From 9c21266ae49c03fab40c064010ae87cba03c6e38 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 4 Apr 2025 09:33:00 +0000 Subject: [PATCH] Publish Advisories GHSA-53jr-r39g-w259 GHSA-73rw-2rgm-jcrp GHSA-7qfp-f29r-cqpr GHSA-hj5f-q3p2-c2h3 GHSA-hjj2-4jq5-9f5q GHSA-p64x-rw6v-fqhc GHSA-qwj8-22qg-x6qf GHSA-r5q5-p828-45hr GHSA-v8cr-jv23-8vf6 GHSA-w6f5-g24g-5g9g GHSA-w9gj-5xc3-fv5w GHSA-xcr2-mqg2-gv48 GHSA-xv4w-vgqg-qwrq --- .../GHSA-53jr-r39g-w259.json | 60 +++++++++++++++++++ .../GHSA-73rw-2rgm-jcrp.json | 56 +++++++++++++++++ .../GHSA-7qfp-f29r-cqpr.json | 40 +++++++++++++ .../GHSA-hj5f-q3p2-c2h3.json | 36 +++++++++++ .../GHSA-hjj2-4jq5-9f5q.json | 36 +++++++++++ .../GHSA-p64x-rw6v-fqhc.json | 56 +++++++++++++++++ .../GHSA-qwj8-22qg-x6qf.json | 44 ++++++++++++++ .../GHSA-r5q5-p828-45hr.json | 56 +++++++++++++++++ .../GHSA-v8cr-jv23-8vf6.json | 56 +++++++++++++++++ .../GHSA-w6f5-g24g-5g9g.json | 44 ++++++++++++++ .../GHSA-w9gj-5xc3-fv5w.json | 52 ++++++++++++++++ .../GHSA-xcr2-mqg2-gv48.json | 56 +++++++++++++++++ .../GHSA-xv4w-vgqg-qwrq.json | 44 ++++++++++++++ 13 files changed, 636 insertions(+) create mode 100644 advisories/unreviewed/2025/04/GHSA-53jr-r39g-w259/GHSA-53jr-r39g-w259.json create mode 100644 advisories/unreviewed/2025/04/GHSA-73rw-2rgm-jcrp/GHSA-73rw-2rgm-jcrp.json create mode 100644 advisories/unreviewed/2025/04/GHSA-7qfp-f29r-cqpr/GHSA-7qfp-f29r-cqpr.json create mode 100644 advisories/unreviewed/2025/04/GHSA-hj5f-q3p2-c2h3/GHSA-hj5f-q3p2-c2h3.json create mode 100644 advisories/unreviewed/2025/04/GHSA-hjj2-4jq5-9f5q/GHSA-hjj2-4jq5-9f5q.json create mode 100644 advisories/unreviewed/2025/04/GHSA-p64x-rw6v-fqhc/GHSA-p64x-rw6v-fqhc.json create mode 100644 advisories/unreviewed/2025/04/GHSA-qwj8-22qg-x6qf/GHSA-qwj8-22qg-x6qf.json create mode 100644 advisories/unreviewed/2025/04/GHSA-r5q5-p828-45hr/GHSA-r5q5-p828-45hr.json create mode 100644 advisories/unreviewed/2025/04/GHSA-v8cr-jv23-8vf6/GHSA-v8cr-jv23-8vf6.json create mode 100644 advisories/unreviewed/2025/04/GHSA-w6f5-g24g-5g9g/GHSA-w6f5-g24g-5g9g.json create mode 100644 advisories/unreviewed/2025/04/GHSA-w9gj-5xc3-fv5w/GHSA-w9gj-5xc3-fv5w.json create mode 100644 advisories/unreviewed/2025/04/GHSA-xcr2-mqg2-gv48/GHSA-xcr2-mqg2-gv48.json create mode 100644 advisories/unreviewed/2025/04/GHSA-xv4w-vgqg-qwrq/GHSA-xv4w-vgqg-qwrq.json diff --git a/advisories/unreviewed/2025/04/GHSA-53jr-r39g-w259/GHSA-53jr-r39g-w259.json b/advisories/unreviewed/2025/04/GHSA-53jr-r39g-w259/GHSA-53jr-r39g-w259.json new file mode 100644 index 00000000000..ec5b2c57b6d --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-53jr-r39g-w259/GHSA-53jr-r39g-w259.json @@ -0,0 +1,60 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-53jr-r39g-w259", + "modified": "2025-04-04T09:30:33Z", + "published": "2025-04-04T09:30:33Z", + "aliases": [ + "CVE-2025-3216" + ], + "details": "A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been classified as critical. This affects an unknown part of the file /password-recovery.php. The manipulation of the argument username/contactno leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3216" + }, + { + "type": "WEB", + "url": "https://github.com/rookiekuan/CVE/issues/1" + }, + { + "type": "WEB", + "url": "https://github.com/rookiekuan/CVE/issues/2" + }, + { + "type": "WEB", + "url": "https://phpgurukul.com" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.303171" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.303171" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.546166" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-04T07:15:43Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-73rw-2rgm-jcrp/GHSA-73rw-2rgm-jcrp.json b/advisories/unreviewed/2025/04/GHSA-73rw-2rgm-jcrp/GHSA-73rw-2rgm-jcrp.json new file mode 100644 index 00000000000..d563eae3389 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-73rw-2rgm-jcrp/GHSA-73rw-2rgm-jcrp.