From ecfc45a2629575757a88b2d7f6cc803694f8ad17 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 25 Nov 2024 19:42:27 +0000
Subject: [PATCH] Publish Advisories

GHSA-93ww-43rr-79v3
GHSA-qpgc-w4mg-6v92
---
 .../GHSA-93ww-43rr-79v3.json                  | 84 +++++++++++++++++++
 .../GHSA-qpgc-w4mg-6v92.json                  | 39 ++++++++-
 2 files changed, 119 insertions(+), 4 deletions(-)
 create mode 100644 advisories/github-reviewed/2024/11/GHSA-93ww-43rr-79v3/GHSA-93ww-43rr-79v3.json
 rename advisories/{unreviewed => github-reviewed}/2024/11/GHSA-qpgc-w4mg-6v92/GHSA-qpgc-w4mg-6v92.json (51%)

diff --git a/advisories/github-reviewed/2024/11/GHSA-93ww-43rr-79v3/GHSA-93ww-43rr-79v3.json b/advisories/github-reviewed/2024/11/GHSA-93ww-43rr-79v3/GHSA-93ww-43rr-79v3.json
new file mode 100644
index 00000000000..e15eef7c36f
--- /dev/null
+++ b/advisories/github-reviewed/2024/11/GHSA-93ww-43rr-79v3/GHSA-93ww-43rr-79v3.json
@@ -0,0 +1,84 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-93ww-43rr-79v3",
+  "modified": "2024-11-25T19:40:46Z",
+  "published": "2024-11-25T19:40:46Z",
+  "aliases": [
+    "CVE-2024-10039"
+  ],
+  "summary": "Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination ",
+  "details": "A vulnerability was found in Keycloak. Deployments of Keycloak with a reverse proxy not using pass-through termination of TLS, with mTLS enabled, are affected. This issue may allow an attacker on the local network to authenticate as any user or client that leverages mTLS as the authentication mechanism.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.keycloak:keycloak-core"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            }
+          ]
+        }
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "< 24.0.9"
+      }
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.keycloak:keycloak-core"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "25.0.0"
+            },
+            {
+              "fixed": "26.0.6"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/keycloak/keycloak/security/advisories/GHSA-93ww-43rr-79v3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/keycloak/keycloak/issues/35217"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/keycloak/keycloak"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-295"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-11-25T19:40:46Z",
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/11/GHSA-qpgc-w4mg-6v92/GHSA-qpgc-w4mg-6v92.json b/advisories/github-reviewed/2024/11/GHSA-qpgc-w4mg-6v92/GHSA-qpgc-w4mg-6v92.json
similarity index 51%
rename from advisories/unreviewed/2024/11/GHSA-qpgc-w4mg-6v92/GHSA-qpgc-w4mg-6v92.json
rename to advisories/github-reviewed/2024/11/GHSA-qpgc-w4mg-6v92/GHSA-qpgc-w4mg-6v92.json
index 50b278183c5..ca2e9ca6617 100644
--- a/advisories/unreviewed/2024/11/GHSA-qpgc-w4mg-6v92/GHSA-qpgc-w4mg-6v92.json
+++ b/advisories/github-reviewed/2024/11/GHSA-qpgc-w4mg-6v92/GHSA-qpgc-w4mg-6v92.json
@@ -1,20 +1,43 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qpgc-w4mg-6v92",
-  "modified": "2024-11-25T18:33:26Z",
+  "modified": "2024-11-25T19:41:56Z",
   "published": "2024-11-25T18:33:26Z",
   "aliases": [
     "CVE-2024-27134"
   ],
+  "summary": "MLflow's excessive directory permissions allow local privilege escalation",
   "details": "Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the spark_udf() MLflow API is called.",
   "severity": [
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "mlflow"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "2.16.0"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -24,6 +47,14 @@
     {
       "type": "WEB",
       "url": "https://github.com/mlflow/mlflow/pull/10874"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/mlflow/mlflow/commit/0b1d995d66a678153e01ed3040f3f4dfc16a0d6b"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/mlflow/mlflow"
     }
   ],
   "database_specific": {
@@ -31,8 +62,8 @@
       "CWE-276"
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-11-25T19:41:56Z",
     "nvd_published_at": "2024-11-25T14:15:06Z"
   }
 }
\ No newline at end of file