diff --git a/advisories/github-reviewed/2023/04/GHSA-3jxw-cv35-2mmv/GHSA-3jxw-cv35-2mmv.json b/advisories/github-reviewed/2023/04/GHSA-3jxw-cv35-2mmv/GHSA-3jxw-cv35-2mmv.json index 317e121b09e..e1cc0aed051 100644 --- a/advisories/github-reviewed/2023/04/GHSA-3jxw-cv35-2mmv/GHSA-3jxw-cv35-2mmv.json +++ b/advisories/github-reviewed/2023/04/GHSA-3jxw-cv35-2mmv/GHSA-3jxw-cv35-2mmv.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-3jxw-cv35-2mmv", - "modified": "2023-05-02T11:42:32Z", + "modified": "2025-02-13T18:54:07Z", "published": "2023-04-20T18:30:50Z", "aliases": [ "CVE-2023-25601" ], "summary": "Apache DolphinScheduler's python gateway suffered from improper authentication", - "details": "On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the python-gateway function by changing the value `python-gateway.enabled=false` in configuration file `application.yaml`. If you are using the python gateway, please upgrade to version 3.1.2 or above.\n", + "details": "On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the python-gateway function by changing the value `python-gateway.enabled=false` in configuration file `application.yaml`. If you are using the python gateway, please upgrade to version 3.1.2 or above.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/04/GHSA-7hj9-rv74-5g92/GHSA-7hj9-rv74-5g92.json b/advisories/github-reviewed/2023/04/GHSA-7hj9-rv74-5g92/GHSA-7hj9-rv74-5g92.json index 84ee11d51d0..5198cf1b514 100644 --- a/advisories/github-reviewed/2023/04/GHSA-7hj9-rv74-5g92/GHSA-7hj9-rv74-5g92.json +++ b/advisories/github-reviewed/2023/04/GHSA-7hj9-rv74-5g92/GHSA-7hj9-rv74-5g92.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-7hj9-rv74-5g92", - "modified": "2023-04-25T21:00:36Z", + "modified": "2025-02-13T18:53:59Z", "published": "2023-04-11T20:59:22Z", "aliases": [ "CVE-2023-29013" ], "summary": "Traefik HTTP header parsing could cause a denial of service ", - "details": "### Impact\n\nThere is a vulnerability in [Go when parsing the HTTP headers](https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8/m/OV40vnafAwAJ), which impacts Traefik.\nHTTP header parsing could allocate substantially more memory than required to hold the parsed headers. This behavior could be exploited to cause a denial of service.\n\n### References\n\n- [CVE-2023-24534](https://www.cve.org/CVERecord?id=CVE-2023-24534)\n\n### Patches\n- https://github.com/traefik/traefik/releases/tag/v2.9.10\n- https://github.com/traefik/traefik/releases/tag/v2.10.0-rc2\n\n### Workarounds\n\nNo workaround.\n\n### For more information\n\nIf you have any questions or comments about this advisory, please [open an issue](https://github.com/traefik/traefik/issues).\n", + "details": "### Impact\n\nThere is a vulnerability in [Go when parsing the HTTP headers](https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8/m/OV40vnafAwAJ), which impacts Traefik.\nHTTP header parsing could allocate substantially more memory than required to hold the parsed headers. This behavior could be exploited to cause a denial of service.\n\n### References\n\n- [CVE-2023-24534](https://www.cve.org/CVERecord?id=CVE-2023-24534)\n\n### Patches\n- https://github.com/traefik/traefik/releases/tag/v2.9.10\n- https://github.com/traefik/traefik/releases/tag/v2.10.0-rc2\n\n### Workarounds\n\nNo workaround.