netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-ff3m-68vj-h86p
GHSA-p2mf-q26j-3xmh
This commit is contained in:
advisory-database[bot]
2023-06-27 17:16:24 +00:00
parent afa2f83953
commit 46904ac54f
2 changed files with 54 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/06/GHSA-ff3m-68vj-h86p/GHSA-ff3m-68vj-h86p.json → advisories/github-reviewed/2023/06/GHSA-ff3m-68vj-h86p/GHSA-ff3m-68vj-h86p.json
+27 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ff3m-68vj-h86p",
"modified": "2023-06-27T15:30:29Z",
"modified": "2023-06-27T17:15:16Z",
"published": "2023-06-27T15:30:29Z",
"aliases": [
"CVE-2023-3432"
],
"summary": "PlantUML Server-Side Request Forgery vulnerability",
"details": "Server-Side Request Forgery (SSRF) in GitHub repository plantuml/plantuml prior to 1.2023.9.",
"severity": [
{
@@ -14,7 +15,25 @@
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "net.sourceforge.plantuml:plantuml-mit"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2023.9"
}
]
}
]
}
],
"references": [
{
@@ -25,6 +44,10 @@
"type": "WEB",
"url": "https://github.com/plantuml/plantuml/commit/b32500bb61ae617bb312496d6d832e4be8190797"
},
{
"type": "PACKAGE",
"url": "https://github.com/plantuml/plantuml"
},
{
"type": "WEB",
"url": "https://huntr.dev/bounties/8ac3316f-431c-468d-87e4-3dafff2ecf51"
@@ -35,8 +58,8 @@
"CWE-918"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2023-06-27T17:15:16Z",
"nvd_published_at": null
}
}
advisories/unreviewed/2023/06/GHSA-p2mf-q26j-3xmh/GHSA-p2mf-q26j-3xmh.json → advisories/github-reviewed/2023/06/GHSA-p2mf-q26j-3xmh/GHSA-p2mf-q26j-3xmh.json
+27 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p2mf-q26j-3xmh",
"modified": "2023-06-27T15:30:28Z",
"modified": "2023-06-27T17:15:10Z",
"published": "2023-06-27T15:30:28Z",
"aliases": [
"CVE-2023-3431"
],
"summary": "PlantUML Improper Access Control vulnerability",
"details": "Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9.",
"severity": [
{
@@ -14,7 +15,25 @@
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "net.sourceforge.plantuml:plantuml-mit"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2023.9"
}
]
}
]
}
],
"references": [
{
@@ -25,6 +44,10 @@
"type": "WEB",
"url": "https://github.com/plantuml/plantuml/commit/fbe7fa3b25b4c887d83927cffb1009ec6cb8ab1e"
},
{
"type": "PACKAGE",
"url": "https://github.com/plantuml/plantuml"
},
{
"type": "WEB",
"url": "https://huntr.dev/bounties/fa741f95-b53c-4ed7-b157-e32c5145164c"
@@ -35,8 +58,8 @@
"CWE-284"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2023-06-27T17:15:10Z",
"nvd_published_at": null
}
}