From 5c736dabf1c42b02fbf456e6440e232114492339 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 21 Aug 2024 12:32:13 +0000
Subject: [PATCH] Publish Advisories

GHSA-8m84-h9hh-3cfh
GHSA-pw4h-rqvq-8h46
GHSA-w57x-f5pm-84r5
---
 .../GHSA-8m84-h9hh-3cfh.json                  | 35 +++++++++++++++++
 .../GHSA-pw4h-rqvq-8h46.json                  | 38 +++++++++++++++++++
 .../GHSA-w57x-f5pm-84r5.json                  | 38 +++++++++++++++++++
 3 files changed, 111 insertions(+)
 create mode 100644 advisories/unreviewed/2024/08/GHSA-8m84-h9hh-3cfh/GHSA-8m84-h9hh-3cfh.json
 create mode 100644 advisories/unreviewed/2024/08/GHSA-pw4h-rqvq-8h46/GHSA-pw4h-rqvq-8h46.json
 create mode 100644 advisories/unreviewed/2024/08/GHSA-w57x-f5pm-84r5/GHSA-w57x-f5pm-84r5.json

diff --git a/advisories/unreviewed/2024/08/GHSA-8m84-h9hh-3cfh/GHSA-8m84-h9hh-3cfh.json b/advisories/unreviewed/2024/08/GHSA-8m84-h9hh-3cfh/GHSA-8m84-h9hh-3cfh.json
new file mode 100644
index 00000000000..9b53367e833
--- /dev/null
+++ b/advisories/unreviewed/2024/08/GHSA-8m84-h9hh-3cfh/GHSA-8m84-h9hh-3cfh.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8m84-h9hh-3cfh",
+  "modified": "2024-08-21T12:30:25Z",
+  "published": "2024-08-21T12:30:25Z",
+  "aliases": [
+    "CVE-2023-49198"
+  ],
+  "details": "Mysql security vulnerability in Apache SeaTunnel.\n\nAttackers can read files on the MySQL server by modifying the information in the MySQL URL\n\n allowLoadLocalInfile=true&allowUrlInLocalInfile=true&allowLoadLocalInfileInPath=/&maxAllowedPacket=655360\nThis issue affects Apache SeaTunnel: 1.0.0.\n\nUsers are recommended to upgrade to version [1.0.1], which fixes the issue.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49198"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread/48j9f1nsn037mgzc4j9o51nwglb1s08h"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-552"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-21T10:15:04Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/08/GHSA-pw4h-rqvq-8h46/GHSA-pw4h-rqvq-8h46.json b/advisories/unreviewed/2024/08/GHSA-pw4h-rqvq-8h46/GHSA-pw4h-rqvq-8h46.json
new file mode 100644
index 00000000000..9476afb6d8f
--- /dev/null
+++ b/advisories/unreviewed/2024/08/GHSA-pw4h-rqvq-8h46/GHSA-pw4h-rqvq-8h46.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pw4h-rqvq-8h46",
+  "modified": "2024-08-21T12:30:25Z",
+  "published": "2024-08-21T12:30:25Z",
+  "aliases": [
+    "CVE-2023-22576"
+  ],
+  "details": "Dell Repository Manager version 3.4.2 and earlier, contain a Local Privilege Escalation Vulnerability in Installation module. A local low privileged attacker may potentially exploit this vulnerability leading to the execution of arbitrary executable on the operating system with high privileges using the existing vulnerability in operating system. Exploitation may lead to unavailability of the service.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22576"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.dell.com/support/kbdoc/en-us/000207513/dsa-2023-017-dell-emc-repository-manager-drm-security-update-for-an-improper-privilege-management-vulnerability"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-269"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-21T10:15:04Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/08/GHSA-w57x-f5pm-84r5/GHSA-w57x-f5pm-84r5.json b/advisories/unreviewed/2024/08/GHSA-w57x-f5pm-84r5/GHSA-w57x-f5pm-84r5.json
new file mode 100644
index 00000000000..97b07422367
--- /dev/null
+++ b/advisories/unreviewed/2024/08/GHSA-w57x-f5pm-84r5/GHSA-w57x-f5pm-84r5.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w57x-f5pm-84r5",
+  "modified": "2024-08-21T12:30:25Z",
+  "published": "2024-08-21T12:30:25Z",
+  "aliases": [
+    "CVE-2024-37008"
+  ],
+  "details": "A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37008"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0013"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-121"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-21T10:15:05Z"
+  }
+}
\ No newline at end of file