diff --git a/advisories/github-reviewed/2022/05/GHSA-fcgg-qgxg-2g2x/GHSA-fcgg-qgxg-2g2x.json b/advisories/github-reviewed/2022/05/GHSA-fcgg-qgxg-2g2x/GHSA-fcgg-qgxg-2g2x.json index 4162bed80af..62a77280177 100644 --- a/advisories/github-reviewed/2022/05/GHSA-fcgg-qgxg-2g2x/GHSA-fcgg-qgxg-2g2x.json +++ b/advisories/github-reviewed/2022/05/GHSA-fcgg-qgxg-2g2x/GHSA-fcgg-qgxg-2g2x.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-fcgg-qgxg-2g2x", - "modified": "2024-04-25T20:40:54Z", + "modified": "2024-09-13T19:33:37Z", "published": "2022-05-14T01:36:14Z", "aliases": [ "CVE-2018-16191" @@ -34,7 +34,7 @@ } ], "database_specific": { - "last_known_affected_version_range": "< 3.0.16" + "last_known_affected_version_range": "<= 3.0.16" } } ], diff --git a/advisories/unreviewed/2024/05/GHSA-pwc9-q4hj-pg8g/GHSA-pwc9-q4hj-pg8g.json b/advisories/github-reviewed/2024/05/GHSA-pwc9-q4hj-pg8g/GHSA-pwc9-q4hj-pg8g.json similarity index 65% rename from advisories/unreviewed/2024/05/GHSA-pwc9-q4hj-pg8g/GHSA-pwc9-q4hj-pg8g.json rename to advisories/github-reviewed/2024/05/GHSA-pwc9-q4hj-pg8g/GHSA-pwc9-q4hj-pg8g.json index 0277d923197..ae555185b32 100644 --- a/advisories/unreviewed/2024/05/GHSA-pwc9-q4hj-pg8g/GHSA-pwc9-q4hj-pg8g.json +++ b/advisories/github-reviewed/2024/05/GHSA-pwc9-q4hj-pg8g/GHSA-pwc9-q4hj-pg8g.json @@ -1,20 +1,43 @@ { "schema_version": "1.4.0", "id": "GHSA-pwc9-q4hj-pg8g", - "modified": "2024-05-16T09:33:08Z", + "modified": "2024-09-13T19:34:51Z", "published": "2024-05-16T09:33:08Z", "aliases": [ "CVE-2024-4078" ], + "summary": "LoLLMS Command Injection vulnerability", "details": "A vulnerability in the parisneo/lollms, specifically in the `/unInstall_binding` endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the `name` parameter in the `unInstall_binding` function, allowing an attacker to traverse directories and execute arbitrary code by loading a malicious `__init__.py` file. This vulnerability affects the latest version of the software. The exploitation of this vulnerability could lead to remote code execution on the system where parisneo/lollms is deployed.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P" } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "lollms" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "9.5.0" + } + ] + } + ] + } ], "references": [ { @@ -25,6 +48,10 @@ "type": "WEB", "url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f" }, + { + "type": "PACKAGE", + "url": "https://github.com/parisneo/lollms" + }, { "type": "WEB", "url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d" @@ -34,9 +61,9 @@ "cwe_ids": [ "CWE-77" ], - "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2024-09-13T19:34:51Z", "nvd_published_at": "2024-05-16T09:15:15Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json b/advisories/github-reviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json similarity index 65% rename from advisories/unreviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json rename to advisories/github-reviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json index ac90b5bfa30..6f09a503d99 100644 --- a/advisories/unreviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json +++ b/advisories/github-reviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json @@ -1,20 +1,43 @@ { "schema_version": "1.4.0", "id": "GHSA-3x47-w4rx-6pm7", - "modified": "2024-06-06T21:30:37Z", + "modified": "2024-09-13T19:34:34Z", "published": "2024-06-06T21:30:37Z", "aliases": [ "CVE-2024-3429" ], - "details": "A path traversal vulnerability exists in the parisneo/lollms application, specifically within the `sanitize_path_from_endpoint` and `sanitize_path` functions in `lollms_core\\lollms\\security.py`. This vulnerability allows for