netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-298m-hvgh-x9cw
GHSA-4cw3-rhqx-vqwr
GHSA-6vf2-mfmr-qqqw
GHSA-gqr4-cvf4-3957
GHSA-q3q5-qvh5-cmw5
This commit is contained in:
advisory-database[bot]
2023-06-27 22:00:29 +00:00
parent 93ae051584
commit dab7d258fc
5 changed files with 30 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/06/GHSA-298m-hvgh-x9cw/GHSA-298m-hvgh-x9cw.json
+5 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-298m-hvgh-x9cw",
"modified": "2023-06-21T22:09:49Z",
"modified": "2023-06-27T21:59:30Z",
"published": "2023-06-20T15:31:09Z",
"aliases": [
"CVE-2020-21485"
@@ -9,7 +9,10 @@
"summary": "Alluxio Cross Site Scripting vulnerability",
"details": "Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code via the path parameter in the browse board component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
{
advisories/github-reviewed/2023/06/GHSA-4cw3-rhqx-vqwr/GHSA-4cw3-rhqx-vqwr.json
+6 -3
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4cw3-rhqx-vqwr",
"modified": "2023-06-21T18:36:51Z",
"modified": "2023-06-27T21:58:46Z",
"published": "2023-06-20T15:31:08Z",
"aliases": [
"CVE-2020-20726"
@@ -9,7 +9,10 @@
"summary": "GilaCMS Cross Site Request Forgery vulnerability",
"details": "Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the `cm/update_rows/user` parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
@@ -50,7 +53,7 @@
"cwe_ids": [
"CWE-352"
],
"severity": "MODERATE",
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2023-06-21T18:36:51Z",
"nvd_published_at": null
advisories/github-reviewed/2023/06/GHSA-6vf2-mfmr-qqqw/GHSA-6vf2-mfmr-qqqw.json
+7 -4
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6vf2-mfmr-qqqw",
"modified": "2023-06-21T22:09:36Z",
"modified": "2023-06-27T21:59:44Z",
"published": "2023-06-20T15:31:09Z",
"aliases": [
"CVE-2020-21489"
@@ -9,7 +9,10 @@
"summary": "Liufee CMS File Upload vulnerability",
"details": "File Upload vulnerability in Liufee CMS, AKA Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the `/admin/index.php?r=admin-user%2Fupdate-self` component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
@@ -52,9 +55,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"severity": "MODERATE",
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2023-06-21T22:09:36Z",
"nvd_published_at": null
advisories/github-reviewed/2023/06/GHSA-gqr4-cvf4-3957/GHSA-gqr4-cvf4-3957.json
+5 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gqr4-cvf4-3957",
"modified": "2023-06-21T22:09:54Z",
"modified": "2023-06-27T21:59:25Z",
"published": "2023-06-20T15:31:08Z",
"aliases": [
"CVE-2020-21246"
@@ -9,7 +9,10 @@
"summary": "YiiCMS Cross Site Scripting vulnerability",
"details": "Cross Site Scripting vulnerability in YiiCMS v.1.2.0 and prior allows a remote attacker to execute arbitrary code via the news function. A fix is available at commit 4a9d68564eb78d9f64e3f5dd77186a154093615b.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
{
advisories/github-reviewed/2023/06/GHSA-q3q5-qvh5-cmw5/GHSA-q3q5-qvh5-cmw5.json
+7 -4
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q3q5-qvh5-cmw5",
"modified": "2023-06-21T22:09:57Z",
"modified": "2023-06-27T21:59:07Z",
"published": "2023-06-20T15:31:08Z",
"aliases": [
"CVE-2020-21174"
@@ -9,7 +9,10 @@
"summary": "liufee CMS File Upload vulnerability",
"details": "File Upload vulnerability in liufee CMS v.2.0.7.1 allows a remote attacker to execute arbitrary code via the image suffix function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
@@ -52,9 +55,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"severity": "MODERATE",
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2023-06-21T22:09:57Z",
"nvd_published_at": null