netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-2xcj-557c-hf8r
GHSA-4wrm-qmq2-5fjx
GHSA-6mjg-37cp-42x5
GHSA-6x4h-9622-fqr6
GHSA-75mc-3pjc-727q
GHSA-m8rw-rcpq-2vp2
GHSA-w3vp-jw9m-f9pm
This commit is contained in:
advisory-database[bot]
2023-12-13 13:37:10 +00:00
parent 383ef970e9
commit 07a99c8cc6
7 changed files with 422 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/12/GHSA-2xcj-557c-hf8r/GHSA-2xcj-557c-hf8r.json → advisories/github-reviewed/2023/12/GHSA-2xcj-557c-hf8r/GHSA-2xcj-557c-hf8r.json
+31 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2xcj-557c-hf8r",
"modified": "2023-12-13T00:30:35Z",
"modified": "2023-12-13T13:36:33Z",
"published": "2023-12-08T21:30:30Z",
"aliases": [
"CVE-2023-46495"
],
"summary": "Cross-site Scripting in evershop",
"details": "Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the sortBy parameter.",
"severity": [
{
@@ -14,13 +15,35 @@
}
],
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "@evershop/evershop"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.0-rc.8"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46495"
},
{
"type": "WEB",
"url": "https://github.com/evershopcommerce/evershop/pull/338"
},
{
"type": "WEB",
"url": "https://devhub.checkmarx.com/cve-details/CVE-2023-46495/"
@@ -28,6 +51,10 @@
{
"type": "WEB",
"url": "https://devhub.checkmarx.com/cve-details/Cxbc6d4599-c1bd/"
},
{
"type": "PACKAGE",
"url": "https://github.com/evershopcommerce/evershop"
}
],
"database_specific": {
@@ -35,8 +62,8 @@
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2023-12-13T13:36:33Z",
"nvd_published_at": "2023-12-08T20:15:07Z"
}
}
advisories/unreviewed/2023/12/GHSA-4wrm-qmq2-5fjx/GHSA-4wrm-qmq2-5fjx.json → advisories/github-reviewed/2023/12/GHSA-4wrm-qmq2-5fjx/GHSA-4wrm-qmq2-5fjx.json
+31 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4wrm-qmq2-5fjx",
"modified": "2023-12-13T00:30:35Z",
"modified": "2023-12-13T13:36:13Z",
"published": "2023-12-08T21:30:30Z",
"aliases": [
"CVE-2023-46493"
],
"summary": "Directory Traversal in evershop",
"details": "Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the readDirSync function in fileBrowser/browser.js.",
"severity": [
{
@@ -14,13 +15,35 @@
}
],
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "@evershop/evershop"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.0-rc.8"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46493"
},
{
"type": "WEB",
"url": "https://github.com/evershopcommerce/evershop/pull/338"
},
{
"type": "WEB",
"url": "https://devhub.checkmarx.com/cve-details/CVE-2023-46493/"
@@ -28,6 +51,10 @@
{
"type": "WEB",
"url": "https://devhub.checkmarx.com/cve-details/Cxa4d94170-be41/"
},
{
"type": "PACKAGE",
"url": "https://github.com/evershopcommerce/evershop"
}
],
"database_specific": {
@@ -35,8 +62,8 @@
"CWE-22"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2023-12-13T13:36:13Z",
"nvd_published_at": "2023-12-08T20:15:07Z"
}
}
advisories/github-reviewed/2023/12/GHSA-6mjg-37cp-42x5/GHSA-6mjg-37cp-42x5.json
+61
View File
@@ -0,0 +1,61 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6mjg-37cp-42x5",
"modified": "2023-12-13T13:34:36Z",
"published": "2023-12-13T13:34:36Z",
"aliases": [
],
"summary": "Improper Privilege Management in sap-xssec",
"details": "### Impact\n\nSAP BTP Security Services Integration Library ([Python] sap-xssec) allows under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.\n\n### Patches\nUpgrade to patched version >= 4.1.0\nWe always recommend to upgrade to the latest released version.\n\n### Workarounds\nNo workarounds\n\n### References\nhttps://www.cve.org/CVERecord?id=CVE-2023-50423\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "sap-xssec"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.1.0"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/SAP/cloud-pysec/security/advisories/GHSA-6mjg-37cp-42x5"
},
{
"type": "WEB",