arbitrary file reading when the application is running on Windows. The issue arises due to insufficient sanitization of user-supplied input, enabling attackers to bypass the path traversal protection mechanisms by crafting malicious input. Successful exploitation could lead to unauthorized access to sensitive files, information disclosure, and potentially a denial of service (DoS) condition by including numerous large or resource-intensive files. This vulnerability affects the latest version prior to 9.6.", + "summary": "LoLLMS Path Traversal vulnerability", + "details": "A path traversal vulnerability exists in the parisneo/lollms application, specifically within the `sanitize_path_from_endpoint` and `sanitize_path` functions in `lollms_core\\lollms\\security.py`. This vulnerability allows for arbitrary file reading when the application is running on Windows. The issue arises due to insufficient sanitization of user-supplied input, enabling attackers to bypass the path traversal protection mechanisms by crafting malicious input. Successful exploitation could lead to unauthorized access to sensitive files, information disclosure, and potentially a denial of service (DoS) condition by including numerous large or resource-intensive files. This vulnerability affects the latest version prior to 9.5.0.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P" } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "lollms" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "9.5.0" + } + ] + } + ] + } ], "references": [ { @@ -25,6 +48,10 @@ "type": "WEB", "url": "https://github.com/parisneo/lollms/commit/f4424cfc3d6dfb3ad5ac17dd46801efe784933e9" }, + { + "type": "PACKAGE", + "url": "https://github.com/parisneo/lollms" + }, { "type": "WEB", "url": "https://huntr.com/bounties/fd8f50c8-17f0-40be-a2c6-bb8d80f7c409" @@ -34,9 +61,9 @@ "cwe_ids": [ "CWE-29" ], - "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2024-09-13T19:34:34Z", "nvd_published_at": "2024-06-06T19:16:02Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-p8h7-c8gw-6x8c/GHSA-p8h7-c8gw-6x8c.json b/advisories/github-reviewed/2024/06/GHSA-p8h7-c8gw-6x8c/GHSA-p8h7-c8gw-6x8c.json similarity index 69% rename from advisories/unreviewed/2024/06/GHSA-p8h7-c8gw-6x8c/GHSA-p8h7-c8gw-6x8c.json rename to advisories/github-reviewed/2024/06/GHSA-p8h7-c8gw-6x8c/GHSA-p8h7-c8gw-6x8c.json index 4cb44522e42..95986f2e964 100644 --- a/advisories/unreviewed/2024/06/GHSA-p8h7-c8gw-6x8c/GHSA-p8h7-c8gw-6x8c.json +++ b/advisories/github-reviewed/2024/06/GHSA-p8h7-c8gw-6x8c/GHSA-p8h7-c8gw-6x8c.json @@ -1,20 +1,43 @@ { "schema_version": "1.4.0", "id": "GHSA-p8h7-c8gw-6x8c", - "modified": "2024-06-06T21:30:37Z", + "modified": "2024-09-13T19:34:56Z", "published": "2024-06-06T21:30:37Z", "aliases": [ "CVE-2024-4881" ], - "details": "A path traversal vulnerability exists in the parisneo/lollms application, affecting version 9.4.0 and potentially earlier versions, but fixed in version 5.9.0. The vulnerability arises due to improper validation of file paths between Windows and Linux environments, allowing attackers to traverse beyond the intended directory and read any file on the Windows system. Specifically, the application fails to adequately sanitize file paths containing backslashes (`\\`), which can be exploited to access the root directory and read, or even delete, sensitive files. This issue was discovered in the context of the `/user_infos` endpoint, where a crafted request using backslashes to reference a file (e.g., `\\windows\\win.ini`) could result in unauthorized file access. The impact of this vulnerability includes the potential for attackers to access sensitive information such as environment variables, database files, and configuration