diff --git a/advisories/github-reviewed/2022/05/GHSA-vcgg-hp4r-87gx/GHSA-vcgg-hp4r-87gx.json b/advisories/github-reviewed/2022/05/GHSA-vcgg-hp4r-87gx/GHSA-vcgg-hp4r-87gx.json new file mode 100644 index 00000000000..75c81ce35ad --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-vcgg-hp4r-87gx/GHSA-vcgg-hp4r-87gx.json @@ -0,0 +1,157 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vcgg-hp4r-87gx", + "modified": "2024-04-25T23:16:25Z", + "published": "2022-05-14T01:09:10Z", + "aliases": [ + "CVE-2019-10641" + ], + "summary": "Contao Does Not Invalidate Existing Sessions When Password Changes", + "details": "Security researcher Ali Razzaq has discovered that existing sessions are not correctly invalidated when a user changes their password in the backend or frontend.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "contao/contao" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.0" + }, + { + "fixed": "4.4.37" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "contao/contao" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.5.0" + }, + { + "fixed": "4.7.3" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "contao/core-bundle" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.0" + }, + { + "fixed": "4.4.37" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "contao/core-bundle" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.5.0" + }, + { + "fixed": "4.7.3" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "contao/core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "3.5.39" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10641" + }, + { + "type": "WEB", + "url": "https://github.com/contao/contao/commit/74c7dfafa0dfa5363a9463b486522d5d526e28fe" + }, + { + "type": "WEB", + "url": "https://github.com/contao/contao/commit/b92e27bc7c9e59226077937f840c74ffd0f672e8" + }, + { + "type": "WEB", + "url": "https://github.com/contao/core/commit/119a1b5bd9e62d27ca2838727084d04f3b7fcd32" + }, + { + "type": "WEB", + "url": "https://contao.org/en/news/security-vulnerability-cve-2019-10641.html" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2019-10641.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2019-10641.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/CVE-2019-10641.yaml" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-640" + ], + "severity": "CRITICAL", + "github_reviewed": true, + "github_reviewed_at": "2024-04-25T23:16:25Z", + "nvd_published_at": "2019-04-17T19:29:00Z" + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2022/05/GHSA-x5g4-crxq-qxjx/GHSA-x5g4-crxq-qxjx.json b/advisories/github-reviewed/2022/05/GHSA-x5g4-crxq-qxjx/GHSA-x5g4-crxq-qxjx.json new file mode 100644 index 00000000000..bcbb97ef1f0 --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-x5g4-crxq-qxjx/GHSA-x5g4-crxq-qxjx.json @@ -0,0 +1,111 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x5g4-crxq-qxjx", + "modified": "2024-04-25T23:17:00Z", + "published": "2022-05-13T01:42:03Z", + "aliases": [ + "CVE-2017-10993" + ], + "summary": "Contao Core directory traversal vulnerability", + "details": "A logged in back end user can include arbitrary PHP files by manipulating an URL parameter. Since Contao does not allow to upload PHP files in the file manager, the attack is limited to the existing PHP files on the server.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "contao/contao" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.0" + }, + { + "fixed": "4.4.1" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "contao/core-bundle" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.0" + }, + { + "fixed": "4.4.1" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "contao/core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "3.5.28" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10993" + }, + { + "type": "WEB", + "url": "https://contao.org/en/news/contao-3_5_28.html" + }, + { + "type": "WEB", + "url": "https://contao.org/en/news/contao-4_4_1.html" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2017-10993.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2017-10993.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/CVE-2017-10993.yaml" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-22" + ], + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2024-04-25T23:17:00Z", + "nvd_published_at": "2017-07-21T06:29:00Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-vcgg-hp4r-87gx/GHSA-vcgg-hp4r-87gx.json b/advisories/unreviewed/2022/05/GHSA-vcgg-hp4r-87gx/GHSA-vcgg-hp4r-87gx.json deleted file mode 100644 index 5fee57295c6..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-vcgg-hp4r-87gx/GHSA-vcgg-hp4r-87gx.json +++ /dev/null @@ -1,42 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-vcgg-hp4r-87gx", - "modified": "2022-05-14T01:09:10Z", - "published": "2022-05-14T01:09:10Z", - "aliases": [ - "CVE-2019-10641" - ], - "details": "Contao before 3.5.39 and 4.x before 4.7.3 has a Weak Password Recovery Mechanism for a Forgotten Password.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" - } - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10641" - }, - { - "type": "WEB", - "url": "https://contao.org/en/news.html" - }, - { - "type": "WEB", - "url": "https://contao.org/en/news/security-vulnerability-cve-2019-10641.html" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-640" - ], - "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2019-04-17T19:29:00Z" - } -} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-x5g4-crxq-qxjx/GHSA-x5g4-crxq-qxjx.json b/advisories/unreviewed/2022/05/GHSA-x5g4-crxq-qxjx/GHSA-x5g4-crxq-qxjx.json deleted file mode 100644 index c96bf86f33f..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-x5g4-crxq-qxjx/GHSA-x5g4-crxq-qxjx.json +++ /dev/null @@ -1,38 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-x5g4-crxq-qxjx", - "modified": "2022-05-13T01:42:03Z", - "published": "2022-05-13T01:42:03Z", - "aliases": [ - "CVE-2017-10993" - ], - "details": "Contao before 3.5.28 and 4.x before 4.4.1 allows remote attackers to include and execute arbitrary local PHP files via a crafted parameter in a URL, aka Directory Traversal.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" - } - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10993" - }, - { - "type": "WEB", - "url": "https://contao.org/en/news/contao-3_5_28.html" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-22" - ], - "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2017-07-21T06:29:00Z" - } -} \ No newline at end of file