mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Publish Advisories
GHSA-3gh6-v5v9-6v9j GHSA-5hj9-m76g-xrc8 GHSA-cgwf-w82q-5jrr GHSA-h6rp-mprm-xgcq GHSA-37gx-jqx9-fwmg GHSA-37vr-vmg4-jwpw GHSA-4265-ccf5-phj5 GHSA-4g9r-vxhx-9pgx GHSA-5jjq-8cvj-v6m9 GHSA-rmqp-mvv2-54c6 GHSA-w3w6-26f2-p474
This commit is contained in:
advisory-database[bot]
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-3gh6-v5v9-6v9j",
|
||||
"modified": "2023-10-02T21:03:25Z",
|
||||
"modified": "2025-02-13T19:12:59Z",
|
||||
"published": "2023-09-14T16:16:00Z",
|
||||
"aliases": [
|
||||
"CVE-2023-36479"
|
||||
|
||||
@@ -1,13 +1,13 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-5hj9-m76g-xrc8",
|
||||
"modified": "2024-03-01T21:29:25Z",
|
||||
"modified": "2025-02-13T19:13:06Z",
|
||||
"published": "2023-09-14T09:30:28Z",
|
||||
"aliases": [
|
||||
"CVE-2023-41267"
|
||||
],
|
||||
"summary": "Apache HDFS Provider error message suggested",
|
||||
"details": "In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The Airflow team has since taken ownership of the package (neutralizing the risk), and fixed the doc strings in version 4.1.1\n",
|
||||
"details": "In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The Airflow team has since taken ownership of the package (neutralizing the risk), and fixed the doc strings in version 4.1.1",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
|
||||
File diff suppressed because one or more lines are too long
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-h6rp-mprm-xgcq",
|
||||
"modified": "2024-10-09T21:24:09Z",
|
||||
"modified": "2025-02-13T19:13:09Z",
|
||||
"published": "2023-09-21T17:06:37Z",
|
||||
"aliases": [
|
||||
"CVE-2023-42457"
|
||||
|
||||
@@ -1,13 +1,13 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-37gx-jqx9-fwmg",
|
||||
"modified": "2024-12-02T20:28:57Z",
|
||||
"modified": "2025-02-13T19:12:56Z",
|
||||
"published": "2024-02-20T12:31:00Z",
|
||||
"aliases": [
|
||||
"CVE-2023-49250"
|
||||
],
|
||||
"summary": "Improper Certificate Validation in Apache DolphinScheduler",
|
||||
"details": "Because the HttpUtils class did not verify certificates, an attacker that could perform a Man-in-the-Middle (MITM) attack on outgoing https connections could impersonate the server.\n\nThis issue affects Apache DolphinScheduler: before 3.2.1.\n\nUsers are recommended to upgrade to version 3.2.1, which fixes the issue.\n\n",
|
||||
"details": "Because the HttpUtils class did not verify certificates, an attacker that could perform a Man-in-the-Middle (MITM) attack on outgoing https connections could impersonate the server.\n\nThis issue affects Apache DolphinScheduler: before 3.2.1.\n\nUsers are recommended to upgrade to version 3.2.1, which fixes the issue.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
|
||||
@@ -1,14 +1,19 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-37vr-vmg4-jwpw",
|
||||
"modified": "2024-02-09T21:53:14Z",
|
||||
"modified": "2025-02-13T19:14:52Z",
|
||||
"published": "2024-02-09T18:31:07Z",
|
||||
"aliases": [
|
||||
"CVE-2023-50386"
|
||||
],
|
||||
"summary": "Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets ",
|
||||
"details": "Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1.\n\nIn the affected versions, Solr ConfigSets accepted Java jar and class files to be uploaded through the ConfigSets API.\nWhen backing up Solr Collections, these configSet files would be saved to disk when using the LocalFileSystemRepository (the default for backups).\nIf the backup was saved to a directory that Solr uses in its ClassPath/ClassLoaders, then the jar and class files would be available to use with any ConfigSet, trusted or untrusted.\n\nWhen Solr is run in a secure way (Authorization enabled), as is strongly suggested, this vulnerability is limited to extending the Backup permissions with the ability to add libraries.\nUsers are recommended to upgrade to version 8.11.3 or 9.4.1, which fix the issue.\nIn these versions, the following protections have been added:\n\n * Users are no longer able to upload files to a configSet that could be executed via a Java ClassLoader.\n * The Backup API restricts saving backups to directories that are used in the ClassLoader.",
|
||||
"severity": [],
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"package": {
|
||||
@@ -87,7 +92,7 @@
|
||||
"cwe_ids": [
|
||||
"CWE-434"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"severity": "HIGH",
|
||||
"github_reviewed": true,
|
||||
"github_reviewed_at": "2024-02-09T21:53:13Z",
|
||||
"nvd_published_at": "2024-02-09T18:15:08Z"
|
||||
|
||||
@@ -1,13 +1,13 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-4265-ccf5-phj5",
|
||||
"modified": "2024-08-27T15:27:08Z",
|
||||
"modified": "2025-02-13T19:13:31Z",
|
||||
"published": "2024-02-19T09:30:52Z",
|
||||
"aliases": [
|
||||
"CVE-2024-26308"
|
||||
],
|
||||
"summary": "Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file",
|
||||
"details": "Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1.21 before 1.26.\n\nUsers are recommended to upgrade to version 1.26, which fixes the issue.\n\n",
