diff --git a/advisories/unreviewed/2023/05/GHSA-2254-9c75-9fpv/GHSA-2254-9c75-9fpv.json b/advisories/unreviewed/2023/05/GHSA-2254-9c75-9fpv/GHSA-2254-9c75-9fpv.json index 478445eee2c..2bfcf0b3cf2 100644 --- a/advisories/unreviewed/2023/05/GHSA-2254-9c75-9fpv/GHSA-2254-9c75-9fpv.json +++ b/advisories/unreviewed/2023/05/GHSA-2254-9c75-9fpv/GHSA-2254-9c75-9fpv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-2254-9c75-9fpv", - "modified": "2023-05-24T21:30:18Z", + "modified": "2024-04-02T15:30:36Z", "published": "2023-05-15T15:30:23Z", "aliases": [ "CVE-2023-32787" @@ -38,7 +38,7 @@ "cwe_ids": [ "CWE-400" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-05-15T15:15:12Z" diff --git a/advisories/unreviewed/2024/02/GHSA-78jh-rw4h-46r3/GHSA-78jh-rw4h-46r3.json b/advisories/unreviewed/2024/02/GHSA-78jh-rw4h-46r3/GHSA-78jh-rw4h-46r3.json index 0856c1b9139..a89b08774f7 100644 --- a/advisories/unreviewed/2024/02/GHSA-78jh-rw4h-46r3/GHSA-78jh-rw4h-46r3.json +++ b/advisories/unreviewed/2024/02/GHSA-78jh-rw4h-46r3/GHSA-78jh-rw4h-46r3.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-78jh-rw4h-46r3", - "modified": "2024-02-20T18:30:34Z", + "modified": "2024-04-02T15:30:36Z", "published": "2024-02-20T18:30:34Z", "aliases": [ "CVE-2024-23310" @@ -21,6 +21,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23310" }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW" + }, { "type": "WEB", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1923" diff --git a/advisories/unreviewed/2024/02/GHSA-7xww-xh6h-rqhj/GHSA-7xww-xh6h-rqhj.json b/advisories/unreviewed/2024/02/GHSA-7xww-xh6h-rqhj/GHSA-7xww-xh6h-rqhj.json index e661aff22ff..4f653546123 100644 --- a/advisories/unreviewed/2024/02/GHSA-7xww-xh6h-rqhj/GHSA-7xww-xh6h-rqhj.json +++ b/advisories/unreviewed/2024/02/GHSA-7xww-xh6h-rqhj/GHSA-7xww-xh6h-rqhj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-7xww-xh6h-rqhj", - "modified": "2024-02-20T18:30:34Z", + "modified": "2024-04-02T15:30:36Z", "published": "2024-02-20T18:30:34Z", "aliases": [ "CVE-2024-21795" @@ -21,6 +21,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21795" }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW" + }, { "type": "WEB", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1920" diff --git a/advisories/unreviewed/2024/02/GHSA-94q6-333x-cv3g/GHSA-94q6-333x-cv3g.json b/advisories/unreviewed/2024/02/GHSA-94q6-333x-cv3g/GHSA-94q6-333x-cv3g.json index 92896136087..3010944820b 100644 --- a/advisories/unreviewed/2024/02/GHSA-94q6-333x-cv3g/GHSA-94q6-333x-cv3g.json +++ b/advisories/unreviewed/2024/02/GHSA-94q6-333x-cv3g/GHSA-94q6-333x-cv3g.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-94q6-333x-cv3g", - "modified": "2024-02-20T18:30:34Z", + "modified": "2024-04-02T15:30:36Z", "published": "2024-02-20T18:30:34Z", "aliases": [ "CVE-2024-23305" @@ -21,6 +21,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23305" }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW" + }, { "type": "WEB", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1918" diff --git a/advisories/unreviewed/2024/02/GHSA-9qf5-3c29-69qj/GHSA-9qf5-3c29-69qj.json b/advisories/unreviewed/2024/02/GHSA-9qf5-3c29-69qj/GHSA-9qf5-3c29-69qj.json index f6b0e8bf33d..2a2711fa7bc 100644 --- a/advisories/unreviewed/2024/02/GHSA-9qf5-3c29-69qj/GHSA-9qf5-3c29-69qj.json +++ b/advisories/unreviewed/2024/02/GHSA-9qf5-3c29-69qj/GHSA-9qf5-3c29-69qj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9qf5-3c29-69qj", - "modified": "2024-02-20T18:30:34Z", + "modified": "2024-04-02T15:30:36Z", "published": "2024-02-20T18:30:34Z", "aliases": [ "CVE-2024-22097" @@ -21,6 +21,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22097" }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW" + }, { "type": "WEB", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1917" diff --git a/advisories/unreviewed/2024/02/GHSA-c8pj-3w86-3gqp/GHSA-c8pj-3w86-3gqp.json b/advisories/unreviewed/2024/02/GHSA-c8pj-3w86-3gqp/GHSA-c8pj-3w86-3gqp.json index df351e43b2e..6eb84bf99ae 100644 --- a/advisories/unreviewed/2024/02/GHSA-c8pj-3w86-3gqp/GHSA-c8pj-3w86-3gqp.json +++ b/advisories/unreviewed/2024/02/GHSA-c8pj-3w86-3gqp/GHSA-c8pj-3w86-3gqp.