Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2025-04-16 15:35:29 +00:00
parent c6ac34a290
commit d876962f6f
280 changed files with 8311 additions and 126 deletions
@@ -0,0 +1,61 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-42fh-pvvh-999x",
+  "modified": "2025-04-16T15:33:35Z",
+  "published": "2025-04-16T15:33:35Z",
+  "aliases": [
+    "CVE-2025-32783"
+  ],
+  "summary": "Unregistered users can see \"public\" messages from a closed wiki via notifications from a different wiki",
+  "details": "### Impact\n\nThis vulnerability impacts users of a subwiki of XWiki where Message Stream is enabled and use, if they configured their wiki to be closed by selecting \"Prevent unregistered users to view pages\" in the Administrations Rights. \n\nThe vulnerability is that any message sent in a subwiki to \"everyone\" is actually sent to the farm: any visitor of the main wiki will be able to see that message through the Dashboard, even if the subwiki is configured to be private.\n\n### Patches\n\nThis problem has not been patched and is not going to be patched in the future: Message Stream has been deprecated in XWiki 16.8.0RC1 and is not maintained anymore. \n\n### Workarounds\n\nMessage Stream is disabled by default, it's advised to keep it disabled from Administration > Social > Message Stream.\n\n### References\n\n  * https://jira.xwiki.org/browse/XWIKI-17154",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.xwiki.platform:xwiki-platform-messagestream"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "5.0"
+            },
+            {
+              "last_affected": "16.7.1"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-42fh-pvvh-999x"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/xwiki/xwiki-platform"
+    },
+    {
+      "type": "WEB",
+      "url": "https://jira.xwiki.org/browse/XWIKI-17154"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-668"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-04-16T15:33:35Z",
+    "nvd_published_at": null
+  }
+}
@@ -0,0 +1,55 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f8j4-p5cr-p777",
+  "modified": "2025-04-16T15:34:21Z",
+  "published": "2025-04-16T15:34:21Z",
+  "aliases": [],
+  "summary": "Permission policy information leakage in Backstage permission system",
+  "details": "### Impact\n\nA vulnerability in the Backstage permission plugin backend allows callers to extract some information about the conditional decisions returned by the permission policy installed in the permission backend. If the permission system is not in use or if the installed permission policy does not use conditional decisions, there is no impact.\n\n### Patches\n\nThis issue has been resolved in version `0.6.0` of the permissions backend.\n\n### Workarounds\n\nAdministrators of the permission policies can ensure that they are crafted in such a way that conditional decisions do not contain any sensitive information.\n\n### References\n\nIf you have any questions or comments about this advisory:\n\nOpen an issue in the [Backstage repository](https://github.com/backstage/backstage)\nVisit our Discord, linked to in [Backstage README](https://github.com/backstage/backstage)",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "@backstage/plugin-permission-backend"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.6.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/backstage/backstage/security/advisories/GHSA-f8j4-p5cr-p777"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/backstage/backstage"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-213"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-04-16T15:34:21Z",
+    "nvd_published_at": null
+  }
+}
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5xp9-c9vh-m53w",
-  "modified": "2024-04-04T01:59:10Z",
+  "modified": "2025-04-16T15:34:02Z",
  "published": "2022-05-24T16:56:39Z",
  "aliases": [
    "CVE-2019-16693"
@@ -22,6 +22,10 @@
    {
      "type": "WEB",
      "url": "https://github.com/phpipam/phpipam/issues/2738"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2019-16693.md"
    }
  ],
  "database_specific": {
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-6v7c-9pxp-gfcv",
-  "modified": "2022-05-24T19:17:08Z",
+  "modified": "2025-04-16T15:34:03Z",
  "published": "2022-05-24T19:17:08Z",
  "aliases": [
    "CVE-2021-40617"
  ],
  "details": "An SQL Injection vulnerability exists in openSIS Community Edition version 8.0 via ForgotPassUserName.php.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -17,6 +22,10 @@
    {
      "type": "WEB",
      "url": "https://github.com/OS4ED/openSIS-Classic/issues/192"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2021-40617.md"
    }
  ],
  "database_specific": {
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-88gc-h5ch-vcch",
-  "modified": "2022-05-24T17:23:38Z",
+  "modified": "2025-04-16T15:34:03Z",
  "published": "2022-05-24T17:23:38Z",
  "aliases": [
    "CVE-2020-15718"
  ],
  "details": "RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php script. A remote attacker could exploit this vulnerability using the include_inactive parameter in a crafted URL.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -18,6 +23,10 @@
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/184944"
    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-15718.md"
+    },
    {
      "type": "WEB",
