From 929b6c397101420ce5b4eee02d1c02ca9d6e2495 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 25 Apr 2024 23:17:39 +0000 Subject: [PATCH] Publish Advisories GHSA-vcgg-hp4r-87gx GHSA-x5g4-crxq-qxjx GHSA-vcgg-hp4r-87gx GHSA-x5g4-crxq-qxjx --- .../GHSA-vcgg-hp4r-87gx.json | 157 ++++++++++++++++++ .../GHSA-x5g4-crxq-qxjx.json | 111 +++++++++++++ .../GHSA-vcgg-hp4r-87gx.json | 42 ----- .../GHSA-x5g4-crxq-qxjx.json | 38 ----- 4 files changed, 268 insertions(+), 80 deletions(-) create mode 100644 advisories/github-reviewed/2022/05/GHSA-vcgg-hp4r-87gx/GHSA-vcgg-hp4r-87gx.json create mode 100644 advisories/github-reviewed/2022/05/GHSA-x5g4-crxq-qxjx/GHSA-x5g4-crxq-qxjx.json delete mode 100644 advisories/unreviewed/2022/05/GHSA-vcgg-hp4r-87gx/GHSA-vcgg-hp4r-87gx.json delete mode 100644 advisories/unreviewed/2022/05/GHSA-x5g4-crxq-qxjx/GHSA-x5g4-crxq-qxjx.json diff --git a/advisories/github-reviewed/2022/05/GHSA-vcgg-hp4r-87gx/GHSA-vcgg-hp4r-87gx.json b/advisories/github-reviewed/2022/05/GHSA-vcgg-hp4r-87gx/GHSA-vcgg-hp4r-87gx.json new file mode 100644 index 00000000000..75c81ce35ad --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-vcgg-hp4r-87gx/GHSA-vcgg-hp4r-87gx.json @@ -0,0 +1,157 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vcgg-hp4r-87gx", + "modified": "2024-04-25T23:16:25Z", + "published": "2022-05-14T01:09:10Z", + "aliases": [ + "CVE-2019-10641" + ], + "summary": "Contao Does Not Invalidate Existing Sessions When Password Changes", + "details": "Security researcher Ali Razzaq has discovered that existing sessions are not correctly invalidated when a user changes their password in the backend or frontend.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "contao/contao" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.0" + }, + { + "fixed": "4.4.37" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "contao/contao" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.5.0" + }, + { + "fixed": "4.7.3" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "contao/core-bundle" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.0" + }, + { + "fixed": "4.4.37" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "contao/core-bundle" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.5.0" + }, + { + "fixed": "4.7.3" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "contao/core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "3.5.39" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10641" + }, + { + "type": "WEB", + "url": "https://github.com/contao/contao/commit/74c7dfafa0dfa5363a9463b486522d5d526e28fe" + }, + { + "type": "WEB", + "url": "https://github.com/contao/contao/commit/b92e27bc7c9e59226077937f840c74ffd0f672e8" + }, + { + "type": "WEB", + "url": "https://github.com/contao/core/commit/119a1b5bd9e62d27ca2838727084d04f3b7fcd32" + }, + { + "type": "WEB", + "url": "https://contao.org/en/news/security-vulnerability-cve-2019-10641.html" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2019-10641.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2019-10641.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/CVE-2019-10641.yaml" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-640" + ], + "severity": "CRITICAL", + "github_reviewed": true, + "github_reviewed_at": "2024-04-25T23:16:25Z", + "nvd_published_at": "2019-04-17T19:29:00Z" + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2022/05/GHSA-x5g4-crxq-qxjx/GHSA-x5g4-crxq-qxjx.json b/advisories/github-reviewed/2022/05/GHSA-x5g4-crxq-qxjx/GHSA-x5g4-crxq-qxjx.json new file mode 100644 index 00000000000..bcbb97ef1f0 --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-x5g4-crxq-qxjx/GHSA-x5g4-crxq-qxjx.json @@ -0,0 +1,111 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x5g4-crxq-qxjx", + "modified": "2024-04-25T23:17:00Z", + "published": "2022-05-13T01:42:03Z", + "aliases": [ + "CVE-2017-10993" + ], + "summary": "Contao Core directory traversal vulnerability", + "details": "A logged in back end user can include arbitrary PHP files by manipulating an URL parameter. Since Contao does not allow to upload PHP files in the file manager, the attack is limited to the existing PHP files on the server.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "contao/contao" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.0" + }, + { + "fixed": "4.4.1" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "contao/core-bundle" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.0" + }, + { + "fixed": "4.4.1" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "contao/core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "3.5.28" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10993" + }, + { + "type": "WEB", + "url": "https://contao.org/en/news/contao-3_5_28.html" + }, + { + "type": "WEB", + "url": "https://contao.org/en/news/contao-4_4_1.html" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2017-10993.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2017-10993.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/CVE-2017-10993.yaml" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-22" + ], + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2024-04-25T23:17:00Z", + "nvd_published_at": "2017-07-21T06:29:00Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-vcgg-hp4r-87gx/GHSA-vcgg-hp4r-87gx.json b/advisories/unreviewed/2022/05/GHSA-vcgg-hp4r-87gx/GHSA-vcgg-hp4r-87gx.json deleted file mode 100644 index 5fee57295c6..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-vcgg-hp4r-87gx/GHSA-vcgg-hp4r-87gx.json +++ /dev/null @@ -1,42 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-vcgg-hp4r-87gx", - "modified": "2022-05-14T01:09:10Z", - "published": "2022-05-14T01:09:10Z", - "aliases": [ - "CVE-2019-10641" - ], - "details": "Contao before 3.5.39 and 4.x before 4.7.3 has a Weak Password Recovery Mechanism for a Forgotten Password.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" - } - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10641" - }, - { - "type": "WEB", - "url": "https://contao.org/en/news.html" - }, - { - "type": "WEB", - "url": "https://contao.org/en/news/security-vulnerability-cve-2019-10641.html" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-640" - ], - "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2019-04-17T19:29:00Z" - } -} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-x5g4-crxq-qxjx/GHSA-x5g4-crxq-qxjx.json b/advisories/unreviewed/2022/05/GHSA-x5g4-crxq-qxjx/GHSA-x5g4-crxq-qxjx.json deleted file mode 100644 index c96bf86f33f..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-x5g4-crxq-qxjx/GHSA-x5g4-crxq-qxjx.json +++ /dev/null @@ -1,38 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-x5g4-crxq-qxjx", - "modified": "2022-05-13T01:42:03Z", - "published": "2022-05-13T01:42:03Z", - "aliases": [ - "CVE-2017-10993" - ], - "details": "Contao before 3.5.28 and 4.x before 4.4.1 allows remote attackers to include and execute arbitrary local PHP files via a crafted parameter in a URL, aka Directory Traversal.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" - } - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10993" - }, - { - "type": "WEB", - "url": "https://contao.org/en/news/contao-3_5_28.html" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-22" - ], - "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2017-07-21T06:29:00Z" - } -} \ No newline at end of file