netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-04-17 18:32:14 +00:00
parent 00b18b892a
commit bd9949b47f
284 changed files with 9408 additions and 75 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2025/04/GHSA-qhp6-vp7c-g7xp/GHSA-qhp6-vp7c-g7xp.json
+284
View File
@@ -0,0 +1,284 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qhp6-vp7c-g7xp",
"modified": "2025-04-17T18:31:15Z",
"published": "2025-04-17T15:32:35Z",
"aliases": [
"CVE-2025-3760"
],
"summary": "Liferay Cross-site Scripting vulnerability",
"details": "A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal 7.2.0 through 7.4.3.129, and Liferay DXP 2024.Q4.1 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, 7.3 GA through update 36, and 7.2 GA through fix pack 20 allows remote authenticated attackers to inject malicious JavaScript into a page.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.portal.bom"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.2.0"
},
{
"fixed": "7.4.3.132"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.dxp.bom"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.2.10.fp1"
},
{
"last_affected": "7.2.10.fp20"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.dxp.bom"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.3.10.ep1"
},
{
"last_affected": "7.3.10.u36"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.dxp.bom"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.4.13.u1"
},
{
"last_affected": "7.4.13.u92"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.dxp.bom"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2023.Q3.1"
},
{
"last_affected": "2023.Q3.10"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.dxp.bom"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2023.Q4.0"
},
{
"last_affected": "2023.Q4.10"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.dxp.bom"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2024.Q1.1"
},
{
"fixed": "2024.Q1.13"
}
]
}
],
"database_specific": {
"last_known_affected_version_range": "<= 2024.Q1.12"
}
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.dxp.bom"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2024.Q2.0"
},
{
"last_affected": "2024.Q2.13"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.dxp.bom"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2024.Q3.1"
},
{
"fixed": "2024.Q3.10"
}
]
}
],
"database_specific": {
"last_known_affected_version_range": "<= 2024.Q3.9"
}
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.dxp.bom"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2024.Q4.1"
},
{
"fixed": "2025.Q1.0"
}
]
}
],
"database_specific": {
"last_known_affected_version_range": "<= 2024.Q4.7"
}
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.dxp.bom"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.2.10"
},
{
"last_affected": "7.2.10.8"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.dxp.bom"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.3.10.0"
},
{
"last_affected": "7.3.10.3"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay.portal:release.dxp.bom"
},
"versions": [
"7.4.13"
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3760"
},
{
"type": "WEB",
"url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-3760"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2025-04-17T18:31:14Z",
"nvd_published_at": "2025-04-17T13:15:41Z"
}
}
advisories/unreviewed/2022/01/GHSA-x46h-6fmr-m5fr/GHSA-x46h-6fmr-m5fr.json
+7 -2
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x46h-6fmr-m5fr",
"modified": "2022-02-03T00:00:23Z",
"modified": "2025-04-17T18:31:00Z",
"published": "2022-01-29T00:00:44Z",
"aliases": [
"CVE-2021-26264"
],
"details": "A specially crafted script could cause the DeltaV Distributed Control System Controllers (All Versions) to restart and cause a denial-of-service condition.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
advisories/unreviewed/2022/04/GHSA-59hr-796q-5p86/GHSA-59hr-796q-5p86.json
+1
View File
@@ -30,6 +30,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-693",
"CWE-863"
],
"severity": "HIGH",
advisories/unreviewed/2022/04/GHSA-95hc-22p8-fq93/GHSA-95hc-22p8-fq93.json
+1
View File
@@ -30,6 +30,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-707",
"CWE-74"
],
"severity": "MODERATE",
advisories/unreviewed/2022/04/GHSA-gv89-2pc5-vf6w/GHSA-gv89-2pc5-vf6w.json
+3 -1
View File
@@ -29,7 +29,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-693"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2022/07/GHSA-2m95-fcm7-gqw8/GHSA-2m95-fcm7-gqw8.json
