diff --git a/advisories/github-reviewed/2022/05/GHSA-h2p3-h48h-9jj7/GHSA-h2p3-h48h-9jj7.json b/advisories/github-reviewed/2022/05/GHSA-h2p3-h48h-9jj7/GHSA-h2p3-h48h-9jj7.json new file mode 100644 index 00000000000..bee7ee0efd5 --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-h2p3-h48h-9jj7/GHSA-h2p3-h48h-9jj7.json @@ -0,0 +1,61 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h2p3-h48h-9jj7", + "modified": "2024-04-22T23:18:39Z", + "published": "2022-05-13T01:41:00Z", + "aliases": [ + "CVE-2017-1000220" + ], + "summary": "PIDUsage Enables OS Command Injection", + "details": "### Overview\nAffected versions of pidusage pass unsanitized input to `child_process.exec()`, resulting in arbitrary code execution in the `ps` method.\n\nThis package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX.\n\nWindows and Linux are not vulnerable.\n\n### Proof of Concept\n```js\nvar pid = require('pidusage');\npid.stat('1 && /usr/local/bin/python');\n```\n\n### Remediation\nUpdate to version 1.1.5 or later.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "npm", + "name": "pidusage" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "1.1.4" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000220" + }, + { + "type": "PACKAGE", + "url": "https://github.com/soyuka/pidusage" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20201208183910/https://www.npmjs.com/advisories/356" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "CRITICAL", + "github_reviewed": true, + "github_reviewed_at": "2024-04-22T23:18:39Z", + "nvd_published_at": "2017-11-17T01:29:00Z" + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2022/08/GHSA-h8hf-x3f4-xwgp/GHSA-h8hf-x3f4-xwgp.json b/advisories/github-reviewed/2022/08/GHSA-h8hf-x3f4-xwgp/GHSA-h8hf-x3f4-xwgp.json new file mode 100644 index 00000000000..ab67e422d27 --- /dev/null +++ b/advisories/github-reviewed/2022/08/GHSA-h8hf-x3f4-xwgp/GHSA-h8hf-x3f4-xwgp.json @@ -0,0 +1,92 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h8hf-x3f4-xwgp", + "modified": "2024-04-22T23:17:47Z", + "published": "2022-08-27T00:00:54Z", + "aliases": [ + "CVE-2022-24304" + ], + "summary": "Mongoose Vulnerable to Prototype Pollution in Schema Object", + "details": "### Description\nMongoose is a MongoDB object modeling tool designed to work in an asynchronous environment.\n\nAffected versions of this package are vulnerable to Prototype Pollution. The `Schema.path()` function is vulnerable to prototype pollution when setting the `schema` object. This vulnerability allows modification of the Object prototype and could be manipulated into a Denial of Service (DoS) attack.\n\n### Proof of Concept\n```js\n// poc.js\nconst mongoose = require('mongoose');\nconst schema = new mongoose.Schema();\n\nmalicious_payload = '__proto__.toString'\n\nschema.path(malicious_payload, [String])\n\nx = {}\nconsole.log(x.toString()) // crashed (Denial of service (DoS) attack)\n```\n\n### Impact\nThis vulnerability can be manipulated to exploit other types of attacks, such as Denial of service (DoS), Remote Code Execution, or Property Injection.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "npm", + "name": "mongoose" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "6.0.0" + }, + { + "fixed": "6.4.6" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "npm", + "name": "mongoose" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "5.13.15" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24304" + }, + { + "type": "WEB", + "url": "https://github.com/Automattic/mongoose/issues/12085" + }, + { + "type": "WEB", + "url": "https://github.com/Automattic/mongoose/commit/6a197316564742c0422309e1b5fecfa4faec126e" + }, + { + "type": "WEB", + "url": "https://github.com/Automattic/mongoose/commit/a45cfb6b0ce0067ae9794cfa80f7917e1fb3c6f8" + }, + { + "type": "WEB", + "url": "https://github.com/Automattic/mongoose/blob/51e758541763b6f14569744ced15cc23ab8b50c6/lib/schema.js#L88-L141" + }, + { + "type": "WEB", + "url": "https://huntr.dev/bounties/055be524-9296-4b2f-b68d-6d5b810d1ddd" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-1321" + ], + "severity": "CRITICAL", + "github_reviewed": true, + "github_reviewed_at": "2024-04-22T23:17:47Z", + "nvd_published_at": "2022-08-26T05:15:00Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-h2p3-h48h-9jj7/GHSA-h2p3-h48h-9jj7.json b/advisories/unreviewed/2022/05/GHSA-h2p3-h48h-9jj7/GHSA-h2p3-h48h-9jj7.json deleted file mode 100644 index 1b0c129f707..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-h2p3-h48h-9jj7/GHSA-h2p3-h48h-9jj7.json +++ /dev/null @@ -1,38 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-h2p3-h48h-9jj7", - "modified": "2022-05-13T01:41:00Z", - "published": "2022-05-13T01:41:00Z", - "aliases": [ - "CVE-2017-1000220" - ], - "details": "soyuka/pidusage <=1.1.4 is vulnerable to command injection in the module resulting in arbitrary command execution", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" - } - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000220" - }, - { - "type": "WEB", - "url": "https://nodesecurity.io/advisories/356" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-78" - ], - "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2017-11-17T01:29:00Z" - } -} \ No newline at end of file diff --git a/advisories/unreviewed/2022/08/GHSA-h8hf-x3f4-xwgp/GHSA-h8hf-x3f4-xwgp.json b/advisories/unreviewed/2022/08/GHSA-h8hf-x3f4-xwgp/GHSA-h8hf-x3f4-xwgp.json deleted file mode 100644 index 2586b47ef78..00000000000 --- a/advisories/unreviewed/2022/08/GHSA-h8hf-x3f4-xwgp/GHSA-h8hf-x3f4-xwgp.json +++ /dev/null @@ -1,46 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-h8hf-x3f4-xwgp", - "modified": "2022-09-01T00:00:17Z", - "published": "2022-08-27T00:00:54Z", - "aliases": [ - "CVE-2022-24304" - ], - "details": "Schema in lib/schema.js in Mongoose before 6.4.6 is vulnerable to prototype pollution.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" - } - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24304" - }, - { - "type": "WEB", - "url": "https://github.com/Automattic/mongoose/commit/a45cfb6b0ce0067ae9794cfa80f7917e1fb3c6f8" - }, - { - "type": "WEB", - "url": "https://github.com/Automattic/mongoose/blob/51e758541763b6f14569744ced15cc23ab8b50c6/lib/schema.js#L88-L141" - }, - { - "type": "WEB", - "url": "https://github.com/Automattic/mongoose/compare/6.4.5...6.4.6" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-1321" - ], - "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2022-08-26T05:15:00Z" - } -} \ No newline at end of file