netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-fcgg-qgxg-2g2x
GHSA-pwc9-q4hj-pg8g
GHSA-3x47-w4rx-6pm7
GHSA-p8h7-c8gw-6x8c
GHSA-8mrm-r7h3-c3hj
GHSA-9jmp-j63g-8x6m
GHSA-v6x6-4v4x-2fx9
This commit is contained in:
advisory-database[bot]
2024-09-13 19:35:51 +00:00
parent e9fe0e169d
commit ac1493037e
7 changed files with 189 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/05/GHSA-fcgg-qgxg-2g2x/GHSA-fcgg-qgxg-2g2x.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fcgg-qgxg-2g2x",
"modified": "2024-04-25T20:40:54Z",
"modified": "2024-09-13T19:33:37Z",
"published": "2022-05-14T01:36:14Z",
"aliases": [
"CVE-2018-16191"
@@ -34,7 +34,7 @@
}
],
"database_specific": {
"last_known_affected_version_range": "< 3.0.16"
"last_known_affected_version_range": "<= 3.0.16"
}
}
],
advisories/unreviewed/2024/05/GHSA-pwc9-q4hj-pg8g/GHSA-pwc9-q4hj-pg8g.json → advisories/github-reviewed/2024/05/GHSA-pwc9-q4hj-pg8g/GHSA-pwc9-q4hj-pg8g.json
+32 -5
View File
@@ -1,20 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pwc9-q4hj-pg8g",
"modified": "2024-05-16T09:33:08Z",
"modified": "2024-09-13T19:34:51Z",
"published": "2024-05-16T09:33:08Z",
"aliases": [
"CVE-2024-4078"
],
"summary": "LoLLMS Command Injection vulnerability",
"details": "A vulnerability in the parisneo/lollms, specifically in the `/unInstall_binding` endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the `name` parameter in the `unInstall_binding` function, allowing an attacker to traverse directories and execute arbitrary code by loading a malicious `__init__.py` file. This vulnerability affects the latest version of the software. The exploitation of this vulnerability could lead to remote code execution on the system where parisneo/lollms is deployed.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "lollms"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.5.0"
}
]
}
]
}
],
"references": [
{
@@ -25,6 +48,10 @@
"type": "WEB",
"url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f"
},
{
"type": "PACKAGE",
"url": "https://github.com/parisneo/lollms"
},
{
"type": "WEB",
"url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d"
@@ -34,9 +61,9 @@
"cwe_ids": [
"CWE-77"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-09-13T19:34:51Z",
"nvd_published_at": "2024-05-16T09:15:15Z"
}
}
advisories/unreviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json → advisories/github-reviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json
+33 -6
View File
@@ -1,20 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3x47-w4rx-6pm7",
"modified": "2024-06-06T21:30:37Z",
"modified": "2024-09-13T19:34:34Z",
"published": "2024-06-06T21:30:37Z",
"aliases": [
"CVE-2024-3429"
],
"details": "A path traversal vulnerability exists in the parisneo/lollms application, specifically within the `sanitize_path_from_endpoint` and `sanitize_path` functions in `lollms_core\\lollms\\security.py`. This vulnerability allows for arbitrary file reading when the application is running on Windows. The issue arises due to insufficient sanitization of user-supplied input, enabling attackers to bypass the path traversal protection mechanisms by crafting malicious input. Successful exploitation could lead to unauthorized access to sensitive files, information disclosure, and potentially a denial of service (DoS) condition by including numerous large or resource-intensive files. This vulnerability affects the latest version prior to 9.6.",
"summary": "LoLLMS Path Traversal vulnerability",
"details": "A path traversal vulnerability exists in the parisneo/lollms application, specifically within the `sanitize_path_from_endpoint` and `sanitize_path` functions in `lollms_core\\lollms\\security.py`. This vulnerability allows for arbitrary file reading when the application is running on Windows. The issue arises due to insufficient sanitization of user-supplied input, enabling attackers to bypass the path traversal protection mechanisms by crafting malicious input. Successful exploitation could lead to unauthorized access to sensitive files, information disclosure, and potentially a denial of service (DoS) condition by including numerous large or resource-intensive files. This vulnerability affects the latest version prior to 9.5.0.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "lollms"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.5.0"
