netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-5mh9-r3rr-9597
GHSA-5844-q3fc-56rh
This commit is contained in:
advisory-database[bot]
2023-12-07 23:05:45 +00:00
parent 562475622b
commit 4ded1e8dff
2 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2020/05/GHSA-5mh9-r3rr-9597/GHSA-5mh9-r3rr-9597.json
+2 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5mh9-r3rr-9597",
"modified": "2021-08-25T21:12:09Z",
"modified": "2023-12-07T23:05:12Z",
"published": "2020-05-21T21:08:33Z",
"aliases": [
"CVE-2020-5529"
],
"summary": "Code execution vulnerability in HtmlUnit",
"details": "HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is done in an improper way, hence a malicious JavaScript code can execute arbitrary Java code on the application.",
"details": "HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is done in an improper way, hence a malicious JavaScript code can execute arbitrary Java code on the application. ",
"severity": [
{
"type": "CVSS_V3",
advisories/github-reviewed/2023/12/GHSA-5844-q3fc-56rh/GHSA-5844-q3fc-56rh.json
+8
View File
@@ -295,6 +295,10 @@
"type": "WEB",
"url": "https://gist.github.com/vargad/20237094fce7a0a28f0723d7ce395bb0"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-5844-q3fc-56rh"
},
{
"type": "PACKAGE",
"url": "https://github.com/pubnub/javascript"
@@ -303,6 +307,10 @@
"type": "WEB",
"url": "https://github.com/pubnub/javascript/blob/master/src/crypto/modules/web.js#L70"
},
{
"type": "WEB",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pubnub/CVE-2023-26154.yml"
},
{
"type": "WEB",
"url": "https://security.snyk.io/vuln/SNYK-COCOAPODS-PUBNUB-6098384"