netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-86c6-3g63-5w64
GHSA-73gr-32wg-qhh7
GHSA-xpc5-rr39-v8v2
This commit is contained in:
advisory-database[bot]
2024-09-27 17:04:53 +00:00
parent cbbb602712
commit 8215aeb064
3 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/09/GHSA-86c6-3g63-5w64/GHSA-86c6-3g63-5w64.json
+1
View File
@@ -51,6 +51,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-266",
"CWE-732"
],
"severity": "HIGH",
advisories/github-reviewed/2024/09/GHSA-73gr-32wg-qhh7/GHSA-73gr-32wg-qhh7.json
+2 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-73gr-32wg-qhh7",
"modified": "2024-09-18T22:05:30Z",
"modified": "2024-09-27T17:03:17Z",
"published": "2024-09-18T22:05:30Z",
"aliases": [
"CVE-2024-47050"
],
"summary": "Mautic vulnerable to XSS in contact/company tracking (no authentication)",
"details": "## Summary\nPrior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.\n \n## Patches\nPlease update to 4.4.13 or 5.1.1 or later.\n\n## Workarounds\nNone\n\n## References\nhttps://owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_(XSS)\nhttps://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/02-Testing_for_Stored_Cross_Site_Scripting\n\nIf you have any questions or comments about this advisory:\n\nEmail us at [security@mautic.org](mailto:security@mautic.org)",
"details": "## Summary\nPrior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.\n \n## Patches\nPlease update to 4.4.13 or 5.1.1 or later.\n\n## Workarounds\nNone\n\n## References\nhttps://owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_(XSS)\nhttps://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/02-Testing_for_Stored_Cross_Site_Scripting\n\nIf you have any questions or comments about this advisory:\nEmail us at [security@mautic.org](mailto:security@mautic.org)",
"severity": [
{
"type": "CVSS_V3",
advisories/github-reviewed/2024/09/GHSA-xpc5-rr39-v8v2/GHSA-xpc5-rr39-v8v2.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xpc5-rr39-v8v2",
"modified": "2024-09-19T15:26:32Z",
"modified": "2024-09-27T17:03:14Z",
"published": "2024-09-18T22:05:59Z",
"aliases": [
"CVE-2021-27917"
@@ -122,7 +122,7 @@
"cwe_ids": [
"CWE-79"
],
"severity": "HIGH",
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-09-18T22:05:59Z",
"nvd_published_at": "2024-09-18T22:15:03Z"