netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-r5cj-wv24-92p5
GHSA-wxg3-mfph-qg9w
GHSA-9gq6-6936-885w
GHSA-c85f-pcx6-2ghm
GHSA-v6g6-3cm3-vf6c
GHSA-wf9g-c67g-h4ch
This commit is contained in:
advisory-database[bot]
2024-09-16 22:34:07 +00:00
parent 44bdd50c78
commit e8cc7f6b43
6 changed files with 52 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/05/GHSA-r5cj-wv24-92p5/GHSA-r5cj-wv24-92p5.json
+17 -22
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r5cj-wv24-92p5",
"modified": "2024-05-21T20:28:50Z",
"modified": "2024-09-16T22:32:44Z",
"published": "2022-05-02T00:05:00Z",
"aliases": [
"CVE-2008-3909"
@@ -9,13 +9,20 @@
"summary": "Django cross-site request forgery (CSRF) vulnerability",
"details": "The administration application in Django 0.91.x, 0.95.x, and 0.96.x stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ranges": [
{
@@ -34,7 +41,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ranges": [
{
@@ -53,7 +60,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ranges": [
{
@@ -95,6 +102,10 @@
"type": "PACKAGE",
"url": "https://github.com/django/django"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2008-2.yaml"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00091.html"
@@ -103,18 +114,6 @@
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00131.html"
},
{
"type": "WEB",
"url": "http://osvdb.org/47906"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/31837"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/31961"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2008/dsa-1640"
@@ -126,17 +125,13 @@
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2008/09/03/4"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2008/2533"
}
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"severity": "MODERATE",
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2023-09-22T23:12:22Z",
"nvd_published_at": "2008-09-04T17:41:00Z"
advisories/github-reviewed/2022/05/GHSA-wxg3-mfph-qg9w/GHSA-wxg3-mfph-qg9w.json
+15 -4
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wxg3-mfph-qg9w",
"modified": "2024-01-16T22:48:09Z",
"modified": "2024-09-16T22:32:03Z",
"published": "2022-05-14T03:49:36Z",
"aliases": [
"CVE-2011-4138"
@@ -9,7 +9,14 @@
"summary": "Django Might Allow CSRF Requests via URL Verification",
"details": "The `verify_exists` functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity through a HEAD request, but then uses a GET request for the new target URL in the case of a redirect, which might allow remote attackers to trigger arbitrary GET requests with an unintended source IP address via a crafted Location header.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
@@ -41,7 +48,7 @@
"type": "ECOSYSTEM",
"events": [
{
"introduced": "1.3.0"
"introduced": "1.3"
},
{
"fixed": "1.3.1"
@@ -72,6 +79,10 @@
"type": "PACKAGE",
"url": "https://github.com/django/django"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-3.yaml"
},
{
"type": "WEB",
"url": "https://hermes.opensuse.org/messages/14700881"
@@ -101,7 +112,7 @@
"cwe_ids": [
"CWE-20"
],
"severity": "MODERATE",
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-01-16T22:48:09Z",
"nvd_published_at": "2011-10-19T10:55:00Z"
advisories/github-reviewed/2024/09/GHSA-9gq6-6936-885w/GHSA-9gq6-6936-885w.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9gq6-6936-885w",
"modified": "2024-09-16T21:12:06Z",
"modified": "2024-09-16T22:32:50Z",
"published": "2024-09-12T15:33:00Z",
"aliases": [
"CVE-2024-45848"
@@ -52,6 +52,10 @@
"type": "PACKAGE",
"url": "https://github.com/mindsdb/mindsdb"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/mindsdb/PYSEC-2024-78.yaml"
},
{
"type": "WEB",
"url": "https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb"
advisories/github-reviewed/2024/09/GHSA-c85f-pcx6-2ghm/GHSA-c85f-pcx6-2ghm.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c85f-pcx6-2ghm",
"modified": "2024-09-16T21:12:15Z",
"modified": "2024-09-16T22:33:01Z",
"published": "2024-09-12T15:33:00Z",
"aliases": [
"CVE-2024-45849"
@@ -52,6 +52,10 @@
"type": "PACKAGE",
"url": "https://github.com/mindsdb/mindsdb"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/mindsdb/PYSEC-2024-79.yaml"
},
{
"type": "WEB",
"url": "https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb"
advisories/github-reviewed/2024/09/GHSA-v6g6-3cm3-vf6c/GHSA-v6g6-3cm3-vf6c.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v6g6-3cm3-vf6c",
"modified": "2024-09-16T21:12:25Z",
"modified": "2024-09-16T22:33:15Z",
"published": "2024-09-12T15:33:00Z",
"aliases": [
"CVE-2024-45850"
@@ -52,6 +52,10 @@
"type": "PACKAGE",
"url": "https://github.com/mindsdb/mindsdb"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/mindsdb/PYSEC-2024-80.yaml"
},
{
"type": "WEB",
"url": "https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb"
advisories/github-reviewed/2024/09/GHSA-wf9g-c67g-h4ch/GHSA-wf9g-c67g-h4ch.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wf9g-c67g-h4ch",
"modified": "2024-09-16T21:12:35Z",
"modified": "2024-09-16T22:33:29Z",
"published": "2024-09-12T15:33:01Z",
"aliases": [
"CVE-2024-45851"
@@ -52,6 +52,10 @@
"type": "PACKAGE",
"url": "https://github.com/mindsdb/mindsdb"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/mindsdb/PYSEC-2024-81.yaml"
},
{
"type": "WEB",
"url": "https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb"