mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Publish Advisories
GHSA-393x-fr59-r8fg GHSA-8cp3-66vr-3r4c GHSA-p739-9479-5wr2 GHSA-vmqq-7qvx-68qx GHSA-393x-fr59-r8fg GHSA-8cp3-66vr-3r4c GHSA-vmqq-7qvx-68qx
This commit is contained in:
advisory-database[bot]
@@ -0,0 +1,57 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-393x-fr59-r8fg",
|
||||
"modified": "2024-04-22T23:08:32Z",
|
||||
"published": "2022-05-13T01:32:20Z",
|
||||
"aliases": [
|
||||
"CVE-2018-3771"
|
||||
],
|
||||
"summary": "statics-server Cross-site Scripting vulnerability",
|
||||
"details": "An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser. Statics-server does not implement any HTML escaping when displays directory index in the browser. Variable `v` is used in `<a href>` element without escaping, which allows to embed HTML `<iframe>` tag with `src` attribute points to another HTML file in the directory. This file can contain malicious JavaScript code, which will be executed:\n\n```js\n// ./node_modules/statics-server/index.js, line 18:\n\n if(fs.lstatSync(staticPath).isDirectory()){\n var files=fs.readdirSync(staticPath);\n var lis='';\n files.forEach((v,i)=>{\n if(fs.lstatSync(path.resolve(staticPath,v)).isDirectory()){\n lis+=`<li><a href=\"${req.url}${v}/\">${v}/</a></li>`;\n }else {\n lis+=`<li><a href=\"${req.url}${v}\">${v}</a></li>`\n }\n });\n\n (...)\n```",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"package": {
|
||||
"ecosystem": "npm",
|
||||
"name": "statics-server"
|
||||
},
|
||||
"ranges": [
|
||||
{
|
||||
"type": "ECOSYSTEM",
|
||||
"events": [
|
||||
{
|
||||
"introduced": "0"
|
||||
},
|
||||
{
|
||||
"last_affected": "0.0.9"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3771"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://hackerone.com/reports/355458"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-79"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"github_reviewed": true,
|
||||
"github_reviewed_at": "2024-04-22T23:08:32Z",
|
||||
"nvd_published_at": "2018-07-20T22:29:00Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,73 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-8cp3-66vr-3r4c",
|
||||
"modified": "2024-04-22T23:08:07Z",
|
||||
"published": "2022-05-17T00:01:45Z",
|
||||
"aliases": [
|
||||
"CVE-2022-29622"
|
||||
],
|
||||
"summary": "Formidable arbitrary file upload",
|
||||
"details": "An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted filename.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"package": {
|
||||
"ecosystem": "npm",
|
||||
"name": "formidable"
|
||||
},
|
||||
"ranges": [
|
||||
{
|
||||
"type": "ECOSYSTEM",
|
||||
"events": [
|
||||
{
|
||||
"introduced": "0"
|
||||
},
|
||||
{
|
||||
"fixed": "3.2.4"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-29622"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/node-formidable/formidable/issues/856"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/node-formidable/formidable/pull/857"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://gitlab.com/keymandll/blog/-/blob/master/posts/03062022-Invulnerability_Analysis-CVE-2022%E2%80%9329622/index.md"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://portswigger.net/daily-swig/researcher-defends-formidable-in-fight-against-critical-cve-vulnerability-assignment"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.youtube.com/watch?v=C6QPKooxhAo"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-434"
|
||||
],
|
||||
"severity": "CRITICAL",
|
||||
"github_reviewed": true,
|
||||
"github_reviewed_at": "2024-04-22T23:07:47Z",
|
||||
"nvd_published_at": "2022-05-16T14:15:00Z"
|
||||
}
|
||||
}
|
||||
+24
-5
@@ -1,12 +1,13 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-p739-9479-5wr2",
|
||||
"modified": "2022-05-13T01:11:22Z",
|
||||
"modified": "2024-04-22T23:09:03Z",
|
||||
"published": "2022-05-13T01:11:22Z",
|
||||
"aliases": [
|
||||
"CVE-2017-1000170"
|
||||
],
|
||||
"details": "jqueryFileTree 2.1.5 and older Directory Traversal",
|
||||
"summary": "jqueryFileTree vulnerable to Directory Traversal",
|
||||
"details": "jqueryFileTree 2.1.5 and older is vulnerable to Directory Traversal\n\n### POC:\n```bash\ncurl 'http://localhost:8000/js/jqueryfiletree-2.1.5/dist/connectors/jqueryFileTree.php' -H 'Referer: xxx' -d \"dir=/\"\n```",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
