From f6fd93604cb1bd77a8805b55650706a70b56abba Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 11 Feb 2025 17:23:20 +0000 Subject: [PATCH] Publish Advisories GHSA-389x-839f-4rhx GHSA-vr5f-php7-rg24 --- .../2025/02/GHSA-389x-839f-4rhx/GHSA-389x-839f-4rhx.json | 2 +- .../2025/02/GHSA-vr5f-php7-rg24/GHSA-vr5f-php7-rg24.json | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/advisories/github-reviewed/2025/02/GHSA-389x-839f-4rhx/GHSA-389x-839f-4rhx.json b/advisories/github-reviewed/2025/02/GHSA-389x-839f-4rhx/GHSA-389x-839f-4rhx.json index 79938643877..35a86e8c975 100644 --- a/advisories/github-reviewed/2025/02/GHSA-389x-839f-4rhx/GHSA-389x-839f-4rhx.json +++ b/advisories/github-reviewed/2025/02/GHSA-389x-839f-4rhx/GHSA-389x-839f-4rhx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-389x-839f-4rhx", - "modified": "2025-02-11T00:33:46Z", + "modified": "2025-02-11T17:22:39Z", "published": "2025-02-10T18:14:47Z", "aliases": [ "CVE-2025-25193" diff --git a/advisories/github-reviewed/2025/02/GHSA-vr5f-php7-rg24/GHSA-vr5f-php7-rg24.json b/advisories/github-reviewed/2025/02/GHSA-vr5f-php7-rg24/GHSA-vr5f-php7-rg24.json index 0dcecdb6d1a..64114784dc6 100644 --- a/advisories/github-reviewed/2025/02/GHSA-vr5f-php7-rg24/GHSA-vr5f-php7-rg24.json +++ b/advisories/github-reviewed/2025/02/GHSA-vr5f-php7-rg24/GHSA-vr5f-php7-rg24.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-vr5f-php7-rg24", - "modified": "2025-02-07T21:38:34Z", + "modified": "2025-02-11T17:22:14Z", "published": "2025-02-07T20:27:43Z", "aliases": [ "CVE-2025-24980" ], "summary": "Pimcore Admin Classic Bundle allows user enumeration", - "details": "Description\nSummary\n\nPimcore Admin Classic Bundle allows attackers to enumerate valid accounts because the Forgot password functionality uses different messages when the account is valid vs not.\n\nDetails\n-> error message discloses existing accounts and leads to user enumeration on the target via \"Forgot password\" function. since no generic error message is being implemented.\n\nPoC\n![image](https://github.com/user-attachments/assets/866e4cd1-25b2-4ed8-8292-6c528ae660d5)\n\n\nEnter first a valid account email address and click on submit\n![image](https://github.com/user-attachments/assets/7aaa1723-b0f9-4a76-b943-e1b01d1f37a9)\n\n\nA green message validating the account exists is shown and a login link is sent to the email\n![image](https://github.com/user-attachments/assets/7adb1f05-7339-4265-95c9-4d4817d4a6a1)\n\n\nnow go back and use a random email from temp-mail to test with a non existant account\n![image](https://github.com/user-attachments/assets/5ce0bb53-16c3-4f34-9541-9e01b49c7472)\n\n\n![image](https://github.com/user-attachments/assets/213e838f-0944-484e-93bf-7468ed9e699d)\n\n\nclick on submit and get an error in red that a problem occured\n![image](https://github.com/user-attachments/assets/c30dc56f-e612-46a0-945d-e9dc5f14da39)\n\n\nImpact\nuser enumeration is a confidentiality threat , that could potentially lead to an attacker to enumerate valid accounts and maybe taking over accounts in case combined with credential stuffing on an organisation .\n\nA remedition would be to change the error message in both cases ( valid and invalid emails ) to what we call a \"synchronised error \" it would be for example : \" if the given email address is linked to an account , then a login link would be sent to that email \" or something along those lines", + "details": "pimcore/admin-ui-classic-bundle provides a Backend UI for Pimcore. In affected versions an error message discloses existing accounts and leads to user enumeration on the target via \"Forgot password\" function. No generic error message has been implemented. This issue has been addressed in version 1.7.4 and all users are advised to upgrade. There are no known workarounds for this vulnerability.", "severity": [ { "type": "CVSS_V4",