From e287ee762222a5d9d2c1c6389a8623f7de4deccd Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 17 Jun 2024 12:32:10 +0000 Subject: [PATCH] Publish Advisories GHSA-ffhx-2rrf-9c23 GHSA-w282-px53-r98p --- .../GHSA-ffhx-2rrf-9c23.json | 6 ++- .../GHSA-w282-px53-r98p.json | 38 +++++++++++++++++++ 2 files changed, 43 insertions(+), 1 deletion(-) create mode 100644 advisories/unreviewed/2024/06/GHSA-w282-px53-r98p/GHSA-w282-px53-r98p.json diff --git a/advisories/unreviewed/2024/06/GHSA-ffhx-2rrf-9c23/GHSA-ffhx-2rrf-9c23.json b/advisories/unreviewed/2024/06/GHSA-ffhx-2rrf-9c23/GHSA-ffhx-2rrf-9c23.json index 2bba0928ecc..aca50ad38b1 100644 --- a/advisories/unreviewed/2024/06/GHSA-ffhx-2rrf-9c23/GHSA-ffhx-2rrf-9c23.json +++ b/advisories/unreviewed/2024/06/GHSA-ffhx-2rrf-9c23/GHSA-ffhx-2rrf-9c23.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-ffhx-2rrf-9c23", - "modified": "2024-06-12T09:30:48Z", + "modified": "2024-06-17T12:30:39Z", "published": "2024-06-12T09:30:48Z", "aliases": [ "CVE-2024-5742" @@ -28,6 +28,10 @@ { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2278574" + }, + { + "type": "WEB", + "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00006.html" } ], "database_specific": { diff --git a/advisories/unreviewed/2024/06/GHSA-w282-px53-r98p/GHSA-w282-px53-r98p.json b/advisories/unreviewed/2024/06/GHSA-w282-px53-r98p/GHSA-w282-px53-r98p.json new file mode 100644 index 00000000000..7ba9b1c239f --- /dev/null +++ b/advisories/unreviewed/2024/06/GHSA-w282-px53-r98p/GHSA-w282-px53-r98p.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w282-px53-r98p", + "modified": "2024-06-17T12:30:39Z", + "published": "2024-06-17T12:30:39Z", + "aliases": [ + "CVE-2024-5741" + ], + "details": "Stored XSS in inventory tree rendering in Checkmk before 2.3.0p7, 2.2.0p28, 2.1.0p45 and 2.0.0 (EOL)", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5741" + }, + { + "type": "WEB", + "url": "https://checkmk.com/werk/17009" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-80" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-06-17T12:15:48Z" + } +} \ No newline at end of file