From 5c9053ed5d9d08e2d6d816f6ae1b8c9e2f42e26f Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 16 Dec 2024 21:32:40 +0000 Subject: [PATCH] Advisory Database Sync --- .../GHSA-3rxx-8f33-7p6p.json | 6 ++- .../GHSA-45m2-8q7f-93wv.json | 6 ++- .../GHSA-9xxv-q6pp-96wq.json | 6 ++- .../GHSA-9f9g-fjv5-h5g7.json | 2 +- .../GHSA-3cmq-9cqr-3jc4.json | 3 +- .../GHSA-7pg4-9277-v46w.json | 3 +- .../GHSA-h32h-58mq-6fgc.json | 3 +- .../GHSA-mwr4-m2r6-rmh7.json | 3 +- .../GHSA-c5x4-rjx4-c2hr.json | 3 +- .../GHSA-gwq7-2mvv-mhcq.json | 3 +- .../GHSA-4rp4-77f3-px46.json | 3 +- .../GHSA-6f7w-hx2c-cxpj.json | 3 +- .../GHSA-88jw-43wf-p3wr.json | 14 ++++- .../GHSA-3p9v-2c3q-cf4v.json | 6 ++- .../GHSA-4fm6-v3v9-jp3f.json | 36 +++++++++++++ .../GHSA-58x6-9vjj-69q7.json | 33 ++++++++++++ .../GHSA-5h2c-fvjp-2wmx.json | 52 +++++++++++++++++++ .../GHSA-65c3-x7x6-jmfm.json | 41 +++++++++++++++ .../GHSA-9cg3-fgfh-g8ww.json | 33 ++++++++++++ .../GHSA-f8pm-c5r8-xr94.json | 52 +++++++++++++++++++ .../GHSA-fr5f-m86p-4h8f.json | 52 +++++++++++++++++++ .../GHSA-mm54-vj99-7qc8.json | 33 ++++++++++++ .../GHSA-qwvh-983v-7jrj.json | 52 +++++++++++++++++++ .../GHSA-r72x-8472-jjv6.json | 11 ++-- .../GHSA-rr64-3qwv-pgf9.json | 11 ++-- .../GHSA-v29m-m46x-46c5.json | 52 +++++++++++++++++++ .../GHSA-v922-7jcj-4c8p.json | 52 +++++++++++++++++++ .../GHSA-vvvx-g9vg-6c4g.json | 11 ++-- .../GHSA-xxvf-6jpw-pp5x.json | 52 +++++++++++++++++++ 29 files changed, 611 insertions(+), 26 deletions(-) create mode 100644 advisories/unreviewed/2024/12/GHSA-4fm6-v3v9-jp3f/GHSA-4fm6-v3v9-jp3f.json create mode 100644 advisories/unreviewed/2024/12/GHSA-58x6-9vjj-69q7/GHSA-58x6-9vjj-69q7.json create mode 100644 advisories/unreviewed/2024/12/GHSA-5h2c-fvjp-2wmx/GHSA-5h2c-fvjp-2wmx.json create mode 100644 advisories/unreviewed/2024/12/GHSA-65c3-x7x6-jmfm/GHSA-65c3-x7x6-jmfm.json create mode 100644 advisories/unreviewed/2024/12/GHSA-9cg3-fgfh-g8ww/GHSA-9cg3-fgfh-g8ww.json create mode 100644 advisories/unreviewed/2024/12/GHSA-f8pm-c5r8-xr94/GHSA-f8pm-c5r8-xr94.json create mode 100644 advisories/unreviewed/2024/12/GHSA-fr5f-m86p-4h8f/GHSA-fr5f-m86p-4h8f.json create mode 100644 advisories/unreviewed/2024/12/GHSA-mm54-vj99-7qc8/GHSA-mm54-vj99-7qc8.json create mode 100644 advisories/unreviewed/2024/12/GHSA-qwvh-983v-7jrj/GHSA-qwvh-983v-7jrj.json create mode 100644 advisories/unreviewed/2024/12/GHSA-v29m-m46x-46c5/GHSA-v29m-m46x-46c5.json create mode 100644 advisories/unreviewed/2024/12/GHSA-v922-7jcj-4c8p/GHSA-v922-7jcj-4c8p.json create mode 100644 advisories/unreviewed/2024/12/GHSA-xxvf-6jpw-pp5x/GHSA-xxvf-6jpw-pp5x.json diff --git a/advisories/github-reviewed/2024/02/GHSA-3rxx-8f33-7p6p/GHSA-3rxx-8f33-7p6p.json b/advisories/github-reviewed/2024/02/GHSA-3rxx-8f33-7p6p/GHSA-3rxx-8f33-7p6p.json index 381e1a04d0e..13f2eef7b06 100644 --- a/advisories/github-reviewed/2024/02/GHSA-3rxx-8f33-7p6p/GHSA-3rxx-8f33-7p6p.json +++ b/advisories/github-reviewed/2024/02/GHSA-3rxx-8f33-7p6p/GHSA-3rxx-8f33-7p6p.