Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2025-04-10 21:32:28 +00:00
parent 60358c131f
commit dad5df99e5
94 changed files with 520 additions and 119 deletions
@@ -34,7 +34,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-122"
+      "CWE-122",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-qc52-6cw2-7g23",
-  "modified": "2023-01-10T15:30:25Z",
+  "modified": "2025-04-10T21:30:33Z",
  "published": "2022-12-30T09:30:21Z",
  "aliases": [
    "CVE-2022-48196"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-w8f5-jp95-mq35",
-  "modified": "2023-01-06T18:30:18Z",
+  "modified": "2025-04-10T21:30:32Z",
  "published": "2022-12-29T00:30:35Z",
  "aliases": [
    "CVE-2022-4779"
@@ -26,6 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-22",
      "CWE-287"
    ],
    "severity": "CRITICAL",
@@ -25,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-787"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-20"
+      "CWE-20",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-20"
+      "CWE-20",
+      "CWE-755"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -25,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-284"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-cr28-68mj-mpg4",
-  "modified": "2023-01-09T18:30:33Z",
+  "modified": "2025-04-10T21:30:34Z",
  "published": "2023-01-01T09:30:20Z",
  "aliases": [
    "CVE-2022-45213"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-73"
+    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-20"
+      "CWE-20",
+      "CWE-755"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-20"
+      "CWE-20",
+      "CWE-755"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -1,12 +1,12 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5w6r-7h9g-pfhr",
-  "modified": "2024-10-08T18:33:04Z",
+  "modified": "2025-04-10T21:30:41Z",
  "published": "2023-07-21T06:30:17Z",
  "aliases": [
    "CVE-2023-25836"
  ],
-  "details": "\nThere is a Cross-site Scripting vulnerability in Esri Portal Sites in versions 10.8.1 – 10.9 that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victims browser.  The privileges required to execute this attack are low.\n\n\n\n",
+  "details": "There is a Cross-site Scripting vulnerability in Esri Portal Sites in versions 10.8.1 – 10.9 that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victims browser.  The privileges required to execute this attack are low.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,12 +1,12 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-73p2-7vjh-9qx4",
-  "modified": "2024-10-08T18:33:04Z",
+  "modified": "2025-04-10T21:30:41Z",
  "published": "2023-07-21T00:30:23Z",
  "aliases": [
    "CVE-2023-25835"
  ],
-  "details": "\nThere is a Cross-site Scripting vulnerability in Esri Portal Sites in versions 10.8.1 – 11.1 that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victims browser.  The privileges required to execute this attack are high.\n\n\n\n",
+  "details": "There is a Cross-site Scripting vulnerability in Esri Portal Sites in versions 10.8.1 – 11.1 that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victims browser.  The privileges required to execute this attack are high.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,12 +1,12 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-799h-8vpw-vp7q",
-  "modified": "2024-10-08T18:33:04Z",
+  "modified": "2025-04-10T21:30:42Z",
  "published": "2023-07-21T21:30:31Z",
  "aliases": [
    "CVE-2023-25841"
  ],
-  "details": "\nThere is a stored Cross-site Scripting vulnerability in Esri ArcGIS Server versions 10.8.1 – 11.0 on Windows and Linux platforms that may allow a remote, unauthenticated attacker to create crafted content which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.\n\nMitigation: Disable anonymous access to ArcGIS Feature services with edit capabilities.\n\n\n",
+  "details": "There is a stored Cross-site Scripting vulnerability in Esri ArcGIS Server versions 10.8.1 – 11.0 on Windows and Linux platforms that may allow a remote, unauthenticated attacker to create crafted content which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.\n\nMitigation: Disable anonymous access to ArcGIS Feature services with edit capabilities.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,12 +1,12 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-7rhj-qr35-3pvg",
-  "modified": "2024-10-08T18:33:04Z",
+  "modified": "2025-04-10T21:30:42Z",
  "published": "2023-07-21T06:30:17Z",
  "aliases": [
    "CVE-2023-25837"
  ],
-  "details": "\nThere is a Cross-site Scripting vulnerability in Esri Portal Sites in versions 10.8.1 – 10.9 that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victims browser.  The privileges required to execute this attack are high.\n\n\n\n",
+  "details": "There is a Cross-site Scripting vulnerability in Esri Portal Sites in versions 10.8.1 – 10.9 that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victims browser.  The privileges required to execute this attack are high.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-9mcp-v29j-j4hp",
-  "modified": "2025-02-13T18:31:34Z",
+  "modified": "2025-04-10T21:30:40Z",
  "published": "2023-07-06T21:14:53Z",
  "aliases": [
    "CVE-2023-28724"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-f5cm-53fc-8x22",
-  "modified": "2024-04-04T05:41:39Z",
+  "modified": "2025-04-10T21:30:40Z",
  "published": "2023-07-06T21:14:55Z",
  "aliases": [
    "CVE-2023-25830"
@@ -1,12 +1,12 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-wp7f-xph3-r8ph",
-  "modified": "2024-10-08T18:33:04Z",
+  "modified": "2025-04-10T21:30:42Z",
  "published": "2023-07-21T21:30:31Z",
  "aliases": [
    "CVE-2023-25840"
  ],
-  "details": "\nThere is a Cross-site Scripting vulnerability in ArcGIS Server in versions 10.8.1 – 11.1 that may allow a remote, authenticated attacker to create a crafted link which onmouseover wont execute but could potentially render an image in the victims browser.  The privileges required to execute this attack are high.\n\n\n\n",
+  "details": "There is a Cross-site Scripting vulnerability in ArcGIS Server in versions 10.8.1 – 11.1 that may allow a remote, authenticated attacker to create a crafted link which onmouseover wont execute but could potentially render an image in the victims browser.  The privileges required to execute this attack are high.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,12 +1,12 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-xjqr-jw8j-hv44",
-  "modified": "2024-04-04T05:41:41Z",
+  "modified": "2025-04-10T21:30:40Z",
  "published": "2023-07-06T21:14:55Z",
  "aliases": [
    "CVE-2023-25831"
  ],
-  "details": "There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1, 10.8.1 and 10.7.1 which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.\n",
+  "details": "There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1, 10.8.1 and 10.7.1 which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-228j-w5v9-347h",
-  "modified": "2024-03-05T12:30:31Z",
+  "modified": "2025-04-10T21:30:45Z",
  "published": "2024-03-05T12:30:31Z",
  "aliases": [
    "CVE-2023-45591"
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-122"
+      "CWE-122",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5g3j-v298-jm95",
-  "modified": "2024-03-05T12:30:32Z",
+  "modified": "2025-04-10T21:30:45Z",
  "published": "2024-03-05T12:30:32Z",
  "aliases": [
    "CVE-2023-45597"
--- a/Show More
+++ b/Show More