From 9f483b3b8332ddde6e20ea3d197ae70496fb1a29 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 9 Apr 2025 00:32:28 +0000
Subject: [PATCH] Publish Advisories

GHSA-p999-j4hq-pmj3
GHSA-vv22-vwq7-hqwj
---
 .../GHSA-p999-j4hq-pmj3.json                  | 36 +++++++++++++++++++
 .../GHSA-vv22-vwq7-hqwj.json                  |  2 +-
 2 files changed, 37 insertions(+), 1 deletion(-)
 create mode 100644 advisories/unreviewed/2025/04/GHSA-p999-j4hq-pmj3/GHSA-p999-j4hq-pmj3.json

diff --git a/advisories/unreviewed/2025/04/GHSA-p999-j4hq-pmj3/GHSA-p999-j4hq-pmj3.json b/advisories/unreviewed/2025/04/GHSA-p999-j4hq-pmj3/GHSA-p999-j4hq-pmj3.json
new file mode 100644
index 00000000000..909f196bb93
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-p999-j4hq-pmj3/GHSA-p999-j4hq-pmj3.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p999-j4hq-pmj3",
+  "modified": "2025-04-09T00:30:27Z",
+  "published": "2025-04-09T00:30:27Z",
+  "aliases": [
+    "CVE-2025-25013"
+  ],
+  "details": "Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25013"
+    },
+    {
+      "type": "WEB",
+      "url": "https://discuss.elastic.co/t/elastic-defend-8-17-3-security-update-esa-2025-05/376921"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-532"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-08T23:15:45Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-vv22-vwq7-hqwj/GHSA-vv22-vwq7-hqwj.json b/advisories/unreviewed/2025/04/GHSA-vv22-vwq7-hqwj/GHSA-vv22-vwq7-hqwj.json
index 8e51a184134..da5f59b6a57 100644
--- a/advisories/unreviewed/2025/04/GHSA-vv22-vwq7-hqwj/GHSA-vv22-vwq7-hqwj.json
+++ b/advisories/unreviewed/2025/04/GHSA-vv22-vwq7-hqwj/GHSA-vv22-vwq7-hqwj.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vv22-vwq7-hqwj",
-  "modified": "2025-04-08T00:30:26Z",
+  "modified": "2025-04-09T00:30:27Z",
   "published": "2025-04-08T00:30:26Z",
   "aliases": [
     "CVE-2025-0942"