From 50ba8fa1ee1e2c5ff86f8df4ff2cf489cff2e4a3 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 15 Apr 2025 19:34:29 +0000 Subject: [PATCH] Publish Advisories GHSA-469f-wf4f-3jjv GHSA-564p-rx2q-4c8v --- .../02/GHSA-469f-wf4f-3jjv/GHSA-469f-wf4f-3jjv.json | 3 ++- .../03/GHSA-564p-rx2q-4c8v/GHSA-564p-rx2q-4c8v.json | 12 +++++++----- 2 files changed, 9 insertions(+), 6 deletions(-) diff --git a/advisories/github-reviewed/2025/02/GHSA-469f-wf4f-3jjv/GHSA-469f-wf4f-3jjv.json b/advisories/github-reviewed/2025/02/GHSA-469f-wf4f-3jjv/GHSA-469f-wf4f-3jjv.json index ec6d5250d0b..39275ce4521 100644 --- a/advisories/github-reviewed/2025/02/GHSA-469f-wf4f-3jjv/GHSA-469f-wf4f-3jjv.json +++ b/advisories/github-reviewed/2025/02/GHSA-469f-wf4f-3jjv/GHSA-469f-wf4f-3jjv.json @@ -172,7 +172,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-284" + "CWE-284", + "CWE-863" ], "severity": "MODERATE", "github_reviewed": true, diff --git a/advisories/github-reviewed/2025/03/GHSA-564p-rx2q-4c8v/GHSA-564p-rx2q-4c8v.json b/advisories/github-reviewed/2025/03/GHSA-564p-rx2q-4c8v/GHSA-564p-rx2q-4c8v.json index dd81c310a7d..482134cbf6a 100644 --- a/advisories/github-reviewed/2025/03/GHSA-564p-rx2q-4c8v/GHSA-564p-rx2q-4c8v.json +++ b/advisories/github-reviewed/2025/03/GHSA-564p-rx2q-4c8v/GHSA-564p-rx2q-4c8v.json @@ -1,11 +1,9 @@ { "schema_version": "1.4.0", "id": "GHSA-564p-rx2q-4c8v", - "modified": "2025-03-21T17:37:11Z", + "modified": "2025-04-15T19:33:55Z", "published": "2025-03-20T12:32:43Z", - "aliases": [ - "CVE-2024-12760" - ], + "aliases": [], "summary": "BentoML Open Redirect vulnerability", "details": "An open redirect vulnerability in bentoml/bentoml v1.3.9 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.", "severity": [ @@ -38,7 +36,7 @@ "references": [ { "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12760" + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4940" }, { "type": "PACKAGE", @@ -47,6 +45,10 @@ { "type": "WEB", "url": "https://huntr.com/bounties/2a284ff6-cc6c-4a10-b72e-1bb31c842bca" + }, + { + "type": "WEB", + "url": "https://huntr.com/bounties/35aaea93-6895-4f03-9c1b-cd992665aa60" } ], "database_specific": {