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-3rxx-8f33-7p6p", - "modified": "2024-02-29T20:10:03Z", + "modified": "2024-12-16T21:31:40Z", "published": "2024-02-29T03:33:14Z", "aliases": [ "CVE-2023-48653" @@ -81,7 +81,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-352" + ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-02-29T20:10:02Z", diff --git a/advisories/github-reviewed/2024/02/GHSA-45m2-8q7f-93wv/GHSA-45m2-8q7f-93wv.json b/advisories/github-reviewed/2024/02/GHSA-45m2-8q7f-93wv/GHSA-45m2-8q7f-93wv.json index b05fa3fea0a..9c6be665324 100644 --- a/advisories/github-reviewed/2024/02/GHSA-45m2-8q7f-93wv/GHSA-45m2-8q7f-93wv.json +++ b/advisories/github-reviewed/2024/02/GHSA-45m2-8q7f-93wv/GHSA-45m2-8q7f-93wv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-45m2-8q7f-93wv", - "modified": "2024-02-29T20:10:18Z", + "modified": "2024-12-16T21:31:49Z", "published": "2024-02-29T03:33:14Z", "aliases": [ "CVE-2023-48651" @@ -58,7 +58,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-352" + ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-02-29T20:10:18Z", diff --git a/advisories/github-reviewed/2024/02/GHSA-9xxv-q6pp-96wq/GHSA-9xxv-q6pp-96wq.json b/advisories/github-reviewed/2024/02/GHSA-9xxv-q6pp-96wq/GHSA-9xxv-q6pp-96wq.json index effaa0aceb4..d236eba140e 100644 --- a/advisories/github-reviewed/2024/02/GHSA-9xxv-q6pp-96wq/GHSA-9xxv-q6pp-96wq.json +++ b/advisories/github-reviewed/2024/02/GHSA-9xxv-q6pp-96wq/GHSA-9xxv-q6pp-96wq.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9xxv-q6pp-96wq", - "modified": "2024-02-29T20:10:31Z", + "modified": "2024-12-16T21:31:54Z", "published": "2024-02-29T03:33:14Z", "aliases": [ "CVE-2023-49337" @@ -62,7 +62,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-79" + ], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2024-02-29T20:10:31Z", diff --git a/advisories/unreviewed/2023/12/GHSA-9f9g-fjv5-h5g7/GHSA-9f9g-fjv5-h5g7.json b/advisories/unreviewed/2023/12/GHSA-9f9g-fjv5-h5g7/GHSA-9f9g-fjv5-h5g7.json index eedea3614f8..3567d5b995b 100644 --- a/advisories/unreviewed/2023/12/GHSA-9f9g-fjv5-h5g7/GHSA-9f9g-fjv5-h5g7.json +++ b/advisories/unreviewed/2023/12/GHSA-9f9g-fjv5-h5g7/GHSA-9f9g-fjv5-h5g7.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9f9g-fjv5-h5g7", - "modified": "2023-12-21T21:30:32Z", + "modified": "2024-12-16T21:30:54Z", "published": "2023-12-21T21:30:32Z", "aliases": [ "CVE-2023-51379" diff --git a/advisories/unreviewed/2024/02/GHSA-3cmq-9cqr-3jc4/GHSA-3cmq-9cqr-3jc4.json b/advisories/unreviewed/2024/02/GHSA-3cmq-9cqr-3jc4/GHSA-3cmq-9cqr-3jc4.json index dea64abb68b..978e5f2e8f5 100644 --- a/advisories/unreviewed/2024/02/GHSA-3cmq-9cqr-3jc4/GHSA-3cmq-9cqr-3jc4.json +++ b/advisories/unreviewed/2024/02/GHSA-3cmq-9cqr-3jc4/GHSA-3cmq-9cqr-3jc4.json @@ -30,7 +30,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-122" + "CWE-122", + "CWE-787" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/02/GHSA-7pg4-9277-v46w/GHSA-7pg4-9277-v46w.json b/advisories/unreviewed/2024/02/GHSA-7pg4-9277-v46w/GHSA-7pg4-9277-v46w.json index 4795de50f92..8e2684ee824 100644 --- a/advisories/unreviewed/2024/02/GHSA-7pg4-9277-v46w/GHSA-7pg4-9277-v46w.json +++ b/advisories/unreviewed/2024/02/GHSA-7pg4-9277-v46w/GHSA-7pg4-9277-v46w.json @@ -34,7 +34,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-122" + "CWE-122", + "CWE-787" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/02/GHSA-h32h-58mq-6fgc/GHSA-h32h-58mq-6fgc.json b/advisories/unreviewed/2024/02/GHSA-h32h-58mq-6fgc/GHSA-h32h-58mq-6fgc.json index dd2352f1740..bae8be50807 100644 --- a/advisories/unreviewed/2024/02/GHSA-h32h-58mq-6fgc/GHSA-h32h-58mq-6fgc.json +++ b/advisories/unreviewed/2024/02/GHSA-h32h-58mq-6fgc/GHSA-h32h-58mq-6fgc.json @@ -30,7 +30,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-20" + "CWE-20", + "CWE-787" ], "severity": "CRITICAL", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/02/GHSA-mwr4-m2r6-rmh7/GHSA-mwr4-m2r6-rmh7.json b/advisories/unreviewed/2024/02/GHSA-mwr4-m2r6-rmh7/GHSA-mwr4-m2r6-rmh7.json index bc4de58ca5d..aac8c6558b1 100644 --- a/advisories/unreviewed/2024/02/GHSA-mwr4-m2r6-rmh7/GHSA-mwr4-m2r6-rmh7.json +++ b/advisories/unreviewed/2024/02/GHSA-mwr4-m2r6-rmh7/GHSA-mwr4-m2r6-rmh7.json @@ -30,7 +30,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-122" + "CWE-122", + "CWE-787" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/03/GHSA-c5x4-rjx4-c2hr/GHSA-c5x4-rjx4-c2hr.json b/advisories/unreviewed/2024/03/GHSA-c5x4-rjx4-c2hr/GHSA-c5x4-rjx4-c2hr.json index 3bf2a61921a..c53fa2710d4 100644 --- a/advisories/unreviewed/2024/03/GHSA-c5x4-rjx4-c2hr/GHSA-c5x4-rjx4-c2hr.json +++ b/advisories/unreviewed/2024/03/GHSA-c5x4-rjx4-c2hr/GHSA-c5x4-rjx4-c2hr.json @@ -26,7 +26,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-125" + "CWE-125", + "CWE-843" ], "severity": "LOW", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/03/GHSA-gwq7-2mvv-mhcq/GHSA-gwq7-2mvv-mhcq.json b/advisories/unreviewed/2024/03/GHSA-gwq7-2mvv-mhcq/GHSA-gwq7-2mvv-mhcq.json index 3bdf60f632a..dd98d87df44 100644 --- a/advisories/unreviewed/2024/03/GHSA-gwq7-2mvv-mhcq/GHSA-gwq7-2mvv-mhcq.json +++ b/advisories/unreviewed/2024/03/GHSA-gwq7-2mvv-mhcq/GHSA-gwq7-2mvv-mhcq.json @@ -30,7 +30,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-269" + "CWE-269", + "CWE-787" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/05/GHSA-4rp4-77f3-px46/GHSA-4rp4-77f3-px46.json b/advisories/unreviewed/2024/05/GHSA-4rp4-77f3-px46/GHSA-4rp4-77f3-px46.json index 3e7551319cb..fd58d912f68 100644 --- a/advisories/unreviewed/2024/05/GHSA-4rp4-77f3-px46/GHSA-4rp4-77f3-px46.json +++ b/advisories/unreviewed/2024/05/GHSA-4rp4-77f3-px46/GHSA-4rp4-77f3-px46.json @@ -30,7 +30,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-121" + "CWE-121", + "CWE-787" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/05/GHSA-6f7w-hx2c-cxpj/GHSA-6f7w-hx2c-cxpj.json b/advisories/unreviewed/2024/05/GHSA-6f7w-hx2c-cxpj/GHSA-6f7w-hx2c-cxpj.json index a6b892569cb..c8a3ba2cae0 100644 --- a/advisories/unreviewed/2024/05/GHSA-6f7w-hx2c-cxpj/GHSA-6f7w-hx2c-cxpj.json +++ b/advisories/unreviewed/2024/05/GHSA-6f7w-hx2c-cxpj/GHSA-6f7w-hx2c-cxpj.json @@ -30,7 +30,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-122" + "CWE-122", + "CWE-787" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/05/GHSA-88jw-43wf-p3wr/GHSA-88jw-43wf-p3wr.json b/advisories/unreviewed/2024/05/GHSA-88jw-43wf-p3wr/GHSA-88jw-43wf-p3wr.json index 612be3556d3..9cb72d34c30 100644 --- a/advisories/unreviewed/2024/05/GHSA-88jw-43wf-p3wr/GHSA-88jw-43wf-p3wr.json +++ b/advisories/unreviewed/2024/05/GHSA-88jw-43wf-p3wr/GHSA-88jw-43wf-p3wr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-88jw-43wf-p3wr", - "modified": "2024-08-05T18:31:43Z", + "modified": "2024-12-16T21:30:55Z", "published": "2024-05-31T03:30:31Z", "aliases": [ "CVE-2024-37018" @@ -19,6 +19,18 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37018" }, + { + "type": "WEB", + "url": "https://dl.acm.org/doi/10.1145/3658644.3690345" + }, + { + "type": "WEB", + "url": "https://github.com/mzc796/marionette_odl" + }, + { + "type": "WEB", + "url": "https://github.com/mzc796/marionette_onos" + }, { "type": "WEB", "url": "https://jira.opendaylight.org/browse/DISCOVERY-2" diff --git a/advisories/unreviewed/2024/12/GHSA-3p9v-2c3q-cf4v/GHSA-3p9v-2c3q-cf4v.json b/advisories/unreviewed/2024/12/GHSA-3p9v-2c3q-cf4v/GHSA-3p9v-2c3q-cf4v.json index 923ab27e2e0..7ea5eb8f035 100644 --- a/advisories/unreviewed/2024/12/GHSA-3p9v-2c3q-cf4v/GHSA-3p9v-2c3q-cf4v.json +++ b/advisories/unreviewed/2024/12/GHSA-3p9v-2c3q-cf4v/GHSA-3p9v-2c3q-cf4v.