\n\n### For more information\n\nIf you have any questions or comments about this advisory, please [open an issue](https://github.com/traefik/traefik/issues).", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/04/GHSA-qm2h-m799-86rc/GHSA-qm2h-m799-86rc.json b/advisories/github-reviewed/2023/04/GHSA-qm2h-m799-86rc/GHSA-qm2h-m799-86rc.json index 29f8b51e0ca..158d3bef5a5 100644 --- a/advisories/github-reviewed/2023/04/GHSA-qm2h-m799-86rc/GHSA-qm2h-m799-86rc.json +++ b/advisories/github-reviewed/2023/04/GHSA-qm2h-m799-86rc/GHSA-qm2h-m799-86rc.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-qm2h-m799-86rc", - "modified": "2023-04-14T20:24:46Z", + "modified": "2025-02-13T18:54:03Z", "published": "2023-04-10T09:30:15Z", "aliases": [ "CVE-2023-29215" diff --git a/advisories/github-reviewed/2023/04/GHSA-rrhf-32rq-f28h/GHSA-rrhf-32rq-f28h.json b/advisories/github-reviewed/2023/04/GHSA-rrhf-32rq-f28h/GHSA-rrhf-32rq-f28h.json index 149a65520f5..8b864cbd5dd 100644 --- a/advisories/github-reviewed/2023/04/GHSA-rrhf-32rq-f28h/GHSA-rrhf-32rq-f28h.json +++ b/advisories/github-reviewed/2023/04/GHSA-rrhf-32rq-f28h/GHSA-rrhf-32rq-f28h.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-rrhf-32rq-f28h", - "modified": "2023-04-14T20:24:31Z", + "modified": "2025-02-13T18:54:02Z", "published": "2023-04-10T09:30:15Z", "aliases": [ "CVE-2023-29216" ], "summary": "Apache Linkis DatasourceManager module has deserialization vulnerability", - "details": "In Apache Linkis <=1.3.1, because the parameters are not effectively filtered, the attacker can use the MySQL data source and malicious parameters to configure a new data source to trigger a deserialization vulnerability, eventually leading to remote code execution. Users should upgrade their version of Linkis to version 1.3.2.\n", + "details": "In Apache Linkis <=1.3.1, because the parameters are not effectively filtered, the attacker can use the MySQL data source and malicious parameters to configure a new data source to trigger a deserialization vulnerability, eventually leading to remote code execution. Users should upgrade their version of Linkis to version 1.3.2.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/04/GHSA-rrm6-wvj7-cwh2/GHSA-rrm6-wvj7-cwh2.json b/advisories/github-reviewed/2023/04/GHSA-rrm6-wvj7-cwh2/GHSA-rrm6-wvj7-cwh2.json index eda8b5f575e..b8eaa9e9a97 100644 --- a/advisories/github-reviewed/2023/04/GHSA-rrm6-wvj7-cwh2/GHSA-rrm6-wvj7-cwh2.json +++ b/advisories/github-reviewed/2023/04/GHSA-rrm6-wvj7-cwh2/GHSA-rrm6-wvj7-cwh2.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-rrm6-wvj7-cwh2", - "modified": "2024-10-28T14:30:18Z", + "modified": "2025-02-13T18:54:23Z", "published": "2023-04-21T20:24:21Z", "aliases": [ "CVE-2023-30608" ], "summary": "sqlparse contains a regular expression that is vulnerable to Regular Expression Denial of Service", - "details": "### Impact\nThe SQL parser contains a regular expression that is vulnerable to [ReDoS](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS) (Regular Expression Denial of Service). The vulnerability may lead to Denial of Service (DoS).\n\n### Patches\nThis issues has been fixed in sqlparse 0.4.4.\n\n### Workarounds\nNone. \n\n### References\nThis issue was discovered and reported by GHSL team member [@erik-krogh (Erik Krogh Kristensen)](https://github.com/erik-krogh).