From 1b3d0a8888e02db94dfcac355df62d8d670816e4 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Sat, 12 Apr 2025 03:45:54 +0000 Subject: [PATCH] Publish Advisories GHSA-f87w-3j5w-v58p GHSA-vrq4-9hc3-cgp7 --- .../GHSA-f87w-3j5w-v58p.json | 183 ++++++++++++++++++ .../GHSA-vrq4-9hc3-cgp7.json | 64 ++++++ 2 files changed, 247 insertions(+) create mode 100644 advisories/github-reviewed/2025/04/GHSA-f87w-3j5w-v58p/GHSA-f87w-3j5w-v58p.json create mode 100644 advisories/github-reviewed/2025/04/GHSA-vrq4-9hc3-cgp7/GHSA-vrq4-9hc3-cgp7.json diff --git a/advisories/github-reviewed/2025/04/GHSA-f87w-3j5w-v58p/GHSA-f87w-3j5w-v58p.json b/advisories/github-reviewed/2025/04/GHSA-f87w-3j5w-v58p/GHSA-f87w-3j5w-v58p.json new file mode 100644 index 00000000000..5ef5b5788c9 --- /dev/null +++ b/advisories/github-reviewed/2025/04/GHSA-f87w-3j5w-v58p/GHSA-f87w-3j5w-v58p.json @@ -0,0 +1,183 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f87w-3j5w-v58p", + "modified": "2025-04-12T03:43:57Z", + "published": "2025-04-12T03:43:57Z", + "aliases": [], + "summary": "CefSharp affected by incorrect handle provided in unspecified circumstances in Mojo on Windows", + "details": "Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)\n\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-2783\nhttps://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html\nhttps://issues.chromium.org/issues/405143032", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "NuGet", + "name": "CefSharp.Wpf" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "134.3.90" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "NuGet", + "name": "CefSharp.Wpf.HwndHost" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "134.3.90" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "NuGet", + "name": "CefSharp.Wpf.NetCore" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "134.3.90" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "NuGet", + "name": "CefSharp.WinForms" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "134.3.90" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "NuGet", + "name": "CefSharp.WinForms.NetCore" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "134.3.90" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "NuGet", + "name": "CefSharp.OffScreen.NetCore" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "134.3.90" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "NuGet", + "name": "CefSharp.OffScreen" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "134.3.90" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/cefsharp/CefSharp/security/advisories/GHSA-f87w-3j5w-v58p" + }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2783" + }, + { + "type": "WEB", + "url": "https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html" + }, + { + "type": "PACKAGE", + "url": "https://github.com/cefsharp/CefSharp" + }, + { + "type": "WEB", + "url": "https://github.com/cefsharp/CefSharp/releases/tag/v134.3.90" + }, + { + "type": "WEB", + "url": "https://issues.chromium.org/issues/405143032" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2025-04-12T03:43:57Z", + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2025/04/GHSA-vrq4-9hc3-cgp7/GHSA-vrq4-9hc3-cgp7.json b/advisories/github-reviewed/2025/04/GHSA-vrq4-9hc3-cgp7/GHSA-vrq4-9hc3-cgp7.json new file mode 100644 index 00000000000..53660dcac55 --- /dev/null +++ b/advisories/github-reviewed/2025/04/GHSA-vrq4-9hc3-cgp7/GHSA-vrq4-9hc3-cgp7.json @@ -0,0 +1,64 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vrq4-9hc3-cgp7", + "modified": "2025-04-12T03:42:31Z", + "published": "2025-04-12T03:42:31Z", + "aliases": [ + "CVE-2025-32428" + ], + "summary": "TigerVNC accessible via the network and not just via a UNIX socket as intended", + "details": "## Summary\n\n`jupyter-remote-desktop-proxy` was meant to rely on UNIX sockets readable only by the current user since version 3.0.0, but when used with TigerVNC, the VNC server started by `jupyter-remote-desktop-proxy` were still accessible via the network.\n\nThis vulnerability does not affect users having TurboVNC as the `vncserver` executable.\n\n## Credits\n\nThis vulnerability was identified by Arne Gottwald at University of Göttingen and analyzed, reported, and reviewed by @frejanordsiek.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "jupyter-remote-desktop-proxy" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "3.0.1" + } + ] + } + ], + "versions": [ + "3.0.0" + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/jupyterhub/jupyter-remote-desktop-proxy/security/advisories/GHSA-vrq4-9hc3-cgp7" + }, + { + "type": "WEB", + "url": "https://github.com/jupyterhub/jupyter-remote-desktop-proxy/commit/7dd54c25a4253badd8ea68895437e5a66a59090d" + }, + { + "type": "PACKAGE", + "url": "https://github.com/jupyterhub/jupyter-remote-desktop-proxy" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-668" + ], + "severity": "CRITICAL", + "github_reviewed": true, + "github_reviewed_at": "2025-04-12T03:42:31Z", + "nvd_published_at": null + } +} \ No newline at end of file