|
||||
"details": "Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1.21 before 1.26.\n\nUsers are recommended to upgrade to version 1.26, which fixes the issue.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
|
||||
@@ -1,13 +1,13 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-4g9r-vxhx-9pgx",
|
||||
"modified": "2025-01-24T15:53:12Z",
|
||||
"modified": "2025-02-13T19:13:39Z",
|
||||
"published": "2024-02-19T09:30:50Z",
|
||||
"aliases": [
|
||||
"CVE-2024-25710"
|
||||
],
|
||||
"summary": "Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file",
|
||||
"details": "Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1.3 through 1.25.0.\n\nUsers are recommended to upgrade to version 1.26.0 which fixes the issue.\n\n",
|
||||
"details": "Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1.3 through 1.25.0.\n\nUsers are recommended to upgrade to version 1.26.0 which fixes the issue.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
|
||||
@@ -1,14 +1,19 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-5jjq-8cvj-v6m9",
|
||||
"modified": "2024-02-20T23:58:08Z",
|
||||
"modified": "2025-02-13T19:14:15Z",
|
||||
"published": "2024-02-19T06:30:33Z",
|
||||
"aliases": [
|
||||
"CVE-2024-26318"
|
||||
],
|
||||
"summary": "Cross-site Scripting in Serenity",
|
||||
"details": "Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character.",
|
||||
"severity": [],
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"package": {
|
||||
|
||||
@@ -1,13 +1,13 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-rmqp-mvv2-54c6",
|
||||
"modified": "2024-11-18T16:26:36Z",
|
||||
"modified": "2025-02-13T19:12:50Z",
|
||||
"published": "2024-02-22T12:30:56Z",
|
||||
"aliases": [
|
||||
"CVE-2024-22393"
|
||||
],
|
||||
"summary": "Apache Answer Unrestricted Upload of File with Dangerous Type vulnerability",
|
||||
"details": "Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer through 1.2.1.\n\nPixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user can cause such an attack by uploading an image when posting content.\n\nUsers are recommended to upgrade to version 1.2.5, which fixes the issue.\n\n",
|
||||
"details": "Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer through 1.2.1.\n\nPixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user can cause such an attack by uploading an image when posting content.\n\nUsers are recommended to upgrade to version 1.2.5, which fixes the issue.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
|
||||
@@ -1,13 +1,13 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-w3w6-26f2-p474",
|
||||
"modified": "2024-03-15T12:30:36Z",
|
||||
"modified": "2025-02-13T19:13:23Z",
|
||||
"published": "2024-02-20T09:30:30Z",
|
||||
"aliases": [
|
||||
"CVE-2024-22234"
|
||||
],
|
||||
"summary": "Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated",
|
||||
"details": "In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to broken access control when it directly uses the AuthenticationTrustResolver.isFullyAuthenticated(Authentication) method.\n\nSpecifically, an application is vulnerable if:\n\n * The application uses AuthenticationTrustResolver.isFullyAuthenticated(Authentication) directly and a null authentication parameter is passed to it resulting in an erroneous true return value.\n\n\nAn application is not vulnerable if any of the following is true:\n\n * The application does not use AuthenticationTrustResolver.isFullyAuthenticated(Authentication) directly.\n * The application does not pass null to AuthenticationTrustResolver.isFullyAuthenticated\n * The application only uses isFullyAuthenticated via Method Security https://docs.spring.io/spring-security/reference/servlet/authorization/method-security.html or HTTP Request Security https://docs.spring.io/spring-security/reference/servlet/authorization/authorize-http-requests.html \n\n\n\n",
|
||||
"details": "In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to broken access control when it directly uses the AuthenticationTrustResolver.isFullyAuthenticated(Authentication) method.\n\nSpecifically, an application is vulnerable if:\n\n * The application uses AuthenticationTrustResolver.isFullyAuthenticated(Authentication) directly and a null authentication parameter is passed to it resulting in an erroneous true return value.\n\n\nAn application is not vulnerable if any of the following is true:\n\n * The application does not use AuthenticationTrustResolver.isFullyAuthenticated(Authentication) directly.\n * The application does not pass null to AuthenticationTrustResolver.isFullyAuthenticated\n * The application only uses isFullyAuthenticated via Method Security https://docs.spring.io/spring-security/reference/servlet/authorization/method-security.html or HTTP Request Security https://docs.spring.io/spring-security/reference/servlet/authorization/authorize-http-requests.html",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
|
||||
Reference in New Issue
Block a user