netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-jmwm-w2rm-prv9
GHSA-r2xv-vpr2-42m9
GHSA-jmwm-w2rm-prv9
This commit is contained in:
advisory-database[bot]
2023-11-08 19:16:47 +00:00
parent 1448d873a4
commit 51a7ab6a85
3 changed files with 162 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/11/GHSA-jmwm-w2rm-prv9/GHSA-jmwm-w2rm-prv9.json
+70
View File
@@ -0,0 +1,70 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jmwm-w2rm-prv9",
"modified": "2023-11-08T19:15:30Z",
"published": "2023-11-08T18:30:31Z",
"aliases": [
"CVE-2023-47379"
],
"summary": "Microweber Cross-site Scripting vulnerability",
"details": "Microweber CMS prior to version 2.0.3 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "microweber/microweber"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.3"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47379"
},
{
"type": "WEB",
"url": "https://github.com/microweber/microweber/commit/a481f079d74e82f6094abf15d67e814349d1038a"
},
{
"type": "WEB",
"url": "https://github.com/microweber/microweber/commit/c6e7ea9d0abd7564a3bb23c14ad172e4ccf27a7e#diff-fac4e7e9eca69c10d074bf8c5eac7f64b018c6b4d91dcad54b340a8560049e00"
},
{
"type": "PACKAGE",
"url": "https://github.com/microweber/microweber"
},
{
"type": "WEB",
"url": "https://github.com/microweber/microweber/blob/master/CHANGELOG.md"
},
{
"type": "WEB",
"url": "https://www.getastra.com/blog/security-audit/stored-xss-vulnerability/"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2023-11-08T19:15:30Z",
"nvd_published_at": "2023-11-08T17:15:07Z"
}
}
advisories/github-reviewed/2023/11/GHSA-r2xv-vpr2-42m9/GHSA-r2xv-vpr2-42m9.json
+92
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2023/11/GHSA-jmwm-w2rm-prv9/GHSA-jmwm-w2rm-prv9.json
-43
View File
@@ -1,43 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jmwm-w2rm-prv9",
"modified": "2023-11-08T18:30:31Z",
"published": "2023-11-08T18:30:31Z",
"aliases": [
"CVE-2023-47379"
],
"details": "Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47379"
},
{
"type": "WEB",
"url": "https://github.com/microweber/microweber/commit/c6e7ea9d0abd7564a3bb23c14ad172e4ccf27a7e#diff-fac4e7e9eca69c10d074bf8c5eac7f64b018c6b4d91dcad54b340a8560049e00"
},
{
"type": "WEB",
"url": "https://github.com/microweber/microweber/blob/master/CHANGELOG.md"
},
{
"type": "WEB",
"url": "https://www.getastra.com/blog/security-audit/stored-xss-vulnerability/"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-11-08T17:15:07Z"
}
}