netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-772j-xvf9-qpf5
GHSA-cv6j-9835-p7fh
This commit is contained in:
advisory-database[bot]
2024-11-26 16:12:27 +00:00
parent ed749a0824
commit a528fc48c8
2 changed files with 12 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/08/GHSA-772j-xvf9-qpf5/GHSA-772j-xvf9-qpf5.json
+6 -2
View File
@@ -1,17 +1,21 @@
{
"schema_version": "1.4.0",
"id": "GHSA-772j-xvf9-qpf5",
"modified": "2024-11-21T21:06:57Z",
"modified": "2024-11-26T16:10:26Z",
"published": "2022-08-24T00:00:29Z",
"aliases": [
"CVE-2021-3702"
],
"summary": "ansible-runner 2.0.0 vulnerable to Race Condition",
"summary": "ansible-runner vulnerable to Race Condition",
"details": "A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute their directory at that name, and then have access to ansible-runner's private_data_dir the next time ansible-runner made use of the private_data_dir. The highest Threat out of this flaw is to integrity and confidentiality.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
advisories/github-reviewed/2022/08/GHSA-cv6j-9835-p7fh/GHSA-cv6j-9835-p7fh.json
+6 -2
View File
@@ -1,17 +1,21 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cv6j-9835-p7fh",
"modified": "2024-11-21T21:45:53Z",
"modified": "2024-11-26T16:11:48Z",
"published": "2022-08-28T00:00:26Z",
"aliases": [
"CVE-2022-38792"
],
"summary": "exotel-py 0.1.6 includes code execution backdoor inserted by a third party",
"summary": "exotel-py includes code execution backdoor inserted by a third party",
"details": "The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party. Users should downgrade to version 0.1.5 to avoid the problem.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [