From 7bba576ca35c14b9db6156fc1164a6e6afce67af Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 24 Feb 2025 09:37:21 +0000 Subject: [PATCH] Publish Advisories GHSA-5fwx-p6xh-vjrh GHSA-9fg2-2f57-9p5h GHSA-mq8h-f329-fxx2 GHSA-p4jg-qmjv-9x26 GHSA-q8p2-2hwc-jw64 GHSA-rhvr-6w8c-6v7w GHSA-v469-7wp6-7cvp --- .../GHSA-5fwx-p6xh-vjrh.json | 36 +++++++++++++++++ .../GHSA-9fg2-2f57-9p5h.json | 40 +++++++++++++++++++ .../GHSA-mq8h-f329-fxx2.json | 37 +++++++++++++++++ .../GHSA-p4jg-qmjv-9x26.json | 36 +++++++++++++++++ .../GHSA-q8p2-2hwc-jw64.json | 36 +++++++++++++++++ .../GHSA-rhvr-6w8c-6v7w.json | 36 +++++++++++++++++ .../GHSA-v469-7wp6-7cvp.json | 36 +++++++++++++++++ 7 files changed, 257 insertions(+) create mode 100644 advisories/unreviewed/2025/02/GHSA-5fwx-p6xh-vjrh/GHSA-5fwx-p6xh-vjrh.json create mode 100644 advisories/unreviewed/2025/02/GHSA-9fg2-2f57-9p5h/GHSA-9fg2-2f57-9p5h.json create mode 100644 advisories/unreviewed/2025/02/GHSA-mq8h-f329-fxx2/GHSA-mq8h-f329-fxx2.json create mode 100644 advisories/unreviewed/2025/02/GHSA-p4jg-qmjv-9x26/GHSA-p4jg-qmjv-9x26.json create mode 100644 advisories/unreviewed/2025/02/GHSA-q8p2-2hwc-jw64/GHSA-q8p2-2hwc-jw64.json create mode 100644 advisories/unreviewed/2025/02/GHSA-rhvr-6w8c-6v7w/GHSA-rhvr-6w8c-6v7w.json create mode 100644 advisories/unreviewed/2025/02/GHSA-v469-7wp6-7cvp/GHSA-v469-7wp6-7cvp.json diff --git a/advisories/unreviewed/2025/02/GHSA-5fwx-p6xh-vjrh/GHSA-5fwx-p6xh-vjrh.json b/advisories/unreviewed/2025/02/GHSA-5fwx-p6xh-vjrh/GHSA-5fwx-p6xh-vjrh.json new file mode 100644 index 00000000000..35ee2570ae0 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-5fwx-p6xh-vjrh/GHSA-5fwx-p6xh-vjrh.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5fwx-p6xh-vjrh", + "modified": "2025-02-24T09:35:48Z", + "published": "2025-02-24T09:35:48Z", + "aliases": [ + "CVE-2025-25279" + ], + "details": "Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to properly validate board blocks when importing boards which allows an attacker could read any arbitrary file on the system via importing and exporting a specially crafted import archive in Boards.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25279" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-22" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-24T08:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-9fg2-2f57-9p5h/GHSA-9fg2-2f57-9p5h.json b/advisories/unreviewed/2025/02/GHSA-9fg2-2f57-9p5h/GHSA-9fg2-2f57-9p5h.json new file mode 100644 index 00000000000..5c0af6249ea --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-9fg2-2f57-9p5h/GHSA-9fg2-2f57-9p5h.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9fg2-2f57-9p5h", + "modified": "2025-02-24T09:35:45Z", + "published": "2025-02-24T09:35:45Z", + "aliases": [ + "CVE-2025-0690" + ], + "details": "The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, with a line big enough it's possible to make this variable to overflow leading to a out-of-bounds write in the heap based buffer. This flaw may be leveraged to corrupt grub's internal critical data and secure boot bypass is not discarded as consequence.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0690" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2025-0690" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2346123" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-24T08:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-mq8h-f329-fxx2/GHSA-mq8h-f329-fxx2.json b/advisories/unreviewed/2025/02/GHSA-mq8h-f329-fxx2/GHSA-mq8h-f329-fxx2.json new file mode 100644 index 00000000000..8468d355226 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-mq8h-f329-fxx2/GHSA-mq8h-f329-fxx2.json @@ -0,0 +1,37 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mq8h-f329-fxx2", + "modified": "2025-02-24T09:35:48Z", + "published": "2025-02-24T09:35:48Z", + "aliases": [ + "CVE-2023-52926" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nIORING_OP_READ did not correctly consume the provided buffer list when\nread i/o returned < 0 (except for -EAGAIN and -EIOCBQUEUED return).\nThis can lead to a potential use-after-free when the completion via\nio_rw_done runs at separate context.