36qp-8h72.json +++ /dev/null @@ -1,51 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-6p8h-36qp-8h72", - "modified": "2025-04-11T04:12:59Z", - "published": "2022-05-17T01:32:13Z", - "aliases": [ - "CVE-2013-5323" - ], - "details": "Cross-site scripting (XSS) vulnerability in the Static Info Tables (static_info_tables) extension before 2.3.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [], - "affected": [], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5323" - }, - { - "type": "WEB", - "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82212" - }, - { - "type": "WEB", - "url": "http://osvdb.org/90414" - }, - { - "type": "WEB", - "url": "http://secunia.com/advisories/52283" - }, - { - "type": "WEB", - "url": "http://typo3.org/extensions/repository/view/static_info_tables" - }, - { - "type": "WEB", - "url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-004" - }, - { - "type": "WEB", - "url": "http://www.securityfocus.com/bid/58056" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-79" - ], - "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2013-08-20T18:14:00Z" - } -} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-r3rw-h5v8-ff6h/GHSA-r3rw-h5v8-ff6h.json b/advisories/unreviewed/2022/05/GHSA-r3rw-h5v8-ff6h/GHSA-r3rw-h5v8-ff6h.json deleted file mode 100644 index 7d9a845a321..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-r3rw-h5v8-ff6h/GHSA-r3rw-h5v8-ff6h.json +++ /dev/null @@ -1,51 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-r3rw-h5v8-ff6h", - "modified": "2025-04-11T04:12:58Z", - "published": "2022-05-17T01:32:14Z", - "aliases": [ - "CVE-2013-5322" - ], - "details": "SQL injection vulnerability in the CoolURI extension before 1.0.30 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [], - "affected": [], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5322" - }, - { - "type": "WEB", - "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82213" - }, - { - "type": "WEB", - "url": "http://osvdb.org/90415" - }, - { - "type": "WEB", - "url": "http://secunia.com/advisories/52282" - }, - { - "type": "WEB", - "url": "http://typo3.org/extensions/repository/view/cooluri" - }, - { - "type": "WEB", - "url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-003" - }, - { - "type": "WEB", - "url": "http://www.securityfocus.com/bid/58055" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-89" - ], - "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2013-08-20T18:14:00Z" - } -} \ No newline at end of file