netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-2wgc-48g2-cj5w
GHSA-45gq-q4xh-cp53
GHSA-475g-vj6c-xf96
GHSA-997g-27x8-43rf
GHSA-qhjf-hm5j-335w
GHSA-rjmv-52mp-gjrr
GHSA-rv8p-rr2h-fgpg
GHSA-w9h2-px87-74vx
This commit is contained in:
advisory-database[bot]
2024-01-30 20:58:07 +00:00
parent bc6a8e5c65
commit 561684b7c0
8 changed files with 595 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/01/GHSA-2wgc-48g2-cj5w/GHSA-2wgc-48g2-cj5w.json
+65
View File
@@ -0,0 +1,65 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2wgc-48g2-cj5w",
"modified": "2024-01-30T20:56:46Z",
"published": "2024-01-30T20:56:46Z",
"aliases": [
"CVE-2024-21653"
],
"summary": "vantage6 has insecure SSH configuration for node and server containers",
"details": "### Impact\nNodes and servers get a ssh config by default that permits root login with password authentication. In a proper deployment, the SSH service is not exposed so there is no risk, but not all deployments are ideal. The default should therefore be less permissive.\n\nWe will probably opt to completely remove the ssh option as it is only used for debugging. Later, we can add a debug mode where we can activate it if necessary.\n\n### Workarounds\nRemove the ssh part from the docker file and build your own docker image",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "vantage6"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.2.0"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/vantage6/vantage6/security/advisories/GHSA-2wgc-48g2-cj5w"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21653"
},
{
"type": "WEB",
"url": "https://github.com/vantage6/vantage6/commit/3fcc6e6a8bd1142fd7a558d8fdd2b246e55c8841"
},
{
"type": "PACKAGE",
"url": "https://github.com/vantage6/vantage6"
}
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T20:56:46Z",
"nvd_published_at": "2024-01-30T16:15:47Z"
}
}
advisories/github-reviewed/2024/01/GHSA-45gq-q4xh-cp53/GHSA-45gq-q4xh-cp53.json
+65
View File
@@ -0,0 +1,65 @@
{
"schema_version": "1.4.0",
"id": "GHSA-45gq-q4xh-cp53",
"modified": "2024-01-30T20:56:48Z",
"published": "2024-01-30T20:56:48Z",
"aliases": [
"CVE-2024-21671"
],
"summary": "vantage6 vulnerable to username timing attack",
"details": "### Impact\nIt is possible to find out usernames from the response time of login requests. This could aid attackers in credential attacks\n\n### Workarounds\nNo\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "vantage6-server"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.2.0"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/vantage6/vantage6/security/advisories/GHSA-45gq-q4xh-cp53"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21671"
},
{
"type": "WEB",
"url": "https://github.com/vantage6/vantage6/commit/389f416c445da4f2438c72f34c3b1084485c4e30"
},
{
"type": "PACKAGE",
"url": "https://github.com/vantage6/vantage6"
}
],
"database_specific": {
"cwe_ids": [
"CWE-208"
],
"severity": "LOW",
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T20:56:48Z",
"nvd_published_at": "2024-01-30T16:15:48Z"
}
}
advisories/github-reviewed/2024/01/GHSA-475g-vj6c-xf96/GHSA-475g-vj6c-xf96.json
+141
View File
@@ -0,0 +1,141 @@
{
"schema_version": "1.4.0",
"id": "GHSA-475g-vj6c-xf96",
"modified": "2024-01-30T20:57:16Z",
"published": "2024-01-30T20:57:16Z",
"aliases": [
"CVE-2024-24565"
],
"summary": "CrateDB database has an arbitrary file read vulnerability",
"details": "### Summary\nThere is an arbitrary file read vulnerability in the CrateDB database, and authenticated CrateDB database users can read any file on the system.\n\n### Details\nThere is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY FROM function to import arbitrary file content into database tables, resulting in information leakage.\n\n### PoC\n```\nCREATE TABLE info_leak(info_leak STRING);\nCOPY info_leak FROM '/etc/passwd' with (format='csv', header=false); or COPY info_leak FROM '/crate/config/crate.yml' with (format='csv', header=false);\nSELECT * FROM info_leak;\n```\n![image](https://user-images.githubusercontent.com/154296962/292985975-ff5f2fb8-1a3f-4b49-9951-cd1fc6e78031.png)\n\n\n### Impact\nThis vulnerability affects all current versions of the CrateDB database. Attackers who exploit this vulnerability to obtain sensitive information may carry out further attacks, while also affecting CrateDB Cloud Clusters.\n![image](https://user-images.githubusercontent.com/154296962/292986215-aec5adfe-38cc-4f31-bf86-c50ecbb44d5d.png)\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "io.crate:crate"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.3.9"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "io.crate:crate"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.4.0"
