From 7c08b93d23927444eef63589171aec671c3e3743 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 21 Jun 2024 09:32:06 +0000 Subject: [PATCH] Publish Advisories GHSA-cchp-3rq6-69wj GHSA-hvqv-gh9w-cp67 GHSA-jg62-h7pv-hxgv GHSA-jm7q-rxr5-2rpf GHSA-jxcm-cf67-2rxc GHSA-vjf8-pc55-p8gm GHSA-vjvv-jm79-hw4m GHSA-vqcm-9f94-45hf --- .../GHSA-cchp-3rq6-69wj.json | 38 ++++++++++++++ .../GHSA-hvqv-gh9w-cp67.json | 42 ++++++++++++++++ .../GHSA-jg62-h7pv-hxgv.json | 38 ++++++++++++++ .../GHSA-jm7q-rxr5-2rpf.json | 50 +++++++++++++++++++ .../GHSA-jxcm-cf67-2rxc.json | 38 ++++++++++++++ .../GHSA-vjf8-pc55-p8gm.json | 50 +++++++++++++++++++ .../GHSA-vjvv-jm79-hw4m.json | 42 ++++++++++++++++ .../GHSA-vqcm-9f94-45hf.json | 46 +++++++++++++++++ 8 files changed, 344 insertions(+) create mode 100644 advisories/unreviewed/2024/06/GHSA-cchp-3rq6-69wj/GHSA-cchp-3rq6-69wj.json create mode 100644 advisories/unreviewed/2024/06/GHSA-hvqv-gh9w-cp67/GHSA-hvqv-gh9w-cp67.json create mode 100644 advisories/unreviewed/2024/06/GHSA-jg62-h7pv-hxgv/GHSA-jg62-h7pv-hxgv.json create mode 100644 advisories/unreviewed/2024/06/GHSA-jm7q-rxr5-2rpf/GHSA-jm7q-rxr5-2rpf.json create mode 100644 advisories/unreviewed/2024/06/GHSA-jxcm-cf67-2rxc/GHSA-jxcm-cf67-2rxc.json create mode 100644 advisories/unreviewed/2024/06/GHSA-vjf8-pc55-p8gm/GHSA-vjf8-pc55-p8gm.json create mode 100644 advisories/unreviewed/2024/06/GHSA-vjvv-jm79-hw4m/GHSA-vjvv-jm79-hw4m.json create mode 100644 advisories/unreviewed/2024/06/GHSA-vqcm-9f94-45hf/GHSA-vqcm-9f94-45hf.json diff --git a/advisories/unreviewed/2024/06/GHSA-cchp-3rq6-69wj/GHSA-cchp-3rq6-69wj.json b/advisories/unreviewed/2024/06/GHSA-cchp-3rq6-69wj/GHSA-cchp-3rq6-69wj.json new file mode 100644 index 00000000000..9e612c0b83e --- /dev/null +++ b/advisories/unreviewed/2024/06/GHSA-cchp-3rq6-69wj/GHSA-cchp-3rq6-69wj.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cchp-3rq6-69wj", + "modified": "2024-06-21T09:30:26Z", + "published": "2024-06-21T09:30:26Z", + "aliases": [ + "CVE-2024-38874" + ], + "details": "An issue was discovered in the events2 (aka Events 2) extension before 8.3.8 and 9.x before 9.0.6 for TYPO3. Missing access checks in the management plugin lead to an insecure direct object reference (IDOR) vulnerability with the potential to activate or delete various events for unauthenticated users.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38874" + }, + { + "type": "WEB", + "url": "https://typo3.org/security/advisory/typo3-ext-sa-2024-003" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-06-21T07:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-hvqv-gh9w-cp67/GHSA-hvqv-gh9w-cp67.json b/advisories/unreviewed/2024/06/GHSA-hvqv-gh9w-cp67/GHSA-hvqv-gh9w-cp67.json new file mode 100644 index 00000000000..a9f990cf343 --- /dev/null +++ b/advisories/unreviewed/2024/06/GHSA-hvqv-gh9w-cp67/GHSA-hvqv-gh9w-cp67.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hvqv-gh9w-cp67", + "modified": "2024-06-21T09:30:27Z", + "published": "2024-06-21T09:30:27Z", + "aliases": [ + "CVE-2024-5859" + ], + "details": "The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘d’ parameter in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5859" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3104980%40meeting-scheduler-by-vcita&new=3104980%40meeting-scheduler-by-vcita&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a8ea0559-dec7-4c20-956d-dbfe7bc67634?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-06-21T09:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-jg62-h7pv-hxgv/GHSA-jg62-h7pv-hxgv.json b/advisories/unreviewed/2024/06/GHSA-jg62-h7pv-hxgv/GHSA-jg62-h7pv-hxgv.json new file mode 100644 index 00000000000..126e739db9b --- /dev/null +++ b/advisories/unreviewed/2024/06/GHSA-jg62-h7pv-hxgv/GHSA-jg62-h7pv-hxgv.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jg62-h7pv-hxgv", + "modified": "2024-06-21T09:30:26Z", + "published": "2024-06-21T09:30:26Z", + "aliases": [ + "CVE-2024-38873" + ], + "details": "An issue was discovered in the friendlycaptcha_official (aka Integration of Friendly Captcha) extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha integration for the ext:form extension.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38873" + }, + { + "type": "WEB", + "url": "https://typo3.org/security/advisory/typo3-ext-sa-2024-004" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-06-21T07:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-jm7q-rxr5-2rpf/GHSA-jm7q-rxr5-2rpf.json b/advisories/unreviewed/2024/06/GHSA-jm7q-rxr5-2rpf/GHSA-jm7q-rxr5-2rpf.json new file mode 100644 index 00000000000..349d0b363bb --- /dev/null +++ b/advisories/unreviewed/2024/06/GHSA-jm7q-rxr5-2rpf/GHSA-jm7q-rxr5-2rpf.