\n- Commit that introduced the vulnerability: e75e35869473832a1eb67772b1adfee2db11b85a\n", + "details": "### Impact\nThe SQL parser contains a regular expression that is vulnerable to [ReDoS](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS) (Regular Expression Denial of Service). The vulnerability may lead to Denial of Service (DoS).\n\n### Patches\nThis issues has been fixed in sqlparse 0.4.4.\n\n### Workarounds\nNone. \n\n### References\nThis issue was discovered and reported by GHSL team member [@erik-krogh (Erik Krogh Kristensen)](https://github.com/erik-krogh).\n- Commit that introduced the vulnerability: e75e35869473832a1eb67772b1adfee2db11b85a", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/05/GHSA-59hw-j9g6-mfg3/GHSA-59hw-j9g6-mfg3.json b/advisories/github-reviewed/2023/05/GHSA-59hw-j9g6-mfg3/GHSA-59hw-j9g6-mfg3.json index a1cca99bae3..8d52ca0bab9 100644 --- a/advisories/github-reviewed/2023/05/GHSA-59hw-j9g6-mfg3/GHSA-59hw-j9g6-mfg3.json +++ b/advisories/github-reviewed/2023/05/GHSA-59hw-j9g6-mfg3/GHSA-59hw-j9g6-mfg3.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-59hw-j9g6-mfg3", - "modified": "2024-11-19T20:11:00Z", + "modified": "2025-02-13T18:54:26Z", "published": "2023-05-02T09:30:17Z", "aliases": [ "CVE-2023-32007" ], "summary": "Apache Spark UI vulnerable to Command Injection", - "details": "The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This issue was disclosed earlier as CVE-2022-33891, but incorrectly claimed version 3.1.3 (which has since gone EOL) would not be affected.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.\n\nUsers are recommended to upgrade to a supported version of Apache Spark, such as version 3.4.0.\n\n\n", + "details": "The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This issue was disclosed earlier as CVE-2022-33891, but incorrectly claimed version 3.1.3 (which has since gone EOL) would not be affected.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.\n\nUsers are recommended to upgrade to a supported version of Apache Spark, such as version 3.4.0.", "severity": [ { "type": "CVSS_V3", @@ -86,6 +86,10 @@ { "type": "WEB", "url": "https://www.openwall.com/lists/oss-security/2023/05/02/1" + }, + { + "type": "WEB", + "url": "http://www.openwall.com/lists/oss-security/2023/05/02/1" } ], "database_specific": { diff --git a/advisories/github-reviewed/2023/05/GHSA-f3wc-3vxv-xmvr/GHSA-f3wc-3vxv-xmvr.json b/advisories/github-reviewed/2023/05/GHSA-f3wc-3vxv-xmvr/GHSA-f3wc-3vxv-xmvr.json index 3aa0d66a8ba..968c86eee86 100644 --- a/advisories/github-reviewed/2023/05/GHSA-f3wc-3vxv-xmvr/GHSA-f3wc-3vxv-xmvr.json +++ b/advisories/github-reviewed/2023/05/GHSA-f3wc-3vxv-xmvr/GHSA-f3wc-3vxv-xmvr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-f3wc-3vxv-xmvr", - "modified": "2024-09-24T15:31:50Z", + "modified": "2025-02-13T18:54:39Z", "published": "2023-05-24T17:28:26Z", "aliases": [ "CVE-2023-32323" diff --git a/advisories/github-reviewed/2023/05/GHSA-h475-7v3c-26q7/GHSA-h475-7v3c-26q7.json b/advisories/github-reviewed/2023/05/GHSA-h475-7v3c-26q7/GHSA-h475-7v3c-26q7.json index 1197232ce68..62c488c0708 100644 --- a/advisories/github-reviewed/2023/05/GHSA-h475-7v3c-26q7/GHSA-h475-7v3c-26q7.json +++ b/advisories/github-reviewed/2023/05/GHSA-h475-7v3c-26q7/GHSA-h475-7v3c-26q7.