netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-4mq4-7rw3-vm5j
GHSA-59c9-pxq8-9c73
GHSA-cxfr-5q3r-2rc2
GHSA-ff5x-7qg5-vwf2
GHSA-rv74-m283-5j95
GHSA-rv74-m283-5j95
This commit is contained in:
advisory-database[bot]
2023-12-13 13:34:42 +00:00
parent 92f2a80a53
commit 383ef970e9
6 changed files with 397 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/12/GHSA-4mq4-7rw3-vm5j/GHSA-4mq4-7rw3-vm5j.json
+61
View File
@@ -0,0 +1,61 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4mq4-7rw3-vm5j",
"modified": "2023-12-13T13:32:38Z",
"published": "2023-12-13T13:32:38Z",
"aliases": [
],
"summary": "Filesystem sandbox not enforced",
"details": "### Summary\nAs of Wasmer version v4.2.3, Wasm programs can access the filesystem outside of the sandbox.\n\n### Details\nhttps://github.com/wasmerio/wasmer/issues/4267\n\n### PoC\nA minimal Rust program:\n\n```\nfn main() {\n let f = std::fs::OpenOptions::new()\n .write(true)\n .create_new(true)\n .open(\"abc\")\n .unwrap();\n}\n```\n\nThis should be compiled with `cargo build --target wasm32-wasi`. The compiled program, when run with wasmer WITHOUT `--dir`, can still create a file in the working directory.\n\n### Impact\nService providers running untrusted Wasm code on Wasmer can unexpectedly expose the host filesystem.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"package": {
"ecosystem": "crates.io",
"name": "wasmer-cli"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.0.0"
},
{
"fixed": "4.2.4"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/wasmerio/wasmer/security/advisories/GHSA-4mq4-7rw3-vm5j"
},
{
"type": "WEB",
"url": "https://github.com/wasmerio/wasmer/issues/4267"
},
{
"type": "PACKAGE",
"url": "https://github.com/wasmerio/wasmer"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2023-12-13T13:32:38Z",
"nvd_published_at": null
}
}
advisories/github-reviewed/2023/12/GHSA-59c9-pxq8-9c73/GHSA-59c9-pxq8-9c73.json
+164
View File
@@ -0,0 +1,164 @@
{
"schema_version": "1.4.0",
"id": "GHSA-59c9-pxq8-9c73",
"modified": "2023-12-13T13:33:57Z",
"published": "2023-12-13T13:33:57Z",
"aliases": [
],
"summary": "Improper JWT Signature Validation in SAP Security Services Library ",
"details": "### Impact\nSAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) allows under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.\n\n### Patches\nUpgrade to patched version >= 2.17.0 or >= 3.3.0 \nWe always recommend to upgrade to the latest released version.\n\n### Workarounds\nNo workarounds\n\n### References\nhttps://www.cve.org/CVERecord?id=CVE-2023-50422\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "com.sap.cloud.security:java-security"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.17.0"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.sap.cloud.security:java-security"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.0.0"
},
{
"fixed": "3.3.0"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.sap.cloud.security:spring-security"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.17.0"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.sap.cloud.security:spring-security"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.0.0"
},
{
"fixed": "3.3.0"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.sap.cloud.security.xsuaa:spring-xsuaa"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.17.0"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.sap.cloud.security.xsuaa:spring-xsuaa"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.0.0"
},
{
"fixed": "3.3.0"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/SAP/cloud-security-services-integration-library/security/advisories/GHSA-59c9-pxq8-9c73"
},
{
"type": "WEB",
"url": "https://github.com/SAP/cloud-security-services-integration-library/commit/4b3e42ab23df6418243b29908b1a2582818d9360"
},
{
"type": "WEB",
"url": "https://github.com/SAP/cloud-security-services-integration-library/commit/7ce9601979c30ae269a1cbaf7cf33486d10736f1"
},
{
"type": "WEB",
"url": "https://en.wikipedia.org/wiki/JSON_Web_Token"
},
{
"type": "PACKAGE",
"url": "https://github.com/SAP/cloud-security-services-integration-library"
}
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2023-12-13T13:33:57Z",
"nvd_published_at": null
}
}
advisories/unreviewed/2023/12/GHSA-cxfr-5q3r-2rc2/GHSA-cxfr-5q3r-2rc2.json → advisories/github-reviewed/2023/12/GHSA-cxfr-5q3r-2rc2/GHSA-cxfr-5q3r-2rc2.json
+27 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cxfr-5q3r-2rc2",
"modified": "2023-12-12T06:30:43Z",
"modified": "2023-12-13T13:33:30Z",
"published": "2023-12-12T06:30:43Z",
"aliases": [
"CVE-2023-6709"
],
"summary": "Jinja2 template injection in mlflow",
"details": "Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.",
"severity": [
{
@@ -14,7 +15,25 @@
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "mlflow"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.2"
}
]
}
]
}
],
"references": [
{
@@ -25,6 +44,10 @@
"type": "WEB",
"url": "https://github.com/mlflow/mlflow/commit/432b8ccf27fd3a76df4ba79bb1bec62118a85625"
},
{
"type": "PACKAGE",
"url": "https://github.com/mlflow/mlflow"
},
{
"type": "WEB",
"url": "https://huntr.com/bounties/9e4cc07b-6fff-421b-89bd-9445ef61d34d"
@@ -35,8 +58,8 @@
"CWE-1336"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2023-12-13T13:33:30Z",
"nvd_published_at": "2023-12-12T04:15:07Z"
}
}
advisories/github-reviewed/2023/12/GHSA-ff5x-7qg5-vwf2/GHSA-ff5x-7qg5-vwf2.json
+65
View File
File diff suppressed because one or more lines are too long
advisories/github-reviewed/2023/12/GHSA-rv74-m283-5j95/GHSA-rv74-m283-5j95.json
+80
View File
@@ -0,0 +1,80 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rv74-m283-5j95",
"modified": "2023-12-13T13:33:04Z",
"published": "2023-12-05T18:30:23Z",
"aliases": [
"CVE-2023-46674"
],
"summary": "Elasticsearch-hadoop Unsafe Deserialization",
"details": "An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that could have been modified by authenticated users. Elastic would like to thank Yakov Shafranovich, with Amazon Web Services for reporting this issue.\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H"
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.elasticsearch:elasticsearch-hadoop"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "7.17.11"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.elasticsearch:elasticsearch-hadoop"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "8.0.0"
},
{
"fixed": "8.9.0"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46674"
},
{
"type": "WEB",
"url": "https://discuss.elastic.co/t/elasticsearch-hadoop-7-17-11-8-9-0-security-update-esa-2023-28/348663"
},
{
"type": "PACKAGE",
"url": "https://github.com/elastic/elasticsearch-hadoop"
}
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2023-12-13T13:33:04Z",
"nvd_published_at": "2023-12-05T18:15:12Z"
}
}
advisories/unreviewed/2023/12/GHSA-rv74-m283-5j95/GHSA-rv74-m283-5j95.json
-38
View File
@@ -1,38 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rv74-m283-5j95",
"modified": "2023-12-05T18:30:23Z",
"published": "2023-12-05T18:30:23Z",
"aliases": [
"CVE-2023-46674"
],
"details": "An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that could have been modified by authenticated users. Elastic would like to thank Yakov Shafranovich, with Amazon Web Services for reporting this issue.\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46674"
},
{
"type": "WEB",
"url": "https://discuss.elastic.co/t/elasticsearch-hadoop-7-17-11-8-9-0-security-update-esa-2023-28/348663"
}
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-12-05T18:15:12Z"
}
}