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-3p9v-2c3q-cf4v", - "modified": "2024-12-12T18:30:55Z", + "modified": "2024-12-16T21:30:55Z", "published": "2024-12-12T18:30:55Z", "aliases": [ "CVE-2024-55099" @@ -22,6 +22,10 @@ { "type": "WEB", "url": "https://github.com/achchhelalchauhan/phpgurukul/blob/main/SQL%20injection%20ONHP-username.pdf" + }, + { + "type": "WEB", + "url": "https://github.com/kuzgunaka/CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-" } ], "database_specific": { diff --git a/advisories/unreviewed/2024/12/GHSA-4fm6-v3v9-jp3f/GHSA-4fm6-v3v9-jp3f.json b/advisories/unreviewed/2024/12/GHSA-4fm6-v3v9-jp3f/GHSA-4fm6-v3v9-jp3f.json new file mode 100644 index 00000000000..9e4ebba3dbc --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-4fm6-v3v9-jp3f/GHSA-4fm6-v3v9-jp3f.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4fm6-v3v9-jp3f", + "modified": "2024-12-16T21:30:56Z", + "published": "2024-12-16T21:30:56Z", + "aliases": [ + "CVE-2024-12687" + ], + "details": "Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.\n\nThis issue affects PlexTrac: from 1.61.3 before 2.8.1.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12687" + }, + { + "type": "WEB", + "url": "https://docs.plextrac.com/plextrac-documentation/master/security-advisories#release-2.11.0" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-502" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-16T20:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-58x6-9vjj-69q7/GHSA-58x6-9vjj-69q7.json b/advisories/unreviewed/2024/12/GHSA-58x6-9vjj-69q7/GHSA-58x6-9vjj-69q7.json new file mode 100644 index 00000000000..599c9057cae --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-58x6-9vjj-69q7/GHSA-58x6-9vjj-69q7.json @@ -0,0 +1,33 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-58x6-9vjj-69q7", + "modified": "2024-12-16T21:30:56Z", + "published": "2024-12-16T21:30:56Z", + "aliases": [ + "CVE-2024-55104" + ], + "details": "Online Nurse Hiring System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component /admin/add-nurse.php via the gender and emailid parameters.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55104" + }, + { + "type": "WEB", + "url": "https://github.com/kuzgunaka/test1/blob/main/CVE-2024-55104-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability.md" + }, + { + "type": "WEB", + "url": "https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-16T21:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-5h2c-fvjp-2wmx/GHSA-5h2c-fvjp-2wmx.json b/advisories/unreviewed/2024/12/GHSA-5h2c-fvjp-2wmx/GHSA-5h2c-fvjp-2wmx.json new file mode 100644 index 00000000000..6877153bafd --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-5h2c-fvjp-2wmx/GHSA-5h2c-fvjp-2wmx.