Publish Advisories

GHSA-2mv8-jjm5-f3hr
GHSA-h345-r48x-g68f
This commit is contained in:
advisory-database[bot]
2024-10-28 21:52:51 +00:00
parent 8a5d59bca0
commit 0be431d7a0
2 changed files with 11 additions and 4 deletions
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2mv8-jjm5-f3hr",
"modified": "2024-10-25T21:48:15Z",
"modified": "2024-10-28T21:51:21Z",
"published": "2024-10-25T21:31:28Z",
"aliases": [
"CVE-2024-48230"
@@ -9,7 +9,14 @@
"summary": "SQL injection in funadmin",
"details": "funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \\backend\\controller\\auth\\Auth.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"
}
],
"affected": [
{
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h345-r48x-g68f",
"modified": "2024-10-28T21:50:31Z",
"modified": "2024-10-28T21:51:18Z",
"published": "2024-10-25T21:31:28Z",
"aliases": [
"CVE-2024-48229"
@@ -15,7 +15,7 @@
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"
}
],
"affected": [