From 17f7624f2227bcce7c1064b240fb1cef015f3ffe Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 23 May 2024 15:32:07 +0000 Subject: [PATCH] Publish Advisories GHSA-2w3m-74v7-48pp GHSA-37m7-xg97-7h4c GHSA-5r9v-8qv6-pf8f GHSA-8r4g-xwxx-qhqq GHSA-p8v3-5hqq-7c5r GHSA-r8jg-75qw-69pw GHSA-rgr9-6xwp-v98f --- .../GHSA-2w3m-74v7-48pp.json | 42 +++++++++++++++++ .../GHSA-37m7-xg97-7h4c.json | 38 +++++++++++++++ .../GHSA-5r9v-8qv6-pf8f.json | 46 +++++++++++++++++++ .../GHSA-8r4g-xwxx-qhqq.json | 46 +++++++++++++++++++ .../GHSA-p8v3-5hqq-7c5r.json | 11 +++-- .../GHSA-r8jg-75qw-69pw.json | 2 +- .../GHSA-rgr9-6xwp-v98f.json | 46 +++++++++++++++++++ 7 files changed, 226 insertions(+), 5 deletions(-) create mode 100644 advisories/unreviewed/2024/05/GHSA-2w3m-74v7-48pp/GHSA-2w3m-74v7-48pp.json create mode 100644 advisories/unreviewed/2024/05/GHSA-37m7-xg97-7h4c/GHSA-37m7-xg97-7h4c.json create mode 100644 advisories/unreviewed/2024/05/GHSA-5r9v-8qv6-pf8f/GHSA-5r9v-8qv6-pf8f.json create mode 100644 advisories/unreviewed/2024/05/GHSA-8r4g-xwxx-qhqq/GHSA-8r4g-xwxx-qhqq.json create mode 100644 advisories/unreviewed/2024/05/GHSA-rgr9-6xwp-v98f/GHSA-rgr9-6xwp-v98f.json diff --git a/advisories/unreviewed/2024/05/GHSA-2w3m-74v7-48pp/GHSA-2w3m-74v7-48pp.json b/advisories/unreviewed/2024/05/GHSA-2w3m-74v7-48pp/GHSA-2w3m-74v7-48pp.json new file mode 100644 index 00000000000..cf09bd288ba --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-2w3m-74v7-48pp/GHSA-2w3m-74v7-48pp.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2w3m-74v7-48pp", + "modified": "2024-05-23T15:30:39Z", + "published": "2024-05-23T15:30:39Z", + "aliases": [ + "CVE-2024-1803" + ], + "details": "The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to unauthorized access of functionality due to insufficient authorization validation on the PDF embed block in all versions up to, and including, 3.9.12. This makes it possible for authenticated attackers, with contributor-level access and above, to embed PDF blocks.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1803" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3055856" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/175e08ce-aec2-427a-90e0-f955711d58b2?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T13:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-37m7-xg97-7h4c/GHSA-37m7-xg97-7h4c.json b/advisories/unreviewed/2024/05/GHSA-37m7-xg97-7h4c/GHSA-37m7-xg97-7h4c.json new file mode 100644 index 00000000000..4b52749445f --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-37m7-xg97-7h4c/GHSA-37m7-xg97-7h4c.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-37m7-xg97-7h4c", + "modified": "2024-05-23T15:30:39Z", + "published": "2024-05-23T15:30:39Z", + "aliases": [ + "CVE-2024-5168" + ], + "details": "Improper access control vulnerability in Prodys' Quantum Audio codec affecting versions 2.3.4t and below. This vulnerability could allow an unauthenticated user to bypass authentication entirely and execute arbitrary API requests against the web application.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5168" + }, + { + "type": "WEB", + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/improper-access-control-vulnerability-prodys-quantum-audio-codec" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T13:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-5r9v-8qv6-pf8f/GHSA-5r9v-8qv6-pf8f.json b/advisories/unreviewed/2024/05/GHSA-5r9v-8qv6-pf8f/GHSA-5r9v-8qv6-pf8f.json new file mode 100644 index 00000000000..aa138414786 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-5r9v-8qv6-pf8f/GHSA-5r9v-8qv6-pf8f.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5r9v-8qv6-pf8f", + "modified": "2024-05-23T15:30:39Z", + "published": "2024-05-23T15:30:39Z", + "aliases": [ + "CVE-2024-4471" + ], + "details": "The 140+ Widgets | Best Addons For Elementor – FREE for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.3.1 via deserialization of untrusted input in the 'export_content' function. This allows authenticated attackers, with contributor-level permissions and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.