From ca688202b850d249e7431877fb38d83776af7d35 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 3 Apr 2025 13:25:42 +0000 Subject: [PATCH] Publish Advisories GHSA-83qj-6fr2-vhqg GHSA-223j-4rm8-mrmf GHSA-2c59-37c4-qrx5 GHSA-3w85-5p9g-h334 GHSA-wqcc-mfhw-53pc --- .../GHSA-83qj-6fr2-vhqg/GHSA-83qj-6fr2-vhqg.json | 10 +++++++++- .../GHSA-223j-4rm8-mrmf/GHSA-223j-4rm8-mrmf.json | 10 +++++++--- .../GHSA-2c59-37c4-qrx5/GHSA-2c59-37c4-qrx5.json | 6 +++++- .../GHSA-3w85-5p9g-h334/GHSA-3w85-5p9g-h334.json | 6 +++++- .../GHSA-wqcc-mfhw-53pc/GHSA-wqcc-mfhw-53pc.json | 14 +++++++++++++- 5 files changed, 39 insertions(+), 7 deletions(-) diff --git a/advisories/github-reviewed/2025/03/GHSA-83qj-6fr2-vhqg/GHSA-83qj-6fr2-vhqg.json b/advisories/github-reviewed/2025/03/GHSA-83qj-6fr2-vhqg/GHSA-83qj-6fr2-vhqg.json index 33d815f84c4..d9e862e6f2a 100644 --- a/advisories/github-reviewed/2025/03/GHSA-83qj-6fr2-vhqg/GHSA-83qj-6fr2-vhqg.json +++ b/advisories/github-reviewed/2025/03/GHSA-83qj-6fr2-vhqg/GHSA-83qj-6fr2-vhqg.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-83qj-6fr2-vhqg", - "modified": "2025-03-28T14:53:39Z", + "modified": "2025-04-03T13:23:53Z", "published": "2025-03-10T18:31:56Z", "aliases": [ "CVE-2025-24813" @@ -9,6 +9,10 @@ "summary": "Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT", "details": "Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98.\n\nIf all of the following were true, a malicious user was able to view security sensitive files and/or inject content into those files:\n- writes enabled for the default servlet (disabled by default)\n- support for partial PUT (enabled by default)\n- a target URL for security sensitive uploads that was a sub-directory of a target URL for public uploads\n- attacker knowledge of the names of security sensitive files being uploaded\n- the security sensitive files also being uploaded via partial PUT\n\nIf all of the following were true, a malicious user was able to perform remote code execution:\n- writes enabled for the default servlet (disabled by default)\n- support for partial PUT (enabled by default)\n- application was using Tomcat's file based session persistence with the default storage location\n- application included a library that may be leveraged in a deserialization attack\n\nUsers are recommended to upgrade to version 11.0.3, 10.1.35 or 9.0.99, which fixes the issue.", "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, { "type": "CVSS_V4", "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" @@ -159,6 +163,10 @@ "type": "WEB", "url": "https://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq" }, + { + "type": "WEB", + "url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00003.html" + }, { "type": "WEB", "url": "https://security.netapp.com/advisory/ntap-20250321-0001" diff --git a/advisories/github-reviewed/2025/04/GHSA-223j-4rm8-mrmf/GHSA-223j-4rm8-mrmf.json b/advisories/github-reviewed/2025/04/GHSA-223j-4rm8-mrmf/GHSA-223j-4rm8-mrmf.json index 790b580f684..da362aa8d25 100644 --- a/advisories/github-reviewed/2025/04/GHSA-223j-4rm8-mrmf/GHSA-223j-4rm8-mrmf.json +++ b/advisories/github-reviewed/2025/04/GHSA-223j-4rm8-mrmf/GHSA-223j-4rm8-mrmf.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-223j-4rm8-mrmf", - "modified": "2025-04-02T22:35:38Z", + "modified": "2025-04-03T13:24:25Z", "published": "2025-04-02T22:35:37Z", "aliases": [ "CVE-2025-30218" ], "summary": "Next.js may leak x-middleware-subrequest-id to external hosts", - "details": "## Summary\nIn the process of remediating [CVE-2025-29927](https://github.com/advisories/GHSA-f82v-jwr5-mffw), we looked at other possible exploits of Middleware. We independently verified this low severity vulnerability in parallel with two reports from independent researchers.\n\nLearn more [here](https://vercel.com/changelog/cve-2025-30218-5DREmEH765PoeAsrNNQj3O).\n\n## Credit\n\nThank you to Jinseo Kim [kjsman](https://hackerone.com/kjsman?type=user) and [ryotak](https://hackerone.com/ryotak?type=user) for the responsible disclosure. These researchers were awarded as part of our bug bounty program.", + "details": "## Summary\nIn the process of remediating [CVE-2025-29927](https://github.com/advisories/GHSA-f82v-jwr5-mffw), we looked at other possible exploits of Middleware. We independently verified this low severity vulnerability in parallel with two reports from independent researchers.