diff --git a/advisories/github-reviewed/2023/08/GHSA-2474-2566-3qxp/GHSA-2474-2566-3qxp.json b/advisories/github-reviewed/2023/08/GHSA-2474-2566-3qxp/GHSA-2474-2566-3qxp.json index a4f595f7437..856e857236b 100644 --- a/advisories/github-reviewed/2023/08/GHSA-2474-2566-3qxp/GHSA-2474-2566-3qxp.json +++ b/advisories/github-reviewed/2023/08/GHSA-2474-2566-3qxp/GHSA-2474-2566-3qxp.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-2474-2566-3qxp", - "modified": "2023-09-01T02:21:07Z", + "modified": "2025-02-13T19:10:28Z", "published": "2023-08-22T21:30:26Z", "aliases": [ "CVE-2022-44730" ], "summary": "Apache Batik information disclosure vulnerability", - "details": "Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.\n\nA malicious SVG can probe user profile / data and send it directly as parameter to a URL.\n\n", + "details": "Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.\n\nA malicious SVG can probe user profile / data and send it directly as parameter to a URL.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/08/GHSA-2jc4-r94c-rp7h/GHSA-2jc4-r94c-rp7h.json b/advisories/github-reviewed/2023/08/GHSA-2jc4-r94c-rp7h/GHSA-2jc4-r94c-rp7h.json index 343ae3dda64..d883dca1000 100644 --- a/advisories/github-reviewed/2023/08/GHSA-2jc4-r94c-rp7h/GHSA-2jc4-r94c-rp7h.json +++ b/advisories/github-reviewed/2023/08/GHSA-2jc4-r94c-rp7h/GHSA-2jc4-r94c-rp7h.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-2jc4-r94c-rp7h", - "modified": "2024-09-30T13:35:28Z", + "modified": "2025-02-13T19:10:25Z", "published": "2023-08-21T09:30:21Z", "aliases": [ "CVE-2022-46751" ], "summary": "Apache Ivy External Entity Reference vulnerability", - "details": "Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2.\n\nWhen Apache Ivy prior to 2.5.2 parses XML files - either its own configuration, Ivy files or Apache Maven POMs - it will allow downloading external document type definitions and expand any entity references contained therein when used.\n\nThis can be used to exfiltrate data, access resources only the machine running Ivy has access to or disturb the execution of Ivy in different ways.\n\nStarting with Ivy 2.5.2 DTD processing is disabled by default except when parsing Maven POMs where the default is to allow DTD processing but only to include a DTD snippet shipping with Ivy that is needed to deal with existing Maven POMs that are not valid XML files but are nevertheless accepted by Maven. Access can be be made more lenient via newly introduced system properties where needed.\n\nUsers of Ivy prior to version 2.5.2 can use Java system properties to restrict processing of external DTDs, see the section about \"JAXP Properties for External Access restrictions\" inside Oracle's \"Java API for XML Processing (JAXP) Security Guide\".\n\n", + "details": "Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2.\n\nWhen Apache Ivy prior to 2.5.2 parses XML files - either its own configuration, Ivy files or Apache Maven POMs - it will allow downloading external document type definitions and expand any entity references contained therein when used.\n\nThis can be used to exfiltrate data, access resources only the machine running Ivy has access to or disturb the execution of Ivy in different ways.\n\nStarting with Ivy 2.5.2 DTD processing is disabled by default except when parsing Maven POMs where the default is to allow DTD processing but only to include a DTD snippet shipping with Ivy that is needed to deal with existing Maven POMs that are not valid XML files but are nevertheless accepted by Maven. Access can be be made more lenient via newly introduced system properties where needed.