netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-f23h-52hj-99p6
GHSA-h5c8-rqwp-cp95
GHSA-rxgg-273w-rfw7
GHSA-h2rq-qhr7-53gm
This commit is contained in:
advisory-database[bot]
2025-02-13 19:32:08 +00:00
parent 9cab971e66
commit 548c263441
4 changed files with 14 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/12/GHSA-f23h-52hj-99p6/GHSA-f23h-52hj-99p6.json
+9 -4
View File
@@ -1,14 +1,19 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f23h-52hj-99p6",
"modified": "2023-12-21T18:10:56Z",
"modified": "2025-02-13T19:30:31Z",
"published": "2023-12-21T12:30:29Z",
"aliases": [
"CVE-2023-51656"
],
"summary": "Apache IoTDB: Unsafe deserialize map in Sync Tool",
"details": "Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4.\n\nUsers are recommended to upgrade to version 1.2.2, which fixes the issue.\n\n",
"severity": [],
"details": "Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4.\n\nUsers are recommended to upgrade to version 1.2.2, which fixes the issue.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"package": {
@@ -52,7 +57,7 @@
"cwe_ids": [
"CWE-502"
],
"severity": "HIGH",
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2023-12-21T18:10:56Z",
"nvd_published_at": "2023-12-21T12:15:08Z"
advisories/github-reviewed/2024/01/GHSA-h5c8-rqwp-cp95/GHSA-h5c8-rqwp-cp95.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h5c8-rqwp-cp95",
"modified": "2024-01-11T15:20:48Z",
"modified": "2025-02-13T19:31:33Z",
"published": "2024-01-11T15:20:48Z",
"aliases": [
"CVE-2024-22195"
advisories/github-reviewed/2024/01/GHSA-rxgg-273w-rfw7/GHSA-rxgg-273w-rfw7.json
+2 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rxgg-273w-rfw7",
"modified": "2024-09-12T21:02:56Z",
"modified": "2025-02-13T19:31:37Z",
"published": "2024-01-15T12:30:19Z",
"aliases": [
"CVE-2023-46226"
],
"summary": "Remote Code Execution vulnerability in Apache IoTDB via UDF",
"details": "Remote Code Execution vulnerability in Apache IoTDB. This issue affects Apache IoTDB from 1.0.0 through 1.2.2.\n\nUsers are recommended to upgrade to version 1.3.0, which fixes the issue.\n\n",
"details": "Remote Code Execution vulnerability in Apache IoTDB. This issue affects Apache IoTDB from 1.0.0 through 1.2.2.\n\nUsers are recommended to upgrade to version 1.3.0, which fixes the issue.",
"severity": [
{
"type": "CVSS_V3",
advisories/github-reviewed/2024/02/GHSA-h2rq-qhr7-53gm/GHSA-h2rq-qhr7-53gm.json
+2 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h2rq-qhr7-53gm",
"modified": "2024-02-14T14:52:14Z",
"modified": "2025-02-13T19:31:02Z",
"published": "2024-02-06T12:30:30Z",
"aliases": [
"CVE-2024-23673"
],
"summary": "Apache Sling Servlets Resolver executes malicious code via path traversal",
"details": "\nMalicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system.\nIf the system is vulnerable, a user with write access to the repository might be able to trick the Sling Servlet Resolver to load a previously uploaded script. \n\nUsers are recommended to upgrade to version 2.11.0, which fixes this issue. It is recommended to upgrade, regardless of whether your system configuration currently allows this attack or not.",
"details": "Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system.\nIf the system is vulnerable, a user with write access to the repository might be able to trick the Sling Servlet Resolver to load a previously uploaded script. \n\nUsers are recommended to upgrade to version 2.11.0, which fixes this issue. It is recommended to upgrade, regardless of whether your system configuration currently allows this attack or not.",
"severity": [
{
"type": "CVSS_V3",