netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-j67j-8hrp-76xm
GHSA-qjxf-6pr8-j87v
GHSA-qphh-5fv5-2mjj
This commit is contained in:
advisory-database[bot]
2024-10-18 21:57:54 +00:00
parent c78b4003e7
commit f374fc0719
3 changed files with 39 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/05/GHSA-j67j-8hrp-76xm/GHSA-j67j-8hrp-76xm.json
+13 -5
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j67j-8hrp-76xm",
"modified": "2023-08-29T18:25:18Z",
"modified": "2024-10-18T21:57:26Z",
"published": "2022-05-17T04:49:44Z",
"aliases": [
"CVE-2013-4195"
@@ -12,13 +12,17 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "plone"
"name": "Plone"
},
"ranges": [
{
@@ -40,7 +44,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "plone"
"name": "Plone"
},
"ranges": [
{
@@ -59,7 +63,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "plone"
"name": "Plone"
},
"ranges": [
{
@@ -89,6 +93,10 @@
"type": "PACKAGE",
"url": "https://github.com/plone/Plone"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-59.yaml"
},
{
"type": "WEB",
"url": "http://plone.org/products/plone-hotfix/releases/20130618"
@@ -106,7 +114,7 @@
"cwe_ids": [
"CWE-601"
],
"severity": "MODERATE",
"severity": "LOW",
"github_reviewed": true,
"github_reviewed_at": "2023-08-29T18:25:18Z",
"nvd_published_at": "2014-03-11T19:37:00Z"
advisories/github-reviewed/2022/05/GHSA-qjxf-6pr8-j87v/GHSA-qjxf-6pr8-j87v.json
+14 -3
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qjxf-6pr8-j87v",
"modified": "2024-04-29T16:39:16Z",
"modified": "2024-10-18T21:56:46Z",
"published": "2022-05-17T04:49:45Z",
"aliases": [
"CVE-2013-4198"
@@ -9,7 +9,14 @@
"summary": "Plone's authenticated users able to alter their password despite of policy definition",
"details": "`mail_password.py` in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password email functionality.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
@@ -83,6 +90,10 @@
"type": "PACKAGE",
"url": "https://github.com/plone/Plone"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-62.yaml"
},
{
"type": "WEB",
"url": "https://pypi.org/project/Products.PloneHotfix20130618"
@@ -102,7 +113,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-863"
],
"severity": "MODERATE",
"github_reviewed": true,
advisories/github-reviewed/2022/05/GHSA-qphh-5fv5-2mjj/GHSA-qphh-5fv5-2mjj.json
+12 -4
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qphh-5fv5-2mjj",
"modified": "2023-08-29T18:27:16Z",
"modified": "2024-10-18T21:55:32Z",
"published": "2022-05-17T04:49:45Z",
"aliases": [
"CVE-2013-4196"
@@ -12,13 +12,17 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "plone"
"name": "Plone"
},
"ranges": [
{
@@ -40,7 +44,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "plone"
"name": "Plone"
},
"ranges": [
{
@@ -59,7 +63,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "plone"
"name": "Plone"
},
"ranges": [
{
@@ -89,6 +93,10 @@
"type": "PACKAGE",
"url": "https://github.com/plone/Plone"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-60.yaml"
},
{
"type": "WEB",
"url": "http://plone.org/products/plone-hotfix/releases/20130618"