\n\nUsers of Ivy prior to version 2.5.2 can use Java system properties to restrict processing of external DTDs, see the section about \"JAXP Properties for External Access restrictions\" inside Oracle's \"Java API for XML Processing (JAXP) Security Guide\".", "severity": [ { "type": "CVSS_V3", @@ -75,7 +75,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-611" + "CWE-611", + "CWE-91" ], "severity": "HIGH", "github_reviewed": true, diff --git a/advisories/github-reviewed/2023/08/GHSA-gq5f-xv48-2365/GHSA-gq5f-xv48-2365.json b/advisories/github-reviewed/2023/08/GHSA-gq5f-xv48-2365/GHSA-gq5f-xv48-2365.json index b2091f060fb..55fa4b93f82 100644 --- a/advisories/github-reviewed/2023/08/GHSA-gq5f-xv48-2365/GHSA-gq5f-xv48-2365.json +++ b/advisories/github-reviewed/2023/08/GHSA-gq5f-xv48-2365/GHSA-gq5f-xv48-2365.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-gq5f-xv48-2365", - "modified": "2023-08-30T12:59:50Z", + "modified": "2025-02-13T19:10:32Z", "published": "2023-08-22T21:30:26Z", "aliases": [ "CVE-2022-44729" ], "summary": "Apache XML Graphics Batik Server-Side Request Forgery vulnerability", - "details": "Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.\n\nOn version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later.\n\n", + "details": "Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.\n\nOn version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/08/GHSA-vxvm-qww3-2fh7/GHSA-vxvm-qww3-2fh7.json b/advisories/github-reviewed/2023/08/GHSA-vxvm-qww3-2fh7/GHSA-vxvm-qww3-2fh7.json index 3ef619e22db..6610c16bb7c 100644 --- a/advisories/github-reviewed/2023/08/GHSA-vxvm-qww3-2fh7/GHSA-vxvm-qww3-2fh7.json +++ b/advisories/github-reviewed/2023/08/GHSA-vxvm-qww3-2fh7/GHSA-vxvm-qww3-2fh7.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-vxvm-qww3-2fh7", - "modified": "2024-02-09T00:35:06Z", + "modified": "2025-02-13T19:11:37Z", "published": "2023-08-29T18:31:53Z", "aliases": [ "CVE-2021-32050" ], "summary": "MongoDB Driver may publish events containing authentication-related data", - "details": "Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed.\n\nWithout due care, an application may inadvertently expose this sensitive information, e.g., by writing it to a log file. This issue only arises if an application enables the command listener feature (this is not enabled by default).\n\nThis issue affects the MongoDB C Driver 1.0.0 prior to 1.17.7, MongoDB PHP Driver 1.0.0 prior to 1.9.2, MongoDB Swift Driver 1.0.0 prior to 1.1.1, MongoDB Node.js Driver 3.6 prior to 3.6.10, MongoDB Node.js Driver 4.0 prior to 4.17.0 and MongoDB Node.js Driver 5.0 prior to 5.8.0. This issue also affects users of the MongoDB C++ Driver dependent on the C driver 1.0.0 prior to 1.17.7 (C++ driver prior to 3.7.0).\n\n", + "details": "Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed.\n\nWithout due care, an application may inadvertently expose this sensitive information, e.g., by writing it to a log file. This issue only arises if an application enables the command listener feature (this is not enabled by default).\n\nThis issue affects the MongoDB C Driver 1.0.0 prior to 1.17.7, MongoDB PHP Driver 1.0.0 prior to 1.9.2, MongoDB Swift Driver 1.0.0 prior to 1.1.1, MongoDB Node.js Driver 3.6 prior to 3.6.10, MongoDB Node.js Driver 4.0 prior to 4.17.0 and MongoDB Node.js Driver 5.0 prior to 5.8.0. This issue also affects users of the MongoDB C++ Driver dependent on the C driver 1.0.0 prior to 1.17.7 (C++ driver prior to 3.7.0).", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/08/GHSA-x2mh-8fmc-rqgh/GHSA-x2mh-8fmc-rqgh.json b/advisories/github-reviewed/2023/08/GHSA-x2mh-8fmc-rqgh/GHSA-x2mh-8fmc-rqgh.json index 64eafc3fc24..a2d8428e37c 100644 --- a/advisories/github-reviewed/2023/08/GHSA-x2mh-8fmc-rqgh/GHSA-x2mh-8fmc-rqgh.json +++ b/advisories/github-reviewed/2023/08/GHSA-x2mh-8fmc-rqgh/GHSA-x2mh-8fmc-rqgh.