netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-03-18 18:33:42 +00:00
parent d8b581c76d
commit 79d0a4e595
74 changed files with 2460 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/03/GHSA-2qph-qpvm-2qf7/GHSA-2qph-qpvm-2qf7.json
+11 -3
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2qph-qpvm-2qf7",
"modified": "2024-03-15T19:57:23Z",
"modified": "2024-03-18T18:33:18Z",
"published": "2024-03-15T19:57:22Z",
"aliases": [
"CVE-2024-28854"
@@ -43,10 +43,18 @@
"type": "WEB",
"url": "https://github.com/tmccombs/tls-listener/security/advisories/GHSA-2qph-qpvm-2qf7"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28854"
},
{
"type": "WEB",
"url": "https://github.com/tmccombs/tls-listener/commit/d5a7655d6ea9e53ab57c3013092c5576da964bc4"
},
{
"type": "WEB",
"url": "https://en.wikipedia.org/wiki/Slowloris_(computer_security)"
},
{
"type": "PACKAGE",
"url": "https://github.com/tmccombs/tls-listener"
@@ -58,11 +66,11 @@
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-03-15T19:57:22Z",
"nvd_published_at": null
"nvd_published_at": "2024-03-15T19:15:07Z"
}
}
advisories/github-reviewed/2024/03/GHSA-32jq-mv89-5rx7/GHSA-32jq-mv89-5rx7.json
+7 -3
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-32jq-mv89-5rx7",
"modified": "2024-03-15T19:20:17Z",
"modified": "2024-03-18T18:33:15Z",
"published": "2024-03-15T19:20:17Z",
"aliases": [
"CVE-2024-28252"
@@ -59,6 +59,10 @@
"type": "WEB",
"url": "https://github.com/CoreWCF/CoreWCF/security/advisories/GHSA-32jq-mv89-5rx7"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28252"
},
{
"type": "WEB",
"url": "https://github.com/CoreWCF/CoreWCF/issues/1345"
@@ -70,11 +74,11 @@
],
"database_specific": {
"cwe_ids": [
"CWE-404"
],
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-03-15T19:20:17Z",
"nvd_published_at": null
"nvd_published_at": "2024-03-15T19:15:07Z"
}
}
advisories/github-reviewed/2024/03/GHSA-w5wx-6g2r-r78q/GHSA-w5wx-6g2r-r78q.json
+18 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w5wx-6g2r-r78q",
"modified": "2024-03-15T18:44:28Z",
"modified": "2024-03-18T18:33:13Z",
"published": "2024-03-15T18:44:28Z",
"aliases": [
"CVE-2024-27920"
@@ -40,6 +40,10 @@
"type": "WEB",
"url": "https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-w5wx-6g2r-r78q"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27920"
},
{
"type": "WEB",
"url": "https://github.com/projectdiscovery/nuclei/pull/4822"
@@ -48,6 +52,18 @@
"type": "WEB",
"url": "https://github.com/projectdiscovery/nuclei/commit/e86f38299765b82ad724fdb701557e0eaff3884d"
},
{
"type": "WEB",
"url": "https://docs.projectdiscovery.io/templates/protocols/code"
},
{
"type": "WEB",
"url": "https://docs.projectdiscovery.io/templates/reference/template-signing"
},
{
"type": "WEB",
"url": "https://docs.projectdiscovery.io/templates/workflows/overview"
},
{
"type": "PACKAGE",
"url": "https://github.com/projectdiscovery/nuclei"
@@ -60,6 +76,6 @@
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-03-15T18:44:28Z",
"nvd_published_at": null
"nvd_published_at": "2024-03-15T20:15:09Z"
}
}
advisories/github-reviewed/2024/03/GHSA-wx8q-4gm9-rj2g/GHSA-wx8q-4gm9-rj2g.json
+10 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wx8q-4gm9-rj2g",
"modified": "2024-03-15T16:39:37Z",
"modified": "2024-03-18T18:33:11Z",
"published": "2024-03-15T16:35:11Z",
"aliases": [
"CVE-2023-51699"
@@ -40,10 +40,18 @@
"type": "WEB",
"url": "https://github.com/fluid-cloudnative/fluid/security/advisories/GHSA-wx8q-4gm9-rj2g"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51699"
},
{
"type": "WEB",
"url": "https://github.com/fluid-cloudnative/fluid/commit/02b7cd8b79a26092df95d625664994bda485c722"
},
{
"type": "WEB",
"url": "https://github.com/fluid-cloudnative/fluid/commit/e0184cff8790ad000c3e8943392c7f544fad7d66"
},
{
"type": "PACKAGE",
"url": "https://github.com/fluid-cloudnative/fluid"
@@ -56,6 +64,6 @@
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-03-15T16:35:11Z",
"nvd_published_at": null
"nvd_published_at": "2024-03-15T19:15:06Z"
}
}
advisories/unreviewed/2024/02/GHSA-3j4f-wx4w-q2cq/GHSA-3j4f-wx4w-q2cq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3j4f-wx4w-q2cq",
"modified": "2024-03-01T15:31:36Z",
"modified": "2024-03-18T18:32:18Z",
"published": "2024-02-22T18:30:30Z",
"aliases": [
