netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-09-30 15:32:30 +00:00
parent 0950cf1cbf
commit e91b557ebd
35 changed files with 381 additions and 78 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/10/GHSA-9wgq-fhm2-pjf3/GHSA-9wgq-fhm2-pjf3.json
+2 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9wgq-fhm2-pjf3",
"modified": "2022-10-24T19:00:17Z",
"modified": "2024-09-30T15:30:43Z",
"published": "2022-10-24T19:00:17Z",
"aliases": [
"CVE-2021-26731"
@@ -36,6 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121",
"CWE-77"
],
"severity": "CRITICAL",
advisories/unreviewed/2022/10/GHSA-wwhw-grq6-66rj/GHSA-wwhw-grq6-66rj.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wwhw-grq6-66rj",
"modified": "2022-10-24T19:00:17Z",
"modified": "2024-09-30T15:30:43Z",
"published": "2022-10-24T19:00:17Z",
"aliases": [
"CVE-2021-44467"
@@ -36,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/05/GHSA-qhh4-wrfh-w5pg/GHSA-qhh4-wrfh-w5pg.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qhh4-wrfh-w5pg",
"modified": "2024-06-03T18:55:52Z",
"modified": "2024-09-30T15:30:43Z",
"published": "2024-05-01T06:31:43Z",
"aliases": [
"CVE-2024-27017"
@@ -25,10 +25,18 @@
"type": "WEB",
"url": "https://git.kernel.org/stable/c/29b359cf6d95fd60730533f7f10464e95bd17c73"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/52735a010f37580b3a569a996f878fdd87425650"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/721715655c72640567e8742567520c99801148ed"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/f24d8abc2bb8cbf31ec713336e402eafa8f42f60"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53"
advisories/unreviewed/2024/07/GHSA-qxx3-fwc4-2mv7/GHSA-qxx3-fwc4-2mv7.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qxx3-fwc4-2mv7",
"modified": "2024-08-12T21:31:32Z",
"modified": "2024-09-30T15:30:43Z",
"published": "2024-07-31T15:31:18Z",
"aliases": [
"CVE-2024-3082"
advisories/unreviewed/2024/07/GHSA-r7gc-73mm-jqxm/GHSA-r7gc-73mm-jqxm.json
+13 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r7gc-73mm-jqxm",
"modified": "2024-07-29T09:36:14Z",
"modified": "2024-09-30T15:30:43Z",
"published": "2024-07-29T09:36:14Z",
"aliases": [
"CVE-2024-41016"
@@ -21,6 +21,18 @@
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/af77c4fc1871847b528d58b7fdafb4aa1f6a9262"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/c726dea9d0c806d64c26fcef483b1fb9474d8c5e"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/cfb926051fab19b10d1e65976211f364aa820180"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/e4ffea01adf3323c821b6f37e9577d2d400adbaa"
}
],
"database_specific": {
advisories/unreviewed/2024/08/GHSA-94rm-mp59-j6h7/GHSA-94rm-mp59-j6h7.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-94rm-mp59-j6h7",
"modified": "2024-08-17T12:30:32Z",
"modified": "2024-09-30T15:30:43Z",
"published": "2024-08-17T12:30:32Z",
"aliases": [
"CVE-2024-43825"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: Fix the sorting functionality in iio_gts_build_avail_time_table\n\nThe sorting in iio_gts_build_avail_time_table is not working as intended.\nIt could result in an out-of-bounds access when the time is zero.\n\nHere are more details:\n\n1. When the gts->itime_table[i].time_us is zero, e.g., the time\nsequence is `3, 0, 1`, the inner for-loop will not terminate and do\nout-of-bound writes. This is because once `times[j] > new`, the value\n`new` will be added in the current position and the `times[j]` will be\nmoved to `j+1` position, which makes the if-condition always hold.\nMeanwhile, idx will be added one, making the loop keep running without\ntermination and out-of-bound write.\n2. If none of the gts->itime_table[i].time_us is zero, the elements\nwill just be copied without being sorted as described in the comment\n\"Sort times from all tables to one and remove duplicates\".\n\nFor more details, please refer to\nhttps://lore.kernel.org/all/6dd0d822-046c-4dd2-9532-79d7ab96ec05@gmail.com.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-17T10:15:08Z"
