From 1fd9aa450d2bcf588ae4e8055e3339bc6b8d9ce2 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 21 Mar 2025 16:35:11 +0000
Subject: [PATCH] Publish GHSA-227r-w5j2-6243

---
 .../GHSA-227r-w5j2-6243.json                  | 36 ++++++++++++++++---
 1 file changed, 31 insertions(+), 5 deletions(-)
 rename advisories/{unreviewed => github-reviewed}/2025/03/GHSA-227r-w5j2-6243/GHSA-227r-w5j2-6243.json (64%)

diff --git a/advisories/unreviewed/2025/03/GHSA-227r-w5j2-6243/GHSA-227r-w5j2-6243.json b/advisories/github-reviewed/2025/03/GHSA-227r-w5j2-6243/GHSA-227r-w5j2-6243.json
similarity index 64%
rename from advisories/unreviewed/2025/03/GHSA-227r-w5j2-6243/GHSA-227r-w5j2-6243.json
rename to advisories/github-reviewed/2025/03/GHSA-227r-w5j2-6243/GHSA-227r-w5j2-6243.json
index 57a643f0652..50e48490b52 100644
--- a/advisories/unreviewed/2025/03/GHSA-227r-w5j2-6243/GHSA-227r-w5j2-6243.json
+++ b/advisories/github-reviewed/2025/03/GHSA-227r-w5j2-6243/GHSA-227r-w5j2-6243.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-227r-w5j2-6243",
-  "modified": "2025-03-20T12:32:41Z",
+  "modified": "2025-03-21T16:32:50Z",
   "published": "2025-03-20T12:32:41Z",
   "aliases": [
     "CVE-2024-11042"
   ],
+  "summary": "InvokeAI Arbitrary File Deletion vulnerability",
   "details": "In invoke-ai/invokeai version v5.0.2, the web API `POST /api/v1/images/delete` is vulnerable to Arbitrary File Deletion. This vulnerability allows unauthorized attackers to delete arbitrary files on the server, potentially including critical or sensitive system files such as SSH keys, SQLite databases, and configuration files. This can impact the integrity and availability of applications relying on these files.",
   "severity": [
     {
@@ -13,7 +14,27 @@
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H"
     }
   ],
-  "affected": [],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "InvokeAI"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "5.3.0rc1"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
@@ -23,6 +44,10 @@
       "type": "WEB",
       "url": "https://github.com/invoke-ai/invokeai/commit/5440c037674882b2ab7acd59087e9bb04b49657a"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/invoke-ai/InvokeAI"
+    },
     {
       "type": "WEB",
       "url": "https://huntr.com/bounties/635535a7-c804-4789-ac3a-48d951263987"
@@ -30,11 +55,12 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-20"
+      "CWE-20",
+      "CWE-22"
     ],
     "severity": "CRITICAL",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-03-21T16:32:50Z",
     "nvd_published_at": "2025-03-20T10:15:23Z"
   }
 }
\ No newline at end of file