From 0b6ea305481f0833b19906e08d5119c023a07206 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 28 Feb 2024 12:32:10 +0000 Subject: [PATCH] Publish Advisories GHSA-2cxh-2c7w-4jcj GHSA-2q6p-h6rg-vx7w GHSA-3v9r-885j-762g GHSA-5474-f7g5-273q GHSA-gpw4-cp4w-g7v7 GHSA-h7r6-8qmm-hj5r GHSA-m6jm-3v38-76j4 GHSA-w6wm-9q8x-p5h7 GHSA-whfc-7h32-gf82 GHSA-wr6g-9wcr-cmqj --- .../GHSA-2cxh-2c7w-4jcj.json | 46 +++++++++++++++++++ .../GHSA-2q6p-h6rg-vx7w.json | 42 +++++++++++++++++ .../GHSA-3v9r-885j-762g.json | 38 +++++++++++++++ .../GHSA-5474-f7g5-273q.json | 38 +++++++++++++++ .../GHSA-gpw4-cp4w-g7v7.json | 42 +++++++++++++++++ .../GHSA-h7r6-8qmm-hj5r.json | 38 +++++++++++++++ .../GHSA-m6jm-3v38-76j4.json | 38 +++++++++++++++ .../GHSA-w6wm-9q8x-p5h7.json | 42 +++++++++++++++++ .../GHSA-whfc-7h32-gf82.json | 42 +++++++++++++++++ .../GHSA-wr6g-9wcr-cmqj.json | 38 +++++++++++++++ 10 files changed, 404 insertions(+) create mode 100644 advisories/unreviewed/2024/02/GHSA-2cxh-2c7w-4jcj/GHSA-2cxh-2c7w-4jcj.json create mode 100644 advisories/unreviewed/2024/02/GHSA-2q6p-h6rg-vx7w/GHSA-2q6p-h6rg-vx7w.json create mode 100644 advisories/unreviewed/2024/02/GHSA-3v9r-885j-762g/GHSA-3v9r-885j-762g.json create mode 100644 advisories/unreviewed/2024/02/GHSA-5474-f7g5-273q/GHSA-5474-f7g5-273q.json create mode 100644 advisories/unreviewed/2024/02/GHSA-gpw4-cp4w-g7v7/GHSA-gpw4-cp4w-g7v7.json create mode 100644 advisories/unreviewed/2024/02/GHSA-h7r6-8qmm-hj5r/GHSA-h7r6-8qmm-hj5r.json create mode 100644 advisories/unreviewed/2024/02/GHSA-m6jm-3v38-76j4/GHSA-m6jm-3v38-76j4.json create mode 100644 advisories/unreviewed/2024/02/GHSA-w6wm-9q8x-p5h7/GHSA-w6wm-9q8x-p5h7.json create mode 100644 advisories/unreviewed/2024/02/GHSA-whfc-7h32-gf82/GHSA-whfc-7h32-gf82.json create mode 100644 advisories/unreviewed/2024/02/GHSA-wr6g-9wcr-cmqj/GHSA-wr6g-9wcr-cmqj.json diff --git a/advisories/unreviewed/2024/02/GHSA-2cxh-2c7w-4jcj/GHSA-2cxh-2c7w-4jcj.json b/advisories/unreviewed/2024/02/GHSA-2cxh-2c7w-4jcj/GHSA-2cxh-2c7w-4jcj.json new file mode 100644 index 00000000000..debaea8b203 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-2cxh-2c7w-4jcj/GHSA-2cxh-2c7w-4jcj.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2cxh-2c7w-4jcj", + "modified": "2024-02-28T12:30:24Z", + "published": "2024-02-28T12:30:24Z", + "aliases": [ + "CVE-2024-1719" + ], + "details": "The Easy PayPal & Stripe Buy Now Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.3 and in Contact Form 7 – PayPal & Stripe Add-on all versions up to, and including 2.1. This is due to missing or incorrect nonce validation on the 'wpecpp_stripe_connect_completion' function. This makes it possible for unauthenticated attackers to modify the plugins settings and chance the stripe connection via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1719" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3040958%40contact-form-7-paypal-add-on&new=3040958%40contact-form-7-paypal-add-on&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3040962%40wp-ecommerce-paypal&new=3040962%40wp-ecommerce-paypal&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a5276227-9bd4-4ad8-a6b7-ac7d05e8b056?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T10:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-2q6p-h6rg-vx7w/GHSA-2q6p-h6rg-vx7w.json b/advisories/unreviewed/2024/02/GHSA-2q6p-h6rg-vx7w/GHSA-2q6p-h6rg-vx7w.json new file mode 100644 index 00000000000..9211a04f417 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-2q6p-h6rg-vx7w/GHSA-2q6p-h6rg-vx7w.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2q6p-h6rg-vx7w", + "modified": "2024-02-28T12:30:25Z", + "published": "2024-02-28T12:30:25Z", + "aliases": [ + "CVE-2024-1632" + ], + "details": "Low-privileged users with access to the Sitefinity backend may obtain sensitive information from the site's administrative area.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1632" + }, + { + "type": "WEB", + "url": "https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-1632-and-CVE-2024-1636-February-2024" + }, + { + "type": "WEB", + "url": "https://www.progress.com/sitefinity-cms" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T12:15:46Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-3v9r-885j-762g/GHSA-3v9r-885j-762g.json b/advisories/unreviewed/2024/02/GHSA-3v9r-885j-762g/GHSA-3v9r-885j-762g.json new file mode 100644 index 00000000000..a39038c4ad2 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-3v9r-885j-762g/GHSA-3v9r-885j-762g.