\n\nLearn more [here](https://vercel.com/changelog/cve-2025-30218-5DREmEH765PoeAsrNNQj3O).\n\n## Credit\n\nThank you to Jinseo Kim [kjsman](https://hackerone.com/kjsman?type=user) and [RyotaK](https://hackerone.com/ryotak?type=user) (GMO Flatt Security Inc.) with [takumi-san.ai](https://takumi-san.ai) for the responsible disclosure. These researchers were awarded as part of our bug bounty program.", "severity": [ { "type": "CVSS_V4", @@ -109,6 +109,10 @@ "type": "WEB", "url": "https://github.com/vercel/next.js/security/advisories/GHSA-223j-4rm8-mrmf" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30218" + }, { "type": "PACKAGE", "url": "https://github.com/vercel/next.js" @@ -125,6 +129,6 @@ "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2025-04-02T22:35:37Z", - "nvd_published_at": null + "nvd_published_at": "2025-04-02T22:15:19Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2025/04/GHSA-2c59-37c4-qrx5/GHSA-2c59-37c4-qrx5.json b/advisories/github-reviewed/2025/04/GHSA-2c59-37c4-qrx5/GHSA-2c59-37c4-qrx5.json index 8d2418ecb2e..3e4a6a74d21 100644 --- a/advisories/github-reviewed/2025/04/GHSA-2c59-37c4-qrx5/GHSA-2c59-37c4-qrx5.json +++ b/advisories/github-reviewed/2025/04/GHSA-2c59-37c4-qrx5/GHSA-2c59-37c4-qrx5.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-2c59-37c4-qrx5", - "modified": "2025-04-01T18:04:17Z", + "modified": "2025-04-03T13:24:31Z", "published": "2025-04-01T09:30:20Z", "aliases": [ "CVE-2025-30065" @@ -59,6 +59,10 @@ { "type": "WEB", "url": "https://lists.apache.org/thread/okzqb3kn479gqzxm21gg5vqr35om9gw5" + }, + { + "type": "WEB", + "url": "http://www.openwall.com/lists/oss-security/2025/04/01/1" } ], "database_specific": { diff --git a/advisories/github-reviewed/2025/04/GHSA-3w85-5p9g-h334/GHSA-3w85-5p9g-h334.json b/advisories/github-reviewed/2025/04/GHSA-3w85-5p9g-h334/GHSA-3w85-5p9g-h334.json index f4a0b4550c0..4fd84cc2419 100644 --- a/advisories/github-reviewed/2025/04/GHSA-3w85-5p9g-h334/GHSA-3w85-5p9g-h334.json +++ b/advisories/github-reviewed/2025/04/GHSA-3w85-5p9g-h334/GHSA-3w85-5p9g-h334.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-3w85-5p9g-h334", - "modified": "2025-04-01T18:04:06Z", + "modified": "2025-04-03T13:23:24Z", "published": "2025-04-01T09:30:19Z", "aliases": [ "CVE-2025-27427" @@ -59,6 +59,10 @@ { "type": "WEB", "url": "https://lists.apache.org/thread/8dzlm2vkqphyrnkrby8r8kzndsm5o6x8" + }, + { + "type": "WEB", + "url": "http://www.openwall.com/lists/oss-security/2025/03/31/1" } ], "database_specific": { diff --git a/advisories/github-reviewed/2025/04/GHSA-wqcc-mfhw-53pc/GHSA-wqcc-mfhw-53pc.json b/advisories/github-reviewed/2025/04/GHSA-wqcc-mfhw-53pc/GHSA-wqcc-mfhw-53pc.json index a86ebd84b35..f19112043dd 100644 --- a/advisories/github-reviewed/2025/04/GHSA-wqcc-mfhw-53pc/GHSA-wqcc-mfhw-53pc.json +++ b/advisories/github-reviewed/2025/04/GHSA-wqcc-mfhw-53pc/GHSA-wqcc-mfhw-53pc.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-wqcc-mfhw-53pc", - "modified": "2025-04-01T18:20:04Z", + "modified": "2025-04-03T13:23:36Z", "published": "2025-04-01T09:30:20Z", "aliases": [ "CVE-2025-29868" @@ -9,6 +9,10 @@ "summary": "Apache Answer User Using External Images Potentially Discloses User Information", "details": "Private Data Structure Returned From A Public Method vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 1.4.2.\n\nIf a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of that accessing user.\nUsers are recommended to upgrade to version 1.4.5, which fixes the issue. In the new version, administrators can set whether external content can be displayed.", "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" + }, { "type": "CVSS_V4", "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" @@ -51,6 +55,14 @@ { "type": "WEB", "url": "https://lists.apache.org/thread/l7pohw5g03g3qsvrz8pqc9t29mdv5lhf" + }, + { + "type": "WEB", + "url": "http://www.openwall.com/lists/oss-security/2025/04/01/2" + }, + { + "type": "WEB", + "url": "http://www.openwall.com/lists/oss-security/2025/04/02/1" } ], "database_specific": {