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-h475-7v3c-26q7", - "modified": "2023-05-11T14:06:29Z", + "modified": "2025-02-13T18:54:14Z", "published": "2023-05-03T21:30:18Z", "aliases": [ "CVE-2023-25826" ], "summary": "Command injection in OpenTSDB", - "details": "Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS commands into multiple parameters and execute malicious code on the OpenTSDB host system. This exploit exists due to an incomplete fix that was made when this vulnerability was previously disclosed as CVE-2020-35476. Regex validation that was implemented to restrict allowed input to the query API does not work as intended, allowing crafted commands to bypass validation.\n\n", + "details": "Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS commands into multiple parameters and execute malicious code on the OpenTSDB host system. This exploit exists due to an incomplete fix that was made when this vulnerability was previously disclosed as CVE-2020-35476. Regex validation that was implemented to restrict allowed input to the query API does not work as intended, allowing crafted commands to bypass validation.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/05/GHSA-j8r2-6x86-q33q/GHSA-j8r2-6x86-q33q.json b/advisories/github-reviewed/2023/05/GHSA-j8r2-6x86-q33q/GHSA-j8r2-6x86-q33q.json index 3ea9231410d..668b3e91678 100644 --- a/advisories/github-reviewed/2023/05/GHSA-j8r2-6x86-q33q/GHSA-j8r2-6x86-q33q.json +++ b/advisories/github-reviewed/2023/05/GHSA-j8r2-6x86-q33q/GHSA-j8r2-6x86-q33q.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-j8r2-6x86-q33q", - "modified": "2024-03-12T17:11:27Z", + "modified": "2025-02-13T18:54:42Z", "published": "2023-05-22T20:36:32Z", "aliases": [ "CVE-2023-32681" @@ -20,11 +20,6 @@ "ecosystem": "PyPI", "name": "requests" }, - "ecosystem_specific": { - "affected_functions": [ - "requests.sessions.SessionRedirectMixin.rebuild_proxies" - ] - }, "ranges": [ { "type": "ECOSYSTEM", diff --git a/advisories/github-reviewed/2023/05/GHSA-jchm-fm4q-c2fp/GHSA-jchm-fm4q-c2fp.json b/advisories/github-reviewed/2023/05/GHSA-jchm-fm4q-c2fp/GHSA-jchm-fm4q-c2fp.json index dcf230045cb..c6c9a628ce4 100644 --- a/advisories/github-reviewed/2023/05/GHSA-jchm-fm4q-c2fp/GHSA-jchm-fm4q-c2fp.json +++ b/advisories/github-reviewed/2023/05/GHSA-jchm-fm4q-c2fp/GHSA-jchm-fm4q-c2fp.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-jchm-fm4q-c2fp", - "modified": "2024-11-19T20:06:06Z", + "modified": "2025-02-13T18:54:28Z", "published": "2023-05-08T12:30:29Z", "aliases": [ "CVE-2023-25754" ], "summary": "Apache Airflow vulnerable to Privilege Context Switching Error", - "details": "Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow. This issue affects Apache Airflow: before 2.6.0.\n\n", + "details": "Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow. This issue affects Apache Airflow: before 2.6.0.", "severity": [ { "type": "CVSS_V3", @@ -71,6 +71,10 @@ { "type": "WEB", "url": "https://www.openwall.com/lists/oss-security/2023/05/08/2" + }, + { + "type": "WEB", + "url": "http://www.openwall.com/lists/oss-security/2023/05/08/2" } ], "database_specific": { diff --git a/advisories/github-reviewed/2023/05/GHSA-q9mw-68c2-j6m5/GHSA-q9mw-68c2-j6m5.json b/advisories/github-reviewed/2023/05/GHSA-q9mw-68c2-j6m5/GHSA-q9mw-68c2-j6m5.json index f1500f72e00..1f45279e523 100644 --- a/advisories/github-reviewed/2023/05/GHSA-q9mw-68c2-j6m5/GHSA-q9mw-68c2-j6m5.json +++ b/advisories/github-reviewed/2023/05/GHSA-q9mw-68c2-j6m5/GHSA-q9mw-68c2-j6m5.