From 1501569111685e22aa480ea5acb4eaeec677186b Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 7 May 2024 09:32:07 +0000 Subject: [PATCH] Publish Advisories GHSA-457w-p2rx-36qq GHSA-cf65-84fr-hwv4 GHSA-m3qq-5j3g-rq9q GHSA-mqgc-wwff-qc9q GHSA-mqmq-vr52-c53r GHSA-p7p2-vf3x-m7fp GHSA-pq5j-cmm3-64mg GHSA-w6gp-8v4q-c8g7 --- .../GHSA-457w-p2rx-36qq.json | 46 +++++++++++++++++++ .../GHSA-cf65-84fr-hwv4.json | 38 +++++++++++++++ .../GHSA-m3qq-5j3g-rq9q.json | 38 +++++++++++++++ .../GHSA-mqgc-wwff-qc9q.json | 38 +++++++++++++++ .../GHSA-mqmq-vr52-c53r.json | 38 +++++++++++++++ .../GHSA-p7p2-vf3x-m7fp.json | 38 +++++++++++++++ .../GHSA-pq5j-cmm3-64mg.json | 38 +++++++++++++++ .../GHSA-w6gp-8v4q-c8g7.json | 46 +++++++++++++++++++ 8 files changed, 320 insertions(+) create mode 100644 advisories/unreviewed/2024/05/GHSA-457w-p2rx-36qq/GHSA-457w-p2rx-36qq.json create mode 100644 advisories/unreviewed/2024/05/GHSA-cf65-84fr-hwv4/GHSA-cf65-84fr-hwv4.json create mode 100644 advisories/unreviewed/2024/05/GHSA-m3qq-5j3g-rq9q/GHSA-m3qq-5j3g-rq9q.json create mode 100644 advisories/unreviewed/2024/05/GHSA-mqgc-wwff-qc9q/GHSA-mqgc-wwff-qc9q.json create mode 100644 advisories/unreviewed/2024/05/GHSA-mqmq-vr52-c53r/GHSA-mqmq-vr52-c53r.json create mode 100644 advisories/unreviewed/2024/05/GHSA-p7p2-vf3x-m7fp/GHSA-p7p2-vf3x-m7fp.json create mode 100644 advisories/unreviewed/2024/05/GHSA-pq5j-cmm3-64mg/GHSA-pq5j-cmm3-64mg.json create mode 100644 advisories/unreviewed/2024/05/GHSA-w6gp-8v4q-c8g7/GHSA-w6gp-8v4q-c8g7.json diff --git a/advisories/unreviewed/2024/05/GHSA-457w-p2rx-36qq/GHSA-457w-p2rx-36qq.json b/advisories/unreviewed/2024/05/GHSA-457w-p2rx-36qq/GHSA-457w-p2rx-36qq.json new file mode 100644 index 00000000000..6dc74e7e76c --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-457w-p2rx-36qq/GHSA-457w-p2rx-36qq.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-457w-p2rx-36qq", + "modified": "2024-05-07T09:30:32Z", + "published": "2024-05-07T09:30:32Z", + "aliases": [ + "CVE-2024-4346" + ], + "details": "The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.7.13. This is due to the plugin not properly validating the path of an uploaded file prior to deleting it. This makes it possible for unauthenticated attackers to delete arbitrary files, including the wp-config.php file, which can make site takeover and remote code execution possible.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4346" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/startklar-elmentor-forms-extwidgets/trunk/startklarDropZoneUploadProcess.php?rev=3061298#L7" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3081987/startklar-elmentor-forms-extwidgets" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a125bbf1-8ff6-4f3d-a4fb-caaaefe1df2a?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-07T09:15:39Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-cf65-84fr-hwv4/GHSA-cf65-84fr-hwv4.json b/advisories/unreviewed/2024/05/GHSA-cf65-84fr-hwv4/GHSA-cf65-84fr-hwv4.json new file mode 100644 index 00000000000..ad1f291d3bc --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-cf65-84fr-hwv4/GHSA-cf65-84fr-hwv4.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cf65-84fr-hwv4", + "modified": "2024-05-07T09:30:32Z", + "published": "2024-05-07T09:30:32Z", + "aliases": [ + "CVE-2024-23808" + ], + "details": "in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free or cause DOS through NULL pointer dereference.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23808" + }, + { + "type": "WEB", + "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-05.md" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-125" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-07T07:15:48Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-m3qq-5j3g-rq9q/GHSA-m3qq-5j3g-rq9q.json b/advisories/unreviewed/2024/05/GHSA-m3qq-5j3g-rq9q/GHSA-m3qq-5j3g-rq9q.json new file mode 100644 index 00000000000..9279b195864 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-m3qq-5j3g-rq9q/GHSA-m3qq-5j3g-rq9q.