netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-46j3-r4pj-4835
GHSA-9q24-hwmc-797x
This commit is contained in:
advisory-database[bot]
2024-02-22 21:36:20 +00:00
parent c3f4c9947c
commit 443de78d67
2 changed files with 38 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2018/10/GHSA-46j3-r4pj-4835/GHSA-46j3-r4pj-4835.json
+9 -5
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-46j3-r4pj-4835",
"modified": "2023-12-08T22:48:24Z",
"modified": "2024-02-22T21:34:20Z",
"published": "2018-10-17T16:32:43Z",
"aliases": [
"CVE-2018-8034"
@@ -103,6 +103,14 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8034"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/2835bb4e030c1c741ed0847bb3b9c3822e4fbc8a"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/2c522795166c930741a9cecca76797bf48cb1634"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:0130"
@@ -147,10 +155,6 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:3892"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-46j3-r4pj-4835"
},
{
"type": "PACKAGE",
"url": "https://github.com/apache/tomcat"
advisories/unreviewed/2024/02/GHSA-9q24-hwmc-797x/GHSA-9q24-hwmc-797x.json → advisories/github-reviewed/2024/02/GHSA-9q24-hwmc-797x/GHSA-9q24-hwmc-797x.json
+29 -6
View File
@@ -1,23 +1,46 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9q24-hwmc-797x",
"modified": "2024-02-22T18:30:28Z",
"modified": "2024-02-22T21:35:15Z",
"published": "2024-02-22T12:30:56Z",
"aliases": [
"CVE-2024-26578"
],
"details": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1.\n\nRepeated submission during registration resulted in the registration of the same user. When users register, if they rapidly submit multiple registrations using scripts, it can result in the creation of multiple user accounts simultaneously with the same name.\nUsers are recommended to upgrade to version [1.2.5], which fixes the issue.\n\n",
"summary": "Apache Answer Race Condition vulnerability",
"details": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answer. This issue affects Apache Answer through 1.2.1.\n\nRepeated submission during registration resulted in the registration of the same user. When users register, if they rapidly submit multiple registrations using scripts, it can result in the creation of multiple user accounts simultaneously with the same name.\n\nUsers are recommended to upgrade to version 1.2.5, which fixes the issue.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "Go",
"name": "github.com/apache/incubator-answer"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.5"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26578"
},
{
"type": "PACKAGE",
"url": "https://github.com/apache/incubator-answer"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread/ko0ksnznt2484lxt0zts2ygr82ldkhcb"
@@ -31,9 +54,9 @@
"cwe_ids": [
"CWE-362"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-02-22T21:35:15Z",
"nvd_published_at": "2024-02-22T10:15:08Z"
}
}