From 3c04dd09a90e204a62d690399e294ae26c7bd685 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 27 Sep 2024 22:02:43 +0000
Subject: [PATCH] Publish Advisories

GHSA-59hf-mpf8-pqjh
GHSA-59hf-mpf8-pqjh
---
 .../GHSA-59hf-mpf8-pqjh.json                  | 77 +++++++++++++++++++
 .../GHSA-59hf-mpf8-pqjh.json                  | 38 ---------
 2 files changed, 77 insertions(+), 38 deletions(-)
 create mode 100644 advisories/github-reviewed/2024/09/GHSA-59hf-mpf8-pqjh/GHSA-59hf-mpf8-pqjh.json
 delete mode 100644 advisories/unreviewed/2024/09/GHSA-59hf-mpf8-pqjh/GHSA-59hf-mpf8-pqjh.json

diff --git a/advisories/github-reviewed/2024/09/GHSA-59hf-mpf8-pqjh/GHSA-59hf-mpf8-pqjh.json b/advisories/github-reviewed/2024/09/GHSA-59hf-mpf8-pqjh/GHSA-59hf-mpf8-pqjh.json
new file mode 100644
index 00000000000..68c57746b2d
--- /dev/null
+++ b/advisories/github-reviewed/2024/09/GHSA-59hf-mpf8-pqjh/GHSA-59hf-mpf8-pqjh.json
@@ -0,0 +1,77 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-59hf-mpf8-pqjh",
+  "modified": "2024-09-27T22:01:15Z",
+  "published": "2024-09-26T09:31:42Z",
+  "aliases": [
+    "CVE-2024-47003"
+  ],
+  "summary": "Mattermost fails to strip `embeds` from `metadata` when broadcasting `posted` events",
+  "details": "Mattermost does not strip `embeds` from `metadata` when broadcasting `posted` events.\n\nThis allows users to include arbitrary embeds in posts, which are then broadcasted via websockets. This can be exploited in many ways, for example to create permalinks with fully customizable content or to trigger a client Side Denial of Service (DoS) by sending a permalink with a non-string message.\n\nThe advisory metadata references the appropriate go pseudo version available from pkg.go.dev",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/mattermost/mattermost/server/v8"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "8.0.0-20240806094731-69a8b3df0f9f"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47003"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/mattermost/mattermost/pull/27763"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/mattermost/mattermost/commit/69a8b3df0f9fd3a7a5b792ec678b6191618d039b"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/c0rydoras/cves/tree/main/CVE-2024-47003"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/mattermost/mattermost"
+    },
+    {
+      "type": "WEB",
+      "url": "https://mattermost.com/security-updates"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-400"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-09-27T22:01:15Z",
+    "nvd_published_at": "2024-09-26T08:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-59hf-mpf8-pqjh/GHSA-59hf-mpf8-pqjh.json b/advisories/unreviewed/2024/09/GHSA-59hf-mpf8-pqjh/GHSA-59hf-mpf8-pqjh.json
deleted file mode 100644
index 1deb6f4b2e9..00000000000
--- a/advisories/unreviewed/2024/09/GHSA-59hf-mpf8-pqjh/GHSA-59hf-mpf8-pqjh.json
+++ /dev/null
@@ -1,38 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-59hf-mpf8-pqjh",
-  "modified": "2024-09-26T21:31:11Z",
-  "published": "2024-09-26T09:31:42Z",
-  "aliases": [
-    "CVE-2024-47003"
-  ],
-  "details": "Mattermost versions 9.11.x <= 9.11.0 and 9.5.x <= 9.5.8 fail to validate that the message of the permalink post is a string, which allows an attacker to send a non-string value as the message of a permalink post and crash the frontend.",
-  "severity": [
-    {
-      "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"
-    }
-  ],
-  "affected": [
-
-  ],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47003"
-    },
-    {
-      "type": "WEB",
-      "url": "https://mattermost.com/security-updates"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [
-      "CWE-400"
-    ],
-    "severity": "LOW",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2024-09-26T08:15:06Z"
-  }
-}
\ No newline at end of file