@@ -14,7 +15,25 @@
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
{
|
||||
"package": {
|
||||
"ecosystem": "npm",
|
||||
"name": "jqueryfiletree"
|
||||
},
|
||||
"ranges": [
|
||||
{
|
||||
"type": "ECOSYSTEM",
|
||||
"events": [
|
||||
{
|
||||
"introduced": "0"
|
||||
},
|
||||
{
|
||||
"last_affected": "2.1.5"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
@@ -35,8 +54,8 @@
|
||||
"CWE-22"
|
||||
],
|
||||
"severity": "HIGH",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"github_reviewed": true,
|
||||
"github_reviewed_at": "2024-04-22T23:09:03Z",
|
||||
"nvd_published_at": "2017-11-17T18:29:00Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,61 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-vmqq-7qvx-68qx",
|
||||
"modified": "2024-04-22T23:09:42Z",
|
||||
"published": "2022-05-24T17:09:13Z",
|
||||
"aliases": [
|
||||
"CVE-2019-10791"
|
||||
],
|
||||
"summary": "promise-probe OS command injection vulnerability",
|
||||
"details": "promise-probe before 0.10.0 allows remote attackers to perform a command injection attack. The `file`, `outputFile` and `options` functions can be controlled by users without any sanitization.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"package": {
|
||||
"ecosystem": "npm",
|
||||
"name": "promise-probe"
|
||||
},
|
||||
"ranges": [
|
||||
{
|
||||
"type": "ECOSYSTEM",
|
||||
"events": [
|
||||
{
|
||||
"introduced": "0"
|
||||
},
|
||||
{
|
||||
"fixed": "0.1.10"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10791"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/dottgonzo/node-promise-probe/commit/0d9affb67fc1ad985903536d35372cf55efe5a45"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://snyk.io/vuln/SNYK-JS-PROMISEPROBE-546816"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-78"
|
||||
],
|
||||
"severity": "CRITICAL",
|
||||
"github_reviewed": true,
|
||||
"github_reviewed_at": "2024-04-22T23:09:42Z",
|
||||
"nvd_published_at": "2020-02-18T17:15:00Z"
|
||||
}
|
||||
}
|
||||
@@ -1,38 +0,0 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-393x-fr59-r8fg",
|
||||
"modified": "2022-05-13T01:32:20Z",
|
||||
"published": "2022-05-13T01:32:20Z",
|
||||
"aliases": [
|
||||
"CVE-2018-3771"
|
||||
],
|
||||
"details": "An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3771"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://hackerone.com/reports/355458"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-79"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2018-07-20T22:29:00Z"
|
||||
}
|
||||
}
|
||||
@@ -1,38 +0,0 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-8cp3-66vr-3r4c",
|
||||
"modified": "2022-05-25T00:00:22Z",
|
||||
"published": "2022-05-17T00:01:45Z",
|
||||
"aliases": [
|
||||
"CVE-2022-29622"
|
||||
],
|
||||
"details": "An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted filename.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-29622"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.youtube.com/watch?v=C6QPKooxhAo"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-434"
|
||||
],
|
||||
"severity": "CRITICAL",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2022-05-16T14:15:00Z"
|
||||
}
|
||||
}
|
||||
@@ -1,39 +0,0 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-vmqq-7qvx-68qx",
|
||||
"modified": "2022-05-24T17:09:13Z",
|
||||
"published": "2022-05-24T17:09:13Z",
|
||||
"aliases": [
|
||||
"CVE-2019-10791"
|
||||
],
|
||||
"details": "promise-probe before 0.10.0 allows remote attackers to perform a command injection attack. The file, outputFile and options functions can be controlled by users without any sanitization.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10791"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/dottgonzo/node-promise-probe/commit/0d9affb67fc1ad985903536d35372cf55efe5a45,"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://snyk.io/vuln/SNYK-JS-PROMISEPROBE-546816"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": "HIGH",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2020-02-18T17:15:00Z"
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user