Publish Advisories

GHSA-27jw-fm48-8f8j
GHSA-cjwm-r7h6-vpg7
GHSA-f95r-2ggc-w963
GHSA-pjpg-43j3-pgj7

advisories/unreviewed/2025/05/GHSA-27jw-fm48-8f8j/GHSA-27jw-fm48-8f8j.json

@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-27jw-fm48-8f8j",
+  "modified": "2025-05-14T09:30:25Z",
+  "published": "2025-05-14T09:30:25Z",
+  "aliases": [
+    "CVE-2024-8988"
+  ],
+  "details": "The PeepSo Core: File Uploads plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.4.6.0 via the file_download REST API endpoint due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to download files uploaded by others users and expose potentially sensitive information.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8988"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.peepso.com/changelog"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d3184996-655c-41d5-a3c5-6b36fbff58dc?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-639"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-14T09:15:19Z"
+  }
+}

advisories/unreviewed/2025/05/GHSA-cjwm-r7h6-vpg7/GHSA-cjwm-r7h6-vpg7.json

@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cjwm-r7h6-vpg7",
+  "modified": "2025-05-14T09:30:25Z",
+  "published": "2025-05-14T09:30:25Z",
+  "aliases": [
+    "CVE-2025-2875"
+  ],
+  "details": "CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could\ncause a loss of confidentiality when an unauthenticated attacker manipulates controller’s webserver URL to\naccess resources.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2875"
+    },
+    {
+      "type": "WEB",
+      "url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-133-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-133-01.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-610"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-14T09:15:20Z"
+  }
+}

advisories/unreviewed/2025/05/GHSA-f95r-2ggc-w963/GHSA-f95r-2ggc-w963.json

@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f95r-2ggc-w963",
+  "modified": "2025-05-14T09:30:25Z",
+  "published": "2025-05-14T09:30:25Z",
+  "aliases": [
+    "CVE-2025-0020"
+  ],
+  "details": "Violation of Secure Design Principles, Hidden Functionality, Incorrect Provision of Specified Functionality vulnerability in ArcGIS (Authentication) allows Privilege Abuse, Manipulating Hidden Fields, Configuration/Environment Manipulation.\n\nThe ArcGIS client_credentials OAuth 2.0 API implementation does not adhere to the RFC/standards; This hidden (known and by-design, but undocumented) functionality enables a requestor (Referred to as client in RFC 6749) to request an, undocumented, custom token expiration from ArcGIS (Referred to as authorization server in RFC 6749).",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0020"
+    },
+    {
+      "type": "WEB",
+      "url": "https://developers.arcgis.com/documentation/security-and-authentication"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.vulsec.org/advisories"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-657"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-14T08:15:33Z"
+  }
+}

advisories/unreviewed/2025/05/GHSA-pjpg-43j3-pgj7/GHSA-pjpg-43j3-pgj7.json

@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pjpg-43j3-pgj7",
+  "modified": "2025-05-14T09:30:25Z",
+  "published": "2025-05-14T09:30:25Z",
+  "aliases": [
+    "CVE-2024-13940"
+  ],
+  "details": "The Ninja Forms Webhooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.0.7 via the form webhook functionality. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13940"
+    },
+    {
+      "type": "WEB",
+      "url": "https://ninjaforms.com/extensions/webhooks"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4cf2af62-2b5a-4c0a-9e82-f80dde204a9d?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-918"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-14T09:15:18Z"
+  }
+}