"url": "https://github.com/SAP/cloud-pysec/commit/d90c9e0733fa9af68bd8ea0b1cf023cf482163ef"
},
{
"type": "PACKAGE",
"url": "https://github.com/SAP/cloud-pysec"
}
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2023-12-13T13:34:36Z",
"nvd_published_at": null
}
}
advisories/github-reviewed/2023/12/GHSA-6x4h-9622-fqr6/GHSA-6x4h-9622-fqr6.json
+65
View File
@@ -0,0 +1,65 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6x4h-9622-fqr6",
"modified": "2023-12-13T13:35:16Z",
"published": "2023-12-13T13:35:16Z",
"aliases": [
],
"summary": "Improper validation in meraki",
"details": "aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.\n\nmeraki from version 1.40.1 requires aiohttp 3.9.0",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "meraki"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.40.1"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/meraki/dashboard-api-python/security/advisories/GHSA-6x4h-9622-fqr6"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49081"
},
{
"type": "PACKAGE",
"url": "https://github.com/meraki/dashboard-api-python"
},
{
"type": "WEB",
"url": "https://github.com/meraki/dashboard-api-python/releases/tag/1.40.1"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2023-12-13T13:35:16Z",
"nvd_published_at": null
}
}
advisories/github-reviewed/2023/12/GHSA-75mc-3pjc-727q/GHSA-75mc-3pjc-727q.json
+104
View File
@@ -0,0 +1,104 @@
{
"schema_version": "1.4.0",
"id": "GHSA-75mc-3pjc-727q",
"modified": "2023-12-13T13:35:48Z",
"published": "2023-12-13T13:35:48Z",
"aliases": [
"CVE-2023-50263"
],
"summary": "Unauthenticated db-file-storage views",
"details": "### Impact\n\n In Nautobot 1.x and 2.0.x, the URLs `/files/get/?name=...` and `/files/download/?name=...` are used to provide admin access to files that have been uploaded as part of a run request for a Job that has FileVar inputs. Under normal operation these files are ephemeral and are deleted once the Job in question runs. \n\nIt was reported by @kircheneer that in the default implementation used in Nautobot, as provided by `django-db-file-storage`, these URLs do not by default require any user authentication to access; they should instead be restricted to only users who have permissions to view Nautobot's `FileProxy` model instances.\n\nNote that no URL mechanism is provided for listing or traversal of the available file `name` values, so in practice an unauthenticated user would have to guess names to discover arbitrary files for download, but if a user knows the file name/path value, they can access it without authenticating, so we are considering this a vulnerability.\n\n### Patches\n\nFixes will be included in Nautobot 1.6.7 and Nautobot 2.0.6.\n\n### Workarounds\n\nNo workaround other than applying the patches included in https://github.com/nautobot/nautobot/pull/4959/files (2.0.x) or https://github.com/nautobot/nautobot/pull/4964/files (1.6.x)\n\n### References\n\n- https://github.com/victor-o-silva/db_file_storage/blob/master/db_file_storage/views.py",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "nautobot"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "1.1.0"
},
{
"fixed": "1.6.7"
}
]
}
]
},
{
"package": {
"ecosystem": "PyPI",
"name": "nautobot"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2.0.0"
},
{
"fixed": "2.0.6"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/nautobot/nautobot/security/advisories/GHSA-75mc-3pjc-727q"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50263"
},
{
"type": "WEB",
"url": "https://github.com/nautobot/nautobot/pull/4959"
},
{
"type": "WEB",
"url": "https://github.com/nautobot/nautobot/pull/4964"
},
{
"type": "WEB",
"url": "https://github.com/nautobot/nautobot/commit/458280c359a4833a20da294eaf4b8d55edc91cee"
},
{
"type": "WEB",
"url": "https://github.com/nautobot/nautobot/commit/5e2ba9e8ac0840b1c44eb1a8ea3c0bd2c68e4f80"
},
{
"type": "WEB",
