From 227b466ccd5e99d32bd55d133dd1c1df64114de7 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 11 Feb 2025 19:07:08 +0000 Subject: [PATCH] Publish Advisories GHSA-vq94-9pfv-ccqr GHSA-fh5r-crhr-qrrq GHSA-79v4-65xg-pq4g GHSA-wmcc-9vch-jmx4 --- .../GHSA-vq94-9pfv-ccqr.json | 6 +++--- .../GHSA-fh5r-crhr-qrrq.json | 6 +++--- .../GHSA-79v4-65xg-pq4g.json | 20 +++++++++++++++++-- .../GHSA-wmcc-9vch-jmx4.json | 15 +++++++++++--- 4 files changed, 36 insertions(+), 11 deletions(-) diff --git a/advisories/github-reviewed/2024/12/GHSA-vq94-9pfv-ccqr/GHSA-vq94-9pfv-ccqr.json b/advisories/github-reviewed/2024/12/GHSA-vq94-9pfv-ccqr/GHSA-vq94-9pfv-ccqr.json index 1eaa3746458..baebf6bbfeb 100644 --- a/advisories/github-reviewed/2024/12/GHSA-vq94-9pfv-ccqr/GHSA-vq94-9pfv-ccqr.json +++ b/advisories/github-reviewed/2024/12/GHSA-vq94-9pfv-ccqr/GHSA-vq94-9pfv-ccqr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vq94-9pfv-ccqr", - "modified": "2024-12-23T20:56:26Z", + "modified": "2025-02-11T19:06:05Z", "published": "2024-12-23T18:30:47Z", "aliases": [ "CVE-2024-45387" @@ -11,7 +11,7 @@ "severity": [ { "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "affected": [ @@ -61,7 +61,7 @@ "cwe_ids": [ "CWE-89" ], - "severity": "CRITICAL", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-12-23T20:56:26Z", "nvd_published_at": "2024-12-23T16:15:06Z" diff --git a/advisories/github-reviewed/2025/01/GHSA-fh5r-crhr-qrrq/GHSA-fh5r-crhr-qrrq.json b/advisories/github-reviewed/2025/01/GHSA-fh5r-crhr-qrrq/GHSA-fh5r-crhr-qrrq.json index f7c486b519f..5df2eed364b 100644 --- a/advisories/github-reviewed/2025/01/GHSA-fh5r-crhr-qrrq/GHSA-fh5r-crhr-qrrq.json +++ b/advisories/github-reviewed/2025/01/GHSA-fh5r-crhr-qrrq/GHSA-fh5r-crhr-qrrq.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-fh5r-crhr-qrrq", - "modified": "2025-01-21T20:15:57Z", + "modified": "2025-02-11T19:05:47Z", "published": "2025-01-21T12:30:47Z", "aliases": [ "CVE-2025-23184" @@ -11,7 +11,7 @@ "severity": [ { "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "affected": [ @@ -107,7 +107,7 @@ "cwe_ids": [ "CWE-400" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2025-01-21T20:15:57Z", "nvd_published_at": "2025-01-21T10:15:08Z" diff --git a/advisories/github-reviewed/2025/02/GHSA-79v4-65xg-pq4g/GHSA-79v4-65xg-pq4g.json b/advisories/github-reviewed/2025/02/GHSA-79v4-65xg-pq4g/GHSA-79v4-65xg-pq4g.json index 38c223f7dd6..b8f1cf6d33a 100644 --- a/advisories/github-reviewed/2025/02/GHSA-79v4-65xg-pq4g/GHSA-79v4-65xg-pq4g.json +++ b/advisories/github-reviewed/2025/02/GHSA-79v4-65xg-pq4g/GHSA-79v4-65xg-pq4g.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-79v4-65xg-pq4g", - "modified": "2025-02-11T18:06:42Z", + "modified": "2025-02-11T19:06:23Z", "published": "2025-02-11T18:06:42Z", "aliases": [ "CVE-2024-12797" @@ -35,6 +35,22 @@ "type": "WEB", "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12797" + }, + { + "type": "WEB", + "url": "https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9" + }, + { + "type": "WEB", + "url": "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7" + }, + { + "type": "WEB", + "url": "https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699" + }, { "type": "PACKAGE", "url": "https://github.com/pyca/cryptography" @@ -52,6 +68,6 @@ "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2025-02-11T18:06:42Z", - "nvd_published_at": null + "nvd_published_at": "2025-02-11T16:15:38Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2025/02/GHSA-wmcc-9vch-jmx4/GHSA-wmcc-9vch-jmx4.json b/advisories/github-reviewed/2025/02/GHSA-wmcc-9vch-jmx4/GHSA-wmcc-9vch-jmx4.json index 29ab44eafe0..998209aa624 100644 --- a/advisories/github-reviewed/2025/02/GHSA-wmcc-9vch-jmx4/GHSA-wmcc-9vch-jmx4.json +++ b/advisories/github-reviewed/2025/02/GHSA-wmcc-9vch-jmx4/GHSA-wmcc-9vch-jmx4.json @@ -1,14 +1,19 @@ { "schema_version": "1.4.0", "id": "GHSA-wmcc-9vch-jmx4", - "modified": "2025-02-04T18:32:01Z", + "modified": "2025-02-11T19:05:30Z", "published": "2025-02-04T12:30:59Z", "aliases": [ "CVE-2025-23015" ], "summary": "Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions", "details": "Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on affected versions should review data access rules for potential breaches.\n\nThis issue affects Apache Cassandra through 3.0.30, 3.11.17, 4.0.15, 4.1.7, 5.0.2.\n\nUsers are recommended to upgrade to versions 3.0.31, 3.11.18, 4.0.16, 4.1.8, 5.0.3, which fixes the issue.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [ { "package": { @@ -130,13 +135,17 @@ { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2025/02/03/2" + }, + { + "type": "WEB", + "url": "http://www.openwall.com/lists/oss-security/2025/02/11/1" } ], "database_specific": { "cwe_ids": [ "CWE-267" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2025-02-04T18:32:00Z", "nvd_published_at": "2025-02-04T10:15:09Z"