files, which could lead to further compromise of the system.", + "summary": "LoLLMS Path Traversal vulnerability", + "details": "A path traversal vulnerability exists in the parisneo/lollms application, affecting version 9.4.0 and potentially earlier versions, but fixed in version 9.5.0. The vulnerability arises due to improper validation of file paths between Windows and Linux environments, allowing attackers to traverse beyond the intended directory and read any file on the Windows system. Specifically, the application fails to adequately sanitize file paths containing backslashes (`\\`), which can be exploited to access the root directory and read, or even delete, sensitive files. This issue was discovered in the context of the `/user_infos` endpoint, where a crafted request using backslashes to reference a file (e.g., `\\windows\\win.ini`) could result in unauthorized file access. The impact of this vulnerability includes the potential for attackers to access sensitive information such as environment variables, database files, and configuration files, which could lead to further compromise of the system.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P" } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "lollms" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "9.5.0" + } + ] + } + ] + } ], "references": [ { @@ -25,6 +48,10 @@ "type": "WEB", "url": "https://github.com/parisneo/lollms/commit/95ad36eeffc6a6be3e3f35ed35a384d768f0ecf6" }, + { + "type": "PACKAGE", + "url": "https://github.com/parisneo/lollms" + }, { "type": "WEB", "url": "https://huntr.com/bounties/94f7f901-80b0-4cf5-b545-ac5c1e7635e9" @@ -35,8 +62,8 @@ "CWE-36" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-09-13T19:34:56Z", "nvd_published_at": "2024-06-06T19:16:03Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2024/07/GHSA-8mrm-r7h3-c3hj/GHSA-8mrm-r7h3-c3hj.json b/advisories/github-reviewed/2024/07/GHSA-8mrm-r7h3-c3hj/GHSA-8mrm-r7h3-c3hj.json similarity index 60% rename from advisories/unreviewed/2024/07/GHSA-8mrm-r7h3-c3hj/GHSA-8mrm-r7h3-c3hj.json rename to advisories/github-reviewed/2024/07/GHSA-8mrm-r7h3-c3hj/GHSA-8mrm-r7h3-c3hj.json index e88ef555ca1..45e5ed2d269 100644 --- a/advisories/unreviewed/2024/07/GHSA-8mrm-r7h3-c3hj/GHSA-8mrm-r7h3-c3hj.json +++ b/advisories/github-reviewed/2024/07/GHSA-8mrm-r7h3-c3hj/GHSA-8mrm-r7h3-c3hj.json @@ -1,20 +1,43 @@ { "schema_version": "1.4.0", "id": "GHSA-8mrm-r7h3-c3hj", - "modified": "2024-07-20T06:30:35Z", + "modified": "2024-09-13T19:34:25Z", "published": "2024-07-20T06:30:35Z", "aliases": [ "CVE-2024-6281" ], + "summary": "LoLLMS vulnerable to Expected Behavior Violation", "details": "A path traversal vulnerability exists in the `apply_settings` function of parisneo/lollms versions prior to 9.5.1. The `sanitize_path` function does not adequately secure the `discussion_db_name` parameter, allowing attackers to manipulate the path and potentially write to important system folders.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "lollms" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "9.5.1" + } + ] + } + ] + } ], "references": [ { @@ -25,6 +48,10 @@ "type": "WEB", "url": "https://github.com/parisneo/lollms/commit/26a3ff35acf152b49e1087d5698ad4864c7b6092" }, + { + "type": "PACKAGE", + "url": "https://github.com/parisneo/lollms" + }, { "type": "WEB", "url": "https://huntr.com/bounties/0a62f2fb-4e62-4128-9dc4-e8f1d959ac61" @@ -35,8 +62,8 @@ "CWE-440" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-09-13T19:34:25Z", "nvd_published_at": "2024-07-20T04:15:05Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2024/09/GHSA-9jmp-j63g-8x6m/GHSA-9jmp-j63g-8x6m.json b/advisories/github-reviewed/2024/09/GHSA-9jmp-j63g-8x6m/GHSA-9jmp-j63g-8x6m.json