"CVE-2024-26590"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: fix inconsistent per-file compression format\n\nEROFS can select compression algorithms on a per-file basis, and each\nper-file compression algorithm needs to be marked in the on-disk\nsuperblock for initialization.\n\nHowever, syzkaller can generate inconsistent crafted images that use\nan unsupported algorithmtype for specific inodes, e.g. use MicroLZMA\nalgorithmtype even it's not set in `sbi->available_compr_algs`. This\ncan lead to an unexpected \"BUG: kernel NULL pointer dereference\" if\nthe corresponding decompressor isn't built-in.\n\nFix this by checking against `sbi->available_compr_algs` for each\nm_algorithmformat request. Incorrect !erofs_sb_has_compr_cfgs preset\nbitmap is now fixed together since it was harmless previously.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-22T17:15:09Z"
advisories/unreviewed/2024/02/GHSA-445q-cj49-wrrx/GHSA-445q-cj49-wrrx.json
+7 -4
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2024/02/GHSA-4828-5p9m-g4ff/GHSA-4828-5p9m-g4ff.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4828-5p9m-g4ff",
"modified": "2024-02-15T15:30:26Z",
"modified": "2024-03-18T18:32:17Z",
"published": "2024-02-08T15:30:27Z",
"aliases": [
"CVE-2024-0985"
@@ -21,6 +21,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0985"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00017.html"
},
{
"type": "WEB",
"url": "https://www.postgresql.org/support/security/CVE-2024-0985"
advisories/unreviewed/2024/02/GHSA-8pq4-pmqh-grvh/GHSA-8pq4-pmqh-grvh.json
+7 -4
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2024/02/GHSA-rw7c-wqqw-8w6c/GHSA-rw7c-wqqw-8w6c.json
+7 -4
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2024/02/GHSA-vmpq-wpxg-r7rp/GHSA-vmpq-wpxg-r7rp.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vmpq-wpxg-r7rp",
"modified": "2024-02-22T18:30:30Z",
"modified": "2024-03-18T18:32:17Z",
"published": "2024-02-22T18:30:30Z",
"aliases": [
"CVE-2024-26587"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: netdevsim: don't try to destroy PHC on VFs\n\nPHC gets initialized in nsim_init_netdevsim(), which\nis only called if (nsim_dev_port_is_pf()).\n\nCreate a counterpart of nsim_init_netdevsim() and\nmove the mock_phc_destroy() there.\n\nThis fixes a crash trying to destroy netdevsim with\nVFs instantiated, as caught by running the devlink.sh test:\n\n BUG: kernel NULL pointer dereference, address: 00000000000000b8\n RIP: 0010:mock_phc_destroy+0xd/0x30\n Call Trace:\n <TASK>\n nsim_destroy+0x4a/0x70 [netdevsim]\n __nsim_dev_port_del+0x47/0x70 [netdevsim]\n nsim_dev_reload_destroy+0x105/0x120 [netdevsim]\n nsim_drv_remove+0x2f/0xb0 [netdevsim]\n device_release_driver_internal+0x1a1/0x210\n bus_remove_device+0xd5/0x120\n device_del+0x159/0x490\n device_unregister+0x12/0x30\n del_device_store+0x11a/0x1a0 [netdevsim]\n kernfs_fop_write_iter+0x130/0x1d0\n vfs_write+0x30b/0x4b0\n ksys_write+0x69/0xf0\n do_syscall_64+0xcc/0x1e0\n entry_SYSCALL_64_after_hwframe+0x6f/0x77",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-22T17:15:08Z"
advisories/unreviewed/2024/02/GHSA-x2wh-v69v-x2w9/GHSA-x2wh-v69v-x2w9.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x2wh-v69v-x2w9",
"modified": "2024-02-22T18:30:30Z",
"modified": "2024-03-18T18:32:18Z",
"published": "2024-02-22T18:30:30Z",
"aliases": [
"CVE-2024-26591"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix re-attachment branch in bpf_tracing_prog_attach\n\nThe following case can cause a crash due to missing attach_btf:\n\n1) load rawtp program\n2) load fentry program with rawtp as target_fd\n3) create tracing link for fentry program with target_fd = 0\n4) repeat 3\n\nIn the end we have:\n\n- prog->aux->dst_trampoline == NULL\n- tgt_prog == NULL (because we did not provide target_fd to link_create)\n- prog->aux->attach_btf == NULL (the program was loaded with attach_prog_fd=X)\n- the program was loaded for tgt_prog but we have no way to find out which one\n\n BUG: kernel NULL pointer dereference, address: 0000000000000058\n Call Trace:\n <TASK>\n ? __die+0x20/0x70\n ? page_fault_oops+0x15b/0x430\n ? fixup_exception+0x22/0x330\n ? exc_page_fault+0x6f/0x170\n ? asm_exc_page_fault+0x22/0x30\n ? bpf_tracing_prog_attach+0x279/0x560\n ? btf_obj_id+0x5/0x10\n bpf_tracing_prog_attach+0x439/0x560\n __sys_bpf+0x1cf4/0x2de0\n __x64_sys_bpf+0x1c/0x30\n do_syscall_64+0x41/0xf0\n entry_SYSCALL_64_after_hwframe+0x6e/0x76\n\nReturn -EINVAL in this situation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -41,9 +44,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-22T17:15:09Z"
