netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-jx7x-9r98-h5xr
GHSA-jx7x-9r98-h5xr
This commit is contained in:
advisory-database[bot]
2024-04-12 21:23:15 +00:00
parent 8cc4ac5f75
commit a5446a58b0
2 changed files with 142 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/04/GHSA-jx7x-9r98-h5xr/GHSA-jx7x-9r98-h5xr.json
+142
View File
@@ -0,0 +1,142 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jx7x-9r98-h5xr",
"modified": "2024-04-12T21:21:50Z",
"published": "2024-04-12T15:37:19Z",
"aliases": [
"CVE-2024-28718"
],
"summary": "OpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack",
"details": "An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "magnum"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "14.1.2"
}
]
}
]
},
{
"package": {
"ecosystem": "PyPI",
"name": "magnum"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "17.0.0.0rc1"
},
{
"fixed": "17.0.2"
}
]
}
]
},
{
"package": {
"ecosystem": "PyPI",
"name": "magnum"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "16.0.0.0rc1"
},
{
"fixed": "16.0.2"
}
]
}
]
},
{
"package": {
"ecosystem": "PyPI",
"name": "magnum"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "15.0.0.0rc1"
},
{
"fixed": "15.0.2"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28718"
},
{
"type": "WEB",
"url": "https://github.com/openstack/magnum/commit/272fd686d8c8bf5954e9e7d3bc991ff27e46184d"
},
{
"type": "WEB",
"url": "https://github.com/openstack/magnum/commit/312aa6a86ac8e62f6ed4f1e9473fdabbbb7a4b1e"
},
{
"type": "WEB",
"url": "https://github.com/openstack/magnum/commit/883b40b5b0ecfc5f78758143c0d3c754458f12b7"
},
{
"type": "WEB",
"url": "https://github.com/openstack/magnum/commit/e79907c521149872c1b495355a3a7b3a0c7e3479"
},
{
"type": "WEB",
"url": "https://bugs.launchpad.net/magnum/+bug/2047690"
},
{
"type": "WEB",
"url": "https://gist.github.com/Fewword/f098d8d6375ac25e27b18c0e57be532f"
},
{
"type": "PACKAGE",
"url": "https://github.com/openstack/magnum"
},
{
"type": "WEB",
"url": "https://review.opendev.org/c/openstack/magnum/+/907305"
}
],
"database_specific": {
"cwe_ids": [
"CWE-367"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-04-12T21:21:50Z",
"nvd_published_at": "2024-04-12T13:15:15Z"
}
}
advisories/unreviewed/2024/04/GHSA-jx7x-9r98-h5xr/GHSA-jx7x-9r98-h5xr.json
-43
View File
@@ -1,43 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jx7x-9r98-h5xr",
"modified": "2024-04-12T15:37:19Z",
"published": "2024-04-12T15:37:19Z",
"aliases": [
"CVE-2024-28718"
],
"details": "An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28718"
},
{
"type": "WEB",
"url": "https://bugs.launchpad.net/magnum/+bug/2047690"
},
{
"type": "WEB",
"url": "https://gist.github.com/Fewword/f098d8d6375ac25e27b18c0e57be532f"
},
{
"type": "WEB",
"url": "https://review.opendev.org/c/openstack/magnum/+/907305"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-12T13:15:15Z"
}
}