}
]
}
]
}
],
"references": [
{
@@ -25,6 +48,10 @@
"type": "WEB",
"url": "https://github.com/parisneo/lollms/commit/f4424cfc3d6dfb3ad5ac17dd46801efe784933e9"
},
{
"type": "PACKAGE",
"url": "https://github.com/parisneo/lollms"
},
{
"type": "WEB",
"url": "https://huntr.com/bounties/fd8f50c8-17f0-40be-a2c6-bb8d80f7c409"
@@ -34,9 +61,9 @@
"cwe_ids": [
"CWE-29"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-09-13T19:34:34Z",
"nvd_published_at": "2024-06-06T19:16:02Z"
}
}
advisories/unreviewed/2024/06/GHSA-p8h7-c8gw-6x8c/GHSA-p8h7-c8gw-6x8c.json → advisories/github-reviewed/2024/06/GHSA-p8h7-c8gw-6x8c/GHSA-p8h7-c8gw-6x8c.json
+32 -5
View File
@@ -1,20 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p8h7-c8gw-6x8c",
"modified": "2024-06-06T21:30:37Z",
"modified": "2024-09-13T19:34:56Z",
"published": "2024-06-06T21:30:37Z",
"aliases": [
"CVE-2024-4881"
],
"details": "A path traversal vulnerability exists in the parisneo/lollms application, affecting version 9.4.0 and potentially earlier versions, but fixed in version 5.9.0. The vulnerability arises due to improper validation of file paths between Windows and Linux environments, allowing attackers to traverse beyond the intended directory and read any file on the Windows system. Specifically, the application fails to adequately sanitize file paths containing backslashes (`\\`), which can be exploited to access the root directory and read, or even delete, sensitive files. This issue was discovered in the context of the `/user_infos` endpoint, where a crafted request using backslashes to reference a file (e.g., `\\windows\\win.ini`) could result in unauthorized file access. The impact of this vulnerability includes the potential for attackers to access sensitive information such as environment variables, database files, and configuration files, which could lead to further compromise of the system.",
"summary": "LoLLMS Path Traversal vulnerability",
"details": "A path traversal vulnerability exists in the parisneo/lollms application, affecting version 9.4.0 and potentially earlier versions, but fixed in version 9.5.0. The vulnerability arises due to improper validation of file paths between Windows and Linux environments, allowing attackers to traverse beyond the intended directory and read any file on the Windows system. Specifically, the application fails to adequately sanitize file paths containing backslashes (`\\`), which can be exploited to access the root directory and read, or even delete, sensitive files. This issue was discovered in the context of the `/user_infos` endpoint, where a crafted request using backslashes to reference a file (e.g., `\\windows\\win.ini`) could result in unauthorized file access. The impact of this vulnerability includes the potential for attackers to access sensitive information such as environment variables, database files, and configuration files, which could lead to further compromise of the system.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "lollms"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.5.0"
}
]
}
]
}
],
"references": [
{
@@ -25,6 +48,10 @@
"type": "WEB",
"url": "https://github.com/parisneo/lollms/commit/95ad36eeffc6a6be3e3f35ed35a384d768f0ecf6"
},
{
"type": "PACKAGE",
"url": "https://github.com/parisneo/lollms"
},
{
"type": "WEB",
"url": "https://huntr.com/bounties/94f7f901-80b0-4cf5-b545-ac5c1e7635e9"
@@ -35,8 +62,8 @@
"CWE-36"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-09-13T19:34:56Z",
"nvd_published_at": "2024-06-06T19:16:03Z"
}
}
advisories/unreviewed/2024/07/GHSA-8mrm-r7h3-c3hj/GHSA-8mrm-r7h3-c3hj.json → advisories/github-reviewed/2024/07/GHSA-8mrm-r7h3-c3hj/GHSA-8mrm-r7h3-c3hj.json
+31 -4
View File