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-73rw-2rgm-jcrp", + "modified": "2025-04-04T09:30:33Z", + "published": "2025-04-04T09:30:33Z", + "aliases": [ + "CVE-2025-3215" + ], + "details": "A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3215" + }, + { + "type": "WEB", + "url": "https://github.com/Camllia2024/mycve/issues/1" + }, + { + "type": "WEB", + "url": "https://phpgurukul.com" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.303170" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.303170" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.546164" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-04T07:15:43Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-7qfp-f29r-cqpr/GHSA-7qfp-f29r-cqpr.json b/advisories/unreviewed/2025/04/GHSA-7qfp-f29r-cqpr/GHSA-7qfp-f29r-cqpr.json new file mode 100644 index 00000000000..755fa0b49a3 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-7qfp-f29r-cqpr/GHSA-7qfp-f29r-cqpr.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7qfp-f29r-cqpr", + "modified": "2025-04-04T09:30:33Z", + "published": "2025-04-04T09:30:33Z", + "aliases": [ + "CVE-2025-3105" + ], + "details": "The Vehica Core plugin for WordPress, used by the Vehica - Car Dealer & Listing WordPress Theme, is vulnerable to privilege escalation in all versions up to, and including, 1.0.97. This is due to the plugin not properly validating user meta fields prior to updating them in the database. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change escalate their privileges to Administrator.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3105" + }, + { + "type": "WEB", + "url": "https://support.vehica.com/support/solutions/articles/101000393710" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0b787d6f-d002-4f09-8336-ebb91321e20b?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-269" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-04T08:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-hj5f-q3p2-c2h3/GHSA-hj5f-q3p2-c2h3.json b/advisories/unreviewed/2025/04/GHSA-hj5f-q3p2-c2h3/GHSA-hj5f-q3p2-c2h3.json new file mode 100644 index 00000000000..08c3ebd2965 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-hj5f-q3p2-c2h3/GHSA-hj5f-q3p2-c2h3.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hj5f-q3p2-c2h3", + "modified": "2025-04-04T09:30:32Z", + "published": "2025-04-04T09:30:32Z", + "aliases": [ + "CVE-2025-3086" + ], + "details": "Improper isolation of users in M-Files Server version before 25.3.14549 allows anonymous user to affect other anonymous users views and possibly cause a denial of service", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3086" + }, + { + "type": "WEB", + "url": "https://product.m-files.com/security-advisories/cve-2025-3086" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-653" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-04T07:15:42Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-hjj2-4jq5-9f5q/GHSA-hjj2-4jq5-9f5q.json b/advisories/unreviewed/2025/04/GHSA-hjj2-4jq5-9f5q/GHSA-hjj2-4jq5-9f5q.json new file mode 100644 index 00000000000..d52d531517a --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-hjj2-4jq5-9f5q/GHSA-hjj2-4jq5-9f5q.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hjj2-4jq5-9f5q", + "modified": "2025-04-04T09:30:33Z", + "published": "2025-04-04T09:30:33Z", + "aliases": [ + "CVE-2025-3087" + ], + "details": "Stored XSS in M-Files Web versions from 25.1.14445.5 to 25.2.14524.4 allows an authenticated user to run scripts", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3087" + }, + { + "type": "WEB", + "url": "https://product.m-files.com/security-advisories/cve-2025-3087" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-04T07:15:42Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-p64x-rw6v-fqhc/GHSA-p64x-rw6v-fqhc.json b/advisories/unreviewed/2025/04/GHSA-p64x-rw6v-fqhc/GHSA-p64x-rw6v-fqhc.json new file mode 100644 index 00000000000..523df504bb2 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-p64x-rw6v-fqhc/GHSA-p64x-rw6v-fqhc.