mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Advisory Database Sync
This commit is contained in:
advisory-database[bot]
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-hrqr-hxpp-chr3",
|
||||
"modified": "2021-11-03T14:59:03Z",
|
||||
"modified": "2025-02-13T18:33:17Z",
|
||||
"published": "2019-12-18T19:01:31Z",
|
||||
"aliases": [
|
||||
"CVE-2019-16782"
|
||||
@@ -75,6 +75,10 @@
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2019-16782.yml"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZXMWILCICQLA2BYSP6I2CRMUG53YBLX"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZXMWILCICQLA2BYSP6I2CRMUG53YBLX"
|
||||
|
||||
File diff suppressed because one or more lines are too long
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-mjmj-j48q-9wg2",
|
||||
"modified": "2025-02-06T18:09:52Z",
|
||||
"modified": "2025-02-13T18:33:29Z",
|
||||
"published": "2022-12-12T21:19:47Z",
|
||||
"aliases": [
|
||||
"CVE-2022-1471"
|
||||
|
||||
@@ -1,13 +1,13 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-qwph-4952-7xr6",
|
||||
"modified": "2024-06-21T21:33:52Z",
|
||||
"modified": "2025-02-13T18:33:13Z",
|
||||
"published": "2022-12-22T03:32:59Z",
|
||||
"aliases": [
|
||||
"CVE-2022-23540"
|
||||
],
|
||||
"summary": "jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()",
|
||||
"details": "# Overview\n\nIn versions <=8.5.1 of jsonwebtoken library, lack of algorithm definition and a falsy secret or key in the `jwt.verify()` function can lead to signature validation bypass due to defaulting to the `none` algorithm for signature verification.\n\n# Am I affected?\nYou will be affected if all the following are true in the `jwt.verify()` function:\n- a token with no signature is received\n- no algorithms are specified \n- a falsy (e.g. null, false, undefined) secret or key is passed \n\n# How do I fix it?\n \nUpdate to version 9.0.0 which removes the default support for the none algorithm in the `jwt.verify()` method. \n\n# Will the fix impact my users?\n\nThere will be no impact, if you update to version 9.0.0 and you don’t need to allow for the `none` algorithm. If you need 'none' algorithm, you have to explicitly specify that in `jwt.verify()` options.\n",
|
||||
"details": "# Overview\n\nIn versions <=8.5.1 of jsonwebtoken library, lack of algorithm definition and a falsy secret or key in the `jwt.verify()` function can lead to signature validation bypass due to defaulting to the `none` algorithm for signature verification.\n\n# Am I affected?\nYou will be affected if all the following are true in the `jwt.verify()` function:\n- a token with no signature is received\n- no algorithms are specified \n- a falsy (e.g. null, false, undefined) secret or key is passed \n\n# How do I fix it?\n \nUpdate to version 9.0.0 which removes the default support for the none algorithm in the `jwt.verify()` method. \n\n# Will the fix impact my users?\n\nThere will be no impact, if you update to version 9.0.0 and you don’t need to allow for the `none` algorithm. If you need 'none' algorithm, you have to explicitly specify that in `jwt.verify()` options.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
|
||||
@@ -1,13 +1,13 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-rrfc-7g8p-99q8",
|
||||
"modified": "2022-12-17T00:32:44Z",
|
||||
"modified": "2025-02-13T18:33:21Z",
|
||||
"published": "2022-12-13T17:51:40Z",
|
||||
"aliases": [
|
||||
"CVE-2022-23520"
|
||||
],
|
||||
"summary": "Possible XSS vulnerability with certain configurations of rails-html-sanitizer",
|
||||
"details": "## Summary\n\nThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer. This is due to an incomplete fix of CVE-2022-32209.\n\n- Versions affected: ALL\n- Not affected: NONE\n- Fixed versions: 1.4.4\n\n\n## Impact\n\nA possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer may allow an attacker to inject content if the application developer has overridden the sanitizer's allowed tags to allow both \"select\" and \"style\" elements.\n\nCode is only impacted if allowed tags are being overridden using either of the following two mechanisms:\n\n1. Using the Rails configuration `config.action_view.sanitized_allow_tags=`:\n\n ```ruby\n # In config/application.rb\n config.action_view.sanitized_allowed_tags = [\"select\", \"style\"]\n ```\n\n (see https://guides.rubyonrails.org/configuring.html#configuring-action-view)\n\n2. Using the class method `Rails::Html::SafeListSanitizer.allowed_tags=`:\n\n ```ruby\n # class-level option\n Rails::Html::SafeListSanitizer.allowed_tags = [\"select\", \"style\"]\n ```\n\nAll users overriding the allowed tags by either of the above mechanisms to include both \"select\" and \"style\" should either upgrade or use one of the workarounds immediately.