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-q9mw-68c2-j6m5", - "modified": "2023-05-09T16:32:21Z", + "modified": "2025-02-13T18:54:10Z", "published": "2023-05-03T21:56:51Z", "aliases": [ "CVE-2023-31125" ], "summary": "engine.io Uncaught Exception vulnerability", - "details": "### Impact\n\nA specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process.\n\n```\nTypeError: Cannot read properties of undefined (reading 'handlesUpgrades')\n at Server.onWebSocket (build/server.js:515:67)\n```\n\nThis impacts all the users of the [`engine.io`](https://www.npmjs.com/package/engine.io) package, including those who uses depending packages like [`socket.io`](https://www.npmjs.com/package/socket.io).\n\n### Patches\n\nA fix has been released today (2023/05/02): [6.4.2](https://github.com/socketio/engine.io/releases/tag/6.4.2)\n\nThis bug was introduced in version 5.1.0 and included in version 4.1.0 of the `socket.io` parent package. Older versions are not impacted.\n\nFor `socket.io` users:\n\n| Version range | `engine.io` version | Needs minor update? |\n|-----------------------------|---------------------|--------------------------------------------------------------------------------------------------------|\n| `socket.io@4.6.x` | `~6.4.0` | `npm audit fix` should be sufficient |\n| `socket.io@4.5.x` | `~6.2.0` | Please upgrade to `socket.io@4.6.x` |\n| `socket.io@4.4.x` | `~6.1.0` | Please upgrade to `socket.io@4.6.x` |\n| `socket.io@4.3.x` | `~6.0.0` | Please upgrade to `socket.io@4.6.x` |\n| `socket.io@4.2.x` | `~5.2.0` | Please upgrade to `socket.io@4.6.x` |\n| `socket.io@4.1.x` | `~5.1.1` | Please upgrade to `socket.io@4.6.x` |\n| `socket.io@4.0.x` | `~5.0.0` | Not impacted |\n| `socket.io@3.1.x` | `~4.1.0` | Not impacted |\n| `socket.io@3.0.x` | `~4.0.0` | Not impacted |\n| `socket.io@2.5.0` | `~3.6.0` | Not impacted |\n| `socket.io@2.4.x` and below | `~3.5.0` | Not impacted |\n\n### Workarounds\n\nThere is no known workaround except upgrading to a safe version.\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [`engine.io`](https://github.com/socketio/engine.io)\n\nThanks to Thomas Rinsma from Codean for the responsible disclosure.\n", + "details": "### Impact\n\nA specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process.\n\n```\nTypeError: Cannot read properties of undefined (reading 'handlesUpgrades')\n at Server.onWebSocket (build/server.js:515:67)\n```\n\nThis impacts all the users of the [`engine.io`](https://www.npmjs.com/package/engine.io) package, including those who uses depending packages like [`socket.io`](https://www.npmjs.com/package/socket.io).\n\n### Patches\n\nA fix has been released today (2023/05/02): [6.4.2](https://github.com/socketio/engine.io/releases/tag/6.4.2)\n\nThis bug was introduced in version 5.1.0 and included in version 4.1.0 of the `socket.io` parent package. Older versions are not impacted.