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3v9r-885j-762g", + "modified": "2024-02-28T12:30:27Z", + "published": "2024-02-28T12:30:27Z", + "aliases": [ + "CVE-2024-26016" + ], + "details": "A low privilege authenticated user could import an existing dashboard or chart that they do not have access to and then modify its metadata, thereby gaining ownership of the object. However, it's important to note that access to the analytical data of these charts and dashboards would still be subject to validation based on data access privileges.\n\nThis issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.Users are recommended to upgrade to version 3.1.1, which fixes the issue.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26016" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/76v1jjcylgk4p3m0258qr359ook3vl8s" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-863" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T12:15:47Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-5474-f7g5-273q/GHSA-5474-f7g5-273q.json b/advisories/unreviewed/2024/02/GHSA-5474-f7g5-273q/GHSA-5474-f7g5-273q.json new file mode 100644 index 00000000000..39b4a6a3951 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-5474-f7g5-273q/GHSA-5474-f7g5-273q.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5474-f7g5-273q", + "modified": "2024-02-28T12:30:26Z", + "published": "2024-02-28T12:30:26Z", + "aliases": [ + "CVE-2024-24773" + ], + "details": "Improper parsing of nested SQL statements on SQLLab would allow authenticated users to surpass their data authorization scope.\nThis issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.\n\nUsers are recommended to upgrade to version 3.1.1, which fixes the issue.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24773" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/h66fy6nj41cfx07zh7l552w6dmtjh501" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-863" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T12:15:47Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-gpw4-cp4w-g7v7/GHSA-gpw4-cp4w-g7v7.json b/advisories/unreviewed/2024/02/GHSA-gpw4-cp4w-g7v7/GHSA-gpw4-cp4w-g7v7.json new file mode 100644 index 00000000000..be34da1afb8 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-gpw4-cp4w-g7v7/GHSA-gpw4-cp4w-g7v7.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gpw4-cp4w-g7v7", + "modified": "2024-02-28T12:30:24Z", + "published": "2024-02-28T12:30:24Z", + "aliases": [ + "CVE-2024-1861" + ], + "details": "The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the antihacker_truncate_scan_table() function in all versions up to, and including, 4.52. This makes it possible for authenticated attackers, with subscriber-level access and above, to truncate the scan table.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1861" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3040447%40antihacker&new=3040447%40antihacker&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b80c8888-e8d6-4458-ae93-8e4182060590?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T10:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-h7r6-8qmm-hj5r/GHSA-h7r6-8qmm-hj5r.json b/advisories/unreviewed/2024/02/GHSA-h7r6-8qmm-hj5r/GHSA-h7r6-8qmm-hj5r.json new file mode 100644 index 00000000000..6f1c9a43b87 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-h7r6-8qmm-hj5r/GHSA-h7r6-8qmm-hj5r.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h7r6-8qmm-hj5r", + "modified": "2024-02-28T12:30:25Z", + "published": "2024-02-28T12:30:25Z", + "aliases": [ + "CVE-2024-27315" + ], + "details": "An authenticated user with privileges to create Alerts on Alerts & Reports has the capability to generate a specially crafted SQL statement that triggers an error on the database. This error is not properly handled by Apache Superset and may inadvertently surface in the error log of the Alert exposing possibly sensitive data.\n\nThis issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.