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-x2mh-8fmc-rqgh", - "modified": "2024-09-12T14:02:58Z", + "modified": "2025-02-13T19:11:02Z", "published": "2023-08-23T18:30:34Z", "aliases": [ "CVE-2023-37379" ], "summary": "Apache Airflow denial of service vulnerability", - "details": "Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user to access connection information and exploit the test connection feature by sending many requests, leading to a denial of service (DoS) condition on the server. Furthermore, malicious actors can leverage this vulnerability to establish harmful connections with the server.\n\nUsers of Apache Airflow are strongly advised to upgrade to version 2.7.0 or newer to mitigate the risk associated with this vulnerability. Additionally, administrators are encouraged to review and adjust user permissions to restrict access to sensitive functionalities, reducing the attack surface.\n\n", + "details": "Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user to access connection information and exploit the test connection feature by sending many requests, leading to a denial of service (DoS) condition on the server. Furthermore, malicious actors can leverage this vulnerability to establish harmful connections with the server.\n\nUsers of Apache Airflow are strongly advised to upgrade to version 2.7.0 or newer to mitigate the risk associated with this vulnerability. Additionally, administrators are encouraged to review and adjust user permissions to restrict access to sensitive functionalities, reducing the attack surface.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/09/GHSA-49hh-fprx-m68g/GHSA-49hh-fprx-m68g.json b/advisories/github-reviewed/2023/09/GHSA-49hh-fprx-m68g/GHSA-49hh-fprx-m68g.json index d036edb76d8..0c25a5b4295 100644 --- a/advisories/github-reviewed/2023/09/GHSA-49hh-fprx-m68g/GHSA-49hh-fprx-m68g.json +++ b/advisories/github-reviewed/2023/09/GHSA-49hh-fprx-m68g/GHSA-49hh-fprx-m68g.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-49hh-fprx-m68g", - "modified": "2023-09-28T13:40:19Z", + "modified": "2025-02-13T19:11:48Z", "published": "2023-09-04T16:35:37Z", "aliases": [ "CVE-2023-41051" ], "summary": "Default functions in VolatileMemory trait lack bounds checks, potentially leading to out-of-bounds memory accesses", - "details": "### Impact\nAn issue was discovered in the default implementations of the `VolatileMemory::{get_atomic_ref, aligned_as_ref, aligned_as_mut, get_ref, get_array_ref}` trait functions, which allows out-of-bounds memory access if the `VolatileMemory::get_slice` function returns a `VolatileSlice` whose length is less than the function’s `count` argument. No implementations of `get_slice` provided in `vm_memory` are affected. Users of custom `VolatileMemory` implementations may be impacted if the custom implementation does not adhere to `get_slice`'s documentation.\n\n### Patches\nThe issue started in version 0.1.0 but was fixed in version 0.12.2 by inserting a check that verifies that the `VolatileSlice` returned by `get_slice` is of the correct length.\n\n### Workarounds\nNot Required\n\n### References\nhttps://github.com/rust-vmm/vm-memory/commit/aff1dd4a5259f7deba56692840f7a2d9ca34c9c8\nhttps://crates.io/crates/vm-memory/0.12.2\n", + "details": "### Impact\nAn issue was discovered in the default implementations of the `VolatileMemory::{get_atomic_ref, aligned_as_ref, aligned_as_mut, get_ref, get_array_ref}` trait functions, which allows out-of-bounds memory access if the `VolatileMemory::get_slice` function returns a `VolatileSlice` whose length is less than the function’s `count` argument. No implementations of `get_slice` provided in `vm_memory` are affected. Users of custom `VolatileMemory` implementations may be impacted if the custom implementation does not adhere to `get_slice`'s documentation.