diff --git a/advisories/github-reviewed/2022/07/GHSA-m7gr-5w5g-36jf/GHSA-m7gr-5w5g-36jf.json b/advisories/github-reviewed/2022/07/GHSA-m7gr-5w5g-36jf/GHSA-m7gr-5w5g-36jf.json index 78ed5bcd938..7fe44382066 100644 --- a/advisories/github-reviewed/2022/07/GHSA-m7gr-5w5g-36jf/GHSA-m7gr-5w5g-36jf.json +++ b/advisories/github-reviewed/2022/07/GHSA-m7gr-5w5g-36jf/GHSA-m7gr-5w5g-36jf.json @@ -1,13 +1,14 @@ { "schema_version": "1.4.0", "id": "GHSA-m7gr-5w5g-36jf", - "modified": "2022-07-29T13:06:38Z", + "modified": "2024-05-06T14:22:01Z", "published": "2022-07-23T00:00:22Z", + "withdrawn": "2024-05-06T14:22:01Z", "aliases": [ "CVE-2022-34037" ], - "summary": "Out-of-bounds Read can lead to client side denial of service", - "details": "An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) on the client side via a crafted URI.\n\nAccording to the maintainer, the bug only affects the client side of the request and cannot cause a denial of service on the server.", + "summary": "Withdrawn Advisory: Out-of-bounds Read can lead to client side denial of service", + "details": "## Withdrawn Advisory\nThis advisory has been withdrawn because it is a bug, not a vulnerability. According to the maintainer, the bug only affects the client side of the request and cannot cause a denial of service on the server.\n\n## Original Description\nAn out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) on the client side via a crafted URI.", "severity": [ { "type": "CVSS_V3", @@ -44,6 +45,10 @@ "type": "WEB", "url": "https://github.com/caddyserver/caddy/issues/4775" }, + { + "type": "WEB", + "url": "https://github.com/caddyserver/caddy/issues/4775#issuecomment-1203388116" + }, { "type": "WEB", "url": "https://github.com/caddyserver/caddy/commit/693e9b5283e675b56084ecc83d73176cab0ee27c" diff --git a/advisories/github-reviewed/2024/05/GHSA-7qwj-gcjf-828f/GHSA-7qwj-gcjf-828f.json b/advisories/github-reviewed/2024/05/GHSA-7qwj-gcjf-828f/GHSA-7qwj-gcjf-828f.json new file mode 100644 index 00000000000..3551d98a224 --- /dev/null +++ b/advisories/github-reviewed/2024/05/GHSA-7qwj-gcjf-828f/GHSA-7qwj-gcjf-828f.json @@ -0,0 +1,62 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7qwj-gcjf-828f", + "modified": "2024-05-06T14:22:19Z", + "published": "2024-05-04T06:30:31Z", + "aliases": [ + "CVE-2024-34460" + ], + "summary": "Zenario's Tree Explorer tool from Organizer affected by Cross-site Scripting", + "details": "The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. (This component was removed in 9.5.60602.)", + "severity": [ + + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "tribalsystems/zenario" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "9.5.60602" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34460" + }, + { + "type": "WEB", + "url": "https://github.com/TribalSystems/Zenario/commit/121ff6dc6c1c13e8281f078ecde47455b383ee78" + }, + { + "type": "PACKAGE", + "url": "https://github.com/TribalSystems/Zenario" + }, + { + "type": "WEB", + "url": "https://zenar.io/zenario-9/blog/zenario-9560602-patch-released" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-05-06T14:22:19Z", + "nvd_published_at": "2024-05-04T05:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-7qwj-gcjf-828f/GHSA-7qwj-gcjf-828f.json b/advisories/unreviewed/2024/05/GHSA-7qwj-gcjf-828f/GHSA-7qwj-gcjf-828f.json deleted file mode 100644 index 23bac10782f..00000000000 --- a/advisories/unreviewed/2024/05/GHSA-7qwj-gcjf-828f/GHSA-7qwj-gcjf-828f.json +++ /dev/null @@ -1,35 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-7qwj-gcjf-828f", - "modified": "2024-05-04T06:30:31Z", - "published": "2024-05-04T06:30:31Z", - "aliases": [ - "CVE-2024-34460" - ], - "details": "The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. (This component was removed in 9.5.60602.)", - "severity": [ - - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34460" - }, - { - "type": "WEB", - "url": "https://zenar.io/zenario-9/blog/zenario-9560602-patch-released" - } - ], - "database_specific": { - "cwe_ids": [ - - ], - "severity": null, - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2024-05-04T05:15:06Z" - } -} \ No newline at end of file