\n\nNOTE: Code is _not_ impacted if allowed tags are overridden using either of the following mechanisms:\n\n- the `:tags` option to the Action View helper method `sanitize`.\n- the `:tags` option to the instance method `SafeListSanitizer#sanitize`.\n\n\n## Workarounds\n\nRemove either \"select\" or \"style\" from the overridden allowed tags.\n\n\n## References\n\n- [CWE - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (4.9)](https://cwe.mitre.org/data/definitions/79.html)\n- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32209\n- https://hackerone.com/reports/1654310\n\n\n## Credit\n\nThis vulnerability was responsibly reported by Dominic Breuker.\n",
|
||||
"details": "## Summary\n\nThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer. This is due to an incomplete fix of CVE-2022-32209.\n\n- Versions affected: ALL\n- Not affected: NONE\n- Fixed versions: 1.4.4\n\n\n## Impact\n\nA possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer may allow an attacker to inject content if the application developer has overridden the sanitizer's allowed tags to allow both \"select\" and \"style\" elements.\n\nCode is only impacted if allowed tags are being overridden using either of the following two mechanisms:\n\n1. Using the Rails configuration `config.action_view.sanitized_allow_tags=`:\n\n ```ruby\n # In config/application.rb\n config.action_view.sanitized_allowed_tags = [\"select\", \"style\"]\n ```\n\n (see https://guides.rubyonrails.org/configuring.html#configuring-action-view)\n\n2. Using the class method `Rails::Html::SafeListSanitizer.allowed_tags=`:\n\n ```ruby\n # class-level option\n Rails::Html::SafeListSanitizer.allowed_tags = [\"select\", \"style\"]\n ```\n\nAll users overriding the allowed tags by either of the above mechanisms to include both \"select\" and \"style\" should either upgrade or use one of the workarounds immediately.\n\nNOTE: Code is _not_ impacted if allowed tags are overridden using either of the following mechanisms:\n\n- the `:tags` option to the Action View helper method `sanitize`.\n- the `:tags` option to the instance method `SafeListSanitizer#sanitize`.\n\n\n## Workarounds\n\nRemove either \"select\" or \"style\" from the overridden allowed tags.\n\n\n## References\n\n- [CWE - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (4.9)](https://cwe.mitre.org/data/definitions/79.html)\n- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32209\n- https://hackerone.com/reports/1654310\n\n\n## Credit\n\nThis vulnerability was responsibly reported by Dominic Breuker.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-3xh5-8hvq-rc8x",
|
||||
"modified": "2024-09-04T19:40:33Z",
|
||||
"modified": "2025-02-13T18:33:11Z",
|
||||
"published": "2023-01-04T15:30:19Z",
|
||||
"aliases": [
|
||||
"CVE-2022-45875"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-52p5-x626-gw72",
|
||||
"modified": "2024-03-23T06:30:27Z",
|
||||
"modified": "2025-02-13T18:32:23Z",
|
||||
"published": "2024-03-23T06:30:27Z",
|
||||
"aliases": [
|
||||
"CVE-2024-2326"
|
||||
@@ -29,7 +29,9 @@
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [],
|
||||
"cwe_ids": [
|
||||
"CWE-352"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-7xmw-55r7-4xvc",
|
||||
"modified": "2024-03-23T06:30:27Z",
|
||||
"modified": "2025-02-13T18:32:23Z",
|
||||
"published": "2024-03-23T06:30:27Z",
|
||||
"aliases": [
|
||||
"CVE-2024-1049"
|
||||
@@ -29,7 +29,9 @@
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [],
|
||||
"cwe_ids": [
|
||||
"CWE-79"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-8mxv-pm3p-xvgq",
|
||||
"modified": "2024-08-01T15:31:34Z",
|
||||
"modified": "2025-02-13T18:32:22Z",
|
||||
"published": "2024-03-21T12:31:56Z",
|
||||
"aliases": [
|
||||
"CVE-2024-27438"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-92jp-q2g9-wmq7",
|
||||
"modified": "2024-08-06T18:30:49Z",
|
||||
"modified": "2025-02-13T18:32:21Z",
|
||||
"published": "2024-03-21T03:36:47Z",
|
||||
"aliases": [
|
||||
"CVE-2024-2053"
|
||||
|
||||
@@ -1,12 +1,12 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-9xp7-754r-wj55",
|
||||
"modified": "2024-04-16T00:30:31Z",
|
||||
"modified": "2025-02-13T18:32:24Z",
|
||||
"published": "2024-03-28T06:30:47Z",
|
||||
"aliases": [
|
||||
"CVE-2024-29090"
|
||||
],
|
||||
"details": "Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4.\n\n",
|
||||
"details": "Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