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jm7q-rxr5-2rpf", + "modified": "2024-06-21T09:30:27Z", + "published": "2024-06-21T09:30:27Z", + "aliases": [ + "CVE-2024-5945" + ], + "details": "The WP SVG Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘type’ parameter in all versions up to, and including, 4.2 due to insufficient input sanitization. This makes it possible for authenticated attackers, with Author-level access and above, who have permissions to upload sanitized files, to bypass SVG sanitization and inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5945" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/wp-svg-images/trunk/wp-svg-images.php#L111" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/wp-svg-images/trunk/wp-svg-images.php#L313" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3105276" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/389d96e9-1fad-49a6-89b6-8f7f108d8117?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-06-21T08:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-jxcm-cf67-2rxc/GHSA-jxcm-cf67-2rxc.json b/advisories/unreviewed/2024/06/GHSA-jxcm-cf67-2rxc/GHSA-jxcm-cf67-2rxc.json new file mode 100644 index 00000000000..6bdd5bf2b40 --- /dev/null +++ b/advisories/unreviewed/2024/06/GHSA-jxcm-cf67-2rxc/GHSA-jxcm-cf67-2rxc.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jxcm-cf67-2rxc", + "modified": "2024-06-21T09:30:27Z", + "published": "2024-06-21T09:30:27Z", + "aliases": [ + "CVE-2024-2003" + ], + "details": "Local privilege escalation vulnerability allowed an attacker to misuse ESET's file operations during a restore operation from quarantine.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2003" + }, + { + "type": "WEB", + "url": "https://support.eset.com/ca8674" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-269" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-06-21T08:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-vjf8-pc55-p8gm/GHSA-vjf8-pc55-p8gm.json b/advisories/unreviewed/2024/06/GHSA-vjf8-pc55-p8gm/GHSA-vjf8-pc55-p8gm.json new file mode 100644 index 00000000000..0da24285de4 --- /dev/null +++ b/advisories/unreviewed/2024/06/GHSA-vjf8-pc55-p8gm/GHSA-vjf8-pc55-p8gm.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vjf8-pc55-p8gm", + "modified": "2024-06-21T09:30:26Z", + "published": "2024-06-21T09:30:26Z", + "aliases": [ + "CVE-2024-5639" + ], + "details": "The User Profile Picture plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.6.1 via the 'rest_api_change_profile_image' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Author-level access and above, to update the profile picture of any user.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5639" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/metronet-profile-picture/tags/2.6.1/metronet-profile-picture.php#L1122" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/metronet-profile-picture/tags/2.6.1/metronet-profile-picture.php#L989" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3105132" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/01a3b9ba-b18a-48d9-8365-d10f79fc6a6b?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-06-21T07:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-vjvv-jm79-hw4m/GHSA-vjvv-jm79-hw4m.json b/advisories/unreviewed/2024/06/GHSA-vjvv-jm79-hw4m/GHSA-vjvv-jm79-hw4m.json new file mode 100644 index 00000000000..292df16456f --- /dev/null +++ b/advisories/unreviewed/2024/06/GHSA-vjvv-jm79-hw4m/GHSA-vjvv-jm79-hw4m.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vjvv-jm79-hw4m", + "modified": "2024-06-21T09:30:27Z", + "published": "2024-06-21T09:30:27Z", + "aliases": [ + "CVE-2024-6225" + ], + "details": "The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.5 (and 7.5.1 for the Pro version) due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6225" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3092932%40ameliabooking&new=3092932%40ameliabooking&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/04597908-7086-4158-ae2b-8aa634a217c6?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-06-21T08:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-vqcm-9f94-45hf/GHSA-vqcm-9f94-45hf.json b/advisories/unreviewed/2024/06/GHSA-vqcm-9f94-45hf/GHSA-vqcm-9f94-45hf.json new file mode 100644 index 00000000000..64c51b35e0e --- /dev/null +++ b/advisories/unreviewed/2024/06/GHSA-vqcm-9f94-45hf/GHSA-vqcm-9f94-45hf.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vqcm-9f94-45hf", + "modified": "2024-06-21T09:30:26Z", + "published": "2024-06-21T09:30:26Z", + "aliases": [ + "CVE-2024-5191" + ], + "details": "The Branda – White Label WordPress, Custom Login Page Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mime_types’ parameter in all versions up to, and including, 3.4.17 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5191" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/branda-white-labeling/tags/3.4.17/inc/modules/utilities/images.php#L58" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3104910" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/31f4bad5-3a11-42c6-a336-6bd178ab5113?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-06-21T07:15:10Z" + } +} \ No newline at end of file