\n\n### Patches\nThe issue started in version 0.1.0 but was fixed in version 0.12.2 by inserting a check that verifies that the `VolatileSlice` returned by `get_slice` is of the correct length.\n\n### Workarounds\nNot Required\n\n### References\nhttps://github.com/rust-vmm/vm-memory/commit/aff1dd4a5259f7deba56692840f7a2d9ca34c9c8\nhttps://crates.io/crates/vm-memory/0.12.2", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/09/GHSA-fj4x-m62j-wvwg/GHSA-fj4x-m62j-wvwg.json b/advisories/github-reviewed/2023/09/GHSA-fj4x-m62j-wvwg/GHSA-fj4x-m62j-wvwg.json index 66641dee2a3..e8919485398 100644 --- a/advisories/github-reviewed/2023/09/GHSA-fj4x-m62j-wvwg/GHSA-fj4x-m62j-wvwg.json +++ b/advisories/github-reviewed/2023/09/GHSA-fj4x-m62j-wvwg/GHSA-fj4x-m62j-wvwg.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-fj4x-m62j-wvwg", - "modified": "2023-09-29T20:15:06Z", + "modified": "2025-02-13T19:11:41Z", "published": "2023-09-06T15:30:27Z", "aliases": [ "CVE-2023-37941" diff --git a/advisories/github-reviewed/2023/09/GHSA-qvh6-3j7x-3hq7/GHSA-qvh6-3j7x-3hq7.json b/advisories/github-reviewed/2023/09/GHSA-qvh6-3j7x-3hq7/GHSA-qvh6-3j7x-3hq7.json index 3cc3c64f890..62c040a6d05 100644 --- a/advisories/github-reviewed/2023/09/GHSA-qvh6-3j7x-3hq7/GHSA-qvh6-3j7x-3hq7.json +++ b/advisories/github-reviewed/2023/09/GHSA-qvh6-3j7x-3hq7/GHSA-qvh6-3j7x-3hq7.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-qvh6-3j7x-3hq7", - "modified": "2024-10-25T16:53:43Z", + "modified": "2025-02-13T19:11:44Z", "published": "2023-09-05T12:30:16Z", "aliases": [ "CVE-2023-20898" ], "summary": "Salt can cause Git Providers to get wrong data", - "details": "Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.\n", + "details": "Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/09/GHSA-rmqp-9w4c-gc7w/GHSA-rmqp-9w4c-gc7w.json b/advisories/github-reviewed/2023/09/GHSA-rmqp-9w4c-gc7w/GHSA-rmqp-9w4c-gc7w.json index ea5fe09e42f..f7828b1635e 100644 --- a/advisories/github-reviewed/2023/09/GHSA-rmqp-9w4c-gc7w/GHSA-rmqp-9w4c-gc7w.json +++ b/advisories/github-reviewed/2023/09/GHSA-rmqp-9w4c-gc7w/GHSA-rmqp-9w4c-gc7w.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-rmqp-9w4c-gc7w", - "modified": "2024-08-02T10:32:36Z", + "modified": "2025-02-13T19:11:39Z", "published": "2023-09-05T15:30:25Z", "aliases": [ "CVE-2023-40743" ], "summary": "Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService", - "details": "When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through \"ServiceFactory.getService\" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API method, this could expose the application to DoS, SSRF and even attacks leading to RCE.\n\nAs Axis 1 has been EOL we recommend you migrate to a different SOAP engine, such as Apache Axis 2/Java. As a workaround, you may review your code to verify no untrusted or unsanitized input is passed to \"ServiceFactory.getService\", or by applying the patch from https://github.com/apache/axis-axis1-java/commit/7e66753427466590d6def0125e448d2791723210 . The Apache Axis project does not expect to create an Axis 1.x release fixing this problem, though contributors that would like to work towards this are welcome.\n\n", + "details": "When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through \"ServiceFactory.getService\" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API method, this could expose the application to DoS, SSRF and even attacks leading to RCE.\n\nAs Axis 1 has been EOL we recommend you migrate to a different SOAP engine, such as Apache Axis 2/Java. As a workaround, you may review your code to verify no untrusted or unsanitized input is passed to \"ServiceFactory.getService\", or by applying the patch from https://github.com/apache/axis-axis1-java/commit/7e66753427466590d6def0125e448d2791723210 . The Apache Axis project does not expect to create an Axis 1.x release fixing this problem, though contributors that would like to work towards this are welcome.