"url": "https://github.com/nautobot/nautobot/commit/7c4cf3137f45f1541f09f2f6a7f8850cd3a2eaee"
},
{
"type": "PACKAGE",
"url": "https://github.com/nautobot/nautobot"
},
{
"type": "WEB",
"url": "https://github.com/victor-o-silva/db_file_storage/blob/master/db_file_storage/views.py"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "LOW",
"github_reviewed": true,
"github_reviewed_at": "2023-12-13T13:35:48Z",
"nvd_published_at": "2023-12-12T23:15:07Z"
}
}
advisories/github-reviewed/2023/12/GHSA-m8rw-rcpq-2vp2/GHSA-m8rw-rcpq-2vp2.json
+61
View File
@@ -0,0 +1,61 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m8rw-rcpq-2vp2",
"modified": "2023-12-13T13:34:20Z",
"published": "2023-12-13T13:34:20Z",
"aliases": [
],
"summary": "Improper Privilege Management in github.com/sap/cloud-security-client-go",
"details": "### Impact\nSAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go) allows under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.\n\n### Patches\nUpgrade to patched version >= 0.17.0\nWe always recommend to upgrade to the latest released version.\n\n### Workarounds\nNo workarounds\n\n### References\nhttps://www.cve.org/CVERecord?id=CVE-2023-50424",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "Go",
"name": "github.com/sap/cloud-security-client-go"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.17.0"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/SAP/cloud-security-client-go/security/advisories/GHSA-m8rw-rcpq-2vp2"
},
{
"type": "WEB",
"url": "https://github.com/SAP/cloud-security-client-go/commit/2e3bd63e152e09f267316a1071034eb5d4b7f498"
},
{
"type": "PACKAGE",
"url": "https://github.com/SAP/cloud-security-client-go"
}
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2023-12-13T13:34:20Z",
"nvd_published_at": null
}
}
advisories/github-reviewed/2023/12/GHSA-w3vp-jw9m-f9pm/GHSA-w3vp-jw9m-f9pm.json
+69
View File
@@ -0,0 +1,69 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w3vp-jw9m-f9pm",
"modified": "2023-12-13T13:34:55Z",
"published": "2023-12-13T13:34:55Z",
"aliases": [
"CVE-2023-6193"
],
"summary": "Unbounded queuing of path validation messages in cloudflare-quiche",
"details": "### Impact\nquiche v. 0.15.0 through 0.19.0 was discovered to be vulnerable to unbounded queuing of path validation messages, which could lead to excessive resource consumption.\n\nQUIC path validation ([RFC 9000 Section 8.2](https://datatracker.ietf.org/doc/html/rfc9000#section-8.2)) requires that the recipient of a PATH_CHALLENGE frame responds by sending a PATH_RESPONSE. An unauthenticated remote attacker can exploit the vulnerability by sending PATH_CHALLENGE frames and manipulating the connection (e.g. by restricting the peer's congestion window size) so that PATH_RESPONSE frames can only be sent at the slower rate than they are received, leading to storage of path validation data in an unbounded queue.\n\n### Patches\nQuiche versions greater than 0.19.0 address this problem.\n\n### References\n[CVE-2023-6193](https://www.cve.org/CVERecord?id=CVE-2023-6193)\n[RFC 9000 Section 8.2](https://datatracker.ietf.org/doc/html/rfc9000#section-8.2)",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [
{
"package": {
"ecosystem": "crates.io",
"name": "quiche"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0.15.0"
},
{
"fixed": "0.19.1"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/cloudflare/quiche/security/advisories/GHSA-w3vp-jw9m-f9pm"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6193"
},
{
"type": "WEB",
"url": "https://github.com/cloudflare/quiche/commit/ea7ecf39ae28ab24cf1785c1674dc2e8a076f9ca"
},
{
"type": "WEB",
"url": "https://datatracker.ietf.org/doc/html/rfc9000#section-8.2"
},
{
"type": "PACKAGE",
"url": "https://github.com/cloudflare/quiche"
}
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2023-12-13T13:34:55Z",
"nvd_published_at": "2023-12-12T14:15:07Z"
}
}