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-p64x-rw6v-fqhc", + "modified": "2025-04-04T09:30:34Z", + "published": "2025-04-04T09:30:34Z", + "aliases": [ + "CVE-2025-3229" + ], + "details": "A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /edit-subadmin.php. The manipulation of the argument fullname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3229" + }, + { + "type": "WEB", + "url": "https://github.com/D4mps/CVE/issues/1" + }, + { + "type": "WEB", + "url": "https://phpgurukul.com" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.303244" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.303244" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.546178" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-04T09:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-qwj8-22qg-x6qf/GHSA-qwj8-22qg-x6qf.json b/advisories/unreviewed/2025/04/GHSA-qwj8-22qg-x6qf/GHSA-qwj8-22qg-x6qf.json new file mode 100644 index 00000000000..a6514693ecf --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-qwj8-22qg-x6qf/GHSA-qwj8-22qg-x6qf.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qwj8-22qg-x6qf", + "modified": "2025-04-04T09:30:33Z", + "published": "2025-04-04T09:30:32Z", + "aliases": [ + "CVE-2025-32111" + ], + "details": "The Docker image from acme.sh before 40b6db6 is based on a .github/workflows/dockerhub.yml file that lacks \"persist-credentials: false\" for actions/checkout.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32111" + }, + { + "type": "WEB", + "url": "https://github.com/acmesh-official/acme.sh/commit/40b6db6a2715628aa977ed1853fe5256704010ae" + }, + { + "type": "WEB", + "url": "https://github.com/acmesh-official/acme.sh/commit/a1de13657e79c5471dbc8fa3539ea39160937389" + }, + { + "type": "WEB", + "url": "https://github.com/actions/checkout/blob/85e6279cec87321a52edac9c87bce653a07cf6c2/README.md?plain=1#L70-L72" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-260" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-04T07:15:42Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-r5q5-p828-45hr/GHSA-r5q5-p828-45hr.json b/advisories/unreviewed/2025/04/GHSA-r5q5-p828-45hr/GHSA-r5q5-p828-45hr.json new file mode 100644 index 00000000000..169d66eb9c5 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-r5q5-p828-45hr/GHSA-r5q5-p828-45hr.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r5q5-p828-45hr", + "modified": "2025-04-04T09:30:34Z", + "published": "2025-04-04T09:30:34Z", + "aliases": [ + "CVE-2025-3220" + ], + "details": "A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard.php. The manipulation of the argument Category leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3220" + }, + { + "type": "WEB", + "url": "https://github.com/JunGu-W/cve/issues/2" + }, + { + "type": "WEB", + "url": "https://phpgurukul.com" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.303181" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.303181" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.546176" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-04T08:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-v8cr-jv23-8vf6/GHSA-v8cr-jv23-8vf6.json b/advisories/unreviewed/2025/04/GHSA-v8cr-jv23-8vf6/GHSA-v8cr-jv23-8vf6.json new file mode 100644 index 00000000000..5e7d82a725e --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-v8cr-jv23-8vf6/GHSA-v8cr-jv23-8vf6.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v8cr-jv23-8vf6", + "modified": "2025-04-04T09:30:35Z", + "published": "2025-04-04T09:30:34Z", + "aliases": [ + "CVE-2025-3231" + ], + "details": "A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. This issue affects some unknown processing of the file /aboutus.php. The manipulation of the argument pagetitle leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3231" + }, + { + "type": "WEB", + "url": "https://github.com/81a2in9/cve/issues/1" + }, + { + "type": "WEB", + "url": "https://phpgurukul.com" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.303245" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.303245" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.546180" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-04T09:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-w6f5-g24g-5g9g/GHSA-w6f5-g24g-5g9g.json b/advisories/unreviewed/2025/04/GHSA-w6f5-g24g-5g9g/GHSA-w6f5-g24g-5g9g.json new file mode 100644 index 00000000000..a3979d3803b --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-w6f5-g24g-5g9g/GHSA-w6f5-g24g-5g9g.