netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-9wf6-88x4-6xvj
GHSA-wxg6-f773-g2f7
This commit is contained in:
advisory-database[bot]
2024-04-25 20:35:49 +00:00
parent a19220dd84
commit 72a82ccf31
2 changed files with 39 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-9wf6-88x4-6xvj/GHSA-9wf6-88x4-6xvj.json → advisories/github-reviewed/2022/05/GHSA-9wf6-88x4-6xvj/GHSA-9wf6-88x4-6xvj.json
+24 -5
View File
@@ -1,12 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9wf6-88x4-6xvj",
"modified": "2022-05-13T01:46:49Z",
"modified": "2024-04-25T20:34:24Z",
"published": "2022-05-13T01:46:49Z",
"aliases": [
"CVE-2017-6954"
],
"details": "An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.",
"summary": "BuddyPress Docs plugin Improper Privilege Management",
"details": "An issue was discovered in `includes/component.php` in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.",
"severity": [
{
"type": "CVSS_V3",
@@ -14,7 +15,25 @@
}
],
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "buddypress/buddypress"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.9.3"
}
]
}
]
}
],
"references": [
{
@@ -39,8 +58,8 @@
"CWE-269"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-04-25T20:34:24Z",
"nvd_published_at": "2017-03-17T09:59:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-wxg6-f773-g2f7/GHSA-wxg6-f773-g2f7.json → advisories/github-reviewed/2022/05/GHSA-wxg6-f773-g2f7/GHSA-wxg6-f773-g2f7.json
+15 -6
View File
@@ -1,17 +1,26 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wxg6-f773-g2f7",
"modified": "2022-05-17T19:57:26Z",
"modified": "2024-04-25T20:34:52Z",
"published": "2022-05-17T19:57:26Z",
"aliases": [
"CVE-2014-8739"
],
"details": "Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form (formerly Sexy Contact Form) before 1.0.0 for WordPress and before 2.0.1 for Joomla!, allows remote attackers to execute arbitrary code by uploading a PHP file with an PHP extension, then accessing it via a direct request to the file in files/, as exploited in the wild in October 2014.",
"summary": "jQuery File Upload Plugin Unrestricted file upload vulnerability",
"details": "Unrestricted file upload vulnerability in `server/php/UploadHandler.php` in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form (formerly Sexy Contact Form) before 1.0.0 for WordPress and before 2.0.1 for Joomla!, allows remote attackers to execute arbitrary code by uploading a PHP file with an PHP extension, then accessing it via a direct request to the file in `files/`, as exploited in the wild in October 2014.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "blueimp/jquery-file-upload"
},
"versions": [
"6.4.4"
]
}
],
"references": [
{
@@ -53,11 +62,11 @@
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-04-25T20:34:52Z",
"nvd_published_at": "2020-02-08T18:15:00Z"
}
}