similarity index 69% rename from advisories/unreviewed/2024/09/GHSA-9jmp-j63g-8x6m/GHSA-9jmp-j63g-8x6m.json rename to advisories/github-reviewed/2024/09/GHSA-9jmp-j63g-8x6m/GHSA-9jmp-j63g-8x6m.json index bb54b660fe5..dab93e9fab8 100644 --- a/advisories/unreviewed/2024/09/GHSA-9jmp-j63g-8x6m/GHSA-9jmp-j63g-8x6m.json +++ b/advisories/github-reviewed/2024/09/GHSA-9jmp-j63g-8x6m/GHSA-9jmp-j63g-8x6m.json @@ -1,20 +1,43 @@ { "schema_version": "1.4.0", "id": "GHSA-9jmp-j63g-8x6m", - "modified": "2024-09-13T18:31:48Z", + "modified": "2024-09-13T19:34:16Z", "published": "2024-09-13T18:31:48Z", "aliases": [ "CVE-2024-6867" ], + "summary": "Lunary information disclosure vulnerability", "details": "An information disclosure vulnerability exists in the lunary-ai/lunary, specifically in the `runs/{run_id}/related` endpoint. This endpoint does not verify that the user has the necessary access rights to the run(s) they are accessing. As a result, it returns not only the specified run but also all runs that have the `run_id` listed as their parent run. This issue affects the main branch, commit a761d833. The vulnerability allows unauthorized users to obtain information about non-public runs and their related runs, given the `run_id` of a public or non-public run.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ - + { + "package": { + "ecosystem": "npm", + "name": "lunary" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.4.10" + } + ] + } + ] + } ], "references": [ { @@ -35,8 +58,8 @@ "CWE-1220" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-09-13T19:34:16Z", "nvd_published_at": "2024-09-13T17:15:13Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2024/09/GHSA-v6x6-4v4x-2fx9/GHSA-v6x6-4v4x-2fx9.json b/advisories/github-reviewed/2024/09/GHSA-v6x6-4v4x-2fx9/GHSA-v6x6-4v4x-2fx9.json similarity index 62% rename from advisories/unreviewed/2024/09/GHSA-v6x6-4v4x-2fx9/GHSA-v6x6-4v4x-2fx9.json rename to advisories/github-reviewed/2024/09/GHSA-v6x6-4v4x-2fx9/GHSA-v6x6-4v4x-2fx9.json index 83eb725eb97..9fcf06f6c95 100644 --- a/advisories/unreviewed/2024/09/GHSA-v6x6-4v4x-2fx9/GHSA-v6x6-4v4x-2fx9.json +++ b/advisories/github-reviewed/2024/09/GHSA-v6x6-4v4x-2fx9/GHSA-v6x6-4v4x-2fx9.json @@ -1,20 +1,43 @@ { "schema_version": "1.4.0", "id": "GHSA-v6x6-4v4x-2fx9", - "modified": "2024-09-13T18:31:48Z", + "modified": "2024-09-13T19:34:09Z", "published": "2024-09-13T18:31:48Z", "aliases": [ "CVE-2024-6862" ], + "summary": "Lunary Cross-Site Request Forgery (CSRF) vulnerability", "details": "A Cross-Site Request Forgery (CSRF) vulnerability exists in lunary-ai/lunary version 1.2.34 due to overly permissive CORS settings. This vulnerability allows an attacker to sign up for and create projects or use the instance as if they were a user with local access. The main attack vector is for instances hosted locally on personal machines, which are not publicly accessible. The CORS settings in the backend permit all origins, exposing unauthenticated endpoints to CSRF attacks.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N" } ], "affected": [ - + { + "package": { + "ecosystem": "npm", + "name": "lunary" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.4.10" + } + ] + } + ] + } ], "references": [ { @@ -25,6 +48,10 @@ "type": "WEB", "url": "https://github.com/lunary-ai/lunary/commit/3451fcd7b9d95e9091d62c515752f39f2faa6e54" }, + { + "type": "PACKAGE", + "url": "https://github.com/lunary-ai/lunary" + }, { "type": "WEB", "url": "https://huntr.com/bounties/0b1d851e-3455-480c-ad5a-23565894976f" @@ -34,9 +61,9 @@ "cwe_ids": [ "CWE-352" ], - "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-09-13T19:34:09Z", "nvd_published_at": "2024-09-13T17:15:13Z" } } \ No newline at end of file