From 959140516221dc22657bc83d06f3c53464da87db Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 20 Feb 2024 12:32:23 +0000 Subject: [PATCH] Publish Advisories GHSA-37gx-jqx9-fwmg GHSA-3qq5-wcrx-4h8r GHSA-43h9-p3j4-39hm GHSA-548x-j6x6-hcv4 GHSA-6989-vr9p-xx57 GHSA-ff2w-wm48-jhqj GHSA-pr57-r6pp-3h3h GHSA-q769-33w3-x2hh GHSA-qwxx-xww6-8q8m GHSA-vjqc-g788-f378 --- .../GHSA-37gx-jqx9-fwmg.json | 39 +++++++++++++++++ .../GHSA-3qq5-wcrx-4h8r.json | 38 ++++++++++++++++ .../GHSA-43h9-p3j4-39hm.json | 38 ++++++++++++++++ .../GHSA-548x-j6x6-hcv4.json | 38 ++++++++++++++++ .../GHSA-6989-vr9p-xx57.json | 42 ++++++++++++++++++ .../GHSA-ff2w-wm48-jhqj.json | 43 +++++++++++++++++++ .../GHSA-pr57-r6pp-3h3h.json | 39 +++++++++++++++++ .../GHSA-q769-33w3-x2hh.json | 42 ++++++++++++++++++ .../GHSA-qwxx-xww6-8q8m.json | 43 +++++++++++++++++++ .../GHSA-vjqc-g788-f378.json | 43 +++++++++++++++++++ 10 files changed, 405 insertions(+) create mode 100644 advisories/unreviewed/2024/02/GHSA-37gx-jqx9-fwmg/GHSA-37gx-jqx9-fwmg.json create mode 100644 advisories/unreviewed/2024/02/GHSA-3qq5-wcrx-4h8r/GHSA-3qq5-wcrx-4h8r.json create mode 100644 advisories/unreviewed/2024/02/GHSA-43h9-p3j4-39hm/GHSA-43h9-p3j4-39hm.json create mode 100644 advisories/unreviewed/2024/02/GHSA-548x-j6x6-hcv4/GHSA-548x-j6x6-hcv4.json create mode 100644 advisories/unreviewed/2024/02/GHSA-6989-vr9p-xx57/GHSA-6989-vr9p-xx57.json create mode 100644 advisories/unreviewed/2024/02/GHSA-ff2w-wm48-jhqj/GHSA-ff2w-wm48-jhqj.json create mode 100644 advisories/unreviewed/2024/02/GHSA-pr57-r6pp-3h3h/GHSA-pr57-r6pp-3h3h.json create mode 100644 advisories/unreviewed/2024/02/GHSA-q769-33w3-x2hh/GHSA-q769-33w3-x2hh.json create mode 100644 advisories/unreviewed/2024/02/GHSA-qwxx-xww6-8q8m/GHSA-qwxx-xww6-8q8m.json create mode 100644 advisories/unreviewed/2024/02/GHSA-vjqc-g788-f378/GHSA-vjqc-g788-f378.json diff --git a/advisories/unreviewed/2024/02/GHSA-37gx-jqx9-fwmg/GHSA-37gx-jqx9-fwmg.json b/advisories/unreviewed/2024/02/GHSA-37gx-jqx9-fwmg/GHSA-37gx-jqx9-fwmg.json new file mode 100644 index 00000000000..ab4f5a49215 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-37gx-jqx9-fwmg/GHSA-37gx-jqx9-fwmg.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-37gx-jqx9-fwmg", + "modified": "2024-02-20T12:31:00Z", + "published": "2024-02-20T12:31:00Z", + "aliases": [ + "CVE-2023-49250" + ], + "details": "Because the HttpUtils class did not verify certificates, an attacker that could perform a Man-in-the-Middle (MITM) attack on outgoing https connections could impersonate the server.\n\nThis issue affects Apache DolphinScheduler: before 3.2.0.\n\nUsers are recommended to upgrade to version 3.2.1, which fixes the issue.\n\n", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49250" + }, + { + "type": "WEB", + "url": "https://github.com/apache/dolphinscheduler/pull/15288" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/wgs2jvhbmq8xnd6rmg0ymz73nyj7b3qn" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-295" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T10:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-3qq5-wcrx-4h8r/GHSA-3qq5-wcrx-4h8r.json b/advisories/unreviewed/2024/02/GHSA-3qq5-wcrx-4h8r/GHSA-3qq5-wcrx-4h8r.json new file mode 100644 index 00000000000..421c6004797 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-3qq5-wcrx-4h8r/GHSA-3qq5-wcrx-4h8r.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3qq5-wcrx-4h8r", + "modified": "2024-02-20T12:31:00Z", + "published": "2024-02-20T12:31:00Z", + "aliases": [ + "CVE-2024-25609" + ], + "details": "HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 service pack 3, 7.2 fix pack 15 through 18, and older unsupported versions can be circumvented by using two forward slashes, which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, and (3) others parameters that rely on HtmlUtil.escapeRedirect. This vulnerability is the result of an incomplete fix in CVE-2022-28977.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25609" + }, + { + "type": "WEB", + "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25609" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-601" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T10:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-43h9-p3j4-39hm/GHSA-43h9-p3j4-39hm.json b/advisories/unreviewed/2024/02/GHSA-43h9-p3j4-39hm/GHSA-43h9-p3j4-39hm.json new file mode 100644 index 00000000000..27c627d0b51 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-43h9-p3j4-39hm/GHSA-43h9-p3j4-39hm.