diff --git a/advisories/unreviewed/2024/01/GHSA-93px-8x98-j7p2/GHSA-93px-8x98-j7p2.json b/advisories/unreviewed/2024/01/GHSA-93px-8x98-j7p2/GHSA-93px-8x98-j7p2.json index 231f15179ff..3e57b38d7e7 100644 --- a/advisories/unreviewed/2024/01/GHSA-93px-8x98-j7p2/GHSA-93px-8x98-j7p2.json +++ b/advisories/unreviewed/2024/01/GHSA-93px-8x98-j7p2/GHSA-93px-8x98-j7p2.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-93px-8x98-j7p2", - "modified": "2024-02-21T09:31:00Z", + "modified": "2024-02-29T09:30:34Z", "published": "2024-01-23T03:31:08Z", "aliases": [ "CVE-2024-23222" @@ -61,6 +61,10 @@ "type": "WEB", "url": "https://support.apple.com/en-us/HT214070" }, + { + "type": "WEB", + "url": "https://support.apple.com/kb/HT214070" + }, { "type": "WEB", "url": "http://seclists.org/fulldisclosure/2024/Feb/6" diff --git a/advisories/unreviewed/2024/02/GHSA-6mx3-9qfh-77gj/GHSA-6mx3-9qfh-77gj.json b/advisories/unreviewed/2024/02/GHSA-6mx3-9qfh-77gj/GHSA-6mx3-9qfh-77gj.json new file mode 100644 index 00000000000..8f3cea18b01 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-6mx3-9qfh-77gj/GHSA-6mx3-9qfh-77gj.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6mx3-9qfh-77gj", + "modified": "2024-02-29T09:30:34Z", + "published": "2024-02-29T09:30:34Z", + "aliases": [ + "CVE-2024-24988" + ], + "details": "Mattermost fails to properly validate the length of the emoji value in the custom user status, allowing an attacker to send multiple times a very long string as an emoji value causing high resource consumption and possibly crashing the server.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24988" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-400" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T08:15:47Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-7g7m-2p63-98g8/GHSA-7g7m-2p63-98g8.json b/advisories/unreviewed/2024/02/GHSA-7g7m-2p63-98g8/GHSA-7g7m-2p63-98g8.json new file mode 100644 index 00000000000..5660322c802 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-7g7m-2p63-98g8/GHSA-7g7m-2p63-98g8.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7g7m-2p63-98g8", + "modified": "2024-02-29T09:30:34Z", + "published": "2024-02-29T09:30:34Z", + "aliases": [ + "CVE-2024-1981" + ], + "details": "The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to SQL Injection via the 'table_prefix' parameter in version 0.9.68 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1981" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?old_path=%2Fwpvivid-backuprestore%2Ftrunk&old=2667839&new_path=%2Fwpvivid-backuprestore%2Ftrunk&new=2667839" + }, + { + "type": "WEB", + "url": "https://research.hisolutions.com/2024/01/multiple-vulnerabilities-in-wordpress-plugin-wpvivid-backup-and-migration" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ef8bfb38-4f20-4f9f-bb30-a88f3be2d2d3?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T07:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-7v3v-984v-h74r/GHSA-7v3v-984v-h74r.json b/advisories/unreviewed/2024/02/GHSA-7v3v-984v-h74r/GHSA-7v3v-984v-h74r.json new file mode 100644 index 00000000000..2d57ea74dc9 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-7v3v-984v-h74r/GHSA-7v3v-984v-h74r.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7v3v-984v-h74r", + "modified": "2024-02-29T09:30:34Z", + "published": "2024-02-29T09:30:34Z", + "aliases": [ + "CVE-2024-23493" + ], + "details": "Mattermost fails to properly authorize the requests fetching team associated AD/LDAP groups, allowing a user to fetch details of AD/LDAP groups of a team that they are not a member of. \n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23493" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-200" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T08:15:47Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-83rv-7m8c-7qv3/GHSA-83rv-7m8c-7qv3.json b/advisories/unreviewed/2024/02/GHSA-83rv-7m8c-7qv3/GHSA-83rv-7m8c-7qv3.json new file mode 100644 index 00000000000..672de689542 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-83rv-7m8c-7qv3/GHSA-83rv-7m8c-7qv3.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-83rv-7m8c-7qv3", + "modified": "2024-02-29T09:30:34Z", + "published": "2024-02-29T09:30:34Z", + "aliases": [ + "CVE-2024-25594" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Savvy Wordpress Development MyWaze allows Stored XSS.This issue affects MyWaze: from n/a through 1.6.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25594" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/my-waze/wordpress-mywaze-plugin-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T07:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-9c57-j536-h7mm/GHSA-9c57-j536-h7mm.json b/advisories/unreviewed/2024/02/GHSA-9c57-j536-h7mm/GHSA-9c57-j536-h7mm.json new file mode 100644 index 00000000000..55d92582b32 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-9c57-j536-h7mm/GHSA-9c57-j536-h7mm.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9c57-j536-h7mm", + "modified": "2024-02-29T09:30:34Z", + "published": "2024-02-29T09:30:34Z", + "aliases": [ + "CVE-2024-25292" + ], + "details": "Cross-site scripting (XSS) vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25292" + }, + { + "type": "WEB", + "url": "https://github.com/ji-zzang/EQST-PoC/tree/main/2024/RCE/CVE-2024-25292" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T07:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-fx48-xv6q-6gp3/GHSA-fx48-xv6q-6gp3.json b/advisories/unreviewed/2024/02/GHSA-fx48-xv6q-6gp3/GHSA-fx48-xv6q-6gp3.json new file mode 100644 index 00000000000..2b7270e228b --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-fx48-xv6q-6gp3/GHSA-fx48-xv6q-6gp3.