netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-356j-hg45-x525
GHSA-3hf6-f8ch-5869
GHSA-m3p6-43xj-pf9v
GHSA-m8rw-rcpq-2vp2
GHSA-p3ph-6245-4wfc
GHSA-xv7p-jw46-8r85
This commit is contained in:
advisory-database[bot]
2023-12-18 17:39:45 +00:00
parent bc4015d168
commit 29764ef69c
6 changed files with 40 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/12/GHSA-356j-hg45-x525/GHSA-356j-hg45-x525.json
+4
View File
@@ -43,6 +43,10 @@
{
"type": "PACKAGE",
"url": "https://github.com/activeadmin/activeadmin"
},
{
"type": "WEB",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activeadmin/CVE-2023-50448.yml"
}
],
"database_specific": {
advisories/github-reviewed/2023/12/GHSA-3hf6-f8ch-5869/GHSA-3hf6-f8ch-5869.json
+5 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3hf6-f8ch-5869",
"modified": "2023-12-15T03:39:59Z",
"modified": "2023-12-18T17:38:25Z",
"published": "2023-12-14T18:30:21Z",
"aliases": [
"CVE-2023-50100"
@@ -9,7 +9,10 @@
"summary": "Cross-site Scripting in JFinalcms",
"details": "JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
{
advisories/github-reviewed/2023/12/GHSA-m3p6-43xj-pf9v/GHSA-m3p6-43xj-pf9v.json
+5 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m3p6-43xj-pf9v",
"modified": "2023-12-15T03:43:43Z",
"modified": "2023-12-18T17:38:29Z",
"published": "2023-12-14T18:30:21Z",
"aliases": [
"CVE-2023-50101"
@@ -9,7 +9,10 @@
"summary": "Cross-site Scripting in JFinalcms",
"details": "JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
{
advisories/github-reviewed/2023/12/GHSA-m8rw-rcpq-2vp2/GHSA-m8rw-rcpq-2vp2.json
+16
View File
@@ -40,13 +40,29 @@
"type": "WEB",
"url": "https://github.com/SAP/cloud-security-client-go/security/advisories/GHSA-m8rw-rcpq-2vp2"
},
{
"type": "WEB",
"url": "https://github.com/SAP/cloud-security-services-integration-library/security/advisories/GHSA-59c9-pxq8-9c73"
},
{
"type": "WEB",
"url": "https://github.com/SAP/cloud-security-client-go/commit/2e3bd63e152e09f267316a1071034eb5d4b7f498"
},
{
"type": "WEB",
"url": "https://blogs.sap.com/2023/12/12/unveiling-critical-security-updates-sap-btp-security-note-3411067/"
},
{
"type": "PACKAGE",
"url": "https://github.com/SAP/cloud-security-client-go"
},
{
"type": "WEB",
"url": "https://me.sap.com/notes/3411067"
},
{
"type": "WEB",
"url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html"
}
],
"database_specific": {
advisories/github-reviewed/2023/12/GHSA-p3ph-6245-4wfc/GHSA-p3ph-6245-4wfc.json
+5 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p3ph-6245-4wfc",
"modified": "2023-12-15T03:44:29Z",
"modified": "2023-12-18T17:38:33Z",
"published": "2023-12-14T18:30:21Z",
"aliases": [
"CVE-2023-50102"
@@ -9,7 +9,10 @@
"summary": "Cross-site Scripting in JFinalcms",
"details": "JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS).",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
{
advisories/github-reviewed/2023/12/GHSA-xv7p-jw46-8r85/GHSA-xv7p-jw46-8r85.json
+5 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xv7p-jw46-8r85",
"modified": "2023-12-15T03:44:54Z",
"modified": "2023-12-18T17:38:38Z",
"published": "2023-12-14T18:30:21Z",
"aliases": [
"CVE-2023-50137"
@@ -9,7 +9,10 @@
"summary": "Cross-site Scripting in JFinalcms",
"details": "JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
{