netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-3qg4-2fcm-c8f9
GHSA-7cvw-wrj9-q5fp
GHSA-fhgh-fjh9-vq62
GHSA-frv8-xjcp-hrm2
GHSA-h6px-pvfh-q2jv
GHSA-m2pf-4pf8-45j2
GHSA-m3xp-4hf3-qfpp
GHSA-h6px-pvfh-q2jv
GHSA-m3xp-4hf3-qfpp
This commit is contained in:
advisory-database[bot]
2025-04-12 02:35:45 +00:00
parent cdfea5dc31
commit fb5e3eaa2d
9 changed files with 365 additions and 121 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-3qg4-2fcm-c8f9/GHSA-3qg4-2fcm-c8f9.json → advisories/github-reviewed/2022/05/GHSA-3qg4-2fcm-c8f9/GHSA-3qg4-2fcm-c8f9.json
+38 -6
View File
@@ -1,19 +1,49 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3qg4-2fcm-c8f9",
"modified": "2025-04-11T03:59:16Z",
"modified": "2025-04-12T02:34:33Z",
"published": "2022-05-13T01:13:18Z",
"aliases": [
"CVE-2011-4289"
],
"summary": "Moodle does not recogniz configuration setting that makes e-mail addresses visible only to course members",
"details": "Moodle 2.0.x before 2.0.3 does not recognize the configuration setting that makes e-mail addresses visible only to course members, which allows remote authenticated users to obtain sensitive address information by reading a full profile page.",
"severity": [],
"affected": [],
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U"
}
],
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "moodle/moodle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2.0.0"
},
{
"fixed": "2.0.3"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4289"
},
{
"type": "PACKAGE",
"url": "http://git.moodle.org"
},
{
"type": "WEB",
"url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=181991e791a13a3c383234718c26c499e31d3df1"
@@ -32,10 +62,12 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2025-04-12T02:34:33Z",
"nvd_published_at": "2012-07-16T10:28:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-7cvw-wrj9-q5fp/GHSA-7cvw-wrj9-q5fp.json → advisories/github-reviewed/2022/05/GHSA-7cvw-wrj9-q5fp/GHSA-7cvw-wrj9-q5fp.json
+35 -5
View File
@@ -1,19 +1,49 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7cvw-wrj9-q5fp",
"modified": "2025-04-11T03:59:16Z",
"modified": "2025-04-12T02:33:12Z",
"published": "2022-05-13T01:13:08Z",
"aliases": [
"CVE-2011-4133"
],
"summary": "Moodle vulnerable to Cross-Site Request Forgery",
"details": "Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block.",
"severity": [],
"affected": [],
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"
}
],
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "moodle/moodle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "1.9.0"
},
{
"fixed": "1.9.11"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4133"
},
{
"type": "PACKAGE",
"url": "https://github.com/moodle/moodle"
},
{
"type": "WEB",
"url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=8f031d5431c1204197b1482fd6c63bc87a19a476"
@@ -36,8 +66,8 @@
"CWE-352"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2025-04-12T02:33:12Z",
"nvd_published_at": "2012-07-16T10:28:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-fhgh-fjh9-vq62/GHSA-fhgh-fjh9-vq62.json → advisories/github-reviewed/2022/05/GHSA-fhgh-fjh9-vq62/GHSA-fhgh-fjh9-vq62.json
+35 -5
View File
@@ -1,19 +1,49 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fhgh-fjh9-vq62",
"modified": "2025-04-11T03:59:16Z",
"modified": "2025-04-12T02:32:59Z",
"published": "2022-05-13T01:13:18Z",
"aliases": [
"CVE-2011-4292"
],
"summary": "Moodle allows remote authenticated users to cause a denial of service (invalid database records)",
"details": "Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted comments operations.",
"severity": [],
"affected": [],
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U"
}
],
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "moodle/moodle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2.0.0"
},
{
"fixed": "2.0.3"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4292"
},
{
"type": "PACKAGE",
"url": "http://git.moodle.org"
},
{
"type": "WEB",
"url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=acb4688d29a7cc028803ee3d81edc7f1b6515c64"