@@ -1,20 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8mrm-r7h3-c3hj",
"modified": "2024-07-20T06:30:35Z",
"modified": "2024-09-13T19:34:25Z",
"published": "2024-07-20T06:30:35Z",
"aliases": [
"CVE-2024-6281"
],
"summary": "LoLLMS vulnerable to Expected Behavior Violation",
"details": "A path traversal vulnerability exists in the `apply_settings` function of parisneo/lollms versions prior to 9.5.1. The `sanitize_path` function does not adequately secure the `discussion_db_name` parameter, allowing attackers to manipulate the path and potentially write to important system folders.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "lollms"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.5.1"
}
]
}
]
}
],
"references": [
{
@@ -25,6 +48,10 @@
"type": "WEB",
"url": "https://github.com/parisneo/lollms/commit/26a3ff35acf152b49e1087d5698ad4864c7b6092"
},
{
"type": "PACKAGE",
"url": "https://github.com/parisneo/lollms"
},
{
"type": "WEB",
"url": "https://huntr.com/bounties/0a62f2fb-4e62-4128-9dc4-e8f1d959ac61"
@@ -35,8 +62,8 @@
"CWE-440"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-09-13T19:34:25Z",
"nvd_published_at": "2024-07-20T04:15:05Z"
}
}
advisories/unreviewed/2024/09/GHSA-9jmp-j63g-8x6m/GHSA-9jmp-j63g-8x6m.json → advisories/github-reviewed/2024/09/GHSA-9jmp-j63g-8x6m/GHSA-9jmp-j63g-8x6m.json
+27 -4
View File
@@ -1,20 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9jmp-j63g-8x6m",
"modified": "2024-09-13T18:31:48Z",
"modified": "2024-09-13T19:34:16Z",
"published": "2024-09-13T18:31:48Z",
"aliases": [
"CVE-2024-6867"
],
"summary": "Lunary information disclosure vulnerability",
"details": "An information disclosure vulnerability exists in the lunary-ai/lunary, specifically in the `runs/{run_id}/related` endpoint. This endpoint does not verify that the user has the necessary access rights to the run(s) they are accessing. As a result, it returns not only the specified run but also all runs that have the `run_id` listed as their parent run. This issue affects the main branch, commit a761d833. The vulnerability allows unauthorized users to obtain information about non-public runs and their related runs, given the `run_id` of a public or non-public run.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "lunary"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.4.10"
}
]
}
]
}
],
"references": [
{
@@ -35,8 +58,8 @@
"CWE-1220"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-09-13T19:34:16Z",
"nvd_published_at": "2024-09-13T17:15:13Z"
}
}
advisories/unreviewed/2024/09/GHSA-v6x6-4v4x-2fx9/GHSA-v6x6-4v4x-2fx9.json → advisories/github-reviewed/2024/09/GHSA-v6x6-4v4x-2fx9/GHSA-v6x6-4v4x-2fx9.json
+32 -5
View File
@@ -1,20 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v6x6-4v4x-2fx9",
"modified": "2024-09-13T18:31:48Z",
"modified": "2024-09-13T19:34:09Z",
"published": "2024-09-13T18:31:48Z",
"aliases": [
"CVE-2024-6862"
],
"summary": "Lunary Cross-Site Request Forgery (CSRF) vulnerability",
"details": "A Cross-Site Request Forgery (CSRF) vulnerability exists in lunary-ai/lunary version 1.2.34 due to overly permissive CORS settings. This vulnerability allows an attacker to sign up for and create projects or use the instance as if they were a user with local access. The main attack vector is for instances hosted locally on personal machines, which are not publicly accessible. The CORS settings in the backend permit all origins, exposing unauthenticated endpoints to CSRF attacks.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "lunary"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.4.10"
}
]
}
]
}
],
"references": [
{
@@ -25,6 +48,10 @@
"type": "WEB",
"url": "https://github.com/lunary-ai/lunary/commit/3451fcd7b9d95e9091d62c515752f39f2faa6e54"
},
{
"type": "PACKAGE",
"url": "https://github.com/lunary-ai/lunary"
},
{
"type": "WEB",
"url": "https://huntr.com/bounties/0b1d851e-3455-480c-ad5a-23565894976f"
@@ -34,9 +61,9 @@
"cwe_ids": [
"CWE-352"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-09-13T19:34:09Z",
"nvd_published_at": "2024-09-13T17:15:13Z"
}
}