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-43h9-p3j4-39hm", + "modified": "2024-02-20T12:31:00Z", + "published": "2024-02-20T12:31:00Z", + "aliases": [ + "CVE-2024-25607" + ], + "details": "The default password hashing algorithm (PBKDF2-HMAC-SHA1) in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Liferay DXP 7.4 before update 16, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions defaults to a low work factor, which allows attackers to quickly crack password hashes.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25607" + }, + { + "type": "WEB", + "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25607" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-916" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T10:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-548x-j6x6-hcv4/GHSA-548x-j6x6-hcv4.json b/advisories/unreviewed/2024/02/GHSA-548x-j6x6-hcv4/GHSA-548x-j6x6-hcv4.json new file mode 100644 index 00000000000..67ede4faf3d --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-548x-j6x6-hcv4/GHSA-548x-j6x6-hcv4.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-548x-j6x6-hcv4", + "modified": "2024-02-20T12:31:00Z", + "published": "2024-02-20T12:31:00Z", + "aliases": [ + "CVE-2024-25608" + ], + "details": "HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7.4 before update 19, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions can be circumvented by using the 'REPLACEMENT CHARACTER' (U+FFFD), which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, (3) `noSuchEntryRedirect` parameter, and (4) others parameters that rely on HtmlUtil.escapeRedirect.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25608" + }, + { + "type": "WEB", + "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25608" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-601" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T10:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-6989-vr9p-xx57/GHSA-6989-vr9p-xx57.json b/advisories/unreviewed/2024/02/GHSA-6989-vr9p-xx57/GHSA-6989-vr9p-xx57.json new file mode 100644 index 00000000000..5db7b1aa2d0 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-6989-vr9p-xx57/GHSA-6989-vr9p-xx57.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6989-vr9p-xx57", + "modified": "2024-02-20T12:31:01Z", + "published": "2024-02-20T12:31:01Z", + "aliases": [ + "CVE-2024-24793" + ], + "details": "A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the vulnerable application to process a malicious DICOM image.The Use-After-Free happens in the `parse_meta_element_create()` parsing the elements in the File Meta Information header.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24793" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1931" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1931" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T11:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-ff2w-wm48-jhqj/GHSA-ff2w-wm48-jhqj.json b/advisories/unreviewed/2024/02/GHSA-ff2w-wm48-jhqj/GHSA-ff2w-wm48-jhqj.json new file mode 100644 index 00000000000..39aa897afe2 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-ff2w-wm48-jhqj/GHSA-ff2w-wm48-jhqj.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ff2w-wm48-jhqj", + "modified": "2024-02-20T12:31:00Z", + "published": "2024-02-20T12:31:00Z", + "aliases": [ + "CVE-2023-51770" + ], + "details": "Arbitrary File Read Vulnerability in Apache Dolphinscheduler.\n\nThis issue affects Apache DolphinScheduler: before 3.2.1. \n\nWe recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51770" + }, + { + "type": "WEB", + "url": "https://github.com/apache/dolphinscheduler/pull/15433" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/4t8bdjqnfhldh73gy9p0whlgvnnbtn7g" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/gpks573kn00ofxn7n9gkg6o47d03p5rw" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-94" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T10:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-pr57-r6pp-3h3h/GHSA-pr57-r6pp-3h3h.json b/advisories/unreviewed/2024/02/GHSA-pr57-r6pp-3h3h/GHSA-pr57-r6pp-3h3h.json new file mode 100644 index 00000000000..ef5288f538d --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-pr57-r6pp-3h3h/GHSA-pr57-r6pp-3h3h.