diff --git a/advisories/github-reviewed/2024/03/GHSA-34h3-8mw4-qw57/GHSA-34h3-8mw4-qw57.json b/advisories/github-reviewed/2024/03/GHSA-34h3-8mw4-qw57/GHSA-34h3-8mw4-qw57.json new file mode 100644 index 00000000000..8bd87461dc5 --- /dev/null +++ b/advisories/github-reviewed/2024/03/GHSA-34h3-8mw4-qw57/GHSA-34h3-8mw4-qw57.json @@ -0,0 +1,68 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-34h3-8mw4-qw57", + "modified": "2024-03-29T20:16:22Z", + "published": "2024-03-29T20:16:22Z", + "aliases": [ + "CVE-2024-29900" + ], + "summary": "@electron/packager's build process memory potentially leaked into final executable", + "details": "### Impact\nA random segment of ~1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This memory _could_ contain sensitive information such as environment variables, secrets files, etc.\n\n### Patches\nThis issue is patched in 18.3.1\n\n### Workarounds\nNo workarounds, please update to a patched version of `@electron/packager` immediately if impacated.\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "npm", + "name": "@electron/packager" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "18.3.0" + }, + { + "fixed": "18.3.1" + } + ] + } + ], + "versions": [ + "18.3.0" + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/electron/packager/security/advisories/GHSA-34h3-8mw4-qw57" + }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29900" + }, + { + "type": "WEB", + "url": "https://github.com/electron/packager/commit/d421d4bd3ced889a4143c5c3ab6d95e3be249eee" + }, + { + "type": "PACKAGE", + "url": "https://github.com/electron/packager" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-402" + ], + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2024-03-29T20:16:22Z", + "nvd_published_at": "2024-03-29T16:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2024/03/GHSA-35w3-6qhc-474v/GHSA-35w3-6qhc-474v.json b/advisories/github-reviewed/2024/03/GHSA-35w3-6qhc-474v/GHSA-35w3-6qhc-474v.json new file mode 100644 index 00000000000..81ba0bf47c4 --- /dev/null +++ b/advisories/github-reviewed/2024/03/GHSA-35w3-6qhc-474v/GHSA-35w3-6qhc-474v.json @@ -0,0 +1,69 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-35w3-6qhc-474v", + "modified": "2024-03-29T20:16:00Z", + "published": "2024-03-29T20:16:00Z", + "aliases": [ + "CVE-2024-29901" + ], + "summary": "@workos-inc/authkit-nextjs session replay vulnerability", + "details": "### Impact\n\nA user can reuse an expired session by controlling the `x-workos-session` header.\n\n### Patches\n\nPatched in https://github.com/workos/authkit-nextjs/releases/tag/v0.4.2", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "npm", + "name": "@workos-inc/authkit-nextjs" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.4.2" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/workos/authkit-nextjs/security/advisories/GHSA-35w3-6qhc-474v" + }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29901" + }, + { + "type": "WEB", + "url": "https://github.com/workos/authkit-nextjs/commit/6c3f4f3179d66cbb15de3962792083ff3b244a01" + }, + { + "type": "PACKAGE", + "url": "https://github.com/workos/authkit-nextjs" + }, + { + "type": "WEB", + "url": "https://github.com/workos/authkit-nextjs/releases/tag/v0.4.2" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-294" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-03-29T20:16:00Z", + "nvd_published_at": "2024-03-29T16:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/03/GHSA-8r5j-gm3j-cx9c/GHSA-8r5j-gm3j-cx9c.json b/advisories/github-reviewed/2024/03/GHSA-8r5j-gm3j-cx9c/GHSA-8r5j-gm3j-cx9c.json similarity index 52% rename from advisories/unreviewed/2024/03/GHSA-8r5j-gm3j-cx9c/GHSA-8r5j-gm3j-cx9c.json rename to advisories/github-reviewed/2024/03/GHSA-8r5j-gm3j-cx9c/GHSA-8r5j-gm3j-cx9c.json index a9639a86a4c..7de0015e360 100644 --- a/advisories/unreviewed/2024/03/GHSA-8r5j-gm3j-cx9c/GHSA-8r5j-gm3j-cx9c.json +++ b/advisories/github-reviewed/2024/03/GHSA-8r5j-gm3j-cx9c/GHSA-8r5j-gm3j-cx9c.json @@ -1,17 +1,39 @@ { "schema_version": "1.4.0", "id": "GHSA-8r5j-gm3j-cx9c", - "modified": "2024-03-29T18:30:42Z", + "modified": "2024-03-29T20:15:38Z", "published": "2024-03-29T18:30:42Z", "aliases": [ "CVE-2024-29686" ], + "summary": "Winter CMS Server-Side Template Injection (SSTI) vulnerability", "details": "Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted payload to the CMS Pages field and Plugin components.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ - + { + "package": { + "ecosystem": "Packagist", + "name": "wintercms/winter" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "1.2.3" + } + ] + } + ] + } ], "references": [ { @@ -22,6 +44,10 @@ "type": "WEB", "url": "https://forum.ksec.co.uk/t/webapps-winter-cms-1-2-3-server-side-template-injection-ssti-authenticated/2779" }, + { + "type": "PACKAGE", + "url": "https://github.com/wintercms/winter" + }, { "type": "WEB", "url": "https://www.exploit-db.com/exploits/51893" @@ -29,11 +55,11 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-75" ], - "severity": null, - "github_reviewed": false, - "github_reviewed_at": null, + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2024-03-29T20:15:38Z", "nvd_published_at": "2024-03-29T16:15:08Z" } } \ No newline at end of file