From e3ff60e1d47a7add57351369d3d49836fd77f839 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 22 Apr 2024 18:43:57 +0000 Subject: [PATCH] Publish Advisories GHSA-4mvc-qc5w-v5qr GHSA-wjx8-cgrm-hh8p GHSA-f7wm-x4gw-6m23 GHSA-hr3h-x6gq-rqcp GHSA-r6mv-ppjc-4hgr --- .../2019/12/GHSA-4mvc-qc5w-v5qr/GHSA-4mvc-qc5w-v5qr.json | 4 ++-- .../2019/12/GHSA-wjx8-cgrm-hh8p/GHSA-wjx8-cgrm-hh8p.json | 2 +- .../2020/09/GHSA-f7wm-x4gw-6m23/GHSA-f7wm-x4gw-6m23.json | 4 ++-- .../2021/08/GHSA-hr3h-x6gq-rqcp/GHSA-hr3h-x6gq-rqcp.json | 2 +- .../2021/08/GHSA-r6mv-ppjc-4hgr/GHSA-r6mv-ppjc-4hgr.json | 2 +- 5 files changed, 7 insertions(+), 7 deletions(-) diff --git a/advisories/github-reviewed/2019/12/GHSA-4mvc-qc5w-v5qr/GHSA-4mvc-qc5w-v5qr.json b/advisories/github-reviewed/2019/12/GHSA-4mvc-qc5w-v5qr/GHSA-4mvc-qc5w-v5qr.json index e038ba2c4cc..f545aab9dbb 100644 --- a/advisories/github-reviewed/2019/12/GHSA-4mvc-qc5w-v5qr/GHSA-4mvc-qc5w-v5qr.json +++ b/advisories/github-reviewed/2019/12/GHSA-4mvc-qc5w-v5qr/GHSA-4mvc-qc5w-v5qr.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-4mvc-qc5w-v5qr", - "modified": "2024-01-24T12:49:40Z", + "modified": "2024-04-22T18:41:24Z", "published": "2019-12-17T22:53:34Z", "aliases": [ "CVE-2019-19712" ], "summary": "Information disclosure in the Contao backend", - "details": "### Impact\n\nBackend users can manipulate the details view URL to show pages and articles that have not been enabled for them.\n\n### Patches\n\nUpdate to Contao 4.4.46 or 4.8.6.\n\n### Workarounds\n\nNone.\n\n### References\n\nhttps://contao.org/en/security-advisories/information-disclosure-in-the-back-end\n\n### For more information\n\nIf you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).\n", + "details": "### Impact\n\nBack end users can manipulate the details view URL to show pages and articles that have not been enabled for them.\n\n### Patches\n\nUpdate to Contao 4.4.46 or 4.8.6.\n\n### Workarounds\n\nNone.\n\n### References\n\nhttps://contao.org/en/security-advisories/information-disclosure-in-the-back-end\n\n### For more information\n\nIf you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).\n", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2019/12/GHSA-wjx8-cgrm-hh8p/GHSA-wjx8-cgrm-hh8p.json b/advisories/github-reviewed/2019/12/GHSA-wjx8-cgrm-hh8p/GHSA-wjx8-cgrm-hh8p.json index 24dd7077e8c..f4b8ddefdcc 100644 --- a/advisories/github-reviewed/2019/12/GHSA-wjx8-cgrm-hh8p/GHSA-wjx8-cgrm-hh8p.json +++ b/advisories/github-reviewed/2019/12/GHSA-wjx8-cgrm-hh8p/GHSA-wjx8-cgrm-hh8p.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-wjx8-cgrm-hh8p", - "modified": "2024-02-05T10:52:24Z", + "modified": "2024-04-22T18:41:39Z", "published": "2019-12-17T22:53:10Z", "aliases": [ "CVE-2019-19745" diff --git a/advisories/github-reviewed/2020/09/GHSA-f7wm-x4gw-6m23/GHSA-f7wm-x4gw-6m23.json b/advisories/github-reviewed/2020/09/GHSA-f7wm-x4gw-6m23/GHSA-f7wm-x4gw-6m23.json index 6f2cb618cfd..a12cb81a7e4 100644 --- a/advisories/github-reviewed/2020/09/GHSA-f7wm-x4gw-6m23/GHSA-f7wm-x4gw-6m23.json +++ b/advisories/github-reviewed/2020/09/GHSA-f7wm-x4gw-6m23/GHSA-f7wm-x4gw-6m23.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-f7wm-x4gw-6m23", - "modified": "2023-09-20T19:10:45Z", + "modified": "2024-04-22T18:42:18Z", "published": "2020-09-24T16:23:54Z", "aliases": [ "CVE-2020-25768" ], "summary": "Contao Insert tag injection in forms", - "details": "### Impact\n\nIt is possible to inject insert tags in frontend forms which will be replaced when the page is rendered.\n\n### Patches\n\nUpdate to Contao 4.4.52, 4.9.6 or 4.10.1.\n\n### Workarounds\n\nDisable the front end login form and do not use form fields with array keys such as `fieldname[]`.\n\n### References\n\nhttps://contao.org/en/security-advisories/insert-tag-injection-in-forms\n\n### For more information\n\nIf you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).\n", + "details": "### Impact\n\nIt is possible to inject insert tags in front end forms which will be replaced when the page is rendered.\n\n### Patches\n\nUpdate to Contao 4.4.52, 4.9.6 or 4.10.1.\n\n### Workarounds\n\nDisable the front end login form and do not use form fields with array keys such as `fieldname[]`.\n\n### References\n\nhttps://contao.org/en/security-advisories/insert-tag-injection-in-forms\n\n### For more information\n\nIf you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).\n", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2021/08/GHSA-hr3h-x6gq-rqcp/GHSA-hr3h-x6gq-rqcp.json b/advisories/github-reviewed/2021/08/GHSA-hr3h-x6gq-rqcp/GHSA-hr3h-x6gq-rqcp.json index 4c7390e3811..4626c43b905 100644 --- a/advisories/github-reviewed/2021/08/GHSA-hr3h-x6gq-rqcp/GHSA-hr3h-x6gq-rqcp.json +++ b/advisories/github-reviewed/2021/08/GHSA-hr3h-x6gq-rqcp/GHSA-hr3h-x6gq-rqcp.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hr3h-x6gq-rqcp", - "modified": "2023-04-25T16:32:31Z", + "modified": "2024-04-22T18:41:57Z", "published": "2021-08-25T14:45:01Z", "aliases": [ "CVE-2021-35955" diff --git a/advisories/github-reviewed/2021/08/GHSA-r6mv-ppjc-4hgr/GHSA-r6mv-ppjc-4hgr.json b/advisories/github-reviewed/2021/08/GHSA-r6mv-ppjc-4hgr/GHSA-r6mv-ppjc-4hgr.json index 81698fbd35d..1f4d2601510 100644 --- a/advisories/github-reviewed/2021/08/GHSA-r6mv-ppjc-4hgr/GHSA-r6mv-ppjc-4hgr.json +++ b/advisories/github-reviewed/2021/08/GHSA-r6mv-ppjc-4hgr/GHSA-r6mv-ppjc-4hgr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-r6mv-ppjc-4hgr", - "modified": "2023-04-25T16:37:22Z", + "modified": "2024-04-22T18:42:22Z", "published": "2021-08-23T19:41:04Z", "aliases": [ "CVE-2021-37626"