From 8f9d39b40725596eff6f457fbc9b7371b27d8c07 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 22 Apr 2024 22:34:35 +0000 Subject: [PATCH] Publish Advisories GHSA-h8xp-h3jf-wv4v GHSA-p4xh-4869-8vrg GHSA-x38j-4rr5-hqrj GHSA-h8xp-h3jf-wv4v GHSA-p4xh-4869-8vrg GHSA-x38j-4rr5-hqrj --- .../GHSA-h8xp-h3jf-wv4v.json | 69 +++++++++++++++++++ .../GHSA-p4xh-4869-8vrg.json | 65 +++++++++++++++++ .../GHSA-x38j-4rr5-hqrj.json | 69 +++++++++++++++++++ .../GHSA-h8xp-h3jf-wv4v.json | 43 ------------ .../GHSA-p4xh-4869-8vrg.json | 35 ---------- .../GHSA-x38j-4rr5-hqrj.json | 43 ------------ 6 files changed, 203 insertions(+), 121 deletions(-) create mode 100644 advisories/github-reviewed/2022/05/GHSA-h8xp-h3jf-wv4v/GHSA-h8xp-h3jf-wv4v.json create mode 100644 advisories/github-reviewed/2022/05/GHSA-p4xh-4869-8vrg/GHSA-p4xh-4869-8vrg.json create mode 100644 advisories/github-reviewed/2022/05/GHSA-x38j-4rr5-hqrj/GHSA-x38j-4rr5-hqrj.json delete mode 100644 advisories/unreviewed/2022/05/GHSA-h8xp-h3jf-wv4v/GHSA-h8xp-h3jf-wv4v.json delete mode 100644 advisories/unreviewed/2022/05/GHSA-p4xh-4869-8vrg/GHSA-p4xh-4869-8vrg.json delete mode 100644 advisories/unreviewed/2022/05/GHSA-x38j-4rr5-hqrj/GHSA-x38j-4rr5-hqrj.json diff --git a/advisories/github-reviewed/2022/05/GHSA-h8xp-h3jf-wv4v/GHSA-h8xp-h3jf-wv4v.json b/advisories/github-reviewed/2022/05/GHSA-h8xp-h3jf-wv4v/GHSA-h8xp-h3jf-wv4v.json new file mode 100644 index 00000000000..c7764562ff6 --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-h8xp-h3jf-wv4v/GHSA-h8xp-h3jf-wv4v.json @@ -0,0 +1,69 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h8xp-h3jf-wv4v", + "modified": "2024-04-22T22:33:06Z", + "published": "2022-05-24T16:50:39Z", + "aliases": [ + "CVE-2019-1010259" + ], + "summary": "SaltStack Salt SQL Injection vulnerability in mysql.user_chpass function", + "details": "SaltStack Salt 2018.3 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The `mysql.user_chpass` function from the MySQL module for Salt (https://github.com/saltstack/salt/blob/develop/salt/modules/mysql.py#L1462). The attack vector is: specially crafted password string. The fixed version is: 2018.3.4.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "salt" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2018.3.0" + }, + { + "fixed": "2018.3.4" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1010259" + }, + { + "type": "WEB", + "url": "https://github.com/saltstack/salt/pull/51462" + }, + { + "type": "WEB", + "url": "https://github.com/ShantonRU/salt/commit/a46c86a987c78e74e87969d8d3b27094e6544b7a" + }, + { + "type": "PACKAGE", + "url": "https://github.com/saltstack/salt" + }, + { + "type": "WEB", + "url": "https://github.com/saltstack/salt/blob/f22de0887cd7167887f113bf394244b74fb36b6b/salt/modules/mysql.py#L1534" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "CRITICAL", + "github_reviewed": true, + "github_reviewed_at": "2024-04-22T22:33:06Z", + "nvd_published_at": "2019-07-18T17:15:00Z" + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2022/05/GHSA-p4xh-4869-8vrg/GHSA-p4xh-4869-8vrg.json b/advisories/github-reviewed/2022/05/GHSA-p4xh-4869-8vrg/GHSA-p4xh-4869-8vrg.json new file mode 100644 index 00000000000..88486bac53e --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-p4xh-4869-8vrg/GHSA-p4xh-4869-8vrg.json @@ -0,0 +1,65 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-p4xh-4869-8vrg", + "modified": "2024-04-22T22:34:01Z", + "published": "2022-05-24T19:13:00Z", + "aliases": [ + "CVE-2021-40494" + ], + "summary": "AdaptiveScale LXDUI Hardcoded JWT Secret Key", + "details": "A Hardcoded JWT Secret Key in `__metadata__.py` metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "lxdui" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "2.1.3" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40494" + }, + { + "type": "WEB", + "url": "https://github.com/AdaptiveScale/lxdui/pull/353" + }, + { + "type": "WEB", + "url": "https://github.com/AdaptiveScale/lxdui/commit/e4bffeb9d69a5700a642cb6424453d1894e50d84" + }, + { + "type": "PACKAGE", + "url": "https://github.com/AdaptiveScale/lxdui" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-798" + ], + "severity": "CRITICAL", + "github_reviewed": true, + "github_reviewed_at": "2024-04-22T22:34:01Z", + "nvd_published_at": "2021-09-03T02:15:00Z" + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2022/05/GHSA-x38j-4rr5-hqrj/GHSA-x38j-4rr5-hqrj.json b/advisories/github-reviewed/2022/05/GHSA-x38j-4rr5-hqrj/GHSA-x38j-4rr5-hqrj.json new file mode 100644 index 00000000000..43e937f6d11 --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-x38j-4rr5-hqrj/GHSA-x38j-4rr5-hqrj.json @@ -0,0 +1,69 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x38j-4rr5-hqrj", + "modified": "2024-04-22T22:33:47Z", + "published": "2022-05-24T17:39:13Z", + "aliases": [ + "CVE-2021-3028" + ], + "summary": "git-big-picture Code Execution", + "details": "git-big-picture before 1.0.0 mishandles `'` characters in a branch name, leading to code execution.