@@ -36,8 +66,8 @@
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2025-04-12T02:32:59Z",
"nvd_published_at": "2012-07-16T10:28:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-frv8-xjcp-hrm2/GHSA-frv8-xjcp-hrm2.json → advisories/github-reviewed/2022/05/GHSA-frv8-xjcp-hrm2/GHSA-frv8-xjcp-hrm2.json
+35 -13
View File
@@ -1,19 +1,49 @@
{
"schema_version": "1.4.0",
"id": "GHSA-frv8-xjcp-hrm2",
"modified": "2025-04-11T03:38:47Z",
"modified": "2025-04-12T02:34:11Z",
"published": "2022-05-17T05:48:25Z",
"aliases": [
"CVE-2010-2958"
],
"summary": "phpMyAdmin Cross-site Scripting vulnerability",
"details": "Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to a PHP backtrace and error messages (aka debugging messages), a different vulnerability than CVE-2010-3056.",
"severity": [],
"affected": [],
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "phpmyadmin/phpmyadmin"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.0.0"
},
{
"fixed": "3.3.6"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2958"
},
{
"type": "PACKAGE",
"url": "https://github.com/phpmyadmin/composer"
},
{
"type": "WEB",
"url": "http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=133a77fac7d31a38703db2099a90c1b49de62e37"
@@ -22,10 +52,6 @@
"type": "WEB",
"url": "http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commit;h=133a77fac7d31a38703db2099a90c1b49de62e37"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/41206"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2010/09/01/2"
@@ -37,10 +63,6 @@
{
"type": "WEB",
"url": "http://www.phpmyadmin.net/home_page/security/PMASA-2010-6.php"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2010/2242"
}
],
"database_specific": {
@@ -48,8 +70,8 @@
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2025-04-12T02:34:11Z",
"nvd_published_at": "2010-09-08T20:00:00Z"
}
}
advisories/github-reviewed/2022/05/GHSA-h6px-pvfh-q2jv/GHSA-h6px-pvfh-q2jv.json
+92
View File
@@ -0,0 +1,92 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h6px-pvfh-q2jv",
"modified": "2025-04-12T02:32:27Z",
"published": "2022-05-13T01:13:15Z",
"aliases": [
"CVE-2011-4299"
],
"summary": "Moodle vulnerable to Cross-Site Scripting",
"details": "Cross-site scripting (XSS) vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U"
}
],
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "moodle/moodle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2.0.0"
},
{
"fixed": "2.0.5"
}
]
}
]
},
{
"package": {
"ecosystem": "Packagist",
"name": "moodle/moodle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2.1.0"
},
{
"fixed": "2.1.2"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4299"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=747444"
},
{
"type": "PACKAGE",
"url": "https://git.moodle.org"
},
{
"type": "WEB",
"url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=a459fd90625ae44d7b3ac10b65da2dc631a418e7"
},
{
"type": "WEB",
"url": "http://git.moodle.org/gw?p=moodle.git;a=commit;h=a459fd90625ae44d7b3ac10b65da2dc631a418e7"
},
{
"type": "WEB",
"url": "http://moodle.org/mod/forum/discuss.php?d=188310"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "LOW",
"github_reviewed": true,
"github_reviewed_at": "2025-04-12T02:32:27Z",
"nvd_published_at": "2012-07-11T10:26:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-m2pf-4pf8-45j2/GHSA-m2pf-4pf8-45j2.json → advisories/github-reviewed/2022/05/GHSA-m2pf-4pf8-45j2/GHSA-m2pf-4pf8-45j2.json
+38 -6
View File
@@ -1,19 +1,49 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m2pf-4pf8-45j2",
"modified": "2025-04-11T03:59:16Z",
"modified": "2025-04-12T02:34:48Z",
"published": "2022-05-13T01:13:18Z",
"aliases": [
"CVE-2011-4291"
],
"summary": "Moodle allows remote authenticated users to cause a denial of service (invalid database records)",
"details": "Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted ratings operations.",
"severity": [],
"affected": [],
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U"
}
],