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-c8pj-3w86-3gqp", - "modified": "2024-02-20T18:30:34Z", + "modified": "2024-04-02T15:30:36Z", "published": "2024-02-20T18:30:34Z", "aliases": [ "CVE-2024-23606" @@ -21,6 +21,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23606" }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW" + }, { "type": "WEB", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1925" diff --git a/advisories/unreviewed/2024/02/GHSA-q3rr-xqpw-vv2x/GHSA-q3rr-xqpw-vv2x.json b/advisories/unreviewed/2024/02/GHSA-q3rr-xqpw-vv2x/GHSA-q3rr-xqpw-vv2x.json index f7f2eab130b..bdc065415fe 100644 --- a/advisories/unreviewed/2024/02/GHSA-q3rr-xqpw-vv2x/GHSA-q3rr-xqpw-vv2x.json +++ b/advisories/unreviewed/2024/02/GHSA-q3rr-xqpw-vv2x/GHSA-q3rr-xqpw-vv2x.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-q3rr-xqpw-vv2x", - "modified": "2024-02-20T18:30:34Z", + "modified": "2024-04-02T15:30:36Z", "published": "2024-02-20T18:30:34Z", "aliases": [ "CVE-2024-23313" @@ -21,6 +21,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23313" }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW" + }, { "type": "WEB", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1922" diff --git a/advisories/unreviewed/2024/02/GHSA-v58q-q96x-jmrj/GHSA-v58q-q96x-jmrj.json b/advisories/unreviewed/2024/02/GHSA-v58q-q96x-jmrj/GHSA-v58q-q96x-jmrj.json index 39585a66ce8..e1eec37a45b 100644 --- a/advisories/unreviewed/2024/02/GHSA-v58q-q96x-jmrj/GHSA-v58q-q96x-jmrj.json +++ b/advisories/unreviewed/2024/02/GHSA-v58q-q96x-jmrj/GHSA-v58q-q96x-jmrj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-v58q-q96x-jmrj", - "modified": "2024-02-20T18:30:34Z", + "modified": "2024-04-02T15:30:36Z", "published": "2024-02-20T18:30:34Z", "aliases": [ "CVE-2024-21812" @@ -21,6 +21,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21812" }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW" + }, { "type": "WEB", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1921" diff --git a/advisories/unreviewed/2024/02/GHSA-v8rx-gg8c-mc3c/GHSA-v8rx-gg8c-mc3c.json b/advisories/unreviewed/2024/02/GHSA-v8rx-gg8c-mc3c/GHSA-v8rx-gg8c-mc3c.json index 34868562658..694b1dc08d9 100644 --- a/advisories/unreviewed/2024/02/GHSA-v8rx-gg8c-mc3c/GHSA-v8rx-gg8c-mc3c.json +++ b/advisories/unreviewed/2024/02/GHSA-v8rx-gg8c-mc3c/GHSA-v8rx-gg8c-mc3c.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-v8rx-gg8c-mc3c", - "modified": "2024-02-20T18:30:34Z", + "modified": "2024-04-02T15:30:36Z", "published": "2024-02-20T18:30:34Z", "aliases": [ "CVE-2024-23809" @@ -21,6 +21,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23809" }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW" + }, { "type": "WEB", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1919" diff --git a/advisories/unreviewed/2024/04/GHSA-3m9j-v59x-pvvm/GHSA-3m9j-v59x-pvvm.json b/advisories/unreviewed/2024/04/GHSA-3m9j-v59x-pvvm/GHSA-3m9j-v59x-pvvm.json new file mode 100644 index 00000000000..85f2faf5d54 --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-3m9j-v59x-pvvm/GHSA-3m9j-v59x-pvvm.