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/09/GHSA-vpjg-wmf8-29h9/GHSA-vpjg-wmf8-29h9.json b/advisories/github-reviewed/2023/09/GHSA-vpjg-wmf8-29h9/GHSA-vpjg-wmf8-29h9.json index fc6ea56f658..a3c7149c207 100644 --- a/advisories/github-reviewed/2023/09/GHSA-vpjg-wmf8-29h9/GHSA-vpjg-wmf8-29h9.json +++ b/advisories/github-reviewed/2023/09/GHSA-vpjg-wmf8-29h9/GHSA-vpjg-wmf8-29h9.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-vpjg-wmf8-29h9", - "modified": "2024-10-25T20:20:59Z", + "modified": "2025-02-13T19:11:42Z", "published": "2023-09-05T12:30:16Z", "aliases": [ "CVE-2023-20897" ], "summary": "Salt vulnerable to denial of service", - "details": "Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.\n", + "details": "Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/09/GHSA-wpg8-mf6h-gm92/GHSA-wpg8-mf6h-gm92.json b/advisories/github-reviewed/2023/09/GHSA-wpg8-mf6h-gm92/GHSA-wpg8-mf6h-gm92.json index 694da06e45f..4cfd04d9ab1 100644 --- a/advisories/github-reviewed/2023/09/GHSA-wpg8-mf6h-gm92/GHSA-wpg8-mf6h-gm92.json +++ b/advisories/github-reviewed/2023/09/GHSA-wpg8-mf6h-gm92/GHSA-wpg8-mf6h-gm92.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-wpg8-mf6h-gm92", - "modified": "2024-09-12T14:10:56Z", + "modified": "2025-02-13T19:11:46Z", "published": "2023-09-12T18:58:34Z", "aliases": [ "CVE-2023-40611" ], "summary": "Apache Airflow Incorrect Authorization vulnerability", - "details": "Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configuration parameters, start date, etc.\n\nUsers should upgrade to version 2.7.1 or later which has removed the vulnerability.\n", + "details": "Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configuration parameters, start date, etc.\n\nUsers should upgrade to version 2.7.1 or later which has removed the vulnerability.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2024/02/GHSA-ccgv-vj62-xf9h/GHSA-ccgv-vj62-xf9h.json b/advisories/github-reviewed/2024/02/GHSA-ccgv-vj62-xf9h/GHSA-ccgv-vj62-xf9h.json index 0b3d57cd15a..d1f4c62ba60 100644 --- a/advisories/github-reviewed/2024/02/GHSA-ccgv-vj62-xf9h/GHSA-ccgv-vj62-xf9h.json +++ b/advisories/github-reviewed/2024/02/GHSA-ccgv-vj62-xf9h/GHSA-ccgv-vj62-xf9h.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-ccgv-vj62-xf9h", - "modified": "2024-08-22T18:59:22Z", + "modified": "2025-02-13T19:12:19Z", "published": "2024-02-23T06:30:31Z", "aliases": [ "CVE-2024-22243" ], "summary": "Spring Web vulnerable to Open Redirect or Server Side Request Forgery", - "details": "Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect attack or to a SSRF attack if the URL is used after passing validation checks.\n", + "details": "Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect attack or to a SSRF attack if the URL is used after passing validation checks.", "severity": [ { "type": "CVSS_V3", @@ -112,6 +112,10 @@ { "type": "WEB", "url": "https://spring.io/security/cve-2024-22243" + }, + { + "type": "WEB", + "url": "http://seclists.org/fulldisclosure/2024/Sep/24" } ], "database_specific": { diff --git a/advisories/github-reviewed/2024/02/GHSA-h8wv-9h96-m4hr/GHSA-h8wv-9h96-m4hr.json b/advisories/github-reviewed/2024/02/GHSA-h8wv-9h96-m4hr/GHSA-h8wv-9h96-m4hr.json index cdc2ab01b75..e95024e44f1 100644 --- a/advisories/github-reviewed/2024/02/GHSA-h8wv-9h96-m4hr/GHSA-h8wv-9h96-m4hr.json +++ b/advisories/github-reviewed/2024/02/GHSA-h8wv-9h96-m4hr/GHSA-h8wv-9h96-m4hr.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-h8wv-9h96-m4hr", - "modified": "2025-01-22T18:45:14Z", + "modified": "2025-02-13T19:11:04Z", "published": "2024-02-23T18:30:59Z", "aliases": [ "CVE-2024-27319" ], "summary": "Onnx Out-of-bounds Read vulnerability", - "details": "Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.