netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-wjxj-5m7g-mg7q
GHSA-hxwh-jpp2-84pm
GHSA-fv4g-gwpj-74gr
This commit is contained in:
advisory-database[bot]
2024-09-09 17:39:43 +00:00
parent 40f32b74e9
commit ebb839e677
3 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/11/GHSA-wjxj-5m7g-mg7q/GHSA-wjxj-5m7g-mg7q.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wjxj-5m7g-mg7q",
"modified": "2024-05-23T21:12:26Z",
"modified": "2024-09-09T17:38:48Z",
"published": "2023-11-23T18:30:33Z",
"aliases": [
"CVE-2023-33202"
@@ -196,6 +196,10 @@
"type": "WEB",
"url": "https://github.com/bcgit/bc-java/commit/0c576892862ed41894f49a8f639112e8d66d229c"
},
{
"type": "WEB",
"url": "https://bouncycastle.org"
},
{
"type": "PACKAGE",
"url": "https://github.com/bcgit/bc-java"
advisories/github-reviewed/2024/08/GHSA-hxwh-jpp2-84pm/GHSA-hxwh-jpp2-84pm.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hxwh-jpp2-84pm",
"modified": "2024-09-03T14:44:52Z",
"modified": "2024-09-09T17:38:38Z",
"published": "2024-08-18T21:31:07Z",
"aliases": [
"CVE-2024-6221"
advisories/github-reviewed/2024/09/GHSA-fv4g-gwpj-74gr/GHSA-fv4g-gwpj-74gr.json
+2 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fv4g-gwpj-74gr",
"modified": "2024-09-05T18:39:37Z",
"modified": "2024-09-09T17:38:14Z",
"published": "2024-09-05T16:40:41Z",
"aliases": [
"CVE-2024-45401"
],
"summary": "Path traversal vulnerability in stripe-cli ",
"details": "### Impact\nA vulnerability exists in stripe-cli versions 1.11.1 and higher where a plugin package containing a manifest with a malformed plugin shortname installed using the --archive-url or --archive-path flags can overwrite arbitrary files.\n\nThe update addresses the path traversal vulnerability by removing the ability to install plugins from an archive URL or path.\n\nThere has been no evidence of exploitation of this vulnerability.\n\n### Recommendation\nUpgrade to stripe-cli v1.21.3.\n\n### For more information\nEmail us at [security@stripe.com](mailto:security@stripe.com)",
"details": "### Impact\nA vulnerability exists in stripe-cli versions 1.11.1 and higher where a plugin package containing a manifest with a malformed plugin shortname installed using the --archive-url or --archive-path flags can overwrite arbitrary files.\n\nThe update addresses the path traversal vulnerability by removing the ability to install plugins from an archive URL or path.\n\nThere has been no evidence of exploitation of this vulnerability.\n\n### Recommendation\nUpgrade to stripe-cli v1.21.3.\n\n### Acknowledgements\nThank you to [0xacb](https://hackerone.com/0xacb) and [bordiez](https://hackerone.com/bordiez) for reporting this vulnerability.\n\n### For more information\nEmail us at [security@stripe.com](mailto:security@stripe.com)",
"severity": [
{
"type": "CVSS_V3",