From 5678d00d60ef45ebb97fc4927008dfc510738903 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 14 Apr 2023 16:15:32 +0000 Subject: [PATCH] Publish Advisories GHSA-6g67-q39g-r79q GHSA-f4g6-c47x-qhww GHSA-mg46-f9h5-g27x GHSA-f4g6-c47x-qhww GHSA-mg46-f9h5-g27x --- .../GHSA-6g67-q39g-r79q.json | 57 +++++++++++++++++ .../GHSA-f4g6-c47x-qhww.json | 62 +++++++++++++++++++ .../GHSA-mg46-f9h5-g27x.json | 58 +++++++++++++++++ .../GHSA-f4g6-c47x-qhww.json | 39 ------------ .../GHSA-mg46-f9h5-g27x.json | 35 ----------- 5 files changed, 177 insertions(+), 74 deletions(-) create mode 100644 advisories/github-reviewed/2023/04/GHSA-6g67-q39g-r79q/GHSA-6g67-q39g-r79q.json create mode 100644 advisories/github-reviewed/2023/04/GHSA-f4g6-c47x-qhww/GHSA-f4g6-c47x-qhww.json create mode 100644 advisories/github-reviewed/2023/04/GHSA-mg46-f9h5-g27x/GHSA-mg46-f9h5-g27x.json delete mode 100644 advisories/unreviewed/2023/04/GHSA-f4g6-c47x-qhww/GHSA-f4g6-c47x-qhww.json delete mode 100644 advisories/unreviewed/2023/04/GHSA-mg46-f9h5-g27x/GHSA-mg46-f9h5-g27x.json diff --git a/advisories/github-reviewed/2023/04/GHSA-6g67-q39g-r79q/GHSA-6g67-q39g-r79q.json b/advisories/github-reviewed/2023/04/GHSA-6g67-q39g-r79q/GHSA-6g67-q39g-r79q.json new file mode 100644 index 00000000000..7b439ece146 --- /dev/null +++ b/advisories/github-reviewed/2023/04/GHSA-6g67-q39g-r79q/GHSA-6g67-q39g-r79q.json @@ -0,0 +1,57 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6g67-q39g-r79q", + "modified": "2023-04-14T16:14:17Z", + "published": "2023-04-14T16:14:17Z", + "aliases": [ + "CVE-2023-29529" + ], + "summary": "matrix-js-sdk vulnerable to invisible eavesdropping in group calls", + "details": "### Impact\n\nAn attacker present in a room where an [MSC3401](https://github.com/matrix-org/matrix-spec-proposals/pull/3401) group call is taking place can eavesdrop on the video and audio of participants using matrix-js-sdk, without their knowledge. To affected matrix-js-sdk users, the attacker will not appear to be participating in the call.\n\nThis attack is possible because matrix-js-sdk's group call implementation accepts incoming direct calls from other users, even if they have not yet declared intent to participate in the group call, as a means of resolving a race condition in call setup. Affected versions do not restrict access to the user's outbound media in this case.\n\nLegacy 1:1 calls are unaffected.\n\n### Patches\n\nThis is fixed in matrix-js-sdk 24.1.0.\n\n### Workarounds\n\nUsers may hold group calls in private rooms where only the exact users who are expected to participate in the call are present.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "npm", + "name": "matrix-js-sdk" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "24.1.0" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-6g67-q39g-r79q" + }, + { + "type": "PACKAGE", + "url": "https://github.com/matrix-org/matrix-js-sdk" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2023-04-14T16:14:17Z", + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2023/04/GHSA-f4g6-c47x-qhww/GHSA-f4g6-c47x-qhww.json b/advisories/github-reviewed/2023/04/GHSA-f4g6-c47x-qhww/GHSA-f4g6-c47x-qhww.json new file mode 100644 index 00000000000..01e4e5e05bf --- /dev/null +++ b/advisories/github-reviewed/2023/04/GHSA-f4g6-c47x-qhww/GHSA-f4g6-c47x-qhww.json @@ -0,0 +1,62 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f4g6-c47x-qhww", + "modified": "2023-04-14T16:13:33Z", + "published": "2023-04-13T03:30:16Z", + "aliases": [ + "CVE-2023-2014" + ], + "summary": "Microweber vulnerable to cross-site scripting (XSS)", + "details": "microweber/microweber prior to 1.3.3 is vulnerable to cross-site scripting (XSS) in the template selection while changing a group template.", + "severity": [ + + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "microweber/microweber" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.3.3" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2014" + }, + { + "type": "WEB", + "url": "https://github.com/microweber/microweber/commit/1a9b904722b35b00653c6ae72dca2969149159b3" + }, + { + "type": "PACKAGE", + "url": "https://github.com/microweber/microweber" + }, + { + "type": "WEB", + "url": "https://huntr.dev/bounties/a77bf7ed-6b61-452e-b5ee-e20017e28d1a" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2023-04-14T16:13:33Z", + "nvd_published_at": "2023-04-13T02:15:00Z" + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2023/04/GHSA-mg46-f9h5-g27x/GHSA-mg46-f9h5-g27x.json