},
{
"fixed": "5.4.8"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "io.crate:crate"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.5.4"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "io.crate:crate"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.6.0"
},
{
"fixed": "5.6.1"
}
]
}
],
"versions": [
"5.6.0"
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24565"
},
{
"type": "WEB",
"url": "https://github.com/crate/crate/commit/32d0fc2ebb834ea324eb7ab5d01320a67bc5c3c7"
},
{
"type": "WEB",
"url": "https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6"
},
{
"type": "WEB",
"url": "https://github.com/crate/crate/commit/b75aeeabf90f51bd96ddb499903928fd10185207"
},
{
"type": "WEB",
"url": "https://github.com/crate/crate/commit/c4c97d5a1c52cc2250ea42d062a3d37550c19dd5"
},
{
"type": "WEB",
"url": "https://github.com/crate/crate/commit/c5034323f1b56ca5d04b8ef4c6029eb63a5ba172"
},
{
"type": "PACKAGE",
"url": "https://github.com/crate/crate"
}
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T20:57:16Z",
"nvd_published_at": "2024-01-30T17:15:12Z"
}
}
advisories/github-reviewed/2024/01/GHSA-997g-27x8-43rf/GHSA-997g-27x8-43rf.json
+61
View File
@@ -0,0 +1,61 @@
{
"schema_version": "1.4.0",
"id": "GHSA-997g-27x8-43rf",
"modified": "2024-01-30T20:57:22Z",
"published": "2024-01-30T20:57:22Z",
"aliases": [
"CVE-2024-24558"
],
"summary": "react-query-streamed-hydration Cross-site Scripting vulnerability",
"details": "### Impact\n\nThe `@tanstack/react-query-next-experimental` NPM package is vulnerable to a cross-site scripting vulnerability. To exploit this, an attacker would need to either inject malicious input or arrange to have malicious input be returned from an endpoint.\n\nThis vulnerability arises from improper handling of untrusted input when `@tanstack/react-query-next-experimental` performs server-side rendering of HTML pages. To fix this vulnerability, we implemented appropriate escaping to prevent javascript injection into rendered pages.\n\n### Patches\n\nTo fix this issue, please update to version 5.18.0 or later.\n\n### Workarounds\n\nThere are no known workarounds for this issue. Please update to version 5.18.0 or later.\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "@tanstack/react-query-next-experimental"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.0.0"
},
{
"fixed": "5.18.0"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/TanStack/query/security/advisories/GHSA-997g-27x8-43rf"
},
{
"type": "WEB",
"url": "https://github.com/TanStack/query/commit/f2ddaf2536e8b71d2da88a9310ac9a48c13512a1"
},
{
"type": "PACKAGE",
"url": "https://github.com/TanStack/query"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T20:57:22Z",
"nvd_published_at": null
}
}
advisories/github-reviewed/2024/01/GHSA-qhjf-hm5j-335w/GHSA-qhjf-hm5j-335w.json
+65
View File
@@ -0,0 +1,65 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qhjf-hm5j-335w",
"modified": "2024-01-30T20:57:28Z",
"published": "2024-01-30T20:57:28Z",
"aliases": [
"CVE-2024-24556"
],
"summary": "@urql/next Cross-site Scripting vulnerability",
"details": "## impact\n\nThe `@urql/next` package is vulnerable to XSS. To exploit this an attacker would need to ensure that the response returns `html` tags and that the web-application is using streamed responses (non-RSC). This vulnerability is due to improper escaping of html-like characters in the response-stream.\n\nTo fix this vulnerability upgrade to version 1.1.1",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "@urql/next"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.1.1"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/urql-graphql/urql/security/advisories/GHSA-qhjf-hm5j-335w"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24556"
},
{
"type": "WEB",
"url": "https://github.com/urql-graphql/urql/commit/4b7011b70d5718728ff912d02a4dbdc7f703540d"
},
{
"type": "PACKAGE",
"url": "https://github.com/urql-graphql/urql"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T20:57:28Z",
