netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-vq94-9pfv-ccqr
GHSA-fh5r-crhr-qrrq
GHSA-79v4-65xg-pq4g
GHSA-wmcc-9vch-jmx4
This commit is contained in:
advisory-database[bot]
2025-02-11 19:07:08 +00:00
parent 11f8ef4aec
commit 227b466ccd
4 changed files with 36 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/12/GHSA-vq94-9pfv-ccqr/GHSA-vq94-9pfv-ccqr.json
+3 -3
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vq94-9pfv-ccqr",
"modified": "2024-12-23T20:56:26Z",
"modified": "2025-02-11T19:06:05Z",
"published": "2024-12-23T18:30:47Z",
"aliases": [
"CVE-2024-45387"
@@ -11,7 +11,7 @@
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -61,7 +61,7 @@
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-12-23T20:56:26Z",
"nvd_published_at": "2024-12-23T16:15:06Z"
advisories/github-reviewed/2025/01/GHSA-fh5r-crhr-qrrq/GHSA-fh5r-crhr-qrrq.json
+3 -3
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fh5r-crhr-qrrq",
"modified": "2025-01-21T20:15:57Z",
"modified": "2025-02-11T19:05:47Z",
"published": "2025-01-21T12:30:47Z",
"aliases": [
"CVE-2025-23184"
@@ -11,7 +11,7 @@
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -107,7 +107,7 @@
"cwe_ids": [
"CWE-400"
],
"severity": "MODERATE",
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2025-01-21T20:15:57Z",
"nvd_published_at": "2025-01-21T10:15:08Z"
advisories/github-reviewed/2025/02/GHSA-79v4-65xg-pq4g/GHSA-79v4-65xg-pq4g.json
+18 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-79v4-65xg-pq4g",
"modified": "2025-02-11T18:06:42Z",
"modified": "2025-02-11T19:06:23Z",
"published": "2025-02-11T18:06:42Z",
"aliases": [
"CVE-2024-12797"
@@ -35,6 +35,22 @@
"type": "WEB",
"url": "https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12797"
},
{
"type": "WEB",
"url": "https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9"
},
{
"type": "WEB",
"url": "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7"
},
{
"type": "WEB",
"url": "https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699"
},
{
"type": "PACKAGE",
"url": "https://github.com/pyca/cryptography"
@@ -52,6 +68,6 @@
"severity": "LOW",
"github_reviewed": true,
"github_reviewed_at": "2025-02-11T18:06:42Z",
"nvd_published_at": null
"nvd_published_at": "2025-02-11T16:15:38Z"
}
}
advisories/github-reviewed/2025/02/GHSA-wmcc-9vch-jmx4/GHSA-wmcc-9vch-jmx4.json
+12 -3
View File
@@ -1,14 +1,19 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wmcc-9vch-jmx4",
"modified": "2025-02-04T18:32:01Z",
"modified": "2025-02-11T19:05:30Z",
"published": "2025-02-04T12:30:59Z",
"aliases": [
"CVE-2025-23015"
],
"summary": "Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions",
"details": "Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on affected versions should review data access rules for potential breaches.\n\nThis issue affects Apache Cassandra through 3.0.30, 3.11.17, 4.0.15, 4.1.7, 5.0.2.\n\nUsers are recommended to upgrade to versions 3.0.31, 3.11.18, 4.0.16, 4.1.8, 5.0.3, which fixes the issue.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"package": {
@@ -130,13 +135,17 @@
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2025/02/03/2"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2025/02/11/1"
}
],
"database_specific": {
"cwe_ids": [
"CWE-267"
],
"severity": "MODERATE",
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2025-02-04T18:32:00Z",
"nvd_published_at": "2025-02-04T10:15:09Z"