From 35fdb168b6bfbb47d7bf02383224611c9a41a672 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 15 Apr 2025 09:32:38 +0000
Subject: [PATCH] Publish Advisories

GHSA-2ff5-6f9m-635q
GHSA-g288-p356-rj5f
GHSA-j2g7-67mh-m3hh
GHSA-m62q-c3xj-46g7
GHSA-m787-xmrc-4c9m
---
 .../GHSA-2ff5-6f9m-635q.json                  | 36 +++++++++++++++++
 .../GHSA-g288-p356-rj5f.json                  | 36 +++++++++++++++++
 .../GHSA-j2g7-67mh-m3hh.json                  | 36 +++++++++++++++++
 .../GHSA-m62q-c3xj-46g7.json                  | 40 +++++++++++++++++++
 .../GHSA-m787-xmrc-4c9m.json                  | 36 +++++++++++++++++
 5 files changed, 184 insertions(+)
 create mode 100644 advisories/unreviewed/2025/04/GHSA-2ff5-6f9m-635q/GHSA-2ff5-6f9m-635q.json
 create mode 100644 advisories/unreviewed/2025/04/GHSA-g288-p356-rj5f/GHSA-g288-p356-rj5f.json
 create mode 100644 advisories/unreviewed/2025/04/GHSA-j2g7-67mh-m3hh/GHSA-j2g7-67mh-m3hh.json
 create mode 100644 advisories/unreviewed/2025/04/GHSA-m62q-c3xj-46g7/GHSA-m62q-c3xj-46g7.json
 create mode 100644 advisories/unreviewed/2025/04/GHSA-m787-xmrc-4c9m/GHSA-m787-xmrc-4c9m.json

diff --git a/advisories/unreviewed/2025/04/GHSA-2ff5-6f9m-635q/GHSA-2ff5-6f9m-635q.json b/advisories/unreviewed/2025/04/GHSA-2ff5-6f9m-635q/GHSA-2ff5-6f9m-635q.json
new file mode 100644
index 00000000000..c61895344de
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-2ff5-6f9m-635q/GHSA-2ff5-6f9m-635q.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2ff5-6f9m-635q",
+  "modified": "2025-04-15T09:30:34Z",
+  "published": "2025-04-15T09:30:34Z",
+  "aliases": [
+    "CVE-2025-3579"
+  ],
+  "details": "In versions prior to Aidex 1.7, an authenticated malicious user, taking advantage of an open registry, could execute unauthorised commands within the system. This includes executing operating system (Unix) commands, interacting with internal services such as PHP or MySQL, and even invoking native functions of the framework used, such as Laravel or Symfony. This execution is achieved by Prompt Injection attacks through the /api/<string-chat>/message endpoint, manipulating the content of the ‘content’ parameter.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3579"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-aidex"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-94"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-15T09:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-g288-p356-rj5f/GHSA-g288-p356-rj5f.json b/advisories/unreviewed/2025/04/GHSA-g288-p356-rj5f/GHSA-g288-p356-rj5f.json
new file mode 100644
index 00000000000..bd0fbd54b72
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-g288-p356-rj5f/GHSA-g288-p356-rj5f.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g288-p356-rj5f",
+  "modified": "2025-04-15T09:30:34Z",
+  "published": "2025-04-15T09:30:34Z",
+  "aliases": [
+    "CVE-2025-3575"
+  ],
+  "details": "Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via \"idUsuario\" parameter in \"/helper/Familia/establecerUsuarioSeleccion\" endpoint.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3575"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/insecure-direct-object-reference-deporsite-t-innova"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-639"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-15T09:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-j2g7-67mh-m3hh/GHSA-j2g7-67mh-m3hh.json b/advisories/unreviewed/2025/04/GHSA-j2g7-67mh-m3hh/GHSA-j2g7-67mh-m3hh.json
new file mode 100644
index 00000000000..b79b9d83572
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-j2g7-67mh-m3hh/GHSA-j2g7-67mh-m3hh.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-j2g7-67mh-m3hh",
+  "modified": "2025-04-15T09:30:34Z",
+  "published": "2025-04-15T09:30:34Z",
+  "aliases": [
+    "CVE-2025-3578"
+  ],
+  "details": "A malicious, authenticated user in Aidex, versions prior to 1.7, could list credentials of other users, create or modify existing users in the application, list credentials of users in production or development environments. In addition, it would be possible to cause bugs that would result in the exfiltration of sensitive information, such as details about the software or internal system paths. These actions could be carried out through the misuse of LLM Prompt (chatbot) technology, via the /api/<string-chat>/message endpoint, by manipulating the contents of the ‘content’ parameter.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3578"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-aidex"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-1039"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-15T09:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-m62q-c3xj-46g7/GHSA-m62q-c3xj-46g7.json b/advisories/unreviewed/2025/04/GHSA-m62q-c3xj-46g7/GHSA-m62q-c3xj-46g7.json
new file mode 100644
index 00000000000..56e3112a8f3
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-m62q-c3xj-46g7/GHSA-m62q-c3xj-46g7.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-m62q-c3xj-46g7",
+  "modified": "2025-04-15T09:30:34Z",
+  "published": "2025-04-15T09:30:34Z",
+  "aliases": [
+    "CVE-2024-45712"
+  ],
+  "details": "SolarWinds Serv-U is vulnerable to a client-side cross-site scripting (XSS) vulnerability. The vulnerability can only be performed by an authenticated account, on the local machine, from the local browser session. Therefore the risk is very low.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45712"
+    },
+    {
+      "type": "WEB",
+      "url": "https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-1_release_notes.htm"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45712"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-15T09:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-m787-xmrc-4c9m/GHSA-m787-xmrc-4c9m.json b/advisories/unreviewed/2025/04/GHSA-m787-xmrc-4c9m/GHSA-m787-xmrc-4c9m.json
new file mode 100644
index 00000000000..e365a81872c
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-m787-xmrc-4c9m/GHSA-m787-xmrc-4c9m.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-m787-xmrc-4c9m",
+  "modified": "2025-04-15T09:30:34Z",
+  "published": "2025-04-15T09:30:34Z",
+  "aliases": [
+    "CVE-2025-3574"
+  ],
+  "details": "Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via \"idUsuario\" parameter in \"/helper/Familia/obtenerFamiliaUsuario\" endpoint.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3574"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/insecure-direct-object-reference-deporsite-t-innova"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-639"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-15T09:15:13Z"
+  }
+}
\ No newline at end of file