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-m3qq-5j3g-rq9q", + "modified": "2024-05-07T09:30:32Z", + "published": "2024-05-07T09:30:32Z", + "aliases": [ + "CVE-2024-3759" + ], + "details": "in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3759" + }, + { + "type": "WEB", + "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-05.md" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-07T07:15:50Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-mqgc-wwff-qc9q/GHSA-mqgc-wwff-qc9q.json b/advisories/unreviewed/2024/05/GHSA-mqgc-wwff-qc9q/GHSA-mqgc-wwff-qc9q.json new file mode 100644 index 00000000000..f4bc1879e2a --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-mqgc-wwff-qc9q/GHSA-mqgc-wwff-qc9q.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mqgc-wwff-qc9q", + "modified": "2024-05-07T09:30:32Z", + "published": "2024-05-07T09:30:32Z", + "aliases": [ + "CVE-2024-31078" + ], + "details": "in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31078" + }, + { + "type": "WEB", + "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-05.md" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-476" + ], + "severity": "LOW", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-07T07:15:48Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-mqmq-vr52-c53r/GHSA-mqmq-vr52-c53r.json b/advisories/unreviewed/2024/05/GHSA-mqmq-vr52-c53r/GHSA-mqmq-vr52-c53r.json new file mode 100644 index 00000000000..f250f216f4f --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-mqmq-vr52-c53r/GHSA-mqmq-vr52-c53r.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mqmq-vr52-c53r", + "modified": "2024-05-07T09:30:32Z", + "published": "2024-05-07T09:30:32Z", + "aliases": [ + "CVE-2024-3758" + ], + "details": "in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3758" + }, + { + "type": "WEB", + "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-05.md" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-122" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-07T07:15:49Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-p7p2-vf3x-m7fp/GHSA-p7p2-vf3x-m7fp.json b/advisories/unreviewed/2024/05/GHSA-p7p2-vf3x-m7fp/GHSA-p7p2-vf3x-m7fp.json new file mode 100644 index 00000000000..3b1274d9839 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-p7p2-vf3x-m7fp/GHSA-p7p2-vf3x-m7fp.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-p7p2-vf3x-m7fp", + "modified": "2024-05-07T09:30:32Z", + "published": "2024-05-07T09:30:32Z", + "aliases": [ + "CVE-2024-3757" + ], + "details": "in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3757" + }, + { + "type": "WEB", + "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-05.md" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "LOW", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-07T07:15:49Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-pq5j-cmm3-64mg/GHSA-pq5j-cmm3-64mg.json b/advisories/unreviewed/2024/05/GHSA-pq5j-cmm3-64mg/GHSA-pq5j-cmm3-64mg.json new file mode 100644 index 00000000000..1e69d873a92 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-pq5j-cmm3-64mg/GHSA-pq5j-cmm3-64mg.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pq5j-cmm3-64mg", + "modified": "2024-05-07T09:30:32Z", + "published": "2024-05-07T09:30:32Z", + "aliases": [ + "CVE-2024-27217" + ], + "details": "in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27217" + }, + { + "type": "WEB", + "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-05.md" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-07T07:15:48Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-w6gp-8v4q-c8g7/GHSA-w6gp-8v4q-c8g7.json b/advisories/unreviewed/2024/05/GHSA-w6gp-8v4q-c8g7/GHSA-w6gp-8v4q-c8g7.json new file mode 100644 index 00000000000..1276f875e46 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-w6gp-8v4q-c8g7/GHSA-w6gp-8v4q-c8g7.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w6gp-8v4q-c8g7", + "modified": "2024-05-07T09:30:32Z", + "published": "2024-05-07T09:30:32Z", + "aliases": [ + "CVE-2024-4345" + ], + "details": "The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'process' function in the 'startklarDropZoneUploadProcess' class in versions up to, and including, 1.7.13. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4345" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/startklar-elmentor-forms-extwidgets/trunk/startklarDropZoneUploadProcess.php?rev=3061298#L7" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3081987/startklar-elmentor-forms-extwidgets" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4221b33c-5cfa-48db-92bf-bf25ff3c5a5f?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-07T09:15:38Z" + } +} \ No newline at end of file