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "git-big-picture" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.0.0" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3028" + }, + { + "type": "WEB", + "url": "https://github.com/git-big-picture/git-big-picture/pull/27" + }, + { + "type": "WEB", + "url": "https://github.com/git-big-picture/git-big-picture/pull/62" + }, + { + "type": "PACKAGE", + "url": "https://github.com/git-big-picture/git-big-picture" + }, + { + "type": "WEB", + "url": "https://github.com/git-big-picture/git-big-picture/releases/tag/v1.0.0" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-20" + ], + "severity": "CRITICAL", + "github_reviewed": true, + "github_reviewed_at": "2024-04-22T22:33:47Z", + "nvd_published_at": "2021-01-13T17:15:00Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-h8xp-h3jf-wv4v/GHSA-h8xp-h3jf-wv4v.json b/advisories/unreviewed/2022/05/GHSA-h8xp-h3jf-wv4v/GHSA-h8xp-h3jf-wv4v.json deleted file mode 100644 index 05420272474..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-h8xp-h3jf-wv4v/GHSA-h8xp-h3jf-wv4v.json +++ /dev/null @@ -1,43 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-h8xp-h3jf-wv4v", - "modified": "2022-05-24T16:50:39Z", - "published": "2022-05-24T16:50:39Z", - "aliases": [ - "CVE-2019-1010259" - ], - "details": "SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.user_chpass function from the MySQL module for Salt (https://github.com/saltstack/salt/blob/develop/salt/modules/mysql.py#L1462). The attack vector is: specially crafted password string. The fixed version is: 2018.3.4.", - "severity": [ - - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1010259" - }, - { - "type": "WEB", - "url": "https://github.com/saltstack/salt/pull/51462" - }, - { - "type": "WEB", - "url": "https://github.com/ShantonRU/salt/commit/a46c86a987c78e74e87969d8d3b27094e6544b7a" - }, - { - "type": "WEB", - "url": "https://github.com/saltstack/salt/blob/f22de0887cd7167887f113bf394244b74fb36b6b/salt/modules/mysql.py#L1534" - } - ], - "database_specific": { - "cwe_ids": [ - - ], - "severity": null, - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2019-07-18T17:15:00Z" - } -} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-p4xh-4869-8vrg/GHSA-p4xh-4869-8vrg.json b/advisories/unreviewed/2022/05/GHSA-p4xh-4869-8vrg/GHSA-p4xh-4869-8vrg.json deleted file mode 100644 index 09daead3024..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-p4xh-4869-8vrg/GHSA-p4xh-4869-8vrg.json +++ /dev/null @@ -1,35 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-p4xh-4869-8vrg", - "modified": "2022-05-24T19:13:00Z", - "published": "2022-05-24T19:13:00Z", - "aliases": [ - "CVE-2021-40494" - ], - "details": "A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system.", - "severity": [ - - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40494" - }, - { - "type": "WEB", - "url": "https://github.com/AdaptiveScale/lxdui/pull/353" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-798" - ], - "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2021-09-03T02:15:00Z" - } -} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-x38j-4rr5-hqrj/GHSA-x38j-4rr5-hqrj.json b/advisories/unreviewed/2022/05/GHSA-x38j-4rr5-hqrj/GHSA-x38j-4rr5-hqrj.json deleted file mode 100644 index 9ce4833991e..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-x38j-4rr5-hqrj/GHSA-x38j-4rr5-hqrj.json +++ /dev/null @@ -1,43 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-x38j-4rr5-hqrj", - "modified": "2022-05-24T17:39:13Z", - "published": "2022-05-24T17:39:13Z", - "aliases": [ - "CVE-2021-3028" - ], - "details": "git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.", - "severity": [ - - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3028" - }, - { - "type": "WEB", - "url": "https://github.com/git-big-picture/git-big-picture/pull/27" - }, - { - "type": "WEB", - "url": "https://github.com/git-big-picture/git-big-picture/pull/62" - }, - { - "type": "WEB", - "url": "https://github.com/git-big-picture/git-big-picture/releases/tag/v1.0.0" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-20" - ], - "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2021-01-13T17:15:00Z" - } -} \ No newline at end of file