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "moodle/moodle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2.0.0"
},
{
"fixed": "2.0.3"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4291"
},
{
"type": "PACKAGE",
"url": "http://git.moodle.org"
},
{
"type": "WEB",
"url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=34b5e856b0c98aab3f5317119093628df0834957"
@@ -32,10 +62,12 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-20"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2025-04-12T02:34:48Z",
"nvd_published_at": "2012-07-16T10:28:00Z"
}
}
advisories/github-reviewed/2022/05/GHSA-m3xp-4hf3-qfpp/GHSA-m3xp-4hf3-qfpp.json
+92
View File
@@ -0,0 +1,92 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m3xp-4hf3-qfpp",
"modified": "2025-04-12T02:33:23Z",
"published": "2022-05-13T01:13:09Z",
"aliases": [
"CVE-2011-4283"
],
"summary": "Moodle allows remote attackers to obtain sensitive information",
"details": "Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS enterprise enrolment file in the course-files area, which allows remote attackers to obtain sensitive information via a request for imsenterprise-enrol.xml.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U"
}
],
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "moodle/moodle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "1.9.0"
},
{
"fixed": "1.9.11"
}
]
}
]
},
{
"package": {
"ecosystem": "Packagist",
"name": "moodle/moodle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2.0.0"
},
{
"fixed": "2.0.2"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4283"
},
{
"type": "PACKAGE",
"url": "https://github.com/moodle/moodle"
},
{
"type": "WEB",
"url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=6fde0dac702b3d0954bd1c34d427944e9cd89ae6"
},
{
"type": "WEB",
"url": "http://git.moodle.org/gw?p=moodle.git;a=commit;h=6fde0dac702b3d0954bd1c34d427944e9cd89ae6"
},
{
"type": "WEB",
"url": "http://moodle.org/mod/forum/discuss.php?d=170009"
},
{
"type": "WEB",
"url": "http://openwall.com/lists/oss-security/2011/11/14/1"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2025-04-12T02:33:23Z",
"nvd_published_at": "2012-07-16T10:28:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-h6px-pvfh-q2jv/GHSA-h6px-pvfh-q2jv.json
-43
View File
@@ -1,43 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h6px-pvfh-q2jv",
"modified": "2025-04-11T03:59:08Z",
"published": "2022-05-13T01:13:15Z",
"aliases": [
"CVE-2011-4299"
],
"details": "Cross-site scripting (XSS) vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4299"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=747444"
},
{
"type": "WEB",
"url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=a459fd90625ae44d7b3ac10b65da2dc631a418e7"
},
{
"type": "WEB",
"url": "http://git.moodle.org/gw?p=moodle.git;a=commit;h=a459fd90625ae44d7b3ac10b65da2dc631a418e7"
},
{
"type": "WEB",
"url": "http://moodle.org/mod/forum/discuss.php?d=188310"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2012-07-11T10:26:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-m3xp-4hf3-qfpp/GHSA-m3xp-4hf3-qfpp.json
-43
View File
@@ -1,43 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m3xp-4hf3-qfpp",
"modified": "2025-04-11T03:59:16Z",
"published": "2022-05-13T01:13:09Z",
"aliases": [
"CVE-2011-4283"
],
"details": "Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS enterprise enrolment file in the course-files area, which allows remote attackers to obtain sensitive information via a request for imsenterprise-enrol.xml.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4283"
},
{
"type": "WEB",
"url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=6fde0dac702b3d0954bd1c34d427944e9cd89ae6"
},
{
"type": "WEB",
"url": "http://git.moodle.org/gw?p=moodle.git;a=commit;h=6fde0dac702b3d0954bd1c34d427944e9cd89ae6"
},
{
"type": "WEB",
"url": "http://moodle.org/mod/forum/discuss.php?d=170009"
},
{
"type": "WEB",
"url": "http://openwall.com/lists/oss-security/2011/11/14/1"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2012-07-16T10:28:00Z"
}
}