      "url": "https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md"
@@ -36,7 +45,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-fx8g-7gh6-p9vx",
-  "modified": "2022-05-24T17:42:38Z",
+  "modified": "2025-04-16T15:34:03Z",
  "published": "2022-05-24T17:42:38Z",
  "aliases": [
    "CVE-2019-25024"
  ],
  "details": "OpenRepeater (ORP) before 2.2 allows unauthenticated command injection via shell metacharacters in the functions/ajax_system.php post_service parameter.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -18,6 +23,10 @@
      "type": "WEB",
      "url": "https://github.com/OpenRepeater/openrepeater/issues/66"
    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2019-25024.md"
+    },
    {
      "type": "WEB",
      "url": "https://github.com/codexlynx/CVE-2019-25024"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-hppr-6qxj-jhgx",
-  "modified": "2022-05-17T00:30:24Z",
+  "modified": "2025-04-16T15:34:02Z",
  "published": "2022-05-17T00:30:24Z",
  "aliases": [
    "CVE-2017-15808"
@@ -22,6 +22,10 @@
    {
      "type": "WEB",
      "url": "https://github.com/thorsten/phpMyFAQ/commit/a249b4645fb86f6a9fbe5d2344ab1cbdb906b75c"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2017-15808.md"
    }
  ],
  "database_specific": {
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-mmfm-f7qp-mmv3",
-  "modified": "2022-05-24T17:36:40Z",
+  "modified": "2025-04-16T15:34:02Z",
  "published": "2022-05-24T17:36:40Z",
  "aliases": [
    "CVE-2020-29607"
  ],
  "details": "A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the \"manage files\" functionality, which may result in remote code execution.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -22,6 +27,10 @@
      "type": "WEB",
      "url": "https://github.com/Hacker5preme/Exploits/tree/main/CVE-2020-29607-Exploit"
    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-29607.md"
+    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/162785/Pluck-CMS-4.7.13-Remote-Shell-Upload.html"
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-wc7j-rv6h-gcx6",
-  "modified": "2022-05-24T17:23:38Z",
+  "modified": "2025-04-16T15:34:02Z",
  "published": "2022-05-24T17:23:38Z",
  "aliases": [
    "CVE-2020-15716"
  ],
  "details": "RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php script. A remote attacker could exploit this vulnerability using the tab parameter in a crafted URL.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -18,6 +23,10 @@
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/184942"
    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-15716.md"
+    },
    {
      "type": "WEB",
      "url": "https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md"
@@ -36,7 +45,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2pjx-v75h-827m",
-  "modified": "2023-01-04T18:31:01Z",
+  "modified": "2025-04-16T15:34:08Z",
  "published": "2022-12-22T21:30:29Z",
  "aliases": [
    "CVE-2022-29911"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-34mj-396j-93pr",
-  "modified": "2022-12-30T00:30:42Z",
+  "modified": "2025-04-16T15:34:06Z",
  "published": "2022-12-22T21:30:30Z",
  "aliases": [
    "CVE-2022-22756"
@@ -37,7 +37,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-94"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-3fr2-34qf-c3pm",
-  "modified": "2022-12-30T15:30:23Z",
+  "modified": "2025-04-16T15:34:07Z",
  "published": "2022-12-22T21:30:30Z",
  "aliases": [
    "CVE-2022-22763"
@@ -37,7 +37,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-362"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-3gfr-938g-v48x",
-  "modified": "2022-12-30T15:30:23Z",
+  "modified": "2025-04-16T15:34:07Z",
  "published": "2022-12-22T21:30:30Z",
  "aliases": [
    "CVE-2022-26383"
@@ -37,7 +37,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-451"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-3gq8-8fwh-fc7q",
-  "modified": "2022-12-30T21:30:16Z",
+  "modified": "2025-04-16T15:34:08Z",
  "published": "2022-12-22T21:30:29Z",
  "aliases": [
    "CVE-2022-29910"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-3v83-x3vq-3mmv",
-  "modified": "2023-01-04T00:30:26Z",
+  "modified": "2025-04-16T15:34:08Z",
  "published": "2022-12-22T21:30:29Z",
  "aliases": [
    "CVE-2022-31738"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-3w9m-vg42-8v9h",
-  "modified": "2022-12-30T00:30:42Z",
+  "modified": "2025-04-16T15:34:06Z",
  "published": "2022-12-22T21:30:30Z",
  "aliases": [
    "CVE-2022-22755"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-443j-8jp8-4xch",
-  "modified": "2022-12-30T15:30:23Z",
+  "modified": "2025-04-16T15:34:06Z",
  "published": "2022-12-22T21:30:30Z",
  "aliases": [
    "CVE-2022-22761"
@@ -37,7 +37,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-693"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-4fpj-fh6q-hx4r",
-  "modified": "2022-12-31T06:30:23Z",
+  "modified": "2025-04-16T15:34:05Z",
  "published": "2022-12-22T21:30:30Z",
  "aliases": [
    "CVE-2022-22746"
@@ -26,6 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-306",
      "CWE-640"
    ],
    "severity": "CRITICAL",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-557q-69q9-3wvh",
-  "modified": "2022-12-30T21:30:16Z",
+  "modified": "2025-04-16T15:34:08Z",
  "published": "2022-12-22T21:30:29Z",
  "aliases": [
    "CVE-2022-29909"
--- a/Show More
+++ b/Show More