netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-29xx-fhff-36m7
GHSA-788m-27g4-cf86
This commit is contained in:
advisory-database[bot]
2025-01-29 16:56:28 +00:00
parent a9b7127ef3
commit 6a2ea8a0ad
2 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/02/GHSA-29xx-fhff-36m7/GHSA-29xx-fhff-36m7.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-29xx-fhff-36m7",
"modified": "2024-10-02T21:50:20Z",
"modified": "2025-01-29T16:54:55Z",
"published": "2024-02-20T15:31:03Z",
"aliases": [
"CVE-2024-26265"
@@ -44,6 +44,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26265"
},
{
"type": "PACKAGE",
"url": "https://github.com/liferay/liferay-portal"
},
{
"type": "WEB",
"url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-26265"
advisories/github-reviewed/2025/01/GHSA-788m-27g4-cf86/GHSA-788m-27g4-cf86.json
+3 -3
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-788m-27g4-cf86",
"modified": "2025-01-23T23:14:15Z",
"modified": "2025-01-29T16:55:54Z",
"published": "2025-01-22T21:30:57Z",
"aliases": [
"CVE-2024-56923"
],
"summary": "Cross site scripting in Silverpeas Core",
"details": "Stored Cross-Site Scripting (XSS) in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.4.1 allows a remote attacker to execute arbitrary JavaScript code. This is achieved by injecting a malicious payload into the Name field of a subscription. The attack can lead to session hijacking, data theft, or unauthorized actions when an admin user views the affected subscription.",
"details": "Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 <= 6.4.1 allows a remote attacker to execute arbitrary JavaScript code. This is achieved by injecting a malicious payload into the Name field of a subscription. The attack can lead to session hijacking, data theft, or unauthorized actions when an admin user views the affected subscription.",
"severity": [
{
"type": "CVSS_V3",
@@ -29,7 +29,7 @@
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
"introduced": "6.3.1"
},
{
"fixed": "6.4.2"