@@ -26,6 +26,10 @@
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.vicarius.io/vsociety/posts/chaos-in-the-ai-zoo-exploiting-cve-2024-29090-authenticated-ssrf-in-ai-engine-plugin-by-jordy-meow"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.vicarius.io/vsociety/posts/decoding-the-unseen-threat-exploiting-cve-2024-29090-authenticated-ssrf-in-ai-engine-by-jordy-meow-wordpress-plugin"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
|
||||
@@ -33,7 +33,9 @@
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [],
|
||||
"cwe_ids": [
|
||||
"CWE-79"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
|
||||
@@ -29,7 +29,9 @@
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [],
|
||||
"cwe_ids": [
|
||||
"CWE-79"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
|
||||
@@ -33,7 +33,9 @@
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [],
|
||||
"cwe_ids": [
|
||||
"CWE-79"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
|
||||
@@ -1,12 +1,12 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-22q4-f5r6-3xqw",
|
||||
"modified": "2024-07-22T18:31:47Z",
|
||||
"modified": "2025-02-13T18:32:26Z",
|
||||
"published": "2024-04-17T18:31:36Z",
|
||||
"aliases": [
|
||||
"CVE-2024-2961"
|
||||
],
|
||||
"details": "The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.\n",
|
||||
"details": "The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
@@ -43,6 +43,18 @@
|
||||
"type": "WEB",
|
||||
"url": "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.ambionics.io/blog/iconv-cve-2024-2961-p1"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.ambionics.io/blog/iconv-cve-2024-2961-p2"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.ambionics.io/blog/iconv-cve-2024-2961-p3"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2024/04/17/9"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-68ww-8rpc-355h",
|
||||
"modified": "2024-04-09T21:32:00Z",
|
||||
"modified": "2025-02-13T18:32:25Z",
|
||||
"published": "2024-04-09T21:32:00Z",
|
||||
"aliases": [
|
||||
"CVE-2024-2738"
|
||||
@@ -37,7 +37,9 @@
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [],
|
||||
"cwe_ids": [
|
||||
"CWE-79"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-7hpg-wrjj-gghq",
|
||||
"modified": "2024-11-12T21:30:49Z",
|
||||
"modified": "2025-02-13T18:32:25Z",
|
||||
"published": "2024-04-10T15:30:40Z",
|
||||
"aliases": [
|
||||
"CVE-2024-31309"
|
||||
|
||||
@@ -1,12 +1,12 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-82x4-8q4x-2qxv",
|
||||
"modified": "2024-06-10T18:30:57Z",
|
||||
"modified": "2025-02-13T18:32:28Z",
|
||||
"published": "2024-04-29T15:30:28Z",
|
||||
"aliases": [
|
||||
"CVE-2024-27322"
|
||||
],
|
||||
"details": "Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not including 4.4.0, enabling a maliciously crafted RDS (R Data Serialization) formatted file or R package to run arbitrary code on an end user’s system when interacted with.\n",
|
||||
"details": "Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not including 4.4.0, enabling a maliciously crafted RDS (R Data Serialization) formatted file or R package to run arbitrary code on an end user’s system when interacted with.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
|
||||
@@ -1,12 +1,12 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-rx5p-gx7r-2xj5",
|
||||
"modified": "2024-05-01T18:30:40Z",
|
||||
"modified": "2025-02-13T18:32:27Z",
|
||||
"published": "2024-04-25T12:30:49Z",
|
||||
"aliases": [
|
||||
"CVE-2024-25583"
|
||||
],
|
||||
"details": "A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected.\n\n",
|
||||
"details": "A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
|
||||
@@ -1,12 +1,12 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-55g9-rgmx-hvww",
|
||||
"modified": "2024-06-10T18:30:58Z",
|
||||
"modified": "2025-02-13T18:32:29Z",
|
||||
"published": "2024-05-14T15:32:52Z",
|
||||
"aliases": [
|
||||
"CVE-2024-25581"
|
||||
],
|
||||
"details": "When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer (AXFR or IXFR) over DNS over HTTPS, causing the process to stop and thus leading to a Denial of Service. DNS over HTTPS is not enabled by default, and backends are using plain DNS (Do53) by default.\n\n",
|
||||
"details": "When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer (AXFR or IXFR) over DNS over HTTPS, causing the process to stop and thus leading to a Denial of Service. DNS over HTTPS is not enabled by default, and backends are using plain DNS (Do53) by default.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user