\n\nFor `socket.io` users:\n\n| Version range | `engine.io` version | Needs minor update? |\n|-----------------------------|---------------------|--------------------------------------------------------------------------------------------------------|\n| `socket.io@4.6.x` | `~6.4.0` | `npm audit fix` should be sufficient |\n| `socket.io@4.5.x` | `~6.2.0` | Please upgrade to `socket.io@4.6.x` |\n| `socket.io@4.4.x` | `~6.1.0` | Please upgrade to `socket.io@4.6.x` |\n| `socket.io@4.3.x` | `~6.0.0` | Please upgrade to `socket.io@4.6.x` |\n| `socket.io@4.2.x` | `~5.2.0` | Please upgrade to `socket.io@4.6.x` |\n| `socket.io@4.1.x` | `~5.1.1` | Please upgrade to `socket.io@4.6.x` |\n| `socket.io@4.0.x` | `~5.0.0` | Not impacted |\n| `socket.io@3.1.x` | `~4.1.0` | Not impacted |\n| `socket.io@3.0.x` | `~4.0.0` | Not impacted |\n| `socket.io@2.5.0` | `~3.6.0` | Not impacted |\n| `socket.io@2.4.x` and below | `~3.5.0` | Not impacted |\n\n### Workarounds\n\nThere is no known workaround except upgrading to a safe version.\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [`engine.io`](https://github.com/socketio/engine.io)\n\nThanks to Thomas Rinsma from Codean for the responsible disclosure.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/05/GHSA-qvq8-cw7f-m7m4/GHSA-qvq8-cw7f-m7m4.json b/advisories/github-reviewed/2023/05/GHSA-qvq8-cw7f-m7m4/GHSA-qvq8-cw7f-m7m4.json index 03a3049d928..77301c8e929 100644 --- a/advisories/github-reviewed/2023/05/GHSA-qvq8-cw7f-m7m4/GHSA-qvq8-cw7f-m7m4.json +++ b/advisories/github-reviewed/2023/05/GHSA-qvq8-cw7f-m7m4/GHSA-qvq8-cw7f-m7m4.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-qvq8-cw7f-m7m4", - "modified": "2023-06-03T00:39:55Z", + "modified": "2025-02-13T18:54:31Z", "published": "2023-05-25T09:30:25Z", "aliases": [ "CVE-2022-46907" ], "summary": "Apache JSPWiki vulnerable to cross-site scripting on several plugins", - "details": "A carefully crafted request on several JSPWiki plugins could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.0 or later.\n", + "details": "A carefully crafted request on several JSPWiki plugins could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.0 or later.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/07/GHSA-fxjg-28fm-pfxh/GHSA-fxjg-28fm-pfxh.json b/advisories/github-reviewed/2023/07/GHSA-fxjg-28fm-pfxh/GHSA-fxjg-28fm-pfxh.json index cd849cdd554..fa6f080fe49 100644 --- a/advisories/github-reviewed/2023/07/GHSA-fxjg-28fm-pfxh/GHSA-fxjg-28fm-pfxh.json +++ b/advisories/github-reviewed/2023/07/GHSA-fxjg-28fm-pfxh/GHSA-fxjg-28fm-pfxh.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-fxjg-28fm-pfxh", - "modified": "2023-07-06T22:10:49Z", + "modified": "2025-02-13T18:54:17Z", "published": "2023-07-06T19:24:15Z", "aliases": [ "CVE-2023-25504" ], "summary": "Apache Superset Server-Side Request Forgery vulnerability", - "details": "A malicious actor who has been authenticated and granted specific permissions in Apache Superset may use the import dataset feature in order to conduct Server-Side Request Forgery attacks and query internal resources on behalf of the server where Superset is deployed. This vulnerability exists in Apache Superset versions up to and including 2.0.1.\n", + "details": "A malicious actor who has been authenticated and granted specific permissions in Apache Superset may use the import dataset feature in order to conduct Server-Side Request Forgery attacks and query internal resources on behalf of the server where Superset is deployed. This vulnerability exists in Apache Superset versions up to and including 2.0.1.", "severity": [ { "type": "CVSS_V3", @@ -47,6 +47,10 @@ { "type": "WEB", "url": "https://lists.apache.org/thread/tdnzkocfsqg2sbbornnp9g492fn4zhtx" + }, + { + "type": "WEB", + "url": "http://www.openwall.com/lists/oss-security/2023/04/18/8" } ], "database_specific": {