netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-2q2r-xgj5-h3hm
GHSA-5pvv-f8h3-gw96
GHSA-2q2r-xgj5-h3hm
This commit is contained in:
advisory-database[bot]
2024-02-08 22:04:26 +00:00
parent bd10c0a168
commit b7bf626b75
3 changed files with 123 additions and 51 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/05/GHSA-2q2r-xgj5-h3hm/GHSA-2q2r-xgj5-h3hm.json
+65
View File
@@ -0,0 +1,65 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2q2r-xgj5-h3hm",
"modified": "2024-02-08T22:03:51Z",
"published": "2022-05-02T03:48:54Z",
"aliases": [
"CVE-2009-3821"
],
"summary": "Apache Solr Search for TYPO3 vulnerable to Cross-site Scripting",
"details": "Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "apache-solr-for-typo3/solr"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.1"
}
]
}
],
"database_specific": {
"last_known_affected_version_range": "<= 1.0.0"
}
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3821"
},
{
"type": "WEB",
"url": "https://github.com/TYPO3-Solr/ext-solr/commit/5192f489a13ff9417d7b57c63420187789beea5b"
},
{
"type": "PACKAGE",
"url": "https://github.com/TYPO3-Solr/ext-solr"
},
{
"type": "WEB",
"url": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-02-08T22:03:51Z",
"nvd_published_at": "2009-10-28T10:30:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-5pvv-f8h3-gw96/GHSA-5pvv-f8h3-gw96.json → advisories/github-reviewed/2022/05/GHSA-5pvv-f8h3-gw96/GHSA-5pvv-f8h3-gw96.json
+58 -16
View File
@@ -1,23 +1,69 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5pvv-f8h3-gw96",
"modified": "2022-05-02T03:47:43Z",
"modified": "2024-02-08T22:02:35Z",
"published": "2022-05-02T03:47:43Z",
"aliases": [
"CVE-2009-3696"
],
"summary": "phpMyAdmin Cross-site Scripting In MySQL Table Name",
"details": "Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "phpmyadmin/phpmyadmin"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2.11.0"
},
{
"fixed": "2.11.9.6"
}
]
}
]
},
{
"package": {
"ecosystem": "Packagist",
"name": "phpmyadmin/phpmyadmin"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.0.0"
},
{
"fixed": "3.2.2.1"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3696"
},
{
"type": "WEB",
"url": "https://github.com/phpmyadmin/phpmyadmin/commit/212daad0c082dfb853e3a4098838781a96b2ce1f"
},
{
"type": "WEB",
"url": "https://github.com/phpmyadmin/phpmyadmin/commit/8ec5434999724f61d7df1f9b0b13545274c78b1e"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=528769"
@@ -26,6 +72,14 @@
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53742"
},
{
"type": "PACKAGE",
"url": "https://github.com/phpmyadmin/phpmyadmin"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20200228173112/http://www.securityfocus.com/bid/36658"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html"
@@ -66,10 +120,6 @@
"type": "WEB",
"url": "http://marc.info/?l=oss-security&m=125561979001460&w=2"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/37016"
},
{
"type": "WEB",
"url": "http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/"
@@ -85,14 +135,6 @@
{
"type": "WEB",
"url": "http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/36658"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2009/2899"
}
],
"database_specific": {
@@ -100,8 +142,8 @@
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-02-08T22:02:34Z",
"nvd_published_at": "2009-10-16T16:30:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-2q2r-xgj5-h3hm/GHSA-2q2r-xgj5-h3hm.json
-35
View File
@@ -1,35 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2q2r-xgj5-h3hm",
"modified": "2022-05-02T03:48:54Z",
"published": "2022-05-02T03:48:54Z",
"aliases": [
"CVE-2009-3821"
],
"details": "Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3821"
},
{
"type": "WEB",
"url": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2009-10-28T10:30:00Z"
}
}