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5h2c-fvjp-2wmx", + "modified": "2024-12-16T21:30:56Z", + "published": "2024-12-16T21:30:56Z", + "aliases": [ + "CVE-2024-12662" + ], + "details": "A vulnerability classified as problematic has been found in IObit Advanced SystemCare Utimate up to 17.0.0. This affects the function 0x8001E040 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12662" + }, + { + "type": "WEB", + "url": "https://shareforall.notion.site/IOBit-Advanced-SystemCare-Utimate-AscRegistryFilter-0x8001E040-NPD-DOS-15260437bb1e804e86b4e1de92ff0d09" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.288531" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.288531" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.457163" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-404" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-16T19:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-65c3-x7x6-jmfm/GHSA-65c3-x7x6-jmfm.json b/advisories/unreviewed/2024/12/GHSA-65c3-x7x6-jmfm/GHSA-65c3-x7x6-jmfm.json new file mode 100644 index 00000000000..0fc08139572 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-65c3-x7x6-jmfm/GHSA-65c3-x7x6-jmfm.json @@ -0,0 +1,41 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-65c3-x7x6-jmfm", + "modified": "2024-12-16T21:30:57Z", + "published": "2024-12-16T21:30:57Z", + "aliases": [ + "CVE-2024-55557" + ], + "details": "ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key for symmetric encryption of proxy credentials.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55557" + }, + { + "type": "WEB", + "url": "https://apps.microsoft.com/detail/9nhtv46lg4nh?hl=en-us&gl=US" + }, + { + "type": "WEB", + "url": "https://github.com/nroduit/Weasis/releases/tag/v4.5.1" + }, + { + "type": "WEB", + "url": "https://github.com/partywavesec/CVE-2024-55557" + }, + { + "type": "WEB", + "url": "https://www.partywave.site/show/research/CVE-2024-55557%20-%20Weasis%204.5.1" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-16T21:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-9cg3-fgfh-g8ww/GHSA-9cg3-fgfh-g8ww.json b/advisories/unreviewed/2024/12/GHSA-9cg3-fgfh-g8ww/GHSA-9cg3-fgfh-g8ww.json new file mode 100644 index 00000000000..90168a20ce3 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-9cg3-fgfh-g8ww/GHSA-9cg3-fgfh-g8ww.json @@ -0,0 +1,33 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9cg3-fgfh-g8ww", + "modified": "2024-12-16T21:30:56Z", + "published": "2024-12-16T21:30:56Z", + "aliases": [ + "CVE-2024-55100" + ], + "details": "A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Online Nurse Hiring System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the fullname parameter.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55100" + }, + { + "type": "WEB", + "url": "https://github.com/kuzgunaka/test1/blob/main/CVE-2024-55100-Online-Nurse-Hiring-System-v1.0-Stored-Cross-Site-Scripting-Vulnerability.md" + }, + { + "type": "WEB", + "url": "https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-16T21:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-f8pm-c5r8-xr94/GHSA-f8pm-c5r8-xr94.json b/advisories/unreviewed/2024/12/GHSA-f8pm-c5r8-xr94/GHSA-f8pm-c5r8-xr94.json new file mode 100644 index 00000000000..7d5ba0b39c6 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-f8pm-c5r8-xr94/GHSA-f8pm-c5r8-xr94.