From 8a4f2ec53adec4d3bc3b68f938fba8e04c7bee62 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 20 Jun 2024 16:35:43 +0000 Subject: [PATCH] Publish GHSA-cr7j-rwmv-vgch --- .../06/GHSA-cr7j-rwmv-vgch/GHSA-cr7j-rwmv-vgch.json | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/advisories/github-reviewed/2024/06/GHSA-cr7j-rwmv-vgch/GHSA-cr7j-rwmv-vgch.json b/advisories/github-reviewed/2024/06/GHSA-cr7j-rwmv-vgch/GHSA-cr7j-rwmv-vgch.json index fe3281626ea..bb53a8c74dc 100644 --- a/advisories/github-reviewed/2024/06/GHSA-cr7j-rwmv-vgch/GHSA-cr7j-rwmv-vgch.json +++ b/advisories/github-reviewed/2024/06/GHSA-cr7j-rwmv-vgch/GHSA-cr7j-rwmv-vgch.json @@ -1,13 +1,14 @@ { "schema_version": "1.4.0", "id": "GHSA-cr7j-rwmv-vgch", - "modified": "2024-06-07T21:56:01Z", + "modified": "2024-06-20T16:34:33Z", "published": "2024-06-07T21:31:54Z", + "withdrawn": "2024-06-20T16:34:33Z", "aliases": [ "CVE-2024-36811" ], - "summary": "aimeos-core arbitrary file uopload vulnerability", - "details": "An arbitrary file upload vulnerability in the image upload function of aimeos-core v2024.04 allows attackers to execute arbitrary code via uploading a crafted PHP file.", + "summary": "Duplicate Advisory: aimeos-core arbitrary file upload vulnerability", + "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-rhc2-23c2-ww7c. This link is maintained to preserve external references.\n\n## Original Description\nAn arbitrary file upload vulnerability in the image upload function of aimeos-core v2024.04 allows attackers to execute arbitrary code via uploading a crafted PHP file.", "severity": [ { "type": "CVSS_V3", @@ -40,6 +41,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36811" }, + { + "type": "WEB", + "url": "https://github.com/github/advisory-database/pull/4544" + }, { "type": "WEB", "url": "https://github.com/aimeos/aimeos-core/commit/13e163126adff48f987b3b6faca28551effe0205"