advisories/unreviewed/2024/08/GHSA-cfx8-vqq2-xr93/GHSA-cfx8-vqq2-xr93.json
+7 -4
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2024/08/GHSA-cgvv-qq38-92ch/GHSA-cgvv-qq38-92ch.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cgvv-qq38-92ch",
"modified": "2024-08-17T12:30:33Z",
"modified": "2024-09-30T15:30:43Z",
"published": "2024-08-17T12:30:33Z",
"aliases": [
"CVE-2024-43850"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove\n\nThe following warning is seen during bwmon_remove due to refcount\nimbalance, fix this by releasing the OPPs after use.\n\nLogs:\nWARNING: at drivers/opp/core.c:1640 _opp_table_kref_release+0x150/0x158\nHardware name: Qualcomm Technologies, Inc. X1E80100 CRD (DT)\n...\nCall trace:\n_opp_table_kref_release+0x150/0x158\ndev_pm_opp_remove_table+0x100/0x1b4\ndevm_pm_opp_of_table_release+0x10/0x1c\ndevm_action_release+0x14/0x20\ndevres_release_all+0xa4/0x104\ndevice_unbind_cleanup+0x18/0x60\ndevice_release_driver_internal+0x1ec/0x228\ndriver_detach+0x50/0x98\nbus_remove_driver+0x6c/0xbc\ndriver_unregister+0x30/0x60\nplatform_driver_unregister+0x14/0x20\nbwmon_driver_exit+0x18/0x524 [icc_bwmon]\n__arm64_sys_delete_module+0x184/0x264\ninvoke_syscall+0x48/0x118\nel0_svc_common.constprop.0+0xc8/0xe8\ndo_el0_svc+0x20/0x2c\nel0_svc+0x34/0xdc\nel0t_64_sync_handler+0x13c/0x158\nel0t_64_sync+0x190/0x194\n--[ end trace 0000000000000000 ]---",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -35,7 +38,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-17T10:15:10Z"
advisories/unreviewed/2024/08/GHSA-cxw8-j5f9-53mh/GHSA-cxw8-j5f9-53mh.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cxw8-j5f9-53mh",
"modified": "2024-09-05T18:30:51Z",
"modified": "2024-09-30T15:30:43Z",
"published": "2024-08-26T12:31:20Z",
"aliases": [
"CVE-2024-44931"
@@ -25,6 +25,10 @@
"type": "WEB",
"url": "https://git.kernel.org/stable/c/1b955f786a4bcde8c0ccb2b7d519def2acb6f3cc"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/672c19165fc96dfad531a5458e0b3cdab414aae4"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/d776c0486b03a5c4afca65b8ff44573592bf93bb"
advisories/unreviewed/2024/08/GHSA-frrf-pwhq-w5pw/GHSA-frrf-pwhq-w5pw.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-frrf-pwhq-w5pw",
"modified": "2024-08-17T12:30:33Z",
"modified": "2024-09-30T15:30:43Z",
"published": "2024-08-17T12:30:32Z",
"aliases": [
"CVE-2024-43842"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()\n\nIn rtw89_sta_info_get_iter() 'status->he_gi' is compared to array size.\nBut then 'rate->he_gi' is used as array index instead of 'status->he_gi'.\nThis can lead to go beyond array boundaries in case of 'rate->he_gi' is\nnot equal to 'status->he_gi' and is bigger than array size. Looks like\n\"copy-paste\" mistake.\n\nFix this mistake by replacing 'rate->he_gi' with 'status->he_gi'.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-129"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-17T10:15:09Z"
advisories/unreviewed/2024/08/GHSA-hqrm-rrc5-v8pg/GHSA-hqrm-rrc5-v8pg.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hqrm-rrc5-v8pg",
"modified": "2024-08-19T06:30:54Z",
"modified": "2024-09-30T15:30:43Z",
"published": "2024-08-17T12:30:32Z",
"aliases": [
"CVE-2024-43829"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/qxl: Add check for drm_cvt_mode\n\nAdd check for the return value of drm_cvt_mode() and return the error if\nit fails in order to avoid NULL pointer dereference.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -49,9 +52,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-17T10:15:08Z"
advisories/unreviewed/2024/08/GHSA-mvqg-p94v-j4rg/GHSA-mvqg-p94v-j4rg.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mvqg-p94v-j4rg",
"modified": "2024-08-17T12:30:32Z",
"modified": "2024-09-30T15:30:43Z",
"published": "2024-08-17T12:30:32Z",
"aliases": [
"CVE-2024-43827"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add null check before access structs\n\nIn enable_phantom_plane, we should better check null pointer before\naccessing various structs.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-17T10:15:08Z"
advisories/unreviewed/2024/08/GHSA-q637-fwgw-hj6c/GHSA-q637-fwgw-hj6c.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q637-fwgw-hj6c",
"modified": "2024-08-19T06:30:53Z",
"modified": "2024-09-30T15:30:43Z",
"published": "2024-08-17T09:30:24Z",
"aliases": [
"CVE-2024-42297"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to don't dirty inode for readonly filesystem\n\nsyzbot reports f2fs bug as below:\n\nkernel BUG at fs/f2fs/inode.c:933!\nRIP: 0010:f2fs_evict_inode+0x1576/0x1590 fs/f2fs/inode.c:933\nCall Trace:\n evict+0x2a4/0x620 fs/inode.c:664\n dispose_list fs/inode.c:697 [inline]\n evict_inodes+0x5f8/0x690 fs/inode.c:747\n generic_shutdown_super+0x9d/0x2c0 fs/super.c:675\n kill_block_super+0x44/0x90 fs/super.c:1667\n kill_f2fs_super+0x303/0x3b0 fs/f2fs/super.c:4894\n deactivate_locked_super+0xc1/0x130 fs/super.c:484\n cleanup_mnt+0x426/0x4c0 fs/namespace.c:1256\n task_work_run+0x24a/0x300 kernel/task_work.c:180\n ptrace_notify+0x2cd/0x380 kernel/signal.c:2399\n ptrace_report_syscall include/linux/ptrace.h:411 [inline]\n ptrace_report_syscall_exit include/linux/ptrace.h:473 [inline]\n syscall_exit_work kernel/entry/common.c:251 [inline]\n syscall_exit_to_user_mode_prepare kernel/entry/common.c:278 [inline]\n __syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline]\n syscall_exit_to_user_mode+0x15c/0x280 kernel/entry/common.c:296\n do_syscall_64+0x50/0x110 arch/x86/entry/common.c:88\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nThe root cause is:\n- do_sys_open\n - f2fs_lookup\n - __f2fs_find_entry\n - f2fs_i_depth_write\n - f2fs_mark_inode_dirty_sync\n - f2fs_dirty_inode\n - set_inode_flag(inode, FI_DIRTY_INODE)\n\n- umount\n - kill_f2fs_super\n - kill_block_super\n - generic_shutdown_super\n - sync_filesystem\n : sb is readonly, skip sync_filesystem()\n - evict_inodes\n - iput\n - f2fs_evict_inode\n - f2fs_bug_on(sbi, is_inode_flag_set(inode, FI_DIRTY_INODE))\n : trigger kernel panic\n\nWhen we try to repair i_current_depth in readonly filesystem, let's\nskip dirty inode to avoid panic in later f2fs_evict_inode().",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -55,7 +58,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-17T09:15:10Z"
advisories/unreviewed/2024/08/GHSA-vx56-8x3p-3hvp/GHSA-vx56-8x3p-3hvp.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vx56-8x3p-3hvp",
"modified": "2024-08-17T09:30:24Z",
"modified": "2024-09-30T15:30:43Z",
"published": "2024-08-17T09:30:24Z",
"aliases": [
"CVE-2024-42278"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: TAS2781: Fix tasdev_load_calibrated_data()\n\nThis function has a reversed if statement so it's either a no-op or it\nleads to a NULL dereference.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-17T09:15:08Z"
