From 676c7bf0ef38e9b92d9b80b24db0176b18be9ca9 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 20 Sep 2024 12:33:15 +0000 Subject: [PATCH] Publish Advisories GHSA-8rv9-5fv4-653w GHSA-r8jv-c3jp-366j GHSA-5cwq-4hm6-gp6g GHSA-84pw-hw22-9v6h GHSA-fp89-4294-45q3 GHSA-q578-hqmw-59mf GHSA-xfcp-h9vc-f632 GHSA-86j7-6frw-pfwj GHSA-jwqg-83qr-7fph GHSA-frjw-g5j9-99p6 GHSA-f874-8386-mf62 GHSA-3j7w-h2jh-289j GHSA-jwfg-733h-8pc5 GHSA-3j9f-4r3c-964g GHSA-94g3-94ff-rvhf GHSA-gwmp-w6mx-r484 GHSA-qmm7-r8jx-cj5h --- .../GHSA-8rv9-5fv4-653w.json | 6 ++- .../GHSA-r8jv-c3jp-366j.json | 6 ++- .../GHSA-5cwq-4hm6-gp6g.json | 6 ++- .../GHSA-84pw-hw22-9v6h.json | 6 ++- .../GHSA-fp89-4294-45q3.json | 7 ++- .../GHSA-q578-hqmw-59mf.json | 6 ++- .../GHSA-xfcp-h9vc-f632.json | 7 ++- .../GHSA-86j7-6frw-pfwj.json | 6 ++- .../GHSA-jwqg-83qr-7fph.json | 7 ++- .../GHSA-frjw-g5j9-99p6.json | 6 ++- .../GHSA-f874-8386-mf62.json | 7 ++- .../GHSA-3j7w-h2jh-289j.json | 3 +- .../GHSA-jwfg-733h-8pc5.json | 7 ++- .../GHSA-3j9f-4r3c-964g.json | 2 +- .../GHSA-94g3-94ff-rvhf.json | 54 +++++++++++++++++++ .../GHSA-gwmp-w6mx-r484.json | 50 +++++++++++++++++ .../GHSA-qmm7-r8jx-cj5h.json | 42 +++++++++++++++ 17 files changed, 214 insertions(+), 14 deletions(-) create mode 100644 advisories/unreviewed/2024/09/GHSA-94g3-94ff-rvhf/GHSA-94g3-94ff-rvhf.json create mode 100644 advisories/unreviewed/2024/09/GHSA-gwmp-w6mx-r484/GHSA-gwmp-w6mx-r484.json create mode 100644 advisories/unreviewed/2024/09/GHSA-qmm7-r8jx-cj5h/GHSA-qmm7-r8jx-cj5h.json diff --git a/advisories/unreviewed/2022/03/GHSA-8rv9-5fv4-653w/GHSA-8rv9-5fv4-653w.json b/advisories/unreviewed/2022/03/GHSA-8rv9-5fv4-653w/GHSA-8rv9-5fv4-653w.json index 9ebe687b6a6..6a7d17385e0 100644 --- a/advisories/unreviewed/2022/03/GHSA-8rv9-5fv4-653w/GHSA-8rv9-5fv4-653w.json +++ b/advisories/unreviewed/2022/03/GHSA-8rv9-5fv4-653w/GHSA-8rv9-5fv4-653w.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-8rv9-5fv4-653w", - "modified": "2022-03-31T00:00:36Z", + "modified": "2024-09-20T12:31:45Z", "published": "2022-03-25T00:00:33Z", "aliases": [ "CVE-2022-0550" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ diff --git a/advisories/unreviewed/2022/03/GHSA-r8jv-c3jp-366j/GHSA-r8jv-c3jp-366j.json b/advisories/unreviewed/2022/03/GHSA-r8jv-c3jp-366j/GHSA-r8jv-c3jp-366j.json index bd542f04b4f..6b0de9a9f20 100644 --- a/advisories/unreviewed/2022/03/GHSA-r8jv-c3jp-366j/GHSA-r8jv-c3jp-366j.json +++ b/advisories/unreviewed/2022/03/GHSA-r8jv-c3jp-366j/GHSA-r8jv-c3jp-366j.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-r8jv-c3jp-366j", - "modified": "2022-03-31T00:00:36Z", + "modified": "2024-09-20T12:31:45Z", "published": "2022-03-25T00:00:33Z", "aliases": [ "CVE-2022-0551" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ diff --git a/advisories/unreviewed/2023/08/GHSA-5cwq-4hm6-gp6g/GHSA-5cwq-4hm6-gp6g.json b/advisories/unreviewed/2023/08/GHSA-5cwq-4hm6-gp6g/GHSA-5cwq-4hm6-gp6g.json index 9d340bc9d2c..ebc59ceb86e 100644 --- a/advisories/unreviewed/2023/08/GHSA-5cwq-4hm6-gp6g/GHSA-5cwq-4hm6-gp6g.json +++ b/advisories/unreviewed/2023/08/GHSA-5cwq-4hm6-gp6g/GHSA-5cwq-4hm6-gp6g.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-5cwq-4hm6-gp6g", - "modified": "2024-04-04T06:43:46Z", + "modified": "2024-09-20T12:31:45Z", "published": "2023-08-09T09:30:33Z", "aliases": [ "CVE-2023-22843" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ diff --git a/advisories/unreviewed/2023/08/GHSA-84pw-hw22-9v6h/GHSA-84pw-hw22-9v6h.json b/advisories/unreviewed/2023/08/GHSA-84pw-hw22-9v6h/GHSA-84pw-hw22-9v6h.json index 8c11fe86038..8bdc94d911e 100644 --- a/advisories/unreviewed/2023/08/GHSA-84pw-hw22-9v6h/GHSA-84pw-hw22-9v6h.json +++ b/advisories/unreviewed/2023/08/GHSA-84pw-hw22-9v6h/GHSA-84pw-hw22-9v6h.