Publish Advisories

GHSA-4277-m35q-7c9w
GHSA-c5rh-2mpx-r3x4
GHSA-v5rm-528g-7mvp

advisories/unreviewed/2024/11/GHSA-4277-m35q-7c9w/GHSA-4277-m35q-7c9w.json

@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4277-m35q-7c9w",
+  "modified": "2024-11-14T06:30:45Z",
+  "published": "2024-11-14T06:30:45Z",
+  "aliases": [
+    "CVE-2023-34049"
+  ],
+  "details": "The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script with the privileges of the user running Salt-SSH. Do not make the copy path on the target predictable and ensure we check return codes of the scp command if the copy fails.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-34049"
+    },
+    {
+      "type": "WEB",
+      "url": "https://saltproject.io/security-announcements/2023-10-27-advisory"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-14T05:15:28Z"
+  }
+}

advisories/unreviewed/2024/11/GHSA-c5rh-2mpx-r3x4/GHSA-c5rh-2mpx-r3x4.json

@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-c5rh-2mpx-r3x4",
+  "modified": "2024-11-14T06:30:45Z",
+  "published": "2024-11-14T06:30:45Z",
+  "aliases": [
+    "CVE-2024-10146"
+  ],
+  "details": "The Simple File List WordPress plugin before 6.1.13 does not sanitise and escape a generated URL before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against admins.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10146"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/9ee74a0f-83ff-4c15-a114-f8f6baab8bf5"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-14T06:15:07Z"
+  }
+}

advisories/unreviewed/2024/11/GHSA-v5rm-528g-7mvp/GHSA-v5rm-528g-7mvp.json

@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v5rm-528g-7mvp",
+  "modified": "2024-11-14T06:30:45Z",
+  "published": "2024-11-14T06:30:45Z",
+  "aliases": [
+    "CVE-2024-9186"
+  ],
+  "details": "The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit WordPress plugin before 3.3.0 does not sanitize and escape the bwfan-track-id  parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9186"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/fab29b59-7e87-4289-88dd-ed5520260c26"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-14T06:15:07Z"
+  }
+}