netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-vpg9-gq7j-mxqg
GHSA-7mgg-3rq2-hff4
GHSA-2mrq-w8pv-5pvq
GHSA-547x-748v-vp6p
GHSA-9gh8-877r-g477
GHSA-gp3w-2v2m-p686
This commit is contained in:
advisory-database[bot]
2024-02-02 18:11:20 +00:00
parent 5d07568892
commit 1ae4893c62
6 changed files with 289 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/05/GHSA-vpg9-gq7j-mxqg/GHSA-vpg9-gq7j-mxqg.json
+8
View File
@@ -40,10 +40,18 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-8144"
},
{
"type": "WEB",
"url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-8144.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/magento/magento2"
},
{
"type": "WEB",
"url": "https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20220121051105/https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update"
advisories/unreviewed/2024/01/GHSA-7mgg-3rq2-hff4/GHSA-7mgg-3rq2-hff4.json → advisories/github-reviewed/2024/01/GHSA-7mgg-3rq2-hff4/GHSA-7mgg-3rq2-hff4.json
+28 -5
View File
@@ -1,12 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7mgg-3rq2-hff4",
"modified": "2024-01-27T12:30:25Z",
"modified": "2024-02-02T18:10:22Z",
"published": "2024-01-27T12:30:25Z",
"aliases": [
"CVE-2024-0960"
],
"details": "A vulnerability was found in flink-extended ai-flow 0.3.1. It has been declared as critical. Affected by this vulnerability is the function cloudpickle.loads of the file \\ai_flow\\cli\\commands\\workflow_command.py. The manipulation leads to deserialization. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-252205 was assigned to this vulnerability.",
"summary": "ai-flow Deserialization of Untrusted Data vulnerability",
"details": "A vulnerability was found in flink-extended ai-flow 0.3.1. It has been declared as critical. Affected by this vulnerability is the function cloudpickle.loads of the file `\\ai_flow\\cli\\commands\\workflow_command.py`. The manipulation leads to deserialization. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-252205 was assigned to this vulnerability.",
"severity": [
{
"type": "CVSS_V3",
@@ -14,7 +15,25 @@
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "ai-flow"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "0.3.1"
}
]
}
]
}
],
"references": [
{
@@ -29,6 +48,10 @@
"type": "WEB",
"url": "https://github.com/bayuncao/vul-cve-8/blob/main/dataset.pkl"
},
{
"type": "PACKAGE",
"url": "https://github.com/flink-extended/ai-flow"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.252205"
@@ -43,8 +66,8 @@
"CWE-502"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-02-02T18:10:22Z",
"nvd_published_at": "2024-01-27T12:15:07Z"
}
}
advisories/github-reviewed/2024/02/GHSA-2mrq-w8pv-5pvq/GHSA-2mrq-w8pv-5pvq.json
+68
View File
@@ -0,0 +1,68 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2mrq-w8pv-5pvq",
"modified": "2024-02-02T18:10:04Z",
"published": "2024-02-02T18:10:04Z",
"aliases": [
"CVE-2024-23635"
],
"summary": "Malicious input can provoke XSS when preserving comments",
"details": "# Impact\n\nThere is a potential for a mutation XSS (mXSS) vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the `preserveComments` directive must be enabled in your policy file. As a result, certain crafty inputs can result in elements in comment tags being interpreted as executable when using AntiSamy's sanitized output.\n\n# Patches\n\nPatched in AntiSamy 1.7.5 and later. This is due to parsing behavior in the [neko-htmlunit](https://github.com/HtmlUnit/htmlunit-neko) dependency, just by updating to a newer version the issue was solved. See important remediation details in the reference given below.\n\n# Workarounds\n\nIf you cannot upgrade to a fixed version of the library, the following mitigation can be applied until you can upgrade: Manually edit your AntiSamy policy file (e.g., antisamy.xml) by deleting the `preserveComments` directive or setting its value to `false`, if present.\n\nAs the previously mentioned policy settings are preconditions for the mXSS attack to work, changing them as recommended should be sufficient to protect you against this vulnerability when using a vulnerable version of this library. However, the existing bug would still be present in the parser dependency (neko-htmlunit) and therefore in AntiSamy. The safety of this workaround relies on configurations that may change in the future and don't address the root cause of the vulnerability. As such, it is strongly recommended to upgrade to a fixed version of AntiSamy.\n\n# For more information\n\nIf you have any questions or comments about this advisory:\n\nEmail one of the project co-leaders, listed on the [OWASP AntiSamy project](https://owasp.org/www-project-antisamy/) page, under \"Leaders\".\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.owasp.antisamy:antisamy"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.7.5"