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w6f5-g24g-5g9g", + "modified": "2025-04-04T09:30:32Z", + "published": "2025-04-04T09:30:32Z", + "aliases": [ + "CVE-2025-2780" + ], + "details": "The Woffice Core plugin for WordPress, used by the Woffice Theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'saveFeaturedImage' function in all versions up to, and including, 5.4.21. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2780" + }, + { + "type": "WEB", + "url": "https://hub.woffice.io/woffice/changelog#april-1st-2025-version-5422" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7d057ac6-a341-4ec3-956c-2a2a5636155c?source=cve" + }, + { + "type": "WEB", + "url": "http://localhost:1337/wp-content/plugins/woffice-core/extensions/woffice-event/class-fw-extension-woffice-event.php#L1235" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-434" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-04T07:15:40Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-w9gj-5xc3-fv5w/GHSA-w9gj-5xc3-fv5w.json b/advisories/unreviewed/2025/04/GHSA-w9gj-5xc3-fv5w/GHSA-w9gj-5xc3-fv5w.json new file mode 100644 index 00000000000..bf3b2a5d249 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-w9gj-5xc3-fv5w/GHSA-w9gj-5xc3-fv5w.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w9gj-5xc3-fv5w", + "modified": "2025-04-04T09:30:34Z", + "published": "2025-04-04T09:30:34Z", + "aliases": [ + "CVE-2025-3219" + ], + "details": "A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown function of the file /perfex/clients/project/2 of the component Project Discussions Module. The manipulation of the argument description leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3219" + }, + { + "type": "WEB", + "url": "https://github.com/bytium/vulnerability-research/blob/main/stored-xss-perfex-crm-3.2.1.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.303180" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.303180" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.546171" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-04T08:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-xcr2-mqg2-gv48/GHSA-xcr2-mqg2-gv48.json b/advisories/unreviewed/2025/04/GHSA-xcr2-mqg2-gv48/GHSA-xcr2-mqg2-gv48.json new file mode 100644 index 00000000000..8ab6dfdcb8f --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-xcr2-mqg2-gv48/GHSA-xcr2-mqg2-gv48.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xcr2-mqg2-gv48", + "modified": "2025-04-04T09:30:33Z", + "published": "2025-04-04T09:30:33Z", + "aliases": [ + "CVE-2025-3217" + ], + "details": "A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /registration.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3217" + }, + { + "type": "WEB", + "url": "https://github.com/rookiekuan/CVE/issues/3" + }, + { + "type": "WEB", + "url": "https://phpgurukul.com" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.303172" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.303172" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.546168" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-04T07:15:43Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-xv4w-vgqg-qwrq/GHSA-xv4w-vgqg-qwrq.json b/advisories/unreviewed/2025/04/GHSA-xv4w-vgqg-qwrq/GHSA-xv4w-vgqg-qwrq.json new file mode 100644 index 00000000000..e456a8143a5 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-xv4w-vgqg-qwrq/GHSA-xv4w-vgqg-qwrq.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xv4w-vgqg-qwrq", + "modified": "2025-04-04T09:30:32Z", + "published": "2025-04-04T09:30:32Z", + "aliases": [ + "CVE-2025-2797" + ], + "details": "The Woffice Core plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.4.21. This is due to missing or incorrect nonce validation on the 'woffice_handle_user_approval_actions' function. This makes it possible for unauthenticated attackers to approve registration for any user via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2797" + }, + { + "type": "WEB", + "url": "https://hub.woffice.io/woffice/changelog#april-1st-2025-version-5422" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1665f2d0-899b-4f9b-91b1-e5799c3b4d3d?source=cve" + }, + { + "type": "WEB", + "url": "http://localhost/wp-content/plugins/woffice-core/extensions/woffice-user-registration/includes/helpers.php#L52" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-04T07:15:42Z" + } +} \ No newline at end of file