Publish Advisories

GHSA-9vqf-p3v5-qmh2
GHSA-j7v6-9xg3-v59m

advisories/unreviewed/2025/05/GHSA-9vqf-p3v5-qmh2/GHSA-9vqf-p3v5-qmh2.json

@@ -0,0 +1,48 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9vqf-p3v5-qmh2",
+  "modified": "2025-05-04T00:30:36Z",
+  "published": "2025-05-04T00:30:36Z",
+  "aliases": [
+    "CVE-2025-47244"
+  ],
+  "details": "Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C# reflection layer, as demonstrated by causing a denial of service (when an attacker executes a loop calling RestartWeb) or obtaining potentially sensitive information. Exploitation can occur if Anonymous access is enabled, or if there is a successful CSRF attack.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47244"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.inedo.com/docs/proget/installation/installation-guide"
+    },
+    {
+      "type": "WEB",
+      "url": "https://forums.inedo.com"
+    },
+    {
+      "type": "WEB",
+      "url": "https://my.inedo.com/downloads/installers?product=ProGet"
+    },
+    {
+      "type": "WEB",
+      "url": "https://seclists.org/fulldisclosure/2025/Apr/30"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-288"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-03T23:15:48Z"
+  }
+}

advisories/unreviewed/2025/05/GHSA-j7v6-9xg3-v59m/GHSA-j7v6-9xg3-v59m.json

@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-j7v6-9xg3-v59m",
+  "modified": "2025-05-04T00:30:36Z",
+  "published": "2025-05-04T00:30:36Z",
+  "aliases": [
+    "CVE-2025-47245"
+  ],
+  "details": "In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-7x3q-g6gq-f4mm"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47245"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/bluewave-labs/Checkmate/pull/2160"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/bluewave-labs/Checkmate/commit/d4a60723f490502b3fe6f7f780a85d29bf5d1385"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-472"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-04T00:15:15Z"
+  }
+}