advisories/unreviewed/2024/08/GHSA-wqg8-c24w-4mwh/GHSA-wqg8-c24w-4mwh.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wqg8-c24w-4mwh",
"modified": "2024-08-17T09:30:25Z",
"modified": "2024-09-30T15:30:43Z",
"published": "2024-08-17T09:30:25Z",
"aliases": [
"CVE-2024-42320"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: fix error checks in dasd_copy_pair_store()\n\ndasd_add_busid() can return an error via ERR_PTR() if an allocation\nfails. However, two callsites in dasd_copy_pair_store() do not check\nthe result, potentially resulting in a NULL pointer dereference. Fix\nthis by checking the result with IS_ERR() and returning the error up\nthe stack.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-17T09:15:11Z"
advisories/unreviewed/2024/09/GHSA-4x6v-7m8g-5v5x/GHSA-4x6v-7m8g-5v5x.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4x6v-7m8g-5v5x",
"modified": "2024-09-25T03:30:36Z",
"modified": "2024-09-30T15:30:44Z",
"published": "2024-09-25T03:30:36Z",
"aliases": [
"CVE-2024-6590"
advisories/unreviewed/2024/09/GHSA-52jr-7fqr-h29h/GHSA-52jr-7fqr-h29h.json
+5 -1
View File
@@ -1,13 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-52jr-7fqr-h29h",
"modified": "2024-09-25T03:30:36Z",
"modified": "2024-09-30T15:30:44Z",
"published": "2024-09-25T03:30:36Z",
"aliases": [
"CVE-2024-8878"
],
"details": "The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
advisories/unreviewed/2024/09/GHSA-57m6-hpvh-pg7p/GHSA-57m6-hpvh-pg7p.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-57m6-hpvh-pg7p",
"modified": "2024-09-30T15:30:49Z",
"published": "2024-09-30T15:30:49Z",
"aliases": [
"CVE-2024-46313"
],
"details": "TP-Link WR941ND V6 has a stack overflow vulnerability in the ssid parameter in /userRpm/popupSiteSurveyRpm.htm.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46313"
},
{
"type": "WEB",
"url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TP-LINK/WR-941ND/popupSiteSurveyRpm.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-30T15:15:06Z"
}
}
advisories/unreviewed/2024/09/GHSA-5v8x-4q2p-r884/GHSA-5v8x-4q2p-r884.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5v8x-4q2p-r884",
"modified": "2024-09-30T15:30:49Z",
"published": "2024-09-30T15:30:49Z",
"aliases": [
"CVE-2024-47641"
],
"details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloperr Confetti Fall Animation allows Stored XSS.This issue affects Confetti Fall Animation: from n/a through 1.3.0.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47641"
},
{
"type": "WEB",
"url": "https://patchstack.com/database/vulnerability/confetti-fall-animation/wordpress-confetti-fall-animation-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-30T13:15:02Z"
}
}
advisories/unreviewed/2024/09/GHSA-6399-3x37-fjv2/GHSA-6399-3x37-fjv2.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6399-3x37-fjv2",
"modified": "2024-09-30T15:30:49Z",
"published": "2024-09-30T15:30:49Z",
"aliases": [
"CVE-2024-45920"
],
"details": "A Stored Cross-Site Scripting (XSS) vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts into the application. This issue arises due to insufficient input validation and sanitization in \"Intrest\" feature.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45920"
},
{
"type": "WEB",
"url": "https://gist.github.com/ipxsec/10526db2cbfcb899a70dcb8f0ee53a99"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-30T13:15:02Z"
}
}

Some files were not shown because too many files have changed in this diff Show More