diff --git a/advisories/unreviewed/2025/03/GHSA-h36j-8vv3-cj52/GHSA-h36j-8vv3-cj52.json b/advisories/github-reviewed/2025/03/GHSA-h36j-8vv3-cj52/GHSA-h36j-8vv3-cj52.json similarity index 55% rename from advisories/unreviewed/2025/03/GHSA-h36j-8vv3-cj52/GHSA-h36j-8vv3-cj52.json rename to advisories/github-reviewed/2025/03/GHSA-h36j-8vv3-cj52/GHSA-h36j-8vv3-cj52.json index ae2bb06124c..684f46bcea6 100644 --- a/advisories/unreviewed/2025/03/GHSA-h36j-8vv3-cj52/GHSA-h36j-8vv3-cj52.json +++ b/advisories/github-reviewed/2025/03/GHSA-h36j-8vv3-cj52/GHSA-h36j-8vv3-cj52.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-h36j-8vv3-cj52", - "modified": "2025-03-20T12:32:46Z", + "modified": "2025-03-21T21:16:01Z", "published": "2025-03-20T12:32:46Z", "aliases": [ "CVE-2024-7776" ], + "summary": "Open Neural Network Exchange (ONNX) Path Traversal Vulnerability", "details": "A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.", "severity": [ { @@ -13,12 +14,44 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "onnx" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.17.0" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7776" }, + { + "type": "WEB", + "url": "https://github.com/onnx/onnx/pull/6222" + }, + { + "type": "WEB", + "url": "https://github.com/onnx/onnx/commit/1b70f9b673259360b6a2339c4bd97db9ea6e552f" + }, + { + "type": "PACKAGE", + "url": "https://github.com/onnx/onnx" + }, { "type": "WEB", "url": "https://huntr.com/bounties/a7a46cf6-1fa0-454b-988c-62d222e83f63" @@ -29,8 +62,8 @@ "CWE-22" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-03-21T21:16:01Z", "nvd_published_at": "2025-03-20T10:15:37Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-x757-hv69-jr45/GHSA-x757-hv69-jr45.json b/advisories/github-reviewed/2025/03/GHSA-x757-hv69-jr45/GHSA-x757-hv69-jr45.json similarity index 63% rename from advisories/unreviewed/2025/03/GHSA-x757-hv69-jr45/GHSA-x757-hv69-jr45.json rename to advisories/github-reviewed/2025/03/GHSA-x757-hv69-jr45/GHSA-x757-hv69-jr45.json index a29fe9e289c..058a0e48b79 100644 --- a/advisories/unreviewed/2025/03/GHSA-x757-hv69-jr45/GHSA-x757-hv69-jr45.json +++ b/advisories/github-reviewed/2025/03/GHSA-x757-hv69-jr45/GHSA-x757-hv69-jr45.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-x757-hv69-jr45", - "modified": "2025-03-20T12:32:46Z", + "modified": "2025-03-21T21:16:29Z", "published": "2025-03-20T12:32:46Z", "aliases": [ "CVE-2024-7959" ], + "summary": "Open WebUI has SSRF in /openai/models", "details": "The `/openai/models` endpoint in open-webui/open-webui version 0.3.8 is vulnerable to Server-Side Request Forgery (SSRF). An attacker can change the OpenAI URL to any URL without checks, causing the endpoint to send a request to the specified URL and return the output. This vulnerability allows the attacker to access internal services and potentially gain command execution by accessing instance secrets.", "severity": [ { @@ -13,12 +14,36 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "open-webui" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "0.3.8" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7959" }, + { + "type": "PACKAGE", + "url": "https://github.com/open-webui/open-webui" + }, { "type": "WEB", "url": "https://huntr.com/bounties/3c8bea0a-d678-4d67-bb9c-2b5b610a2193" @@ -29,8 +54,8 @@ "CWE-918" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-03-21T21:16:29Z", "nvd_published_at": "2025-03-20T10:15:38Z" } } \ No newline at end of file