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pr57-r6pp-3h3h", + "modified": "2024-02-20T12:31:00Z", + "published": "2024-02-20T12:31:00Z", + "aliases": [ + "CVE-2023-7245" + ], + "details": "The nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not properly configured, which allows a local user to execute arbitrary code within the nodejs process context via the ELECTRON_RUN_AS_NODE environment variable\n", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-7245" + }, + { + "type": "WEB", + "url": "https://openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log" + }, + { + "type": "WEB", + "url": "https://openvpn.net/vpn-server-resources/openvpn-connect-for-windows-change-log" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-95" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T11:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-q769-33w3-x2hh/GHSA-q769-33w3-x2hh.json b/advisories/unreviewed/2024/02/GHSA-q769-33w3-x2hh/GHSA-q769-33w3-x2hh.json new file mode 100644 index 00000000000..c08b252b701 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-q769-33w3-x2hh/GHSA-q769-33w3-x2hh.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q769-33w3-x2hh", + "modified": "2024-02-20T12:31:01Z", + "published": "2024-02-20T12:31:01Z", + "aliases": [ + "CVE-2024-24794" + ], + "details": "A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the vulnerable application to process a malicious DICOM image.The Use-After-Free happens in the `parse_meta_sequence_end()` parsing the Sequence Value Represenations.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24794" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1931" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1931" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T11:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-qwxx-xww6-8q8m/GHSA-qwxx-xww6-8q8m.json b/advisories/unreviewed/2024/02/GHSA-qwxx-xww6-8q8m/GHSA-qwxx-xww6-8q8m.json new file mode 100644 index 00000000000..6b79706eb24 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-qwxx-xww6-8q8m/GHSA-qwxx-xww6-8q8m.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qwxx-xww6-8q8m", + "modified": "2024-02-20T12:30:58Z", + "published": "2024-02-20T12:30:58Z", + "aliases": [ + "CVE-2023-49109" + ], + "details": "Exposure of Remote Code Execution in Apache Dolphinscheduler.\n\nThis issue affects Apache DolphinScheduler: before 3.2.1. \n\nWe recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue. ", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49109" + }, + { + "type": "WEB", + "url": "https://github.com/apache/dolphinscheduler/pull/14991" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/5b6yq2gov0fsy9x5dkvo8ws4rr45vkn8" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/6kgsl93vtqlbdk6otttl0d8wmlspk0m5" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-94" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T10:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-vjqc-g788-f378/GHSA-vjqc-g788-f378.json b/advisories/unreviewed/2024/02/GHSA-vjqc-g788-f378/GHSA-vjqc-g788-f378.json new file mode 100644 index 00000000000..d12a396150e --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-vjqc-g788-f378/GHSA-vjqc-g788-f378.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vjqc-g788-f378", + "modified": "2024-02-20T12:31:00Z", + "published": "2024-02-20T12:31:00Z", + "aliases": [ + "CVE-2023-50270" + ], + "details": "Session Fixation Apache DolphinScheduler before version 3.2.0, which session is still valid after the password change.\n\nUsers are recommended to upgrade to version 3.2.1, which fixes this issue.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50270" + }, + { + "type": "WEB", + "url": "https://github.com/apache/dolphinscheduler/pull/15219" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/94prw8hyk60vvw7s6cs3tr708qzqlwl6" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/lmnf21obyos920dnvbfpwq29c1sd2r9r" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-613" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T10:15:08Z" + } +} \ No newline at end of file