Publish Advisories

GHSA-83qj-6fr2-vhqg GHSA-223j-4rm8-mrmf GHSA-2c59-37c4-qrx5 GHSA-3w85-5p9g-h334 GHSA-wqcc-mfhw-53pc
2026-05-22 18:04:22 -07:00 · 2025-04-03 13:25:42 +00:00
parent 03024e8330
commit ca688202b8
5 changed files with 39 additions and 7 deletions
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-83qj-6fr2-vhqg",
-  "modified": "2025-03-28T14:53:39Z",
+  "modified": "2025-04-03T13:23:53Z",
  "published": "2025-03-10T18:31:56Z",
  "aliases": [
    "CVE-2025-24813"
@@ -9,6 +9,10 @@
  "summary": "Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT",
  "details": "Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98.\n\nIf all of the following were true, a malicious user was able to view security sensitive files and/or inject content into those files:\n- writes enabled for the default servlet (disabled by default)\n- support for partial PUT (enabled by default)\n- a target URL for security sensitive uploads that was a sub-directory of a target URL for public uploads\n- attacker knowledge of the names of security sensitive files being uploaded\n- the security sensitive files also being uploaded via partial PUT\n\nIf all of the following were true, a malicious user was able to perform remote code execution:\n- writes enabled for the default servlet (disabled by default)\n- support for partial PUT (enabled by default)\n- application was using Tomcat's file based session persistence with the default storage location\n- application included a library that may be leveraged in a deserialization attack\n\nUsers are recommended to upgrade to version 11.0.3, 10.1.35 or 9.0.99, which fixes the issue.",
  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
    {
      "type": "CVSS_V4",
      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
@@ -159,6 +163,10 @@
      "type": "WEB",
      "url": "https://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq"
    },
+    {
+      "type": "WEB",
+      "url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00003.html"
+    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20250321-0001"
@@ -1,13 +1,13 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-223j-4rm8-mrmf",
-  "modified": "2025-04-02T22:35:38Z",
+  "modified": "2025-04-03T13:24:25Z",
  "published": "2025-04-02T22:35:37Z",
  "aliases": [
    "CVE-2025-30218"
  ],
  "summary": "Next.js may leak x-middleware-subrequest-id to external hosts",
-  "details": "## Summary\nIn the process of remediating [CVE-2025-29927](https://github.com/advisories/GHSA-f82v-jwr5-mffw), we looked at other possible exploits of Middleware. We independently verified this low severity vulnerability in parallel with two reports from independent researchers.\n\nLearn more [here](https://vercel.com/changelog/cve-2025-30218-5DREmEH765PoeAsrNNQj3O).\n\n## Credit\n\nThank you to Jinseo Kim [kjsman](https://hackerone.com/kjsman?type=user) and [ryotak](https://hackerone.com/ryotak?type=user) for the responsible disclosure. These researchers were awarded as part of our bug bounty program.",
+  "details": "## Summary\nIn the process of remediating [CVE-2025-29927](https://github.com/advisories/GHSA-f82v-jwr5-mffw), we looked at other possible exploits of Middleware. We independently verified this low severity vulnerability in parallel with two reports from independent researchers.\n\nLearn more [here](https://vercel.com/changelog/cve-2025-30218-5DREmEH765PoeAsrNNQj3O).\n\n## Credit\n\nThank you to Jinseo Kim [kjsman](https://hackerone.com/kjsman?type=user) and [RyotaK](https://hackerone.com/ryotak?type=user) (GMO Flatt Security Inc.) with [takumi-san.ai](https://takumi-san.ai) for the responsible disclosure. These researchers were awarded as part of our bug bounty program.",
  "severity": [
    {
      "type": "CVSS_V4",
@@ -109,6 +109,10 @@
      "type": "WEB",
      "url": "https://github.com/vercel/next.js/security/advisories/GHSA-223j-4rm8-mrmf"
    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30218"
+    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/vercel/next.js"
@@ -125,6 +129,6 @@
    "severity": "LOW",
    "github_reviewed": true,
    "github_reviewed_at": "2025-04-02T22:35:37Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2025-04-02T22:15:19Z"
  }
 }
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2c59-37c4-qrx5",
-  "modified": "2025-04-01T18:04:17Z",
+  "modified": "2025-04-03T13:24:31Z",
  "published": "2025-04-01T09:30:20Z",
  "aliases": [
    "CVE-2025-30065"
@@ -59,6 +59,10 @@
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/okzqb3kn479gqzxm21gg5vqr35om9gw5"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/04/01/1"
    }
  ],
  "database_specific": {
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-3w85-5p9g-h334",
-  "modified": "2025-04-01T18:04:06Z",
+  "modified": "2025-04-03T13:23:24Z",
  "published": "2025-04-01T09:30:19Z",
  "aliases": [
    "CVE-2025-27427"
@@ -59,6 +59,10 @@
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/8dzlm2vkqphyrnkrby8r8kzndsm5o6x8"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/03/31/1"
    }
  ],
  "database_specific": {
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-wqcc-mfhw-53pc",
-  "modified": "2025-04-01T18:20:04Z",
+  "modified": "2025-04-03T13:23:36Z",
  "published": "2025-04-01T09:30:20Z",
  "aliases": [
    "CVE-2025-29868"
@@ -9,6 +9,10 @@
  "summary": "Apache Answer User Using External Images Potentially Discloses User Information",
  "details": "Private Data Structure Returned From A Public Method vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 1.4.2.\n\nIf a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of that accessing user.\nUsers are recommended to upgrade to version 1.4.5, which fixes the issue. In the new version, administrators can set whether external content can be displayed.",
  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
+    },
    {
      "type": "CVSS_V4",
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U"
@@ -51,6 +55,14 @@
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/l7pohw5g03g3qsvrz8pqc9t29mdv5lhf"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/04/01/2"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/04/02/1"
    }
  ],
  "database_specific": {