"nvd_published_at": "2024-01-30T18:15:48Z"
}
}
advisories/github-reviewed/2024/01/GHSA-rjmv-52mp-gjrr/GHSA-rjmv-52mp-gjrr.json
+65
View File
@@ -0,0 +1,65 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rjmv-52mp-gjrr",
"modified": "2024-01-30T20:56:50Z",
"published": "2024-01-30T20:56:50Z",
"aliases": [
"CVE-2024-22193"
],
"summary": "vantage6 may create unencrypted tasks in encrypted collaboration",
"details": "### Impact\nThere are no checks on whether the input is encrypted if a task is created in an encrypted collaboration. Therefore, a user may accidentally create a task with sensitive input data that will then be stored unencrypted in a database.\n\n### Workarounds\nThis is not an issue with the normal workflow, only if e.g. a user with the python client sets encryption to the wrong value.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "vantage6"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.2.0"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/vantage6/vantage6/security/advisories/GHSA-rjmv-52mp-gjrr"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22193"
},
{
"type": "WEB",
"url": "https://github.com/vantage6/vantage6/commit/6383283733b81abfcacfec7538dc4dc882e98074"
},
{
"type": "PACKAGE",
"url": "https://github.com/vantage6/vantage6"
}
],
"database_specific": {
"cwe_ids": [
"CWE-922"
],
"severity": "LOW",
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T20:56:50Z",
"nvd_published_at": "2024-01-30T16:15:48Z"
}
}
advisories/github-reviewed/2024/01/GHSA-rv8p-rr2h-fgpg/GHSA-rv8p-rr2h-fgpg.json
+68
View File
@@ -0,0 +1,68 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rv8p-rr2h-fgpg",
"modified": "2024-01-30T20:57:45Z",
"published": "2024-01-30T20:57:45Z",
"aliases": [
"CVE-2024-23841"
],
"summary": "@apollo/experimental-nextjs-app-support Cross-site Scripting vulnerability",
"details": "### Impact\n\nThe @apollo/experimental-apollo-client-nextjs NPM package is vulnerable to a cross-site scripting vulnerability. This vulnerability arises from improper handling of untrusted input when @apollo/experimental-apollo-client-nextjs performs server-side rendering of HTML pages. To fix this vulnerability, we implemented appropriate escaping to prevent javascript injection into rendered pages.\n\n### Patches\n\nTo fix this issue, please update to version 0.7.0 or later.\n\n### Workarounds\n\nThere are no known workarounds for this issue. Please update to version 0.7.0\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "@apollo/experimental-nextjs-app-support"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.7.0"
}
]
}
],
"database_specific": {
"last_known_affected_version_range": "<= 0.6.0"
}
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/apollographql/apollo-client-nextjs/security/advisories/GHSA-rv8p-rr2h-fgpg"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23841"
},
{
"type": "WEB",
"url": "https://github.com/apollographql/apollo-client-nextjs/commit/b92bc42abd5f8e17d4db361c36bd08e4f541a46b"
},
{
"type": "PACKAGE",
"url": "https://github.com/apollographql/apollo-client-nextjs"
}
],
"database_specific": {
"cwe_ids": [
"CWE-80"
],
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T20:57:45Z",
"nvd_published_at": "2024-01-30T18:15:48Z"
}
}
advisories/github-reviewed/2024/01/GHSA-w9h2-px87-74vx/GHSA-w9h2-px87-74vx.json
+65
View File
@@ -0,0 +1,65 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w9h2-px87-74vx",
"modified": "2024-01-30T20:56:45Z",
"published": "2024-01-30T20:56:45Z",
"aliases": [
"CVE-2024-21649"
],
"summary": "vantage6 remote code execution vulnerability",
"details": "### Impact\nAuthenticated users could inject code into algorithm environment variables\n\n### Workarounds\nNo ",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "vantage6"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.2.0"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/vantage6/vantage6/security/advisories/GHSA-w9h2-px87-74vx"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21649"
},
{
"type": "WEB",
"url": "https://github.com/vantage6/vantage6/commit/eac19db737145d3ca987adf037a454fae0790ddd"
},
{
"type": "PACKAGE",
"url": "https://github.com/vantage6/vantage6"
}
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T20:56:45Z",
"nvd_published_at": "2024-01-30T16:15:47Z"
}
}