From a8331e1a50ae338254832d54b7b3a8eedf047602 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 25 Mar 2025 15:48:01 +0000 Subject: [PATCH] Publish Advisories GHSA-p343-9qwp-pqxv GHSA-m99v-mmg2-66vf GHSA-27vf-3g4f-6jp7 --- .../05/GHSA-p343-9qwp-pqxv/GHSA-p343-9qwp-pqxv.json | 2 +- .../08/GHSA-m99v-mmg2-66vf/GHSA-m99v-mmg2-66vf.json | 10 +++++++++- .../01/GHSA-27vf-3g4f-6jp7/GHSA-27vf-3g4f-6jp7.json | 4 ++-- 3 files changed, 12 insertions(+), 4 deletions(-) diff --git a/advisories/github-reviewed/2024/05/GHSA-p343-9qwp-pqxv/GHSA-p343-9qwp-pqxv.json b/advisories/github-reviewed/2024/05/GHSA-p343-9qwp-pqxv/GHSA-p343-9qwp-pqxv.json index ca7669cdc2a..564f10b85f0 100644 --- a/advisories/github-reviewed/2024/05/GHSA-p343-9qwp-pqxv/GHSA-p343-9qwp-pqxv.json +++ b/advisories/github-reviewed/2024/05/GHSA-p343-9qwp-pqxv/GHSA-p343-9qwp-pqxv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-p343-9qwp-pqxv", - "modified": "2025-03-13T15:00:10Z", + "modified": "2025-03-25T15:45:23Z", "published": "2024-05-07T18:30:34Z", "aliases": [ "CVE-2024-34517" diff --git a/advisories/github-reviewed/2024/08/GHSA-m99v-mmg2-66vf/GHSA-m99v-mmg2-66vf.json b/advisories/github-reviewed/2024/08/GHSA-m99v-mmg2-66vf/GHSA-m99v-mmg2-66vf.json index 9453786bea1..aa421a65cac 100644 --- a/advisories/github-reviewed/2024/08/GHSA-m99v-mmg2-66vf/GHSA-m99v-mmg2-66vf.json +++ b/advisories/github-reviewed/2024/08/GHSA-m99v-mmg2-66vf/GHSA-m99v-mmg2-66vf.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-m99v-mmg2-66vf", - "modified": "2024-08-06T16:07:53Z", + "modified": "2025-03-25T15:46:23Z", "published": "2024-08-06T15:30:54Z", "aliases": [ "CVE-2024-40101" @@ -55,6 +55,14 @@ { "type": "WEB", "url": "https://seclists.org/fulldisclosure/2024/Aug/1" + }, + { + "type": "WEB", + "url": "http://microweber.com" + }, + { + "type": "WEB", + "url": "http://seclists.org/fulldisclosure/2024/Aug/1" } ], "database_specific": { diff --git a/advisories/github-reviewed/2025/01/GHSA-27vf-3g4f-6jp7/GHSA-27vf-3g4f-6jp7.json b/advisories/github-reviewed/2025/01/GHSA-27vf-3g4f-6jp7/GHSA-27vf-3g4f-6jp7.json index 9b99305040d..f029ab34fd7 100644 --- a/advisories/github-reviewed/2025/01/GHSA-27vf-3g4f-6jp7/GHSA-27vf-3g4f-6jp7.json +++ b/advisories/github-reviewed/2025/01/GHSA-27vf-3g4f-6jp7/GHSA-27vf-3g4f-6jp7.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-27vf-3g4f-6jp7", - "modified": "2025-01-17T15:52:10Z", + "modified": "2025-03-25T15:47:35Z", "published": "2025-01-16T17:32:30Z", "aliases": [ "CVE-2025-23199" ], "summary": "LibreNMS Ports Stored Cross-site Scripting vulnerability", - "details": "# StoredXSS-LibreNMS-Ports\n\n\n**Description:**\n\n\nStored XSS on the parameter:\n`/ajax_form.php` -> param: descr\n\nRequest:\n```http\nPOST /ajax_form.php HTTP/1.1\nHost: \nX-Requested-With: XMLHttpRequest\nX-CSRF-TOKEN: \nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nCookie: \n\ntype=update-ifalias&descr=%22%3E%3Cimg+src+onerror%3D%22alert(1)%22%3E&ifName=lo&port_id=1&device_id=1\n```\n\n\nof Librenms version 24.10.1 ([https://github.com/librenms/librenms](https://github.com/librenms/librenms)) allows remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potential unauthorized actions or data exposure.\n\n\n\n**Proof of Concept:**\n1. Add a new device through the LibreNMS interface.\n2. Edit the newly created device and select the \"ports\" section.\n3. In the \"Description\" field, enter the following payload: `\">`.\n4. Save the changes.\n5. The XSS vulnerability is triggered when accessing the \"ports\" tab, and the payload is executed again when hovering over the modified value in the \"Port\" field.\n\nPayload:\n![payload](https://github.com/user-attachments/assets/2f38b985-6684-403f-9d1f-e405f09a75bb)\n\nExecutes:\n![image](https://github.com/user-attachments/assets/b70a6e34-d52c-4113-b769-4e271e33de88)\nThe script execution vulnerability in the description field, as shown in the image, occurs at [Line 63 of functions.inc.php](https://github.com/librenms/librenms/blob/master/includes/html/functions.inc.php#L63)\n```php\n$overlib_content = '
' . $text . '
';\n```\n\n![image](https://github.com/user-attachments/assets/97b85403-5b7e-4f43-932c-d33bd3c0f73f)\n\n\n\n\n**Impact:**\n\nExecution of Malicious Code\n", + "details": "# StoredXSS-LibreNMS-Ports\n\n\n**Description:**\n\n\nStored XSS on the parameter:\n`/ajax_form.php` -> param: descr\n\nRequest:\n```http\nPOST /ajax_form.php HTTP/1.1\nHost: \nX-Requested-With: XMLHttpRequest\nX-CSRF-TOKEN: \nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nCookie: \n\ntype=update-ifalias&descr=%22%3E%3Cimg+src+onerror%3D%22alert(1)%22%3E&ifName=lo&port_id=1&device_id=1\n```\n\n\nof Librenms version 24.10.1 ([https://github.com/librenms/librenms](https://github.com/librenms/librenms)) allows remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potential unauthorized actions or data exposure.\n\n\n\n**Proof of Concept:**\n1. Add a new device through the LibreNMS interface.\n2. Edit the newly created device and select the \"ports\" section.\n3. In the \"Description\" field, enter the following payload: `\">`.\n4. Save the changes.\n5. The XSS vulnerability is triggered when accessing the \"ports\" tab, and the payload is executed again when hovering over the modified value in the \"Port\" field.\n\nPayload:\n![payload](https://github.com/user-attachments/assets/2f38b985-6684-403f-9d1f-e405f09a75bb)\n\nExecutes:\n![image](https://github.com/user-attachments/assets/b70a6e34-d52c-4113-b769-4e271e33de88)\nThe script execution vulnerability in the description field, as shown in the image, occurs at [Line 63 of functions.inc.php](https://github.com/librenms/librenms/blob/master/includes/html/functions.inc.php#L63)\n```php\n$overlib_content = '
' . $text . '
';\n```\n\n![image](https://github.com/user-attachments/assets/97b85403-5b7e-4f43-932c-d33bd3c0f73f)\n\n\n\n\n**Impact:**\n\nExecution of Malicious Code", "severity": [ { "type": "CVSS_V3",