From b18383323f19306e4b4e09078b574cba11f6f910 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 28 Jun 2024 21:09:34 +0000 Subject: [PATCH] Publish Advisories GHSA-58m3-rcvp-f9ww GHSA-m45c-v46h-c788 GHSA-rrqq-fv6m-692m --- .../GHSA-58m3-rcvp-f9ww.json | 31 ++++++++++++++++--- .../GHSA-m45c-v46h-c788.json | 31 ++++++++++++++++--- .../GHSA-rrqq-fv6m-692m.json | 31 ++++++++++++++++--- 3 files changed, 81 insertions(+), 12 deletions(-) rename advisories/{unreviewed => github-reviewed}/2024/06/GHSA-58m3-rcvp-f9ww/GHSA-58m3-rcvp-f9ww.json (61%) rename advisories/{unreviewed => github-reviewed}/2024/06/GHSA-m45c-v46h-c788/GHSA-m45c-v46h-c788.json (63%) rename advisories/{unreviewed => github-reviewed}/2024/06/GHSA-rrqq-fv6m-692m/GHSA-rrqq-fv6m-692m.json (64%) diff --git a/advisories/unreviewed/2024/06/GHSA-58m3-rcvp-f9ww/GHSA-58m3-rcvp-f9ww.json b/advisories/github-reviewed/2024/06/GHSA-58m3-rcvp-f9ww/GHSA-58m3-rcvp-f9ww.json similarity index 61% rename from advisories/unreviewed/2024/06/GHSA-58m3-rcvp-f9ww/GHSA-58m3-rcvp-f9ww.json rename to advisories/github-reviewed/2024/06/GHSA-58m3-rcvp-f9ww/GHSA-58m3-rcvp-f9ww.json index e8486aef5a5..b2c21188948 100644 --- a/advisories/unreviewed/2024/06/GHSA-58m3-rcvp-f9ww/GHSA-58m3-rcvp-f9ww.json +++ b/advisories/github-reviewed/2024/06/GHSA-58m3-rcvp-f9ww/GHSA-58m3-rcvp-f9ww.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-58m3-rcvp-f9ww", - "modified": "2024-06-27T21:32:08Z", + "modified": "2024-06-28T21:09:00Z", "published": "2024-06-27T21:32:08Z", "aliases": [ "CVE-2024-5979" ], + "summary": "h2o vulnerable to unexpected POST request shutting down server", "details": "In h2oai/h2o-3 version 3.46.0, the `run_tool` command in the `rapids` component allows the `main` function of any class under the `water.tools` namespace to be called. One such class, `MojoConvertTool`, crashes the server when invoked with an invalid argument, causing a denial of service.", "severity": [ { @@ -14,13 +15,35 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "h2o" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "3.46.0" + } + ] + } + ] + } ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5979" }, + { + "type": "PACKAGE", + "url": "https://github.com/h2oai/h2o-3" + }, { "type": "WEB", "url": "https://huntr.com/bounties/d80a2139-fc03-44b7-b739-de41e323b458" @@ -31,8 +54,8 @@ "CWE-400" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-06-28T21:09:00Z", "nvd_published_at": "2024-06-27T19:15:18Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-m45c-v46h-c788/GHSA-m45c-v46h-c788.json b/advisories/github-reviewed/2024/06/GHSA-m45c-v46h-c788/GHSA-m45c-v46h-c788.json similarity index 63% rename from advisories/unreviewed/2024/06/GHSA-m45c-v46h-c788/GHSA-m45c-v46h-c788.json rename to advisories/github-reviewed/2024/06/GHSA-m45c-v46h-c788/GHSA-m45c-v46h-c788.json index 48fe7893f52..d931f39571b 100644 --- a/advisories/unreviewed/2024/06/GHSA-m45c-v46h-c788/GHSA-m45c-v46h-c788.json +++ b/advisories/github-reviewed/2024/06/GHSA-m45c-v46h-c788/GHSA-m45c-v46h-c788.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-m45c-v46h-c788", - "modified": "2024-06-27T21:32:08Z", + "modified": "2024-06-28T21:07:39Z", "published": "2024-06-27T21:32:08Z", "aliases": [ "CVE-2024-5824" ], + "summary": "lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE", "details": "A path traversal vulnerability in the `/set_personality_config` endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the `configs/config.yaml` file. This can lead to remote code execution by changing server configuration properties such as `force_accept_remote_access` and `turn_on_code_validation`.", "severity": [ { @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "lollms" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "9.5.0" + } + ] + } + ] + } ], "references": [ { @@ -25,6 +44,10 @@ "type": "WEB", "url": "https://github.com/parisneo/lollms/commit/eda3af5f5c4ea9b2f3569f72f8d05989e29367fc" }, + { + "type": "PACKAGE", + "url": "https://github.com/parisneo/lollms" + }, { "type": "WEB", "url": "https://huntr.com/bounties/9ceb7cf9-a7cd-4699-b3f8-d0999d2b49fd" @@ -35,8 +58,8 @@ "CWE-22" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-06-28T21:07:39Z", "nvd_published_at": "2024-06-27T19:15:17Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-rrqq-fv6m-692m/GHSA-rrqq-fv6m-692m.json b/advisories/github-reviewed/2024/06/GHSA-rrqq-fv6m-692m/GHSA-rrqq-fv6m-692m.json similarity index 64% rename from advisories/unreviewed/2024/06/GHSA-rrqq-fv6m-692m/GHSA-rrqq-fv6m-692m.json rename to advisories/github-reviewed/2024/06/GHSA-rrqq-fv6m-692m/GHSA-rrqq-fv6m-692m.json index 90db96397dc..9e60c8b6b40 100644 --- a/advisories/unreviewed/2024/06/GHSA-rrqq-fv6m-692m/GHSA-rrqq-fv6m-692m.json +++ b/advisories/github-reviewed/2024/06/GHSA-rrqq-fv6m-692m/GHSA-rrqq-fv6m-692m.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-rrqq-fv6m-692m", - "modified": "2024-06-27T21:32:08Z", + "modified": "2024-06-28T21:08:22Z", "published": "2024-06-27T21:32:08Z", "aliases": [ "CVE-2024-5826" ], + "summary": "vanna vulnerable to remote code execution caused by prompt injection", "details": "In the latest version of vanna-ai/vanna, the `vanna.ask` function is vulnerable to remote code execution due to prompt injection. The root cause is the lack of a sandbox when executing LLM-generated code, allowing an attacker to manipulate the code executed by the `exec` function in `src/vanna/base/base.py`. This vulnerability can be exploited by an attacker to achieve remote code execution on the app backend server, potentially gaining full control of the server.", "severity": [ { @@ -14,13 +15,35 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "vanna" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "0.6.2" + } + ] + } + ] + } ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5826" }, + { + "type": "PACKAGE", + "url": "https://github.com/vanna-ai/vanna" + }, { "type": "WEB", "url": "https://huntr.com/bounties/90620087-44ac-4e43-b659-3c5d30889369" @@ -31,8 +54,8 @@ "CWE-94" ], "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-06-28T21:08:22Z", "nvd_published_at": "2024-06-27T19:15:17Z" } } \ No newline at end of file