netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-38vf-35cg-m73w
GHSA-rr66-qh5m-w6mx
GHSA-38vf-35cg-m73w
GHSA-rr66-qh5m-w6mx
This commit is contained in:
advisory-database[bot]
2023-09-11 18:06:27 +00:00
parent fa8ac8ea46
commit 2dd6d4c551
4 changed files with 154 additions and 70 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/09/GHSA-38vf-35cg-m73w/GHSA-38vf-35cg-m73w.json
+63
View File
@@ -0,0 +1,63 @@
{
"schema_version": "1.4.0",
"id": "GHSA-38vf-35cg-m73w",
"modified": "2023-09-11T18:04:48Z",
"published": "2023-09-09T00:30:48Z",
"aliases": [
"CVE-2023-41564"
],
"summary": "Cockpit CMS arbitrary file upload vulnerability",
"details": "An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted `.shtml` file.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "cockpit-hq/cockpit"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.6.3"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41564"
},
{
"type": "PACKAGE",
"url": "https://github.com/Cockpit-HQ/Cockpit"
},
{
"type": "WEB",
"url": "https://github.com/LongHair00/Mitre_opensource_report/blob/main/CockpitCMS-StoredXSS.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2023-09-11T18:04:48Z",
"nvd_published_at": null
}
}
advisories/github-reviewed/2023/09/GHSA-rr66-qh5m-w6mx/GHSA-rr66-qh5m-w6mx.json
+91
View File
@@ -0,0 +1,91 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rr66-qh5m-w6mx",
"modified": "2023-09-11T18:04:22Z",
"published": "2023-09-09T00:30:48Z",
"aliases": [
"CVE-2023-42278"
],
"summary": "hutool Buffer Overflow vulnerability",
"details": "hutool v5.8.21 was discovered to contain a buffer overflow via the component `JSONUtil.parse()`.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "cn.hutool:hutool-core"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.8.21"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "cn.hutool:hutool-json"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.8.21"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42278"
},
{
"type": "WEB",
"url": "https://github.com/dromara/hutool/issues/3289"
},
{
"type": "WEB",
"url": "https://github.com/dromara/hutool/commit/5c4486b9f58a83f283868135138f6ff3741b8c12"
},
{
"type": "PACKAGE",
"url": "https://github.com/dromara/hutool"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2023-09-11T18:04:22Z",
"nvd_published_at": null
}
}
advisories/unreviewed/2023/09/GHSA-38vf-35cg-m73w/GHSA-38vf-35cg-m73w.json
-35
View File
@@ -1,35 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-38vf-35cg-m73w",
"modified": "2023-09-09T00:30:48Z",
"published": "2023-09-09T00:30:48Z",
"aliases": [
"CVE-2023-41564"
],
"details": "An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41564"
},
{
"type": "WEB",
"url": "https://github.com/LongHair00/Mitre_opensource_report/blob/main/CockpitCMS-StoredXSS.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/09/GHSA-rr66-qh5m-w6mx/GHSA-rr66-qh5m-w6mx.json
-35
View File
@@ -1,35 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rr66-qh5m-w6mx",
"modified": "2023-09-09T00:30:48Z",
"published": "2023-09-09T00:30:48Z",
"aliases": [
"CVE-2023-42278"
],
"details": "hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42278"
},
{
"type": "WEB",
"url": "https://github.com/dromara/hutool/issues/3289"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}