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52926" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/6c27fc6a783c8a77c756dd5461b15e465020d075" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/72060434a14caea20925e492310d6e680e3f9007" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a08d195b586a217d76b42062f88f375a3eedda4d" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-24T09:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-p4jg-qmjv-9x26/GHSA-p4jg-qmjv-9x26.json b/advisories/unreviewed/2025/02/GHSA-p4jg-qmjv-9x26/GHSA-p4jg-qmjv-9x26.json new file mode 100644 index 00000000000..437365816be --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-p4jg-qmjv-9x26/GHSA-p4jg-qmjv-9x26.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-p4jg-qmjv-9x26", + "modified": "2025-02-24T09:35:47Z", + "published": "2025-02-24T09:35:47Z", + "aliases": [ + "CVE-2025-24490" + ], + "details": "Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to use prepared statements in the SQL query of boards reordering which allows an attacker to retrieve data from the database, via a SQL injection when reordering specially crafted boards categories.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24490" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-24T08:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-q8p2-2hwc-jw64/GHSA-q8p2-2hwc-jw64.json b/advisories/unreviewed/2025/02/GHSA-q8p2-2hwc-jw64/GHSA-q8p2-2hwc-jw64.json new file mode 100644 index 00000000000..5d4f0e9bb35 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-q8p2-2hwc-jw64/GHSA-q8p2-2hwc-jw64.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q8p2-2hwc-jw64", + "modified": "2025-02-24T09:35:48Z", + "published": "2025-02-24T09:35:48Z", + "aliases": [ + "CVE-2025-24526" + ], + "details": "Mattermost versions 10.1.x <= 10.1.3, 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to restrict channel export of archived channels when the \"Allow users to view archived channels\" is disabled which allows a user to export channel contents when they shouldn't have access to it", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24526" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-863" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-24T08:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-rhvr-6w8c-6v7w/GHSA-rhvr-6w8c-6v7w.json b/advisories/unreviewed/2025/02/GHSA-rhvr-6w8c-6v7w/GHSA-rhvr-6w8c-6v7w.json new file mode 100644 index 00000000000..a8aa465dd73 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-rhvr-6w8c-6v7w/GHSA-rhvr-6w8c-6v7w.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rhvr-6w8c-6v7w", + "modified": "2025-02-24T09:35:45Z", + "published": "2025-02-24T09:35:45Z", + "aliases": [ + "CVE-2025-1412" + ], + "details": "Mattermost versions 9.11.x <= 9.11.6, 10.4.x <= 10.4.1 fail to invalidate all active sessions when converting a user to a bot, with allows the converted user to escalate their privileges depending on the permissions granted to the bot.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1412" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-384" + ], + "severity": "LOW", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-24T08:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-v469-7wp6-7cvp/GHSA-v469-7wp6-7cvp.json b/advisories/unreviewed/2025/02/GHSA-v469-7wp6-7cvp/GHSA-v469-7wp6-7cvp.json new file mode 100644 index 00000000000..cc574e7a801 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-v469-7wp6-7cvp/GHSA-v469-7wp6-7cvp.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v469-7wp6-7cvp", + "modified": "2025-02-24T09:35:45Z", + "published": "2025-02-24T09:35:45Z", + "aliases": [ + "CVE-2025-20051" + ], + "details": "Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to properly validate input when patching and duplicating a board, which allows a user to read any arbitrary file on the system via duplicating a specially crafted block in Boards.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20051" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-22" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-24T08:15:10Z" + } +} \ No newline at end of file