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fx48-xv6q-6gp3", + "modified": "2024-02-29T09:30:34Z", + "published": "2024-02-29T09:30:34Z", + "aliases": [ + "CVE-2024-1887" + ], + "details": "Mattermost fails to check if compliance export is enabled when fetching posts of public channels allowing a user that is not a member of the public channel to fetch the posts, which will not be audited in the compliance export. \n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1887" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T08:15:46Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-pfw6-5rx3-xh3c/GHSA-pfw6-5rx3-xh3c.json b/advisories/unreviewed/2024/02/GHSA-pfw6-5rx3-xh3c/GHSA-pfw6-5rx3-xh3c.json new file mode 100644 index 00000000000..0dee88b0720 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-pfw6-5rx3-xh3c/GHSA-pfw6-5rx3-xh3c.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pfw6-5rx3-xh3c", + "modified": "2024-02-29T09:30:34Z", + "published": "2024-02-29T09:30:34Z", + "aliases": [ + "CVE-2024-1888" + ], + "details": "Mattermost fails to check the \"invite_guest\" permission when inviting guests of other teams to a team, allowing a member with permissions to add other members but not to add guests to add a guest to a team as long as the guest was already a guest in another team of the server\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1888" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T09:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-vxph-3f3v-7x63/GHSA-vxph-3f3v-7x63.json b/advisories/unreviewed/2024/02/GHSA-vxph-3f3v-7x63/GHSA-vxph-3f3v-7x63.json new file mode 100644 index 00000000000..463f5d77873 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-vxph-3f3v-7x63/GHSA-vxph-3f3v-7x63.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vxph-3f3v-7x63", + "modified": "2024-02-29T09:30:34Z", + "published": "2024-02-29T09:30:34Z", + "aliases": [ + "CVE-2024-25291" + ], + "details": "Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25291" + }, + { + "type": "WEB", + "url": "https://github.com/ji-zzang/EQST-PoC/tree/main/2024/RCE/CVE-2024-25291" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T07:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-wrgr-v88r-75jx/GHSA-wrgr-v88r-75jx.json b/advisories/unreviewed/2024/02/GHSA-wrgr-v88r-75jx/GHSA-wrgr-v88r-75jx.json new file mode 100644 index 00000000000..23869a7673b --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-wrgr-v88r-75jx/GHSA-wrgr-v88r-75jx.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wrgr-v88r-75jx", + "modified": "2024-02-29T09:30:34Z", + "published": "2024-02-29T09:30:34Z", + "aliases": [ + "CVE-2024-1982" + ], + "details": "The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the get_restore_progress() and restore() functions in all versions up to, and including, 0.9.68. This makes it possible for unauthenticated attackers to exploit a SQL injection vulnerability or trigger a DoS.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1982" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?old_path=%2Fwpvivid-backuprestore%2Ftrunk&old=2667839&new_path=%2Fwpvivid-backuprestore%2Ftrunk&new=2667839" + }, + { + "type": "WEB", + "url": "https://research.hisolutions.com/2024/01/multiple-vulnerabilities-in-wordpress-plugin-wpvivid-backup-and-migration" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4f17976e-d6b9-40fb-b2fb-d60bcfd68d12?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T07:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-xgxj-j98c-59rv/GHSA-xgxj-j98c-59rv.json b/advisories/unreviewed/2024/02/GHSA-xgxj-j98c-59rv/GHSA-xgxj-j98c-59rv.json new file mode 100644 index 00000000000..23bb66db421 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-xgxj-j98c-59rv/GHSA-xgxj-j98c-59rv.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xgxj-j98c-59rv", + "modified": "2024-02-29T09:30:34Z", + "published": "2024-02-29T09:30:34Z", + "aliases": [ + "CVE-2024-23488" + ], + "details": "Mattermost fails to properly restrict the access of files attached to posts in an archived channel, resulting in members being able to access files of archived channels even if the “Allow users to view archived channels” option is disabled.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23488" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "LOW", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T08:15:47Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-xq36-jhc6-fxw2/GHSA-xq36-jhc6-fxw2.json b/advisories/unreviewed/2024/02/GHSA-xq36-jhc6-fxw2/GHSA-xq36-jhc6-fxw2.json new file mode 100644 index 00000000000..984cef87de9 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-xq36-jhc6-fxw2/GHSA-xq36-jhc6-fxw2.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xq36-jhc6-fxw2", + "modified": "2024-02-29T09:30:34Z", + "published": "2024-02-29T09:30:34Z", + "aliases": [ + "CVE-2024-1978" + ], + "details": "The Friends plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.5 via the discover_available_feeds function. This makes it possible for authenticated attackers, with administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1978" + }, + { + "type": "WEB", + "url": "https://github.com/akirk/friends/pull/290" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3036987%40friends&new=3036987%40friends&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/72e1fbce-86ae-4518-a613-7c322193acf4?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T07:15:06Z" + } +} \ No newline at end of file