b/advisories/github-reviewed/2023/04/GHSA-mg46-f9h5-g27x/GHSA-mg46-f9h5-g27x.json new file mode 100644 index 00000000000..7a6bc4b84c1 --- /dev/null +++ b/advisories/github-reviewed/2023/04/GHSA-mg46-f9h5-g27x/GHSA-mg46-f9h5-g27x.json @@ -0,0 +1,58 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mg46-f9h5-g27x", + "modified": "2023-04-14T16:14:10Z", + "published": "2023-04-13T12:30:35Z", + "aliases": [ + "CVE-2022-45064" + ], + "summary": "Apache Sling Engine vulnerable to cross-site scripting (XSS) that can lead to privilege escalation", + "details": "The SlingRequestDispatcher doesn't correctly implement the RequestDispatcher API resulting in a generic type of include-based cross-site scripting issues on the Apache Sling level. The vulnerability is exploitable by an attacker that is able to include a resource with specific content-type and control the include path (i.e. writing content). The impact of a successful attack is privilege escalation to administrative power.\n\nPlease update to Apache Sling Engine version 2.14.0 or newer and enable the \"Check Content-Type overrides\" configuration option.\n\n\n\n\n", + "severity": [ + + ], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.sling:org.apache.sling.engine" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.14.0" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45064" + }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/sling-org-apache-sling-engine" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/hhp611hltby3whk03vx2mv7cmy3vs0ok" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2023-04-14T16:14:10Z", + "nvd_published_at": "2023-04-13T11:15:00Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2023/04/GHSA-f4g6-c47x-qhww/GHSA-f4g6-c47x-qhww.json b/advisories/unreviewed/2023/04/GHSA-f4g6-c47x-qhww/GHSA-f4g6-c47x-qhww.json deleted file mode 100644 index 60c657ca1a1..00000000000 --- a/advisories/unreviewed/2023/04/GHSA-f4g6-c47x-qhww/GHSA-f4g6-c47x-qhww.json +++ /dev/null @@ -1,39 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-f4g6-c47x-qhww", - "modified": "2023-04-13T03:30:16Z", - "published": "2023-04-13T03:30:16Z", - "aliases": [ - "CVE-2023-2014" - ], - "details": "Cross-site Scripting (XSS) - Generic in GitHub repository microweber/microweber prior to 1.3.3.", - "severity": [ - - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2014" - }, - { - "type": "WEB", - "url": "https://github.com/microweber/microweber/commit/1a9b904722b35b00653c6ae72dca2969149159b3" - }, - { - "type": "WEB", - "url": "https://huntr.dev/bounties/a77bf7ed-6b61-452e-b5ee-e20017e28d1a" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-79" - ], - "severity": null, - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2023-04-13T02:15:00Z" - } -} \ No newline at end of file diff --git a/advisories/unreviewed/2023/04/GHSA-mg46-f9h5-g27x/GHSA-mg46-f9h5-g27x.json b/advisories/unreviewed/2023/04/GHSA-mg46-f9h5-g27x/GHSA-mg46-f9h5-g27x.json deleted file mode 100644 index ec6bece07bc..00000000000 --- a/advisories/unreviewed/2023/04/GHSA-mg46-f9h5-g27x/GHSA-mg46-f9h5-g27x.json +++ /dev/null @@ -1,35 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-mg46-f9h5-g27x", - "modified": "2023-04-13T12:30:35Z", - "published": "2023-04-13T12:30:35Z", - "aliases": [ - "CVE-2022-45064" - ], - "details": "The SlingRequestDispatcher doesn't correctly implement the RequestDispatcher API resulting in a generic type of include-based cross-site scripting issues on the Apache Sling level. The vulnerability is exploitable by an attacker that is able to include a resource with specific content-type and control the include path (i.e. writing content). The impact of a successful attack is privilege escalation to administrative power.\n\n\n\n\nPlease update to Apache Sling Engine >= 2.14.0 and enable the \"Check Content-Type overrides\" configuration option.\n\n\n\n\n", - "severity": [ - - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45064" - }, - { - "type": "WEB", - "url": "https://lists.apache.org/thread/hhp611hltby3whk03vx2mv7cmy3vs0ok" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-79" - ], - "severity": null, - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2023-04-13T11:15:00Z" - } -} \ No newline at end of file