From 7a24acc33f7cd4643e86dd2603e2bcaf826dec70 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Sun, 25 May 2025 06:31:46 +0000
Subject: [PATCH] Publish GHSA-wwr5-99rv-v9gv

---
 .../GHSA-wwr5-99rv-v9gv.json                  | 52 +++++++++++++++++++
 1 file changed, 52 insertions(+)
 create mode 100644 advisories/unreviewed/2025/05/GHSA-wwr5-99rv-v9gv/GHSA-wwr5-99rv-v9gv.json

diff --git a/advisories/unreviewed/2025/05/GHSA-wwr5-99rv-v9gv/GHSA-wwr5-99rv-v9gv.json b/advisories/unreviewed/2025/05/GHSA-wwr5-99rv-v9gv/GHSA-wwr5-99rv-v9gv.json
new file mode 100644
index 00000000000..90cdbb7d70d
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-wwr5-99rv-v9gv/GHSA-wwr5-99rv-v9gv.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wwr5-99rv-v9gv",
+  "modified": "2025-05-25T06:30:18Z",
+  "published": "2025-05-25T06:30:18Z",
+  "aliases": [
+    "CVE-2025-5145"
+  ],
+  "details": "A vulnerability, which was classified as critical, was found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2, NBR200V2 and POWER13 up to 20250508. This affects an unknown part of the file /www/cgi-bin/ of the component Query String Handler. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5145"
+    },
+    {
+      "type": "WEB",
+      "url": "https://anonymous.4open.science/r/netcore_unauth-7D2E"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.310233"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.310233"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.573492"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-25T06:15:32Z"
+  }
+}
\ No newline at end of file