From 9f37ef7daebe671b9335ed7441911c45683b9e16 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 24 Apr 2024 20:10:52 +0000 Subject: [PATCH] Publish Advisories GHSA-jf2w-mq6r-56v8 GHSA-9mmc-27gw-w6mq GHSA-9mmc-27gw-w6mq --- .../GHSA-jf2w-mq6r-56v8.json | 41 +++++++++++-- .../GHSA-9mmc-27gw-w6mq.json | 61 +++++++++++++++++++ .../GHSA-9mmc-27gw-w6mq.json | 42 ------------- 3 files changed, 97 insertions(+), 47 deletions(-) rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-jf2w-mq6r-56v8/GHSA-jf2w-mq6r-56v8.json (63%) create mode 100644 advisories/github-reviewed/2022/09/GHSA-9mmc-27gw-w6mq/GHSA-9mmc-27gw-w6mq.json delete mode 100644 advisories/unreviewed/2022/09/GHSA-9mmc-27gw-w6mq/GHSA-9mmc-27gw-w6mq.json diff --git a/advisories/unreviewed/2022/05/GHSA-jf2w-mq6r-56v8/GHSA-jf2w-mq6r-56v8.json b/advisories/github-reviewed/2022/05/GHSA-jf2w-mq6r-56v8/GHSA-jf2w-mq6r-56v8.json similarity index 63% rename from advisories/unreviewed/2022/05/GHSA-jf2w-mq6r-56v8/GHSA-jf2w-mq6r-56v8.json rename to advisories/github-reviewed/2022/05/GHSA-jf2w-mq6r-56v8/GHSA-jf2w-mq6r-56v8.json index a5c566b8a0d..67c2b7cf30d 100644 --- a/advisories/unreviewed/2022/05/GHSA-jf2w-mq6r-56v8/GHSA-jf2w-mq6r-56v8.json +++ b/advisories/github-reviewed/2022/05/GHSA-jf2w-mq6r-56v8/GHSA-jf2w-mq6r-56v8.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-jf2w-mq6r-56v8", - "modified": "2022-05-14T01:37:58Z", + "modified": "2024-04-24T20:08:56Z", "published": "2022-05-14T01:37:58Z", "aliases": [ "CVE-2018-19148" ], + "summary": "Caddy allows enumeration of Certificates and Hostnames", "details": "Caddy through 0.11.0 sends incorrect certificates for certain invalid requests, making it easier for attackers to enumerate hostnames. Specifically, when unable to match a Host header with a vhost in its configuration, it serves the X.509 certificate for a randomly selected vhost in its configuration. Repeated requests (with a nonexistent hostname in the Host header) permit full enumeration of all certificates on the server. This generally permits an attacker to easily and accurately discover the existence of and relationships among hostnames that weren't meant to be public, though this information could likely have been discovered via other methods with additional effort.", "severity": [ { @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Go", + "name": "github.com/caddyserver/caddy" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.11.1" + } + ] + } + ] + } ], "references": [ { @@ -33,6 +52,18 @@ "type": "WEB", "url": "https://github.com/mholt/caddy/pull/2015" }, + { + "type": "WEB", + "url": "https://github.com/caddyserver/caddy/commit/986d4ffe3de32dcb81d334d603a2f0f1d460eb2f" + }, + { + "type": "WEB", + "url": "https://github.com/caddyserver/caddy/commit/f6e50890b3d81cb04146bd7b2c2b59e99830849a" + }, + { + "type": "PACKAGE", + "url": "https://github.com/caddyserver/caddy" + }, { "type": "WEB", "url": "https://securitytrails.com/blog/caddy-web-server-ssl-bug" @@ -42,9 +73,9 @@ "cwe_ids": [ "CWE-200" ], - "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "severity": "LOW", + "github_reviewed": true, + "github_reviewed_at": "2024-04-24T20:08:56Z", "nvd_published_at": "2018-11-10T19:29:00Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2022/09/GHSA-9mmc-27gw-w6mq/GHSA-9mmc-27gw-w6mq.json b/advisories/github-reviewed/2022/09/GHSA-9mmc-27gw-w6mq/GHSA-9mmc-27gw-w6mq.json new file mode 100644 index 00000000000..629128a3c5a --- /dev/null +++ b/advisories/github-reviewed/2022/09/GHSA-9mmc-27gw-w6mq/GHSA-9mmc-27gw-w6mq.json @@ -0,0 +1,61 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9mmc-27gw-w6mq", + "modified": "2024-04-24T20:10:21Z", + "published": "2022-09-29T00:00:27Z", + "aliases": [ + "CVE-2022-32170" + ], + "summary": "Bytebase allows low-privilege users to view admin projects", + "details": "### Overview\nThe \"Bytebase\" application does not restrict low privilege user from accessing admin projects\n\n### Details\nThe \"Bytebase\" application does not restrict low privilege user from accessing admin projects for which an unauthorized user can view the \"projects\" created by \"Admin\". The affected endpoint is `/api/project?user=${userId}`.\n\n### PoC\n1. Log in to the application as both \"Admin\" (`admin@example.com:admin`) and Developer \"User\" (`user@admin.com:user`) and then click on \"Projects\".\n2. Now open \"Burp suite\" and turn \"Intercept on\" and from \"admin\" dashboard click on \"projects\" and see the \"user id\" of \"admin\" in the capture request.\n3. Note the \"user id\" and \"Forward\" the request and again capture the request of \"projects\" from the \"user\" dashboard and change \"user id\" to \"admin user id\" and \"Forward\" the request.\n4. Now \"user\" can see the \"projects\" created by \"admin\".", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Go", + "name": "github.com/bytebase/bytebase" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0.1.0" + }, + { + "last_affected": "1.0.4" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32170" + }, + { + "type": "WEB", + "url": "https://github.com/bytebase/bytebase/blob/1.0.4/frontend/src/store/modules/project.ts" + }, + { + "type": "WEB", + "url": "https://www.mend.io/vulnerability-database/CVE-2022-32170" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-285" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-04-24T20:10:21Z", + "nvd_published_at": "2022-09-28T10:15:00Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2022/09/GHSA-9mmc-27gw-w6mq/GHSA-9mmc-27gw-w6mq.json b/advisories/unreviewed/2022/09/GHSA-9mmc-27gw-w6mq/GHSA-9mmc-27gw-w6mq.json deleted file mode 100644 index 969d7d85cb2..00000000000 --- a/advisories/unreviewed/2022/09/GHSA-9mmc-27gw-w6mq/GHSA-9mmc-27gw-w6mq.json +++ /dev/null @@ -1,42 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-9mmc-27gw-w6mq", - "modified": "2022-09-29T00:00:27Z", - "published": "2022-09-29T00:00:27Z", - "aliases": [ - "CVE-2022-32170" - ], - "details": "The “Bytebase” application does not restrict low privilege user to access admin “projects“ for which an unauthorized user can view the “projects“ created by “Admin” and the affected endpoint is “/api/project?user=${userId}”.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" - } - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32170" - }, - { - "type": "WEB", - "url": "https://github.com/bytebase/bytebase/blob/1.0.4/frontend/src/store/modules/project.ts#L166-#L197" - }, - { - "type": "WEB", - "url": "https://www.mend.io/vulnerability-database/CVE-2022-32170" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-285" - ], - "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2022-09-28T10:15:00Z" - } -} \ No newline at end of file