Publish Advisories

GHSA-7p8c-crfr-q93p
GHSA-rxgf-r843-g53h
GHSA-7p8c-crfr-q93p
GHSA-rxgf-r843-g53h
This commit is contained in:
advisory-database[bot]
2023-09-11 18:04:33 +00:00
parent 0d5af22a61
commit fa8ac8ea46
4 changed files with 182 additions and 70 deletions
@@ -0,0 +1,91 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7p8c-crfr-q93p",
"modified": "2023-09-11T18:03:59Z",
"published": "2023-09-09T00:30:48Z",
"aliases": [
"CVE-2023-42277"
],
"summary": "hutool Buffer Overflow vulnerability",
"details": "hutool v5.8.21 was discovered to contain a buffer overflow via the component `jsonObject.putByPath`.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "cn.hutool:hutool-core"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.8.21"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "cn.hutool:hutool-json"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.8.21"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42277"
},
{
"type": "WEB",
"url": "https://github.com/dromara/hutool/issues/3285"
},
{
"type": "WEB",
"url": "https://github.com/dromara/hutool/commit/9ba8f9ca5dd32441f2e0f150cb22fa178bb771d3"
},
{
"type": "PACKAGE",
"url": "https://github.com/dromara/hutool"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2023-09-11T18:03:59Z",
"nvd_published_at": null
}
}
@@ -0,0 +1,91 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rxgf-r843-g53h",
"modified": "2023-09-11T18:03:17Z",
"published": "2023-09-09T00:30:48Z",
"aliases": [
"CVE-2023-42276"
],
"summary": "hutool Buffer Overflow vulnerability",
"details": "hutool v5.8.21 was discovered to contain a buffer overflow via the component `jsonArray`.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "cn.hutool:hutool-core"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.8.21"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "cn.hutool:hutool-json"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.8.21"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42276"
},
{
"type": "WEB",
"url": "https://github.com/dromara/hutool/issues/3286"
},
{
"type": "WEB",
"url": "https://github.com/dromara/hutool/commit/9ba8f9ca5dd32441f2e0f150cb22fa178bb771d3"
},
{
"type": "PACKAGE",
"url": "https://github.com/dromara/hutool"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2023-09-11T18:03:17Z",
"nvd_published_at": null
}
}
@@ -1,35 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7p8c-crfr-q93p",
"modified": "2023-09-09T00:30:48Z",
"published": "2023-09-09T00:30:48Z",
"aliases": [
"CVE-2023-42277"
],
"details": "hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42277"
},
{
"type": "WEB",
"url": "https://github.com/dromara/hutool/issues/3285"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
@@ -1,35 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rxgf-r843-g53h",
"modified": "2023-09-09T00:30:48Z",
"published": "2023-09-09T00:30:48Z",
"aliases": [
"CVE-2023-42276"
],
"details": "hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42276"
},
{
"type": "WEB",
"url": "https://github.com/dromara/hutool/issues/3286"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}