netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-2r46-cwgm-vvjx
GHSA-45fr-w365-f7pm
GHSA-6j5j-w6v4-rwqr
GHSA-rcrv-6r7r-rr7m
This commit is contained in:
advisory-database[bot]
2024-01-30 21:44:43 +00:00
parent ab272dd314
commit d83684939b
4 changed files with 92 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-2r46-cwgm-vvjx/GHSA-2r46-cwgm-vvjx.json → advisories/github-reviewed/2022/05/GHSA-2r46-cwgm-vvjx/GHSA-2r46-cwgm-vvjx.json
+23 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2r46-cwgm-vvjx",
"modified": "2022-05-13T01:15:04Z",
"modified": "2024-01-30T21:44:05Z",
"published": "2022-05-13T01:15:04Z",
"aliases": [
"CVE-2019-10279"
],
"summary": "Missing permission check in Jenkins jenkins-reviewbot Plugin",
"details": "A missing permission check in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.",
"severity": [
{
@@ -14,7 +15,25 @@
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.jenkins-ci.plugins:jenkins-reviewbot"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.4.6"
}
]
}
]
}
],
"references": [
{
@@ -39,8 +58,8 @@
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T21:44:05Z",
"nvd_published_at": "2019-04-04T16:29:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-45fr-w365-f7pm/GHSA-45fr-w365-f7pm.json → advisories/github-reviewed/2022/05/GHSA-45fr-w365-f7pm/GHSA-45fr-w365-f7pm.json
+23 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-45fr-w365-f7pm",
"modified": "2022-05-13T01:17:45Z",
"modified": "2024-01-30T21:43:38Z",
"published": "2022-05-13T01:17:45Z",
"aliases": [
"CVE-2019-1003053"
],
"summary": "Jenkins HockeyApp Plugin stores credentials in plain text",
"details": "Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.",
"severity": [
{
@@ -14,7 +15,25 @@
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.jenkins-ci.plugins:hockeyapp"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.4.0"
}
]
}
]
}
],
"references": [
{
@@ -39,8 +58,8 @@
"CWE-311"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T21:43:38Z",
"nvd_published_at": "2019-04-04T16:29:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-6j5j-w6v4-rwqr/GHSA-6j5j-w6v4-rwqr.json → advisories/github-reviewed/2022/05/GHSA-6j5j-w6v4-rwqr/GHSA-6j5j-w6v4-rwqr.json
+23 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6j5j-w6v4-rwqr",
"modified": "2022-05-13T01:25:43Z",
"modified": "2024-01-30T21:43:14Z",
"published": "2022-05-13T01:25:43Z",
"aliases": [
"CVE-2019-1003078"
],
"summary": "Jenkins VMware Lab Manager Slaves Plugin vulnerable CSRF vulnerability",
"details": "A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.",
"severity": [
{
@@ -14,7 +15,25 @@
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.jenkins-ci.plugins:labmanager"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "0.2.8"
}
]
}
]
}
],
"references": [
{
@@ -35,8 +54,8 @@
"CWE-352"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T21:43:14Z",
"nvd_published_at": "2019-04-04T16:29:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-rcrv-6r7r-rr7m/GHSA-rcrv-6r7r-rr7m.json → advisories/github-reviewed/2022/05/GHSA-rcrv-6r7r-rr7m/GHSA-rcrv-6r7r-rr7m.json
+23 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rcrv-6r7r-rr7m",
"modified": "2022-05-13T01:17:45Z",
"modified": "2024-01-30T21:43:50Z",
"published": "2022-05-13T01:17:45Z",
"aliases": [
"CVE-2019-1003059"
],
"summary": "Missing permission check in Jenkins FTP publisher Plugin",
"details": "A missing permission check in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginCheck method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.",
"severity": [
{
@@ -14,7 +15,25 @@
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.jvnet.hudson.plugins:ftppublisher"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.2"
}
]
}
]
}
],
"references": [
{
@@ -39,8 +58,8 @@
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T21:43:50Z",
"nvd_published_at": "2019-04-04T16:29:00Z"
}
}