+2 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2m95-fcm7-gqw8",
"modified": "2022-08-05T00:00:30Z",
"modified": "2025-04-17T18:31:01Z",
"published": "2022-07-29T00:00:32Z",
"aliases": [
"CVE-2021-22644"
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-321",
"CWE-798"
],
"severity": "CRITICAL",
advisories/unreviewed/2022/07/GHSA-4ch8-jgqc-v66p/GHSA-4ch8-jgqc-v66p.json
+3 -1
View File
@@ -26,7 +26,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-307"
"CWE-294",
"CWE-307",
"CWE-522"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2022/07/GHSA-83qv-39gp-8f27/GHSA-83qv-39gp-8f27.json
+2 -1
View File
@@ -26,7 +26,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-22"
"CWE-22",
"CWE-23"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2022/07/GHSA-f2wx-p9mh-gf54/GHSA-f2wx-p9mh-gf54.json
+4 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f2wx-p9mh-gf54",
"modified": "2022-08-05T00:00:30Z",
"modified": "2025-04-17T18:31:01Z",
"published": "2022-07-29T00:00:32Z",
"aliases": [
"CVE-2021-22646"
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-94"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2022/07/GHSA-hjmg-3wv2-r885/GHSA-hjmg-3wv2-r885.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-284"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2022/07/GHSA-w785-44wh-9wr3/GHSA-w785-44wh-9wr3.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w785-44wh-9wr3",
"modified": "2022-08-05T00:00:31Z",
"modified": "2025-04-17T18:31:01Z",
"published": "2022-07-28T00:00:40Z",
"aliases": [
"CVE-2021-38410"
advisories/unreviewed/2022/10/GHSA-583f-56ww-9ppj/GHSA-583f-56ww-9ppj.json
+4 -1
View File
@@ -25,7 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-200",
"CWE-862"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2022/10/GHSA-c7xv-h5wg-6fq8/GHSA-c7xv-h5wg-6fq8.json
+1
View File
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200",
"CWE-862"
],
"severity": "HIGH",
advisories/unreviewed/2022/10/GHSA-p6xg-jwp4-9fj2/GHSA-p6xg-jwp4-9fj2.json
+1
View File
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284",
"CWE-862"
],
"severity": "HIGH",
advisories/unreviewed/2022/12/GHSA-cw5r-qw3x-wgpf/GHSA-cw5r-qw3x-wgpf.json
+3 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cw5r-qw3x-wgpf",
"modified": "2022-12-27T21:30:21Z",
"modified": "2025-04-17T18:31:03Z",
"published": "2022-12-20T00:30:29Z",
"aliases": [
"CVE-2022-40434"
@@ -34,7 +34,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
"CWE-74",
"CWE-79"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2022/12/GHSA-j2p8-g7vg-2chp/GHSA-j2p8-g7vg-2chp.json
+2 -1
View File
@@ -26,7 +26,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-20"
"CWE-20",
"CWE-74"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-4vhv-9xc2-4v6w/GHSA-4vhv-9xc2-4v6w.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4vhv-9xc2-4v6w",
"modified": "2024-04-04T05:30:56Z",
"modified": "2025-04-17T18:31:03Z",
"published": "2023-07-06T19:24:05Z",
"aliases": [
"CVE-2022-47208"
advisories/unreviewed/2024/01/GHSA-8h58-w45f-mg3g/GHSA-8h58-w45f-mg3g.json
+3 -1
View File
@@ -29,7 +29,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-200"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/01/GHSA-ph8w-v57g-j3g7/GHSA-ph8w-v57g-j3g7.json
+2 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ph8w-v57g-j3g7",
"modified": "2024-01-11T21:31:16Z",
"modified": "2025-04-17T18:31:03Z",
"published": "2024-01-08T15:30:27Z",
"aliases": [
"CVE-2023-6552"
],
"details": "Lack of \"current\" GET parameter validation during the action of changing a language leads to an open redirect vulnerability.\n",
"details": "Lack of \"current\" GET parameter validation during the action of changing a language leads to an open redirect vulnerability.",
"severity": [
{
"type": "CVSS_V3",
advisories/unreviewed/2025/02/GHSA-h9hg-544v-fh29/GHSA-h9hg-544v-fh29.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h9hg-544v-fh29",
"modified": "2025-02-21T18:31:14Z",
"modified": "2025-04-17T18:31:10Z",
"published": "2025-02-21T18:31:14Z",
"aliases": [
"CVE-2025-26014"
],
"details": "A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via the path parameter.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -28,8 +33,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-94"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-21T17:15:14Z"

Some files were not shown because too many files have changed in this diff Show More