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-84pw-hw22-9v6h", - "modified": "2024-04-04T06:43:43Z", + "modified": "2024-09-20T12:31:45Z", "published": "2023-08-09T09:30:33Z", "aliases": [ "CVE-2023-22378" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ diff --git a/advisories/unreviewed/2023/08/GHSA-fp89-4294-45q3/GHSA-fp89-4294-45q3.json b/advisories/unreviewed/2023/08/GHSA-fp89-4294-45q3/GHSA-fp89-4294-45q3.json index f8e9e933525..b6bb64aca24 100644 --- a/advisories/unreviewed/2023/08/GHSA-fp89-4294-45q3/GHSA-fp89-4294-45q3.json +++ b/advisories/unreviewed/2023/08/GHSA-fp89-4294-45q3/GHSA-fp89-4294-45q3.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-fp89-4294-45q3", - "modified": "2024-04-04T06:44:02Z", + "modified": "2024-09-20T12:31:45Z", "published": "2023-08-09T12:30:26Z", "aliases": [ "CVE-2023-23903" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ @@ -28,6 +32,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-1286", "CWE-20" ], "severity": "MODERATE", diff --git a/advisories/unreviewed/2023/08/GHSA-q578-hqmw-59mf/GHSA-q578-hqmw-59mf.json b/advisories/unreviewed/2023/08/GHSA-q578-hqmw-59mf/GHSA-q578-hqmw-59mf.json index bab4582b603..63f7bad19f8 100644 --- a/advisories/unreviewed/2023/08/GHSA-q578-hqmw-59mf/GHSA-q578-hqmw-59mf.json +++ b/advisories/unreviewed/2023/08/GHSA-q578-hqmw-59mf/GHSA-q578-hqmw-59mf.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-q578-hqmw-59mf", - "modified": "2024-04-04T06:43:47Z", + "modified": "2024-09-20T12:31:45Z", "published": "2023-08-09T09:30:34Z", "aliases": [ "CVE-2023-23574" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ diff --git a/advisories/unreviewed/2023/08/GHSA-xfcp-h9vc-f632/GHSA-xfcp-h9vc-f632.json b/advisories/unreviewed/2023/08/GHSA-xfcp-h9vc-f632/GHSA-xfcp-h9vc-f632.json index 034e85b3956..5adabedb493 100644 --- a/advisories/unreviewed/2023/08/GHSA-xfcp-h9vc-f632/GHSA-xfcp-h9vc-f632.json +++ b/advisories/unreviewed/2023/08/GHSA-xfcp-h9vc-f632/GHSA-xfcp-h9vc-f632.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-xfcp-h9vc-f632", - "modified": "2024-04-04T06:44:08Z", + "modified": "2024-09-20T12:31:45Z", "published": "2023-08-09T12:30:26Z", "aliases": [ "CVE-2023-24015" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ @@ -28,6 +32,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-1286", "CWE-20" ], "severity": "MODERATE", diff --git a/advisories/unreviewed/2023/09/GHSA-86j7-6frw-pfwj/GHSA-86j7-6frw-pfwj.json b/advisories/unreviewed/2023/09/GHSA-86j7-6frw-pfwj/GHSA-86j7-6frw-pfwj.json index 71501716e88..642f66bcf1d 100644 --- a/advisories/unreviewed/2023/09/GHSA-86j7-6frw-pfwj/GHSA-86j7-6frw-pfwj.json +++ b/advisories/unreviewed/2023/09/GHSA-86j7-6frw-pfwj/GHSA-86j7-6frw-pfwj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-86j7-6frw-pfwj", - "modified": "2024-04-04T07:43:51Z", + "modified": "2024-09-20T12:31:45Z", "published": "2023-09-19T12:30:30Z", "aliases": [ "CVE-2023-29245" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ diff --git a/advisories/unreviewed/2023/09/GHSA-jwqg-83qr-7fph/GHSA-jwqg-83qr-7fph.json b/advisories/unreviewed/2023/09/GHSA-jwqg-83qr-7fph/GHSA-jwqg-83qr-7fph.json index d300e7efce9..d9b8a78585d 100644 --- a/advisories/unreviewed/2023/09/GHSA-jwqg-83qr-7fph/GHSA-jwqg-83qr-7fph.json +++ b/advisories/unreviewed/2023/09/GHSA-jwqg-83qr-7fph/GHSA-jwqg-83qr-7fph.