diff --git a/advisories/github-reviewed/2024/05/GHSA-5x28-3f32-x523/GHSA-5x28-3f32-x523.json b/advisories/github-reviewed/2024/05/GHSA-5x28-3f32-x523/GHSA-5x28-3f32-x523.json new file mode 100644 index 00000000000..c509af0a259 --- /dev/null +++ b/advisories/github-reviewed/2024/05/GHSA-5x28-3f32-x523/GHSA-5x28-3f32-x523.json @@ -0,0 +1,80 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5x28-3f32-x523", + "modified": "2024-05-15T21:00:34Z", + "published": "2024-05-15T21:00:34Z", + "aliases": [ + + ], + "summary": "Drupal core Access control bypass ", + "details": "The Media Library module has a security vulnerability whereby it doesn't sufficiently restrict access to media items in certain configurations.\n\n### Solution: \nIf you are using Drupal 8.7.x, you should upgrade to Drupal 8.7.11.\nIf you are using Drupal 8.8.x, you should upgrade to Drupal 8.8.1.\nVersions of Drupal 8 prior to 8.7.x are end-of-life and do not receive security coverage.\n\nAlternatively, you may mitigate this vulnerability by unchecking the \"Enable advanced UI\" checkbox on `/admin/config/media/media-library`. (This mitigation is not available in 8.7.x.)", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.0.0" + }, + { + "fixed": "8.7.11" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.8.0" + }, + { + "fixed": "8.8.1" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/2019-12-18-3.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/drupal/drupal" + }, + { + "type": "WEB", + "url": "https://www.drupal.org/sa-core-2019-011" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-05-15T21:00:34Z", + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2024/05/GHSA-jf8c-36vw-98x4/GHSA-jf8c-36vw-98x4.json b/advisories/github-reviewed/2024/05/GHSA-jf8c-36vw-98x4/GHSA-jf8c-36vw-98x4.json new file mode 100644 index 00000000000..3ebc6ee8901 --- /dev/null +++ b/advisories/github-reviewed/2024/05/GHSA-jf8c-36vw-98x4/GHSA-jf8c-36vw-98x4.json @@ -0,0 +1,96 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jf8c-36vw-98x4", + "modified": "2024-05-15T20:59:25Z", + "published": "2024-05-15T20:59:25Z", + "aliases": [ + + ], + "summary": "Drupal core Remote Code Execution", + "details": "In Drupal core, when sending email some variables were not being sanitized for shell arguments in `DefaultMailSystem::mail()`, which could lead to remote code execution.", + "severity": [ + + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "7.0" + }, + { + "fixed": "7.60" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.0.0" + }, + { + "fixed": "8.5.8" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.6.0" + }, + { + "fixed": "8.6.2" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/2018-10-17-4.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/drupal/drupal" + }, + { + "type": "WEB", + "url": "https://www.drupal.org/sa-core-2018-006" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-94" + ], + "severity": "CRITICAL", + "github_reviewed": true, + "github_reviewed_at": "2024-05-15T20:59:25Z", + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2024/05/GHSA-m9fv-whq2-6wmc/GHSA-m9fv-whq2-6wmc.json b/advisories/github-reviewed/2024/05/GHSA-m9fv-whq2-6wmc/GHSA-m9fv-whq2-6wmc.json new file mode 100644 index 00000000000..ed4128e261e --- /dev/null +++ b/advisories/github-reviewed/2024/05/GHSA-m9fv-whq2-6wmc/GHSA-m9fv-whq2-6wmc.json @@ -0,0 +1,99 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-m9fv-whq2-6wmc", + "modified": "2024-05-15T21:00:50Z", + "published": "2024-05-15T21:00:50Z", + "aliases": [ + + ], + "summary": "Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar", + "details": "The Drupal project uses the third-party library [Archive_Tar](https://pear.php.net/package/Archive_Tar/), which has released a security improvement that is needed to protect some Drupal configurations.\n\nMultiple vulnerabilities are possible if Drupal is configured to allow .tar, .tar.gz, .bz2 or .tlz file uploads and processes them.\n\nThe latest versions of Drupal update Archive_Tar to 1.4.9 to mitigate the file processing vulnerabilities.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "7.0.0" + }, + { + "fixed": "7.69" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.0.0" + }, + { + "fixed": "8.7.11" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.8.0" + }, + { + "fixed": "8.8.1" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/2019-12-18-4.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/drupal/drupal" + }, + { + "type": "WEB", + "url": "https://www.drupal.org/sa-core-2019-012" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2024-05-15T21:00:50Z", + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2024/05/GHSA-w333-5f96-mjrr/GHSA-w333-5f96-mjrr.json b/advisories/github-reviewed/2024/05/GHSA-w333-5f96-mjrr/GHSA-w333-5f96-mjrr.json new file mode 100644 index 00000000000..cc7c17fd22d --- /dev/null +++ b/advisories/github-reviewed/2024/05/GHSA-w333-5f96-mjrr/GHSA-w333-5f96-mjrr.json @@ -0,0 +1,80 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w333-5f96-mjrr", + "modified": "2024-05-15T20:59:57Z", + "published": "2024-05-15T20:59:57Z", + "aliases": [ + + ], + "summary": "Drupal core Denial of Service", + "details": "A visit to install.php can cause cached data to become corrupted. This could cause a site to be impaired until caches are rebuilt.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.0.0" + }, + { + "fixed": "8.7.11" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.8.0" + }, + { + "fixed": "8.8.1" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/2019-12-18-1.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/drupal/drupal" + }, + { + "type": "WEB", + "url": "https://www.drupal.org/sa-core-2019-009" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-05-15T20:59:57Z", + "nvd_published_at": null + } +} \ No newline at end of file