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f8pm-c5r8-xr94", + "modified": "2024-12-16T21:30:56Z", + "published": "2024-12-16T21:30:56Z", + "aliases": [ + "CVE-2024-12664" + ], + "details": "A vulnerability, which was classified as problematic, has been found in ruifang-tech Rebuild 3.8.5. This issue affects some unknown processing of the component Project Task Comment Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12664" + }, + { + "type": "WEB", + "url": "https://github.com/cydtseng/Vulnerability-Research/blob/main/rebuild/StoredXSS-TaskComments.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.288533" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.288533" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.458622" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-16T20:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-fr5f-m86p-4h8f/GHSA-fr5f-m86p-4h8f.json b/advisories/unreviewed/2024/12/GHSA-fr5f-m86p-4h8f/GHSA-fr5f-m86p-4h8f.json new file mode 100644 index 00000000000..79254651b3c --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-fr5f-m86p-4h8f/GHSA-fr5f-m86p-4h8f.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fr5f-m86p-4h8f", + "modified": "2024-12-16T21:30:56Z", + "published": "2024-12-16T21:30:56Z", + "aliases": [ + "CVE-2024-12663" + ], + "details": "A vulnerability classified as problematic was found in funnyzpc Mee-Admin up to 1.6. This vulnerability affects unknown code of the file /mee/login of the component Login. The manipulation of the argument username leads to observable response discrepancy. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12663" + }, + { + "type": "WEB", + "url": "https://github.com/funnyzpc/mee-admin/issues/9" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.288532" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.288532" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.458371" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-203" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-16T19:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-mm54-vj99-7qc8/GHSA-mm54-vj99-7qc8.json b/advisories/unreviewed/2024/12/GHSA-mm54-vj99-7qc8/GHSA-mm54-vj99-7qc8.json new file mode 100644 index 00000000000..fbce5e1e44f --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-mm54-vj99-7qc8/GHSA-mm54-vj99-7qc8.json @@ -0,0 +1,33 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mm54-vj99-7qc8", + "modified": "2024-12-16T21:30:57Z", + "published": "2024-12-16T21:30:56Z", + "aliases": [ + "CVE-2024-55103" + ], + "details": "Online Nurse Hiring System v1.0 was discovered to contain a SQL injection vulnerability in the component /admin/profile.php via the fullname parameter.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55103" + }, + { + "type": "WEB", + "url": "https://github.com/kuzgunaka/test1/blob/main/CVE-2024-55103-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability.md" + }, + { + "type": "WEB", + "url": "https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-16T21:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-qwvh-983v-7jrj/GHSA-qwvh-983v-7jrj.json b/advisories/unreviewed/2024/12/GHSA-qwvh-983v-7jrj/GHSA-qwvh-983v-7jrj.json new file mode 100644 index 00000000000..384cfb4d425 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-qwvh-983v-7jrj/GHSA-qwvh-983v-7jrj.