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3m9j-v59x-pvvm", + "modified": "2024-04-02T15:30:37Z", + "published": "2024-04-02T15:30:37Z", + "aliases": [ + "CVE-2024-29514" + ], + "details": "File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP file.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29514" + }, + { + "type": "WEB", + "url": "https://github.com/zzq66/cve6" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-02T13:15:51Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-6cx5-pwpx-7g84/GHSA-6cx5-pwpx-7g84.json b/advisories/unreviewed/2024/04/GHSA-6cx5-pwpx-7g84/GHSA-6cx5-pwpx-7g84.json new file mode 100644 index 00000000000..1614ebb9a3e --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-6cx5-pwpx-7g84/GHSA-6cx5-pwpx-7g84.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6cx5-pwpx-7g84", + "modified": "2024-04-02T15:30:37Z", + "published": "2024-04-02T15:30:37Z", + "aliases": [ + "CVE-2024-30946" + ], + "details": "DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/co_do.php.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30946" + }, + { + "type": "WEB", + "url": "https://github.com/testgo1safe/cms/blob/main/1.md" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-02T13:15:51Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-9p5w-7f45-v3jm/GHSA-9p5w-7f45-v3jm.json b/advisories/unreviewed/2024/04/GHSA-9p5w-7f45-v3jm/GHSA-9p5w-7f45-v3jm.json new file mode 100644 index 00000000000..283d3dd59e1 --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-9p5w-7f45-v3jm/GHSA-9p5w-7f45-v3jm.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9p5w-7f45-v3jm", + "modified": "2024-04-02T15:30:37Z", + "published": "2024-04-02T15:30:37Z", + "aliases": [ + "CVE-2024-2389" + ], + "details": "In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified.  An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2389" + }, + { + "type": "WEB", + "url": "https://support.kemptechnologies.com/hc/en-us/articles/24878235038733-CVE-2024-2389-Flowmon-critical-security-vulnerability" + }, + { + "type": "WEB", + "url": "https://www.flowmon.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-02T13:15:51Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-fhx3-jwgv-mpc2/GHSA-fhx3-jwgv-mpc2.json b/advisories/unreviewed/2024/04/GHSA-fhx3-jwgv-mpc2/GHSA-fhx3-jwgv-mpc2.json new file mode 100644 index 00000000000..e53eaf046c9 --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-fhx3-jwgv-mpc2/GHSA-fhx3-jwgv-mpc2.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fhx3-jwgv-mpc2", + "modified": "2024-04-02T15:30:37Z", + "published": "2024-04-02T15:30:37Z", + "aliases": [ + "CVE-2024-30621" + ], + "details": "Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30621" + }, + { + "type": "WEB", + "url": "https://github.com/re1wn/IoT_vuln/blob/main/Tenda_AX1803_v1.0.0.1_contains_a_stack_overflow_via_the_serverName_parameter_in_the_function_fromAdvSetMacMtuWan.md" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-02T14:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-gmc7-25r9-p22h/GHSA-gmc7-25r9-p22h.json b/advisories/unreviewed/2024/04/GHSA-gmc7-25r9-p22h/GHSA-gmc7-25r9-p22h.json new file mode 100644 index 00000000000..90c2726b37b --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-gmc7-25r9-p22h/GHSA-gmc7-25r9-p22h.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gmc7-25r9-p22h", + "modified": "2024-04-02T15:30:37Z", + "published": "2024-04-02T15:30:37Z", + "aliases": [ + "CVE-2024-30620" + ], + "details": "Tenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the function fromAdvSetMacMtuWan.