\n", + "details": "Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2024/02/GHSA-qrp9-23p7-g5mf/GHSA-qrp9-23p7-g5mf.json b/advisories/github-reviewed/2024/02/GHSA-qrp9-23p7-g5mf/GHSA-qrp9-23p7-g5mf.json index 0dd0ac8a93e..52ef991d3b7 100644 --- a/advisories/github-reviewed/2024/02/GHSA-qrp9-23p7-g5mf/GHSA-qrp9-23p7-g5mf.json +++ b/advisories/github-reviewed/2024/02/GHSA-qrp9-23p7-g5mf/GHSA-qrp9-23p7-g5mf.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-qrp9-23p7-g5mf", - "modified": "2025-01-28T19:46:05Z", + "modified": "2025-02-13T19:10:30Z", "published": "2024-02-27T18:31:02Z", "aliases": [ "CVE-2023-50380" diff --git a/advisories/github-reviewed/2024/02/GHSA-rc6h-qwj9-2c53/GHSA-rc6h-qwj9-2c53.json b/advisories/github-reviewed/2024/02/GHSA-rc6h-qwj9-2c53/GHSA-rc6h-qwj9-2c53.json index c76d2a1a451..4e3bb4acd29 100644 --- a/advisories/github-reviewed/2024/02/GHSA-rc6h-qwj9-2c53/GHSA-rc6h-qwj9-2c53.json +++ b/advisories/github-reviewed/2024/02/GHSA-rc6h-qwj9-2c53/GHSA-rc6h-qwj9-2c53.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-rc6h-qwj9-2c53", - "modified": "2024-08-02T10:41:30Z", + "modified": "2025-02-13T19:12:14Z", "published": "2024-02-23T18:30:59Z", "aliases": [ "CVE-2024-23320" ], "summary": "Apache DolphinScheduler vulnerable to arbitrary JavaScript execution as root for authenticated users", - "details": "Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed JavaScript to be executed on the server.\n\nThis issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it.\n\nThis issue affects Apache DolphinScheduler: until 3.2.1.\n\nUsers are recommended to upgrade to version 3.2.1, which fixes the issue.\n\n", + "details": "Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed JavaScript to be executed on the server.\n\nThis issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it.\n\nThis issue affects Apache DolphinScheduler: until 3.2.1.\n\nUsers are recommended to upgrade to version 3.2.1, which fixes the issue.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2024/02/GHSA-rghc-9fhx-h32m/GHSA-rghc-9fhx-h32m.json b/advisories/github-reviewed/2024/02/GHSA-rghc-9fhx-h32m/GHSA-rghc-9fhx-h32m.json index 6eb5b9328fe..3c12a273988 100644 --- a/advisories/github-reviewed/2024/02/GHSA-rghc-9fhx-h32m/GHSA-rghc-9fhx-h32m.json +++ b/advisories/github-reviewed/2024/02/GHSA-rghc-9fhx-h32m/GHSA-rghc-9fhx-h32m.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-rghc-9fhx-h32m", - "modified": "2024-08-13T21:57:10Z", + "modified": "2025-02-13T19:10:36Z", "published": "2024-02-27T09:31:16Z", "aliases": [ "CVE-2023-50379" ], "summary": "Apache Ambari: authenticated users could perform command injection to perform RCE", - "details": "Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue.\n\nImpact:\nA Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host.\n\n", + "details": "Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue.\n\nImpact:\nA Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2024/02/GHSA-whh8-fjgc-qp73/GHSA-whh8-fjgc-qp73.json b/advisories/github-reviewed/2024/02/GHSA-whh8-fjgc-qp73/GHSA-whh8-fjgc-qp73.json index 6cca8e7761b..aa4b72fc0df 100644 --- a/advisories/github-reviewed/2024/02/GHSA-whh8-fjgc-qp73/GHSA-whh8-fjgc-qp73.json +++ b/advisories/github-reviewed/2024/02/GHSA-whh8-fjgc-qp73/GHSA-whh8-fjgc-qp73.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-whh8-fjgc-qp73", - "modified": "2025-01-22T18:45:51Z", + "modified": "2025-02-13T19:11:27Z", "published": "2024-02-23T18:30:59Z", "aliases": [ "CVE-2024-27318" ], "summary": "Onnx Directory Traversal vulnerability", - "details": "Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass for the patch added for CVE-2022-25882.\n", + "details": "Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass for the patch added for CVE-2022-25882.", "severity": [ { "type": "CVSS_V3",