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-jwqg-83qr-7fph", - "modified": "2024-04-04T07:43:49Z", + "modified": "2024-09-20T12:31:45Z", "published": "2023-09-19T12:30:30Z", "aliases": [ "CVE-2023-32649" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ @@ -28,6 +32,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-1286", "CWE-20" ], "severity": "HIGH", diff --git a/advisories/unreviewed/2024/01/GHSA-frjw-g5j9-99p6/GHSA-frjw-g5j9-99p6.json b/advisories/unreviewed/2024/01/GHSA-frjw-g5j9-99p6/GHSA-frjw-g5j9-99p6.json index 9bdbd98a605..4fcac8ed740 100644 --- a/advisories/unreviewed/2024/01/GHSA-frjw-g5j9-99p6/GHSA-frjw-g5j9-99p6.json +++ b/advisories/unreviewed/2024/01/GHSA-frjw-g5j9-99p6/GHSA-frjw-g5j9-99p6.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-frjw-g5j9-99p6", - "modified": "2024-01-15T12:30:20Z", + "modified": "2024-09-20T12:31:45Z", "published": "2024-01-15T12:30:20Z", "aliases": [ "CVE-2023-5253" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ diff --git a/advisories/unreviewed/2024/04/GHSA-f874-8386-mf62/GHSA-f874-8386-mf62.json b/advisories/unreviewed/2024/04/GHSA-f874-8386-mf62/GHSA-f874-8386-mf62.json index 3a2c211aac3..aab525b3f21 100644 --- a/advisories/unreviewed/2024/04/GHSA-f874-8386-mf62/GHSA-f874-8386-mf62.json +++ b/advisories/unreviewed/2024/04/GHSA-f874-8386-mf62/GHSA-f874-8386-mf62.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-f874-8386-mf62", - "modified": "2024-04-10T18:30:47Z", + "modified": "2024-09-20T12:31:45Z", "published": "2024-04-10T18:30:47Z", "aliases": [ "CVE-2023-6916" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ @@ -28,6 +32,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-201", "CWE-522" ], "severity": "HIGH", diff --git a/advisories/unreviewed/2024/05/GHSA-3j7w-h2jh-289j/GHSA-3j7w-h2jh-289j.json b/advisories/unreviewed/2024/05/GHSA-3j7w-h2jh-289j/GHSA-3j7w-h2jh-289j.json index e578ab4ba8b..c354e76c4c9 100644 --- a/advisories/unreviewed/2024/05/GHSA-3j7w-h2jh-289j/GHSA-3j7w-h2jh-289j.json +++ b/advisories/unreviewed/2024/05/GHSA-3j7w-h2jh-289j/GHSA-3j7w-h2jh-289j.json @@ -33,7 +33,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-20" + "CWE-20", + "CWE-356" ], "severity": null, "github_reviewed": false, diff --git a/advisories/unreviewed/2024/05/GHSA-jwfg-733h-8pc5/GHSA-jwfg-733h-8pc5.json b/advisories/unreviewed/2024/05/GHSA-jwfg-733h-8pc5/GHSA-jwfg-733h-8pc5.json index d38bf6f1e36..de2161ef39b 100644 --- a/advisories/unreviewed/2024/05/GHSA-jwfg-733h-8pc5/GHSA-jwfg-733h-8pc5.json +++ b/advisories/unreviewed/2024/05/GHSA-jwfg-733h-8pc5/GHSA-jwfg-733h-8pc5.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-jwfg-733h-8pc5", - "modified": "2024-05-15T18:30:33Z", + "modified": "2024-09-20T12:31:46Z", "published": "2024-05-15T18:30:33Z", "aliases": [ "CVE-2023-5937" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [ @@ -28,6 +32,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-538", "CWE-732" ], "severity": "LOW", diff --git a/advisories/unreviewed/2024/09/GHSA-3j9f-4r3c-964g/GHSA-3j9f-4r3c-964g.json b/advisories/unreviewed/2024/09/GHSA-3j9f-4r3c-964g/GHSA-3j9f-4r3c-964g.json index 907cf32d098..2b6b6d14007 100644 --- a/advisories/unreviewed/2024/09/GHSA-3j9f-4r3c-964g/GHSA-3j9f-4r3c-964g.json +++ b/advisories/unreviewed/2024/09/GHSA-3j9f-4r3c-964g/GHSA-3j9f-4r3c-964g.