}
]
}
],
"database_specific": {
"last_known_affected_version_range": "<= 1.7.4"
}
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/nahsra/antisamy/security/advisories/GHSA-2mrq-w8pv-5pvq"
},
{
"type": "WEB",
"url": "https://github.com/nahsra/antisamy/commit/12a2e31d3855430c119480655c2bbbbb79a66ecd"
},
{
"type": "WEB",
"url": "https://github.com/nahsra/antisamy/commit/3e84410ed06ab67f0a4cc3183c67528210f4847d"
},
{
"type": "PACKAGE",
"url": "https://github.com/nahsra/antisamy"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-02-02T18:10:04Z",
"nvd_published_at": null
}
}
advisories/unreviewed/2024/02/GHSA-547x-748v-vp6p/GHSA-547x-748v-vp6p.json → advisories/github-reviewed/2024/02/GHSA-547x-748v-vp6p/GHSA-547x-748v-vp6p.json
+103 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-547x-748v-vp6p",
"modified": "2024-02-02T06:30:31Z",
"modified": "2024-02-02T18:10:51Z",
"published": "2024-02-02T06:30:31Z",
"aliases": [
"CVE-2024-21485"
],
"summary": "Dash apps vulnerable to Cross-site Scripting",
"details": "Versions of the package dash-core-components before 2.13.0; all versions of the package dash-core-components; versions of the package dash before 2.15.0; all versions of the package dash-html-components; versions of the package dash-html-components before 2.0.16 are vulnerable to Cross-site Scripting (XSS) when the href of the a tag is controlled by an adversary. An authenticated attacker who stores a view that exploits this vulnerability could steal the data that's visible to another user who opens that view - not just the data already included on the page, but they could also, in theory, make additional requests and access other data accessible to this user. In some cases, they could also steal the access tokens of that user, which would allow the attacker to act as that user, including viewing other apps and resources hosted on the same server.\n\n**Note:**\n\nThis is only exploitable in Dash apps that include some mechanism to store user input to be reloaded by a different user.",
"severity": [
{
@@ -14,7 +15,101 @@
}
],
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "dash-core-components"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.13.0"
}
]
}
]
},
{
"package": {
"ecosystem": "PyPI",
"name": "dash-html-components"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.0.0"
}
]
}
]
},
{
"package": {
"ecosystem": "PyPI",
"name": "dash-core-components"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.0.0"
}
]
}
]
},
{
"package": {
"ecosystem": "PyPI",
"name": "dash"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.15.0"
}
]
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "dash-html-components"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.16"
}
]
}
]
}
],
"references": [
{
@@ -33,6 +128,10 @@
"type": "WEB",
"url": "https://github.com/plotly/dash/commit/9920073c9a8619ae8f90fcec1924f2f3a4332a8c"
},
{
"type": "PACKAGE",
"url": "https://github.com/plotly/dash"
},
{
"type": "WEB",
"url": "https://github.com/plotly/dash/releases/tag/v2.15.0"
@@ -63,8 +162,8 @@
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-02-02T18:10:51Z",
"nvd_published_at": "2024-02-02T05:15:09Z"
}
}
advisories/unreviewed/2024/02/GHSA-9gh8-877r-g477/GHSA-9gh8-877r-g477.json → advisories/github-reviewed/2024/02/GHSA-9gh8-877r-g477/GHSA-9gh8-877r-g477.json
+28 -5
View File
@@ -1,23 +1,46 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9gh8-877r-g477",
"modified": "2024-02-02T03:30:32Z",
"modified": "2024-02-02T18:10:29Z",
"published": "2024-02-02T03:30:32Z",
"aliases": [
"CVE-2024-22533"
],
"summary": "Beetl Server-Side Template Injection vulnerability",
"details": "Before Beetl v3.15.12, the rendering template has a server-side template injection (SSTI) vulnerability. When the incoming template is controllable, it will be filtered by the DefaultNativeSecurityManager blacklist. Because blacklist filtering is not strict, the blacklist can be bypassed, leading to arbitrary code execution.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "com.ibeetl:beetl"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.15.12"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22533"
},
{
"type": "PACKAGE",
"url": "https://gitee.com/xiandafu/beetl"
},
{
"type": "WEB",
"url": "https://gitee.com/xiandafu/beetl/issues/I8RU01"
@@ -27,9 +50,9 @@
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-02-02T18:10:29Z",
"nvd_published_at": "2024-02-02T03:15:11Z"
}
}
advisories/github-reviewed/2024/02/GHSA-gp3w-2v2m-p686/GHSA-gp3w-2v2m-p686.json
+54
View File
File diff suppressed because one or more lines are too long