advisories/unreviewed/2024/02/GHSA-x6p5-7c22-qrq6/GHSA-x6p5-7c22-qrq6.json
+7 -4
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2024/03/GHSA-22qf-62f9-pj62/GHSA-22qf-62f9-pj62.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-22qf-62f9-pj62",
"modified": "2024-03-18T18:32:19Z",
"published": "2024-03-18T18:32:19Z",
"aliases": [
"CVE-2024-2390"
],
"details": "\nAs a part of Tenable’s vulnerability disclosure program, a vulnerability in a Nessus plugin was identified and reported. This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2390"
},
{
"type": "WEB",
"url": "https://www.tenable.com/security/tns-2024-05"
}
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-18T16:15:09Z"
}
}
advisories/unreviewed/2024/03/GHSA-2j6j-3rj5-q42q/GHSA-2j6j-3rj5-q42q.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2j6j-3rj5-q42q",
"modified": "2024-03-18T18:32:22Z",
"published": "2024-03-18T18:32:22Z",
"aliases": [
"CVE-2024-26124"
],
"details": "Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26124"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/experience-manager/apsb24-05.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-18T18:15:19Z"
}
}
advisories/unreviewed/2024/03/GHSA-2jhg-m9q6-9g5r/GHSA-2jhg-m9q6-9g5r.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2jhg-m9q6-9g5r",
"modified": "2024-03-18T18:32:20Z",
"published": "2024-03-18T18:32:20Z",
"aliases": [
"CVE-2024-26031"
],
"details": "Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26031"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/experience-manager/apsb24-05.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-18T18:15:10Z"
}
}
advisories/unreviewed/2024/03/GHSA-2m47-v5fj-pw7f/GHSA-2m47-v5fj-pw7f.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2m47-v5fj-pw7f",
"modified": "2024-03-18T18:32:22Z",
"published": "2024-03-18T18:32:22Z",
"aliases": [
"CVE-2024-26118"
],
"details": "Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26118"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/experience-manager/apsb24-05.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-18T18:15:18Z"
}
}
advisories/unreviewed/2024/03/GHSA-2xch-p52g-f698/GHSA-2xch-p52g-f698.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2xch-p52g-f698",
"modified": "2024-03-18T18:32:22Z",
"published": "2024-03-18T18:32:22Z",
"aliases": [
"CVE-2024-26069"
],
"details": "Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26069"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/experience-manager/apsb24-05.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-18T18:15:15Z"
}
}
advisories/unreviewed/2024/03/GHSA-32v3-7hw6-xgvj/GHSA-32v3-7hw6-xgvj.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-32v3-7hw6-xgvj",
"modified": "2024-03-18T18:32:21Z",
"published": "2024-03-18T18:32:21Z",
"aliases": [
"CVE-2024-26062"
],
"details": "Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26062"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/experience-manager/apsb24-05.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-18T18:15:14Z"
}
}
advisories/unreviewed/2024/03/GHSA-344f-3xh7-82cg/GHSA-344f-3xh7-82cg.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-344f-3xh7-82cg",
"modified": "2024-03-18T18:32:21Z",
"published": "2024-03-18T18:32:21Z",
"aliases": [
"CVE-2024-26044"
],
"details": "Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into a webpage. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable script. This could result in arbitrary code execution in the context of the victim's browser.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26044"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/experience-manager/apsb24-05.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-18T18:15:12Z"
}
}
advisories/unreviewed/2024/03/GHSA-35xr-m7j2-qj4j/GHSA-35xr-m7j2-qj4j.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-35xr-m7j2-qj4j",
"modified": "2024-03-18T18:32:22Z",
"published": "2024-03-18T18:32:22Z",
"aliases": [
"CVE-2024-26105"
],
"details": "Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26105"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/experience-manager/apsb24-05.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-18T18:15:18Z"
}
}

Some files were not shown because too many files have changed in this diff Show More