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-3j9f-4r3c-964g", - "modified": "2024-09-18T09:30:38Z", + "modified": "2024-09-20T12:31:51Z", "published": "2024-09-18T09:30:38Z", "aliases": [ "CVE-2024-46797" diff --git a/advisories/unreviewed/2024/09/GHSA-94g3-94ff-rvhf/GHSA-94g3-94ff-rvhf.json b/advisories/unreviewed/2024/09/GHSA-94g3-94ff-rvhf/GHSA-94g3-94ff-rvhf.json new file mode 100644 index 00000000000..d582ead2d4c --- /dev/null +++ b/advisories/unreviewed/2024/09/GHSA-94g3-94ff-rvhf/GHSA-94g3-94ff-rvhf.json @@ -0,0 +1,54 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-94g3-94ff-rvhf", + "modified": "2024-09-20T12:31:55Z", + "published": "2024-09-20T12:31:55Z", + "aliases": [ + "CVE-2024-9031" + ], + "details": "A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2. This issue affects some unknown processing of the file /project/task/{task_id}/show. The manipulation of the argument comment leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9031" + }, + { + "type": "WEB", + "url": "https://bytium.com/stored-xss-vulnerabilities-in-crmgo-sass-version-7-2" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.278201" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.278201" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.410565" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-09-20T12:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/09/GHSA-gwmp-w6mx-r484/GHSA-gwmp-w6mx-r484.json b/advisories/unreviewed/2024/09/GHSA-gwmp-w6mx-r484/GHSA-gwmp-w6mx-r484.json new file mode 100644 index 00000000000..fc53a3ed9ee --- /dev/null +++ b/advisories/unreviewed/2024/09/GHSA-gwmp-w6mx-r484/GHSA-gwmp-w6mx-r484.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gwmp-w6mx-r484", + "modified": "2024-09-20T12:31:54Z", + "published": "2024-09-20T12:31:54Z", + "aliases": [ + "CVE-2024-9030" + ], + "details": "A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2. This vulnerability affects unknown code of the file /deal/{note_id}/note. The manipulation of the argument notes leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9030" + }, + { + "type": "WEB", + "url": "https://bytium.com/stored-xss-vulnerabilities-in-crmgo-sass-version-7-2" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.278200" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.278200" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-09-20T12:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/09/GHSA-qmm7-r8jx-cj5h/GHSA-qmm7-r8jx-cj5h.json b/advisories/unreviewed/2024/09/GHSA-qmm7-r8jx-cj5h/GHSA-qmm7-r8jx-cj5h.json new file mode 100644 index 00000000000..def94c6fe3e --- /dev/null +++ b/advisories/unreviewed/2024/09/GHSA-qmm7-r8jx-cj5h/GHSA-qmm7-r8jx-cj5h.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qmm7-r8jx-cj5h", + "modified": "2024-09-20T12:31:54Z", + "published": "2024-09-20T12:31:54Z", + "aliases": [ + "CVE-2024-9043" + ], + "details": "Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing authentication and obtaining system administrator privileges.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9043" + }, + { + "type": "WEB", + "url": "https://www.twcert.org.tw/en/cp-139-8103-b0568-2.html" + }, + { + "type": "WEB", + "url": "https://www.twcert.org.tw/tw/cp-132-8102-b94a9-1.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-121" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-09-20T11:15:13Z" + } +} \ No newline at end of file