From 9b2e852c35bc71f0a8ccc799eb8d02d978d90297 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 21 Feb 2024 23:20:03 +0000 Subject: [PATCH] Publish Advisories GHSA-r48h-jr2j-9g78 GHSA-84xv-jfrm-h4gm GHSA-q2cv-7j58-rfmj GHSA-xfg6-62px-cxc2 GHSA-r48h-jr2j-9g78 GHSA-q2cv-7j58-rfmj --- .../GHSA-r48h-jr2j-9g78.json | 77 +++++++++++++++ .../GHSA-84xv-jfrm-h4gm.json | 31 +++++- .../GHSA-q2cv-7j58-rfmj.json | 98 +++++++++++++++++++ .../GHSA-xfg6-62px-cxc2.json | 9 +- .../GHSA-r48h-jr2j-9g78.json | 38 ------- .../GHSA-q2cv-7j58-rfmj.json | 38 ------- 6 files changed, 207 insertions(+), 84 deletions(-) create mode 100644 advisories/github-reviewed/2022/05/GHSA-r48h-jr2j-9g78/GHSA-r48h-jr2j-9g78.json rename advisories/{unreviewed => github-reviewed}/2024/02/GHSA-84xv-jfrm-h4gm/GHSA-84xv-jfrm-h4gm.json (65%) create mode 100644 advisories/github-reviewed/2024/02/GHSA-q2cv-7j58-rfmj/GHSA-q2cv-7j58-rfmj.json delete mode 100644 advisories/unreviewed/2022/05/GHSA-r48h-jr2j-9g78/GHSA-r48h-jr2j-9g78.json delete mode 100644 advisories/unreviewed/2024/02/GHSA-q2cv-7j58-rfmj/GHSA-q2cv-7j58-rfmj.json diff --git a/advisories/github-reviewed/2022/05/GHSA-r48h-jr2j-9g78/GHSA-r48h-jr2j-9g78.json b/advisories/github-reviewed/2022/05/GHSA-r48h-jr2j-9g78/GHSA-r48h-jr2j-9g78.json new file mode 100644 index 00000000000..55c9463c1d4 --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-r48h-jr2j-9g78/GHSA-r48h-jr2j-9g78.json @@ -0,0 +1,77 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r48h-jr2j-9g78", + "modified": "2024-02-21T23:19:35Z", + "published": "2022-05-14T03:29:43Z", + "aliases": [ + "CVE-2018-9057" + ], + "summary": " HashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG ", + "details": "aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Go", + "name": "github.com/hashicorp/terraform-provider-aws" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.14.0" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9057" + }, + { + "type": "WEB", + "url": "https://github.com/hashicorp/terraform-provider-aws/pull/3934" + }, + { + "type": "WEB", + "url": "https://github.com/hashicorp/terraform-provider-aws/pull/3989" + }, + { + "type": "WEB", + "url": "https://github.com/terraform-providers/terraform-provider-aws/pull/3934" + }, + { + "type": "WEB", + "url": "https://github.com/hashicorp/terraform-provider-aws/commit/efa8cd45c6484ff70b2a515ea7ff06f2459d4ddf" + }, + { + "type": "PACKAGE", + "url": "https://github.com/hashicorp/terraform-provider-aws" + }, + { + "type": "WEB", + "url": "https://github.com/hashicorp/terraform-provider-aws/blob/02b039aa82dd7fc6e4a97a0922cc5dbbab724021/resource_aws_iam_user_login_profile.go#L70-L80" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-332" + ], + "severity": "CRITICAL", + "github_reviewed": true, + "github_reviewed_at": "2024-02-21T23:19:35Z", + "nvd_published_at": "2018-03-27T18:29:00Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-84xv-jfrm-h4gm/GHSA-84xv-jfrm-h4gm.json b/advisories/github-reviewed/2024/02/GHSA-84xv-jfrm-h4gm/GHSA-84xv-jfrm-h4gm.json similarity index 65% rename from advisories/unreviewed/2024/02/GHSA-84xv-jfrm-h4gm/GHSA-84xv-jfrm-h4gm.json rename to advisories/github-reviewed/2024/02/GHSA-84xv-jfrm-h4gm/GHSA-84xv-jfrm-h4gm.json index a3142b23790..8f7568cb621 100644 --- a/advisories/unreviewed/2024/02/GHSA-84xv-jfrm-h4gm/GHSA-84xv-jfrm-h4gm.json +++ b/advisories/github-reviewed/2024/02/GHSA-84xv-jfrm-h4gm/GHSA-84xv-jfrm-h4gm.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-84xv-jfrm-h4gm", - "modified": "2024-02-14T00:35:42Z", + "modified": "2024-02-21T23:18:42Z", "published": "2024-02-14T00:35:42Z", "aliases": [ "CVE-2024-1485" ], + "summary": "registry-supper Path Traversal vulnerability", "details": "A vulnerability was found in the decompression function of registry-support. This issue can be triggered by an unauthenticated remote attacker when tricking a user into opening a specially modified .tar archive, leading to the cleanup process following relative paths to overwrite or delete files outside the intended scope.", "severity": [ { @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Go", + "name": "github.com/devfile/registry-support/registry-library" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.0.0-20240206" + } + ] + } + ] + } ], "references": [ { @@ -32,6 +51,10 @@ { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2264106" + }, + { + "type": "PACKAGE", + "url": "https://github.com/devfile/registry-support" } ], "database_specific": { @@ -39,8 +62,8 @@ "CWE-23" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-02-21T23:18:42Z", "nvd_published_at": "2024-02-14T00:15:46Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2024/02/GHSA-q2cv-7j58-rfmj/GHSA-q2cv-7j58-rfmj.json b/advisories/github-reviewed/2024/02/GHSA-q2cv-7j58-rfmj/GHSA-q2cv-7j58-rfmj.json new file mode 100644 index 00000000000..66561dee55c --- /dev/null +++ b/advisories/github-reviewed/2024/02/GHSA-q2cv-7j58-rfmj/GHSA-q2cv-7j58-rfmj.json @@ -0,0 +1,98 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q2cv-7j58-rfmj", + "modified": "2024-02-21T23:18:59Z", + "published": "2024-02-21T15:30:45Z", + "aliases": [ + "CVE-2023-47795" + ], + "summary": "Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting", + "details": "Stored cross-site scripting (XSS) vulnerability in the Document and Media widget in Liferay Portal 7.4.3.18 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 18 through 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into a document's “Title” text field.