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qwvh-983v-7jrj", + "modified": "2024-12-16T21:30:56Z", + "published": "2024-12-16T21:30:56Z", + "aliases": [ + "CVE-2024-12661" + ], + "details": "A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been rated as problematic. Affected by this issue is the function 0x8001E024 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12661" + }, + { + "type": "WEB", + "url": "https://shareforall.notion.site/IOBit-Advanced-SystemCare-Utimate-AscRegistryFilter-0x8001E024-NPD-DOS-15260437bb1e80f28c03f548645c8ec9" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.288530" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.288530" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.456338" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-404" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-16T19:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-r72x-8472-jjv6/GHSA-r72x-8472-jjv6.json b/advisories/unreviewed/2024/12/GHSA-r72x-8472-jjv6/GHSA-r72x-8472-jjv6.json index dc111eea5d3..d8fc80916b3 100644 --- a/advisories/unreviewed/2024/12/GHSA-r72x-8472-jjv6/GHSA-r72x-8472-jjv6.json +++ b/advisories/unreviewed/2024/12/GHSA-r72x-8472-jjv6/GHSA-r72x-8472-jjv6.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-r72x-8472-jjv6", - "modified": "2024-12-13T06:30:58Z", + "modified": "2024-12-16T21:30:55Z", "published": "2024-12-13T06:30:58Z", "aliases": [ "CVE-2024-10678" ], "details": "The Ultimate Blocks WordPress plugin before 3.2.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" + } + ], "affected": [], "references": [ { @@ -21,7 +26,7 @@ ], "database_specific": { "cwe_ids": [], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-12-13T06:15:24Z" diff --git a/advisories/unreviewed/2024/12/GHSA-rr64-3qwv-pgf9/GHSA-rr64-3qwv-pgf9.json b/advisories/unreviewed/2024/12/GHSA-rr64-3qwv-pgf9/GHSA-rr64-3qwv-pgf9.json index c27ab8e51eb..d95526350bc 100644 --- a/advisories/unreviewed/2024/12/GHSA-rr64-3qwv-pgf9/GHSA-rr64-3qwv-pgf9.json +++ b/advisories/unreviewed/2024/12/GHSA-rr64-3qwv-pgf9/GHSA-rr64-3qwv-pgf9.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-rr64-3qwv-pgf9", - "modified": "2024-12-13T18:31:56Z", + "modified": "2024-12-16T21:30:56Z", "published": "2024-12-13T18:31:56Z", "aliases": [ "CVE-2024-47892" ], "details": "Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -23,7 +28,7 @@ "cwe_ids": [ "CWE-362" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-12-13T18:15:20Z" diff --git a/advisories/unreviewed/2024/12/GHSA-v29m-m46x-46c5/GHSA-v29m-m46x-46c5.json b/advisories/unreviewed/2024/12/GHSA-v29m-m46x-46c5/GHSA-v29m-m46x-46c5.json new file mode 100644 index 00000000000..c194c802634 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-v29m-m46x-46c5/GHSA-v29m-m46x-46c5.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v29m-m46x-46c5", + "modified": "2024-12-16T21:30:56Z", + "published": "2024-12-16T21:30:56Z", + "aliases": [ + "CVE-2024-12666" + ], + "details": "A vulnerability has been found in ClassCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin?do=admin:user:editPost of the component User Management Page. The manipulation leads to improper handling of insufficient privileges. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12666" + }, + { + "type": "WEB", + "url": "https://github.com/Jack-Black-13/blob/blob/main/ClassCMS%20V4.8%20Vertical%20Privilege%20Escalation.