\nThanks,\nFrancesco", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4471" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/xpro-elementor-addons/trunk/libs/demo-export/classes/class-demo-export-admin.php#L86" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3090127" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5c517278-9d2a-4ef6-bf0e-a62f6b00dd20?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T13:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-8r4g-xwxx-qhqq/GHSA-8r4g-xwxx-qhqq.json b/advisories/unreviewed/2024/05/GHSA-8r4g-xwxx-qhqq/GHSA-8r4g-xwxx-qhqq.json new file mode 100644 index 00000000000..04087bc72eb --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-8r4g-xwxx-qhqq/GHSA-8r4g-xwxx-qhqq.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8r4g-xwxx-qhqq", + "modified": "2024-05-23T15:30:39Z", + "published": "2024-05-23T15:30:39Z", + "aliases": [ + "CVE-2024-5085" + ], + "details": "The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.0 via deserialization of untrusted input in the 'process_entry' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5085" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/hash-form/trunk/admin/classes/HashFormEntry.php#L353" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3090341" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0166a2b2-24e2-4dd6-8842-d3e8dd7bb0dc?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T15:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-p8v3-5hqq-7c5r/GHSA-p8v3-5hqq-7c5r.json b/advisories/unreviewed/2024/05/GHSA-p8v3-5hqq-7c5r/GHSA-p8v3-5hqq-7c5r.json index c478254dfe7..adff72f8d81 100644 --- a/advisories/unreviewed/2024/05/GHSA-p8v3-5hqq-7c5r/GHSA-p8v3-5hqq-7c5r.json +++ b/advisories/unreviewed/2024/05/GHSA-p8v3-5hqq-7c5r/GHSA-p8v3-5hqq-7c5r.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-p8v3-5hqq-7c5r", - "modified": "2024-05-15T21:31:26Z", + "modified": "2024-05-23T15:30:38Z", "published": "2024-05-15T21:31:26Z", "aliases": [ "CVE-2024-4947" ], "details": "Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-843" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-15T21:15:09Z" diff --git a/advisories/unreviewed/2024/05/GHSA-r8jg-75qw-69pw/GHSA-r8jg-75qw-69pw.json b/advisories/unreviewed/2024/05/GHSA-r8jg-75qw-69pw/GHSA-r8jg-75qw-69pw.json index f0688218ada..a0ca4281067 100644 --- a/advisories/unreviewed/2024/05/GHSA-r8jg-75qw-69pw/GHSA-r8jg-75qw-69pw.json +++ b/advisories/unreviewed/2024/05/GHSA-r8jg-75qw-69pw/GHSA-r8jg-75qw-69pw.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-r8jg-75qw-69pw", - "modified": "2024-05-20T15:31:42Z", + "modified": "2024-05-23T15:30:38Z", "published": "2024-05-19T09:34:46Z", "aliases": [ "CVE-2024-35876" diff --git a/advisories/unreviewed/2024/05/GHSA-rgr9-6xwp-v98f/GHSA-rgr9-6xwp-v98f.json b/advisories/unreviewed/2024/05/GHSA-rgr9-6xwp-v98f/GHSA-rgr9-6xwp-v98f.json new file mode 100644 index 00000000000..25cf4e6b031 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-rgr9-6xwp-v98f/GHSA-rgr9-6xwp-v98f.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rgr9-6xwp-v98f", + "modified": "2024-05-23T15:30:39Z", + "published": "2024-05-23T15:30:39Z", + "aliases": [ + "CVE-2024-5084" + ], + "details": "The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'file_upload_action' function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5084" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/hash-form/trunk/admin/classes/HashFormBuilder.php#L764" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3090341" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/eef9e2fa-d8f0-42bf-95ac-ee4cafff0b14?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-23T15:15:15Z" + } +} \ No newline at end of file