From ccb2481e436039bb05efa57ba166fa5cb858a80d Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 11 Oct 2024 19:45:40 +0000 Subject: [PATCH] Publish Advisories GHSA-6h64-g7cj-hj56 GHSA-vgxq-6rcf-qwrw GHSA-6h64-g7cj-hj56 GHSA-vgxq-6rcf-qwrw --- .../GHSA-6h64-g7cj-hj56.json | 69 +++++++++++++++++++ .../GHSA-vgxq-6rcf-qwrw.json | 69 +++++++++++++++++++ .../GHSA-6h64-g7cj-hj56.json | 42 ----------- .../GHSA-vgxq-6rcf-qwrw.json | 39 ----------- 4 files changed, 138 insertions(+), 81 deletions(-) create mode 100644 advisories/github-reviewed/2024/10/GHSA-6h64-g7cj-hj56/GHSA-6h64-g7cj-hj56.json create mode 100644 advisories/github-reviewed/2024/10/GHSA-vgxq-6rcf-qwrw/GHSA-vgxq-6rcf-qwrw.json delete mode 100644 advisories/unreviewed/2024/10/GHSA-6h64-g7cj-hj56/GHSA-6h64-g7cj-hj56.json delete mode 100644 advisories/unreviewed/2024/10/GHSA-vgxq-6rcf-qwrw/GHSA-vgxq-6rcf-qwrw.json diff --git a/advisories/github-reviewed/2024/10/GHSA-6h64-g7cj-hj56/GHSA-6h64-g7cj-hj56.json b/advisories/github-reviewed/2024/10/GHSA-6h64-g7cj-hj56/GHSA-6h64-g7cj-hj56.json new file mode 100644 index 00000000000..633504d6d18 --- /dev/null +++ b/advisories/github-reviewed/2024/10/GHSA-6h64-g7cj-hj56/GHSA-6h64-g7cj-hj56.json @@ -0,0 +1,69 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6h64-g7cj-hj56", + "modified": "2024-10-11T19:44:03Z", + "published": "2024-10-11T18:32:50Z", + "aliases": [ + "CVE-2024-6985" + ], + "summary": "Lord of Large Language Models (LoLLMs) path traversal vulnerability in the api open_personality_folder endpoint", + "details": "A path traversal vulnerability exists in the api open_personality_folder endpoint of parisneo/lollms. This vulnerability allows an attacker to read any folder in the personality_folder on the victim's computer, even though sanitize_path is set. The issue arises due to improper sanitization of the personality_folder parameter, which can be exploited to traverse directories and access arbitrary files.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "lollms" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "9.5.1" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6985" + }, + { + "type": "WEB", + "url": "https://github.com/parisneo/lollms/commit/28ee567a9a120967215ff19b96ab7515ce469620" + }, + { + "type": "PACKAGE", + "url": "https://github.com/ParisNeo/lollms" + }, + { + "type": "WEB", + "url": "https://huntr.com/bounties/79c11579-47d8-4e68-8466-b47c3bf5ef6a" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-23" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-10-11T19:44:03Z", + "nvd_published_at": "2024-10-11T16:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2024/10/GHSA-vgxq-6rcf-qwrw/GHSA-vgxq-6rcf-qwrw.json b/advisories/github-reviewed/2024/10/GHSA-vgxq-6rcf-qwrw/GHSA-vgxq-6rcf-qwrw.json new file mode 100644 index 00000000000..feac8a312c8 --- /dev/null +++ b/advisories/github-reviewed/2024/10/GHSA-vgxq-6rcf-qwrw/GHSA-vgxq-6rcf-qwrw.json @@ -0,0 +1,69 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vgxq-6rcf-qwrw", + "modified": "2024-10-11T19:44:05Z", + "published": "2024-10-11T18:32:49Z", + "aliases": [ + "CVE-2024-42640" + ], + "summary": "angular-base64-upload vulnerable to unauthenticated remote code execution", + "details": "angular-base64-upload versions prior to v0.1.21 are vulnerable to unauthenticated remote code execution via the `angular-base64-upload/demo/server.php` endpoint. Exploitation of this vulnerability involves uploading arbitrary file content to the server, which can subsequently accessed through the `angular-base64-upload/demo/uploads` endpoint. This leads to the execution of previously uploaded content which enables the attacker to achieve code execution on the server.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "npm", + "name": "angular-base64-upload" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.1.21" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42640" + }, + { + "type": "PACKAGE", + "url": "https://github.com/adonespitogo/angular-base64-upload" + }, + { + "type": "WEB", + "url": "https://github.com/rvizx/CVE-2024-42640" + }, + { + "type": "WEB", + "url": "https://www.zyenra.com/blog/unauthenticated-rce-in-angular-base64-upload.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-434" + ], + "severity": "CRITICAL", + "github_reviewed": true, + "github_reviewed_at": "2024-10-11T19:44:05Z", + "nvd_published_at": "2024-10-11T16:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-6h64-g7cj-hj56/GHSA-6h64-g7cj-hj56.json b/advisories/unreviewed/2024/10/GHSA-6h64-g7cj-hj56/GHSA-6h64-g7cj-hj56.json deleted file mode 100644 index 77fd4b608a8..00000000000 --- a/advisories/unreviewed/2024/10/GHSA-6h64-g7cj-hj56/GHSA-6h64-g7cj-hj56.json +++ /dev/null @@ -1,42 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-6h64-g7cj-hj56", - "modified": "2024-10-11T18:32:50Z", - "published": "2024-10-11T18:32:50Z", - "aliases": [ - "CVE-2024-6985" - ], - "details": "A path traversal vulnerability exists in the api open_personality_folder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personality_folder on the victim's computer, even though sanitize_path is set. The issue arises due to improper sanitization of the personality_folder parameter, which can be exploited to traverse directories and access arbitrary files.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" - } - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6985" - }, - { - "type": "WEB", - "url": "https://github.com/parisneo/lollms/commit/28ee567a9a120967215ff19b96ab7515ce469620" - }, - { - "type": "WEB", - "url": "https://huntr.com/bounties/79c11579-47d8-4e68-8466-b47c3bf5ef6a" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-23" - ], - "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2024-10-11T16:15:14Z" - } -} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-vgxq-6rcf-qwrw/GHSA-vgxq-6rcf-qwrw.json b/advisories/unreviewed/2024/10/GHSA-vgxq-6rcf-qwrw/GHSA-vgxq-6rcf-qwrw.json deleted file mode 100644 index 405e860b20b..00000000000 --- a/advisories/unreviewed/2024/10/GHSA-vgxq-6rcf-qwrw/GHSA-vgxq-6rcf-qwrw.json +++ /dev/null @@ -1,39 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-vgxq-6rcf-qwrw", - "modified": "2024-10-11T18:32:49Z", - "published": "2024-10-11T18:32:49Z", - "aliases": [ - "CVE-2024-42640" - ], - "details": "angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of previously uploaded content and enables the attacker to achieve code execution on the server. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.", - "severity": [ - - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42640" - }, - { - "type": "WEB", - "url": "https://github.com/adonespitogo/angular-base64-upload" - }, - { - "type": "WEB", - "url": "https://www.zyenra.com/blog/unauthenticated-rce-in-angular-base64-upload.html" - } - ], - "database_specific": { - "cwe_ids": [ - - ], - "severity": null, - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2024-10-11T16:15:08Z" - } -} \ No newline at end of file