diff --git a/advisories/github-reviewed/2022/05/GHSA-35c5-28pg-2qg4/GHSA-35c5-28pg-2qg4.json b/advisories/github-reviewed/2022/05/GHSA-35c5-28pg-2qg4/GHSA-35c5-28pg-2qg4.json new file mode 100644 index 00000000000..bf45359c3c4 --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-35c5-28pg-2qg4/GHSA-35c5-28pg-2qg4.json @@ -0,0 +1,294 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-35c5-28pg-2qg4", + "modified": "2024-04-25T22:11:25Z", + "published": "2022-05-14T03:10:52Z", + "aliases": [ + "CVE-2018-11407" + ], + "summary": "Symfony Authentication Bypass", + "details": "An issue was discovered in the LDAP component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7. It allows remote attackers to bypass authentication by logging in with a \"null\" password and valid username, which triggers an unauthenticated bind. **NOTE:** this issue exists because of an incomplete fix for CVE-2016-2403.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.8.0" + }, + { + "fixed": "2.8.37" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "3.3.17" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.4.0" + }, + { + "fixed": "3.4.7" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.0" + }, + { + "fixed": "4.0.7" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.8.0" + }, + { + "fixed": "2.8.37" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "3.3.17" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.4.0" + }, + { + "fixed": "3.4.7" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.0" + }, + { + "fixed": "4.0.7" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/symfony" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.8.0" + }, + { + "fixed": "2.8.37" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/symfony" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "3.3.17" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/symfony" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.4.0" + }, + { + "fixed": "3.4.7" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/symfony" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.0" + }, + { + "fixed": "4.0.7" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-11407" + }, + { + "type": "WEB", + "url": "https://github.com/symfony/symfony/pull/27377" + }, + { + "type": "WEB", + "url": "https://github.com/symfony/symfony/commit/b46fc93785d37ffa5d706a82cd175b33ce8f2934" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-core/CVE-2018-11407.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2018-11407.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2018-11407.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/symfony/symfony" + }, + { + "type": "WEB", + "url": "https://symfony.com/blog/cve-2018-11407-unauthorized-access-on-a-misconfigured-ldap-server-when-using-an-empty-password" + }, + { + "type": "WEB", + "url": "https://symfony.com/cve-2018-11407" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-287" + ], + "severity": "CRITICAL", + "github_reviewed": true, + "github_reviewed_at": "2024-04-25T22:11:25Z", + "nvd_published_at": "2018-06-13T16:29:00Z" + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2022/05/GHSA-89r2-5g34-2g47/GHSA-89r2-5g34-2g47.json b/advisories/github-reviewed/2022/05/GHSA-89r2-5g34-2g47/GHSA-89r2-5g34-2g47.json new file mode 100644 index 00000000000..ed36033899a --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-89r2-5g34-2g47/GHSA-89r2-5g34-2g47.json @@ -0,0 +1,429 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-89r2-5g34-2g47", + "modified": "2024-04-25T22:12:40Z", + "published": "2022-05-14T01:04:20Z", + "aliases": [ + "CVE-2018-19790" + ], + "summary": "Symfony Open Redirect", + "details": "An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. By using backslashes in the `_failure_path` input field of login forms, an attacker can work around the redirection target restrictions and effectively redirect the user to any domain after login.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security-http" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.7.38" + }, + { + "fixed": "2.7.50" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security-http" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.8.0" + }, + { + "fixed": "2.8.49" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security-http" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "3.4.20" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security-http" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.0" + }, + { + "fixed": "4.0.15" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security-http" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.1.0" + }, + { + "fixed": "4.1.9" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security-http" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.2.0" + }, + { + "fixed": "4.2.1" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.7.38" + }, + { + "fixed": "2.7.50" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.8.0" + }, + { + "fixed": "2.8.49" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "3.4.19" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.0" + }, + { + "fixed": "4.0.15" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.1.0" + }, + { + "fixed": "4.1.9" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.2.0" + }, + { + "fixed": "4.2.1" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/symfony" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.7.38" + }, + { + "fixed": "2.7.50" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/symfony" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.8.0" + }, + { + "fixed": "2.8.49" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/symfony" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "3.4.20" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/symfony" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.0" + }, + { + "fixed": "4.0.15" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/symfony" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.1.0" + }, + { + "fixed": "4.1.9" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19790" + }, + { + "type": "WEB", + "url": "https://github.com/symfony/symfony/commit/99a0cec0a6be39ce5ef38386e57339603b33ee5b" + }, + { + "type": "WEB", + "url": "https://www.debian.org/security/2019/dsa-4441" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20200227095826/http://www.securityfocus.com/bid/106249" + }, + { + "type": "WEB", + "url": "https://symfony.com/cve-2018-19790" + }, + { + "type": "WEB", + "url": "https://symfony.com/blog/cve-2018-19790-open-redirect-vulnerability-when-using-security-http" + }, + { + "type": "WEB", + "url": "https://seclists.org/bugtraq/2019/May/21" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OA4WVFN5FYPIXAPLWZI6N425JHHDSWAZ" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZMRJ7VTHCY5AZK24G4QGX36RLUDTDKE" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TD3E7FZIXLVFG3SMFJPDEKPZ26TJOW7" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OA4WVFN5FYPIXAPLWZI6N425JHHDSWAZ" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZMRJ7VTHCY5AZK24G4QGX36RLUDTDKE" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TD3E7FZIXLVFG3SMFJPDEKPZ26TJOW7" + }, + { + "type": "WEB", + "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html" + }, + { + "type": "PACKAGE", + "url": "https://github.com/symfony/symfony" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2018-19790.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2018-19790.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-http/CVE-2018-19790.yaml" + }, + { + "type": "WEB", + "url": "http://www.securityfocus.com/bid/106249" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-601" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-04-25T22:12:40Z", + "nvd_published_at": "2018-12-18T22:29:00Z" + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2022/05/GHSA-cqqh-94r6-wjrg/GHSA-cqqh-94r6-wjrg.json b/advisories/github-reviewed/2022/05/GHSA-cqqh-94r6-wjrg/GHSA-cqqh-94r6-wjrg.json new file mode 100644 index 00000000000..8abaef31cfb --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-cqqh-94r6-wjrg/GHSA-cqqh-94r6-wjrg.json @@ -0,0 +1,215 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cqqh-94r6-wjrg", + "modified": "2024-04-25T22:12:30Z", + "published": "2022-05-14T02:41:31Z", + "aliases": [ + "CVE-2017-16790" + ], + "summary": "Symfony SSRF Vulnerability via Form Component", + "details": "An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. When a form is submitted by the user, the request handler classes of the Form component merge POST data and uploaded files data into one array. This big array forms the data that are then bound to the form. At this stage there is no difference anymore between submitted POST data and uploaded files. A user can send a crafted HTTP request where the value of a \"FileType\" is sent as normal POST data that could be interpreted as a local file path on the server-side (for example, \"file:///etc/passwd\"). If the application did not perform any additional checks about the value submitted to the \"FileType\", the contents of the given file on the server could have been exposed to the attacker.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/form" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.7.0" + }, + { + "fixed": "2.7.38" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/form" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.8.0" + }, + { + "fixed": "2.8.31" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/form" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "3.2.14" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/form" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.3.0" + }, + { + "fixed": "3.3.13" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/symfony" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.7.0" + }, + { + "fixed": "2.7.38" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/symfony" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.8.0" + }, + { + "fixed": "2.8.31" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/symfony" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "3.2.14" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/symfony" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.3.0" + }, + { + "fixed": "3.3.13" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-16790" + }, + { + "type": "WEB", + "url": "https://github.com/symfony/symfony/pull/24993" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/form/CVE-2017-16790.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2017-16790.