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.288535" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.288535" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.461120" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-266" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-16T20:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-v922-7jcj-4c8p/GHSA-v922-7jcj-4c8p.json b/advisories/unreviewed/2024/12/GHSA-v922-7jcj-4c8p/GHSA-v922-7jcj-4c8p.json new file mode 100644 index 00000000000..e57c81ca63d --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-v922-7jcj-4c8p/GHSA-v922-7jcj-4c8p.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v922-7jcj-4c8p", + "modified": "2024-12-16T21:30:56Z", + "published": "2024-12-16T21:30:56Z", + "aliases": [ + "CVE-2024-12665" + ], + "details": "A vulnerability, which was classified as problematic, was found in ruifang-tech Rebuild 3.8.5. Affected is an unknown function of the component Task Comment Attachment Upload. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12665" + }, + { + "type": "WEB", + "url": "https://github.com/cydtseng/Vulnerability-Research/blob/main/rebuild/StoredXSS-TaskCommentAttachments.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.288534" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.288534" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.458623" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-16T20:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-vvvx-g9vg-6c4g/GHSA-vvvx-g9vg-6c4g.json b/advisories/unreviewed/2024/12/GHSA-vvvx-g9vg-6c4g/GHSA-vvvx-g9vg-6c4g.json index a83742b6798..ce315fc71ac 100644 --- a/advisories/unreviewed/2024/12/GHSA-vvvx-g9vg-6c4g/GHSA-vvvx-g9vg-6c4g.json +++ b/advisories/unreviewed/2024/12/GHSA-vvvx-g9vg-6c4g/GHSA-vvvx-g9vg-6c4g.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-vvvx-g9vg-6c4g", - "modified": "2024-12-13T06:30:58Z", + "modified": "2024-12-16T21:30:56Z", "published": "2024-12-13T06:30:58Z", "aliases": [ "CVE-2024-10939" ], "details": "The Image Widget WordPress plugin before 4.4.11 does not sanitise and escape some of its Image Widget settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" + } + ], "affected": [], "references": [ { @@ -21,7 +26,7 @@ ], "database_specific": { "cwe_ids": [], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-12-13T06:15:25Z" diff --git a/advisories/unreviewed/2024/12/GHSA-xxvf-6jpw-pp5x/GHSA-xxvf-6jpw-pp5x.json b/advisories/unreviewed/2024/12/GHSA-xxvf-6jpw-pp5x/GHSA-xxvf-6jpw-pp5x.json new file mode 100644 index 00000000000..8ad7dc055f4 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-xxvf-6jpw-pp5x/GHSA-xxvf-6jpw-pp5x.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xxvf-6jpw-pp5x", + "modified": "2024-12-16T21:30:56Z", + "published": "2024-12-16T21:30:56Z", + "aliases": [ + "CVE-2024-12667" + ], + "details": "A vulnerability was found in InvoicePlane up to 1.6.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /invoices/view. The manipulation leads to session expiration. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.2-beta-1 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12667" + }, + { + "type": "WEB", + "url": "https://github.com/InvoicePlane/InvoicePlane/releases/tag/v1.6.2-beta-1" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.288536" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.288536" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.449923" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-613" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-16T20:15:09Z" + } +} \ No newline at end of file