netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-35rg-466w-77h3
GHSA-89rq-27xp-vgv7
GHSA-qfhw-fv3g-v836
This commit is contained in:
advisory-database[bot]
2024-10-18 21:52:41 +00:00
parent bb9d2b0934
commit 06fcade034
3 changed files with 44 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2021/06/GHSA-35rg-466w-77h3/GHSA-35rg-466w-77h3.json
+13 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-35rg-466w-77h3",
"modified": "2021-05-27T21:54:47Z",
"modified": "2024-10-18T21:50:41Z",
"published": "2021-06-18T18:44:50Z",
"aliases": [
"CVE-2021-33507"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
}
],
"affected": [
@@ -78,6 +82,14 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33507"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-35rg-466w-77h3"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-79.yaml"
},
{
"type": "WEB",
"url": "https://plone.org/security/hotfix/20210518/reflected-xss-in-various-spots"
advisories/github-reviewed/2022/05/GHSA-89rq-27xp-vgv7/GHSA-89rq-27xp-vgv7.json
+13 -5
View File
@@ -1,24 +1,28 @@
{
"schema_version": "1.4.0",
"id": "GHSA-89rq-27xp-vgv7",
"modified": "2023-08-29T18:25:00Z",
"modified": "2024-10-18T21:52:16Z",
"published": "2022-05-17T04:49:45Z",
"aliases": [
"CVE-2013-4190"
],
"summary": "Plone Multiple cross-site scripting (XSS) vulnerabilities",
"summary": "Plone vulnerable to cross-site scripting",
"details": "Multiple cross-site scripting (XSS) vulnerabilities in (1) spamProtect.py, (2) pts.py, and (3) request.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "plone"
"name": "Plone"
},
"ranges": [
{
@@ -40,7 +44,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "plone"
"name": "Plone"
},
"ranges": [
{
@@ -59,7 +63,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "plone"
"name": "Plone"
},
"ranges": [
{
@@ -89,6 +93,10 @@
"type": "PACKAGE",
"url": "https://github.com/plone/Plone"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-54.yaml"
},
{
"type": "WEB",
"url": "http://plone.org/products/plone-hotfix/releases/20130618"
advisories/github-reviewed/2022/05/GHSA-qfhw-fv3g-v836/GHSA-qfhw-fv3g-v836.json
+18 -3
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qfhw-fv3g-v836",
"modified": "2024-04-22T22:51:04Z",
"modified": "2024-10-18T21:51:25Z",
"published": "2022-05-24T19:06:41Z",
"aliases": [
"CVE-2021-35959"
@@ -9,13 +9,20 @@
"summary": "Plone has stored XSS in folder contents",
"details": "In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a folder with a SCRIPT tag in the description field.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "plone"
"name": "Plone"
},
"ranges": [
{
@@ -37,6 +44,14 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-35959"
},
{
"type": "PACKAGE",
"url": "https://github.com/plone/Plone"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-110.yaml"
},
{
"type": "WEB",
"url": "https://plone.org/security/hotfix/20210518/stored-xss-in-folder-contents"