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/symfony/form" + }, + { + "type": "WEB", + "url": "https://symfony.com/blog/cve-2017-16790-ensure-that-submitted-data-are-uploaded-files" + }, + { + "type": "WEB", + "url": "https://symfony.com/cve-2017-16790" + }, + { + "type": "WEB", + "url": "https://www.debian.org/security/2018/dsa-4262" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-20", + "CWE-918" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-04-25T22:12:30Z", + "nvd_published_at": "2018-08-06T21:29:00Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-35c5-28pg-2qg4/GHSA-35c5-28pg-2qg4.json b/advisories/unreviewed/2022/05/GHSA-35c5-28pg-2qg4/GHSA-35c5-28pg-2qg4.json deleted file mode 100644 index 164eb338088..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-35c5-28pg-2qg4/GHSA-35c5-28pg-2qg4.json +++ /dev/null @@ -1,38 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-35c5-28pg-2qg4", - "modified": "2022-05-14T03:10:52Z", - "published": "2022-05-14T03:10:52Z", - "aliases": [ - "CVE-2018-11407" - ], - "details": "An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7. It allows remote attackers to bypass authentication by logging in with a \"null\" password and valid username, which triggers an unauthenticated bind. NOTE: this issue exists because of an incomplete fix for CVE-2016-2403.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" - } - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-11407" - }, - { - "type": "WEB", - "url": "https://symfony.com/blog/cve-2018-11407-unauthorized-access-on-a-misconfigured-ldap-server-when-using-an-empty-password" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-287" - ], - "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2018-06-13T16:29:00Z" - } -} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-89r2-5g34-2g47/GHSA-89r2-5g34-2g47.json b/advisories/unreviewed/2022/05/GHSA-89r2-5g34-2g47/GHSA-89r2-5g34-2g47.json deleted file mode 100644 index d7d033b525e..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-89r2-5g34-2g47/GHSA-89r2-5g34-2g47.json +++ /dev/null @@ -1,66 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-89r2-5g34-2g47", - "modified": "2022-05-14T01:04:20Z", - "published": "2022-05-14T01:04:20Z", - "aliases": [ - "CVE-2018-19790" - ], - "details": "An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. By using backslashes in the `_failure_path` input field of login forms, an attacker can work around the redirection target restrictions and effectively redirect the user to any domain after login.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" - } - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19790" - }, - { - "type": "WEB", - "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html" - }, - { - "type": "WEB", - "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TD3E7FZIXLVFG3SMFJPDEKPZ26TJOW7" - }, - { - "type": "WEB", - "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZMRJ7VTHCY5AZK24G4QGX36RLUDTDKE" - }, - { - "type": "WEB", - "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OA4WVFN5FYPIXAPLWZI6N425JHHDSWAZ" - }, - { - "type": "WEB", - "url": "https://seclists.org/bugtraq/2019/May/21" - }, - { - "type": "WEB", - "url": "https://symfony.com/blog/cve-2018-19790-open-redirect-vulnerability-when-using-security-http" - }, - { - "type": "WEB", - "url": "https://www.debian.org/security/2019/dsa-4441" - }, - { - "type": "WEB", - "url": "http://www.securityfocus.com/bid/106249" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-601" - ], - "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2018-12-18T22:29:00Z" - } -} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-cqqh-94r6-wjrg/GHSA-cqqh-94r6-wjrg.json b/advisories/unreviewed/2022/05/GHSA-cqqh-94r6-wjrg/GHSA-cqqh-94r6-wjrg.json deleted file mode 100644 index 69af4994cd3..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-cqqh-94r6-wjrg/GHSA-cqqh-94r6-wjrg.json +++ /dev/null @@ -1,42 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-cqqh-94r6-wjrg", - "modified": "2022-05-14T02:41:31Z", - "published": "2022-05-14T02:41:31Z", - "aliases": [ - "CVE-2017-16790" - ], - "details": "An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. When a form is submitted by the user, the request handler classes of the Form component merge POST data and uploaded files data into one array. This big array forms the data that are then bound to the form. At this stage there is no difference anymore between submitted POST data and uploaded files. A user can send a crafted HTTP request where the value of a \"FileType\" is sent as normal POST data that could be interpreted as a local file path on the server-side (for example, \"file:///etc/passwd\"). If the application did not perform any additional checks about the value submitted to the \"FileType\", the contents of the given file on the server could have been exposed to the attacker.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" - } - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-16790" - }, - { - "type": "WEB", - "url": "https://symfony.com/blog/cve-2017-16790-ensure-that-submitted-data-are-uploaded-files" - }, - { - "type": "WEB", - "url": "https://www.debian.org/security/2018/dsa-4262" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-20" - ], - "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2018-08-06T21:29:00Z" - } -} \ No newline at end of file