\n\nUsers are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27315" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/qcwbx7q2s3ynsd405895bx3wcwq32j7z" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-200" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T10:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-m6jm-3v38-76j4/GHSA-m6jm-3v38-76j4.json b/advisories/unreviewed/2024/02/GHSA-m6jm-3v38-76j4/GHSA-m6jm-3v38-76j4.json new file mode 100644 index 00000000000..c10d17bfc08 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-m6jm-3v38-76j4/GHSA-m6jm-3v38-76j4.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-m6jm-3v38-76j4", + "modified": "2024-02-28T12:30:26Z", + "published": "2024-02-28T12:30:26Z", + "aliases": [ + "CVE-2024-24772" + ], + "details": "A guest user could exploit a chart data REST API and send arbitrary SQL statements that on error could leak information from the underlying analytics database.This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.\n\nUsers are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24772" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/gfl3ckwy6y9tpz9jmpv62orh2q346sn5" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-20" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T12:15:47Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-w6wm-9q8x-p5h7/GHSA-w6wm-9q8x-p5h7.json b/advisories/unreviewed/2024/02/GHSA-w6wm-9q8x-p5h7/GHSA-w6wm-9q8x-p5h7.json new file mode 100644 index 00000000000..ae28703401b --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-w6wm-9q8x-p5h7/GHSA-w6wm-9q8x-p5h7.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w6wm-9q8x-p5h7", + "modified": "2024-02-28T12:30:24Z", + "published": "2024-02-28T12:30:24Z", + "aliases": [ + "CVE-2024-1860" + ], + "details": "The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the antihacker_add_whitelist() function in all versions up to, and including, 4.51. This makes it possible for unauthenticated attackers to add their IP Address to the whitelist circumventing protection", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1860" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3040434%40antihacker&new=3040434%40antihacker&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3d365284-73ac-4730-a83d-9202677cf161?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T10:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-whfc-7h32-gf82/GHSA-whfc-7h32-gf82.json b/advisories/unreviewed/2024/02/GHSA-whfc-7h32-gf82/GHSA-whfc-7h32-gf82.json new file mode 100644 index 00000000000..379613d16cf --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-whfc-7h32-gf82/GHSA-whfc-7h32-gf82.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-whfc-7h32-gf82", + "modified": "2024-02-28T12:30:26Z", + "published": "2024-02-28T12:30:26Z", + "aliases": [ + "CVE-2024-1636" + ], + "details": "Potential Cross-Site Scripting (XSS) in the page editing area.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1636" + }, + { + "type": "WEB", + "url": "https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-1632-and-CVE-2024-1636-February-2024" + }, + { + "type": "WEB", + "url": "https://www.progress.com/sitefinity-cms" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T12:15:47Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-wr6g-9wcr-cmqj/GHSA-wr6g-9wcr-cmqj.json b/advisories/unreviewed/2024/02/GHSA-wr6g-9wcr-cmqj/GHSA-wr6g-9wcr-cmqj.json new file mode 100644 index 00000000000..ce887611376 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-wr6g-9wcr-cmqj/GHSA-wr6g-9wcr-cmqj.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wr6g-9wcr-cmqj", + "modified": "2024-02-28T12:30:27Z", + "published": "2024-02-28T12:30:27Z", + "aliases": [ + "CVE-2024-24779" + ], + "details": "Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don't have access to. These users could then use those virtual datasets to get access to unauthorized data.\nThis issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.\n\nUsers are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24779" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/xzhz1m5bb9zxhyqgoy4q2d689b3zp4pq" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-863" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T12:15:47Z" + } +} \ No newline at end of file