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30620" + }, + { + "type": "WEB", + "url": "https://github.com/re1wn/IoT_vuln/blob/main/Tenda_AX1803_v1.0.0.1_contains_a_stack_overflow_via_the_serviceName_parameter_in_the_function_fromAdvSetMacMtuWan.md" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-02T14:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-hwvw-gh23-qpvq/GHSA-hwvw-gh23-qpvq.json b/advisories/unreviewed/2024/04/GHSA-hwvw-gh23-qpvq/GHSA-hwvw-gh23-qpvq.json new file mode 100644 index 00000000000..ef64cc7b55d --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-hwvw-gh23-qpvq/GHSA-hwvw-gh23-qpvq.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hwvw-gh23-qpvq", + "modified": "2024-04-02T15:30:37Z", + "published": "2024-04-02T15:30:37Z", + "aliases": [ + "CVE-2024-22780" + ], + "details": "Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22780" + }, + { + "type": "WEB", + "url": "https://fuo.fi/CVE-2024-22780" + }, + { + "type": "WEB", + "url": "https://github.com/CA17/TeamsACS" + }, + { + "type": "WEB", + "url": "http://ca17.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-02T15:15:52Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-vhhq-fxg5-hvp8/GHSA-vhhq-fxg5-hvp8.json b/advisories/unreviewed/2024/04/GHSA-vhhq-fxg5-hvp8/GHSA-vhhq-fxg5-hvp8.json index c4b6b3962d1..1b7f65d15a5 100644 --- a/advisories/unreviewed/2024/04/GHSA-vhhq-fxg5-hvp8/GHSA-vhhq-fxg5-hvp8.json +++ b/advisories/unreviewed/2024/04/GHSA-vhhq-fxg5-hvp8/GHSA-vhhq-fxg5-hvp8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vhhq-fxg5-hvp8", - "modified": "2024-04-02T00:30:47Z", + "modified": "2024-04-02T15:30:36Z", "published": "2024-04-02T00:30:46Z", "aliases": [ "CVE-2024-3164" diff --git a/advisories/unreviewed/2024/04/GHSA-w7r3-xv3m-6g2f/GHSA-w7r3-xv3m-6g2f.json b/advisories/unreviewed/2024/04/GHSA-w7r3-xv3m-6g2f/GHSA-w7r3-xv3m-6g2f.json new file mode 100644 index 00000000000..1dde4ec9859 --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-w7r3-xv3m-6g2f/GHSA-w7r3-xv3m-6g2f.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w7r3-xv3m-6g2f", + "modified": "2024-04-02T15:30:37Z", + "published": "2024-04-02T15:30:37Z", + "aliases": [ + "CVE-2023-50313" + ], + "details": "IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for outbound TLS connections caused by a failure to honor user configuration. IBM X-Force ID: 274812.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50313" + }, + { + "type": "WEB", + "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/274812" + }, + { + "type": "WEB", + "url": "https://www.ibm.com/support/pages/node/7145620" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-327" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-02T13:15:51Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-wq73-4j39-6948/GHSA-wq73-4j39-6948.json b/advisories/unreviewed/2024/04/GHSA-wq73-4j39-6948/GHSA-wq73-4j39-6948.json new file mode 100644 index 00000000000..4a175d2e120 --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-wq73-4j39-6948/GHSA-wq73-4j39-6948.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wq73-4j39-6948", + "modified": "2024-04-02T15:30:37Z", + "published": "2024-04-02T15:30:37Z", + "aliases": [ + "CVE-2024-30965" + ], + "details": "DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/member_scores.php.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30965" + }, + { + "type": "WEB", + "url": "https://github.com/Fishkey1/cms/commit/e9d294951ab2dd85709f1d12ad4747f25d326b1b" + }, + { + "type": "WEB", + "url": "https://github.com/Fishkey1/cms/tree/main" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-02T14:15:08Z" + } +} \ No newline at end of file