netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-r48h-jr2j-9g78
GHSA-84xv-jfrm-h4gm
GHSA-q2cv-7j58-rfmj
GHSA-xfg6-62px-cxc2
GHSA-r48h-jr2j-9g78
GHSA-q2cv-7j58-rfmj
This commit is contained in:
advisory-database[bot]
2024-02-21 23:20:03 +00:00
parent 16cc80ea9e
commit 9b2e852c35
6 changed files with 207 additions and 84 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/05/GHSA-r48h-jr2j-9g78/GHSA-r48h-jr2j-9g78.json
+77
View File
@@ -0,0 +1,77 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r48h-jr2j-9g78",
"modified": "2024-02-21T23:19:35Z",
"published": "2022-05-14T03:29:43Z",
"aliases": [
"CVE-2018-9057"
],
"summary": " HashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG ",
"details": "aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"package": {
"ecosystem": "Go",
"name": "github.com/hashicorp/terraform-provider-aws"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.14.0"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9057"
},
{
"type": "WEB",
"url": "https://github.com/hashicorp/terraform-provider-aws/pull/3934"
},
{
"type": "WEB",
"url": "https://github.com/hashicorp/terraform-provider-aws/pull/3989"
},
{
"type": "WEB",
"url": "https://github.com/terraform-providers/terraform-provider-aws/pull/3934"
},
{
"type": "WEB",
"url": "https://github.com/hashicorp/terraform-provider-aws/commit/efa8cd45c6484ff70b2a515ea7ff06f2459d4ddf"
},
{
"type": "PACKAGE",
"url": "https://github.com/hashicorp/terraform-provider-aws"
},
{
"type": "WEB",
"url": "https://github.com/hashicorp/terraform-provider-aws/blob/02b039aa82dd7fc6e4a97a0922cc5dbbab724021/resource_aws_iam_user_login_profile.go#L70-L80"
}
],
"database_specific": {
"cwe_ids": [
"CWE-332"
],
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2024-02-21T23:19:35Z",
"nvd_published_at": "2018-03-27T18:29:00Z"
}
}
advisories/unreviewed/2024/02/GHSA-84xv-jfrm-h4gm/GHSA-84xv-jfrm-h4gm.json → advisories/github-reviewed/2024/02/GHSA-84xv-jfrm-h4gm/GHSA-84xv-jfrm-h4gm.json
+27 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-84xv-jfrm-h4gm",
"modified": "2024-02-14T00:35:42Z",
"modified": "2024-02-21T23:18:42Z",
"published": "2024-02-14T00:35:42Z",
"aliases": [
"CVE-2024-1485"
],
"summary": "registry-supper Path Traversal vulnerability",
"details": "A vulnerability was found in the decompression function of registry-support. This issue can be triggered by an unauthenticated remote attacker when tricking a user into opening a specially modified .tar archive, leading to the cleanup process following relative paths to overwrite or delete files outside the intended scope.",
"severity": [
{
@@ -14,7 +15,25 @@
}
],
"affected": [
{
"package": {
"ecosystem": "Go",
"name": "github.com/devfile/registry-support/registry-library"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.0.0-20240206"
}
]
}
]
}
],
"references": [
{
@@ -32,6 +51,10 @@
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2264106"
},
{
"type": "PACKAGE",
"url": "https://github.com/devfile/registry-support"
}
],
"database_specific": {
@@ -39,8 +62,8 @@
"CWE-23"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-02-21T23:18:42Z",
"nvd_published_at": "2024-02-14T00:15:46Z"
}
}
advisories/github-reviewed/2024/02/GHSA-q2cv-7j58-rfmj/GHSA-q2cv-7j58-rfmj.json
+98
View File
@@ -0,0 +1,98 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q2cv-7j58-rfmj",
"modified": "2024-02-21T23:18:59Z",
"published": "2024-02-21T15:30:45Z",
"aliases": [
"CVE-2023-47795"
],
"summary": "Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting",
"details": "Stored cross-site scripting (XSS) vulnerability in the Document and Media widget in Liferay Portal 7.4.3.18 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 18 through 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into a document's “Title” text field.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H"
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.portal.bom"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.4.3.18"
},
{
"last_affected": "7.4.3.101"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.dxp.bom"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2023.Q3"
},
{
"fixed": "2023.Q3.6"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.dxp.bom"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.4.13.u18"
},
{
"fixed": "2023.Q3.6"
}
]
}
],
"database_specific": {
"last_known_affected_version_range": "<= 7.4.13.u92"
}
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47795"
},
{
"type": "WEB",
"url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-47795"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2024-02-21T23:18:59Z",
"nvd_published_at": "2024-02-21T14:15:45Z"
}
}
advisories/github-reviewed/2024/02/GHSA-xfg6-62px-cxc2/GHSA-xfg6-62px-cxc2.json
+5 -4
View File
@@ -1,13 +1,14 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xfg6-62px-cxc2",
"modified": "2024-02-21T00:04:53Z",
"modified": "2024-02-21T23:18:25Z",
"published": "2024-02-19T15:30:38Z",
"withdrawn": "2024-02-21T23:18:25Z",
"aliases": [
"CVE-2024-1597"
],
"summary": "SQL injection in pgjdbc",
"details": "pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is no vulnerability. A placeholder for a numeric value must be immediately preceded by a minus. There must be a second placeholder for a string value after the first placeholder; both must be on the same line. By constructing a matching string payload, the attacker can inject SQL to alter the query,bypassing the protections that parameterized queries bring against SQL Injection attacks. Versions before 42.7.2, 42.6.1, 42.5.5, 42.4.4, 42.3.9, and 42.2.8 are affected.",
"summary": "Duplicate Advisory: SQL injection in pgjdbc",
"details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-24rp-q3w6-vc56. This link is maintained to preserve external references.\n\n## Original Description\npgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is no vulnerability. A placeholder for a numeric value must be immediately preceded by a minus. There must be a second placeholder for a string value after the first placeholder; both must be on the same line. By constructing a matching string payload, the attacker can inject SQL to alter the query,bypassing the protections that parameterized queries bring against SQL Injection attacks. Versions before 42.7.2, 42.6.1, 42.5.5, 42.4.4, 42.3.9, and 42.2.8 are affected.",
"severity": [
{
"type": "CVSS_V3",
advisories/unreviewed/2022/05/GHSA-r48h-jr2j-9g78/GHSA-r48h-jr2j-9g78.json
-38
View File
@@ -1,38 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r48h-jr2j-9g78",
"modified": "2022-05-14T03:29:43Z",
"published": "2022-05-14T03:29:43Z",
"aliases": [
"CVE-2018-9057"
],
"details": "aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9057"
},
{
"type": "WEB",
"url": "https://github.com/terraform-providers/terraform-provider-aws/pull/3934"
}
],
"database_specific": {
"cwe_ids": [
"CWE-332"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2018-03-27T18:29:00Z"
}
}
advisories/unreviewed/2024/02/GHSA-q2cv-7j58-rfmj/GHSA-q2cv-7j58-rfmj.json
-38
View File
@@ -1,38 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q2cv-7j58-rfmj",
"modified": "2024-02-21T15:30:45Z",
"published": "2024-02-21T15:30:45Z",
"aliases": [
"CVE-2023-47795"
],
"details": "Stored cross-site scripting (XSS) vulnerability in the Document and Media widget in Liferay Portal 7.4.3.18 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 18 through 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into a document's “Title” text field.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47795"
},
{
"type": "WEB",
"url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-47795"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T14:15:45Z"
}
}