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "com.liferay.portal:release.portal.bom" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "7.4.3.18" + }, + { + "last_affected": "7.4.3.101" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "com.liferay.portal:release.dxp.bom" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2023.Q3" + }, + { + "fixed": "2023.Q3.6" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "com.liferay.portal:release.dxp.bom" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "7.4.13.u18" + }, + { + "fixed": "2023.Q3.6" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 7.4.13.u92" + } + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47795" + }, + { + "type": "WEB", + "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-47795" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "CRITICAL", + "github_reviewed": true, + "github_reviewed_at": "2024-02-21T23:18:59Z", + "nvd_published_at": "2024-02-21T14:15:45Z" + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2024/02/GHSA-xfg6-62px-cxc2/GHSA-xfg6-62px-cxc2.json b/advisories/github-reviewed/2024/02/GHSA-xfg6-62px-cxc2/GHSA-xfg6-62px-cxc2.json index a6c6a8c61ab..679f16cd470 100644 --- a/advisories/github-reviewed/2024/02/GHSA-xfg6-62px-cxc2/GHSA-xfg6-62px-cxc2.json +++ b/advisories/github-reviewed/2024/02/GHSA-xfg6-62px-cxc2/GHSA-xfg6-62px-cxc2.json @@ -1,13 +1,14 @@ { "schema_version": "1.4.0", "id": "GHSA-xfg6-62px-cxc2", - "modified": "2024-02-21T00:04:53Z", + "modified": "2024-02-21T23:18:25Z", "published": "2024-02-19T15:30:38Z", + "withdrawn": "2024-02-21T23:18:25Z", "aliases": [ - "CVE-2024-1597" + ], - "summary": "SQL injection in pgjdbc", - "details": "pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is no vulnerability. A placeholder for a numeric value must be immediately preceded by a minus. There must be a second placeholder for a string value after the first placeholder; both must be on the same line. By constructing a matching string payload, the attacker can inject SQL to alter the query,bypassing the protections that parameterized queries bring against SQL Injection attacks. Versions before 42.7.2, 42.6.1, 42.5.5, 42.4.4, 42.3.9, and 42.2.8 are affected.", + "summary": "Duplicate Advisory: SQL injection in pgjdbc", + "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-24rp-q3w6-vc56. This link is maintained to preserve external references.\n\n## Original Description\npgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is no vulnerability. A placeholder for a numeric value must be immediately preceded by a minus. There must be a second placeholder for a string value after the first placeholder; both must be on the same line. By constructing a matching string payload, the attacker can inject SQL to alter the query,bypassing the protections that parameterized queries bring against SQL Injection attacks. Versions before 42.7.2, 42.6.1, 42.5.5, 42.4.4, 42.3.9, and 42.2.8 are affected.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/unreviewed/2022/05/GHSA-r48h-jr2j-9g78/GHSA-r48h-jr2j-9g78.json b/advisories/unreviewed/2022/05/GHSA-r48h-jr2j-9g78/GHSA-r48h-jr2j-9g78.json deleted file mode 100644 index cc001e01001..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-r48h-jr2j-9g78/GHSA-r48h-jr2j-9g78.json +++ /dev/null @@ -1,38 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-r48h-jr2j-9g78", - "modified": "2022-05-14T03:29:43Z", - "published": "2022-05-14T03:29:43Z", - "aliases": [ - "CVE-2018-9057" - ], - "details": "aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" - } - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9057" - }, - { - "type": "WEB", - "url": "https://github.com/terraform-providers/terraform-provider-aws/pull/3934" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-332" - ], - "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2018-03-27T18:29:00Z" - } -} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-q2cv-7j58-rfmj/GHSA-q2cv-7j58-rfmj.json b/advisories/unreviewed/2024/02/GHSA-q2cv-7j58-rfmj/GHSA-q2cv-7j58-rfmj.json deleted file mode 100644 index 260bcae291d..00000000000 --- a/advisories/unreviewed/2024/02/GHSA-q2cv-7j58-rfmj/GHSA-q2cv-7j58-rfmj.json +++ /dev/null @@ -1,38 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-q2cv-7j58-rfmj", - "modified": "2024-02-21T15:30:45Z", - "published": "2024-02-21T15:30:45Z", - "aliases": [ - "CVE-2023-47795" - ], - "details": "Stored cross-site scripting (XSS) vulnerability in the Document and Media widget in Liferay Portal 7.4.3.18 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 18 through 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into a document's “Title” text field.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" - } - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47795" - }, - { - "type": "WEB", - "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-47795" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-79" - ], - "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2024-02-21T14:15:45Z" - } -} \ No newline at end of file