netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-6j6m-gqwx-34j8
GHSA-gfjm-ff7p-7vmm
GHSA-pf4q-9p8v-3j23
GHSA-vf2r-64qm-7vcq
GHSA-x598-7968-m6vh
This commit is contained in:
advisory-database[bot]
2025-05-10 21:31:37 +00:00
parent 9d5fb8fe83
commit b16924f8ad
5 changed files with 260 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2025/05/GHSA-6j6m-gqwx-34j8/GHSA-6j6m-gqwx-34j8.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6j6m-gqwx-34j8",
"modified": "2025-05-10T21:30:29Z",
"published": "2025-05-10T21:30:29Z",
"aliases": [
"CVE-2025-4515"
],
"details": "A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.yaml. The manipulation of the argument allow_origins leads to permissive cross-domain policy with untrusted domains. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4515"
},
{
"type": "WEB",
"url": "https://gist.github.com/superboy-zjc/2a727cb0c1d468f21a91e0416d006ffe"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308235"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308235"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.564451"
}
],
"database_specific": {
"cwe_ids": [
"CWE-346"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-10T21:15:52Z"
}
}
advisories/unreviewed/2025/05/GHSA-gfjm-ff7p-7vmm/GHSA-gfjm-ff7p-7vmm.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gfjm-ff7p-7vmm",
"modified": "2025-05-10T21:30:29Z",
"published": "2025-05-10T21:30:29Z",
"aliases": [
"CVE-2025-4512"
],
"details": "A vulnerability classified as problematic has been found in Inetum IODAS 7.2-LTS.4.1-JDK7/7.2-RC3.2-JDK7. Affected is an unknown function of the file /astre/iodasweb/app.jsp. The manipulation of the argument action leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4512"
},
{
"type": "WEB",
"url": "https://github.com/lam-sec/iodasweb-poc"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308232"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308232"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.563733"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-10T19:15:55Z"
}
}
advisories/unreviewed/2025/05/GHSA-pf4q-9p8v-3j23/GHSA-pf4q-9p8v-3j23.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pf4q-9p8v-3j23",
"modified": "2025-05-10T21:30:29Z",
"published": "2025-05-10T21:30:29Z",
"aliases": [
"CVE-2025-4514"
],
"details": "A vulnerability, which was classified as critical, has been found in Zhengzhou Jiuhua Electronic Technology mayicms up to 5.8E. Affected by this issue is some unknown functionality of the file /javascript.php. The manipulation of the argument Value leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4514"
},
{
"type": "WEB",
"url": "https://github.com/Axianke/cve/issues/1"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308234"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308234"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.564243"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-10T20:15:20Z"
}
}
advisories/unreviewed/2025/05/GHSA-vf2r-64qm-7vcq/GHSA-vf2r-64qm-7vcq.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vf2r-64qm-7vcq",
"modified": "2025-05-10T21:30:29Z",
"published": "2025-05-10T21:30:29Z",
"aliases": [
"CVE-2025-4511"
],
"details": "A vulnerability was found in vector4wang spring-boot-quick up to 20250422. It has been rated as critical. This issue affects the function ResponseEntity of the file /spring-boot-quick-master/quick-img2txt/src/main/java/com/quick/controller/Img2TxtController.java of the component quick-img2txt. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4511"
},
{
"type": "WEB",
"url": "https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250422-01.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308231"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308231"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.563538"
}
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-10T19:15:54Z"
}
}
advisories/unreviewed/2025/05/GHSA-x598-7968-m6vh/GHSA-x598-7968-m6vh.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x598-7968-m6vh",
"modified": "2025-05-10T21:30:29Z",
"published": "2025-05-10T21:30:29Z",
"aliases": [
"CVE-2025-4513"
],
"details": "A vulnerability classified as problematic was found in Catalyst User Key Authentication Plugin 20220819 on Moodle. Affected by this vulnerability is an unknown functionality of the file /auth/userkey/logout.php of the component Logout. The manipulation of the argument return leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4513"
},
{
"type": "WEB",
"url": "https://github.com/Cyber-Wo0dy/report/blob/main/moodle/key_user_authentication/v2022081901/key_user_authentication_open_redirection"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308233"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308233"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.564090"
}
],
"database_specific": {
"cwe_ids": [
"CWE-601"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-10T20:15:20Z"
}
}