From fc5b9498f90dbceb70054e38fcf8aabd1d11a994 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 15 May 2024 20:55:52 +0000 Subject: [PATCH] Publish Advisories GHSA-58xv-7h9r-mx3c GHSA-86xw-vmcx-9mj4 GHSA-x6v2-xmrq-574j --- .../GHSA-58xv-7h9r-mx3c.json | 77 ++++++++++++++++++ .../GHSA-86xw-vmcx-9mj4.json | 77 ++++++++++++++++++ .../GHSA-x6v2-xmrq-574j.json | 80 +++++++++++++++++++ 3 files changed, 234 insertions(+) create mode 100644 advisories/github-reviewed/2024/05/GHSA-58xv-7h9r-mx3c/GHSA-58xv-7h9r-mx3c.json create mode 100644 advisories/github-reviewed/2024/05/GHSA-86xw-vmcx-9mj4/GHSA-86xw-vmcx-9mj4.json create mode 100644 advisories/github-reviewed/2024/05/GHSA-x6v2-xmrq-574j/GHSA-x6v2-xmrq-574j.json diff --git a/advisories/github-reviewed/2024/05/GHSA-58xv-7h9r-mx3c/GHSA-58xv-7h9r-mx3c.json b/advisories/github-reviewed/2024/05/GHSA-58xv-7h9r-mx3c/GHSA-58xv-7h9r-mx3c.json new file mode 100644 index 00000000000..d6f0f294171 --- /dev/null +++ b/advisories/github-reviewed/2024/05/GHSA-58xv-7h9r-mx3c/GHSA-58xv-7h9r-mx3c.json @@ -0,0 +1,77 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-58xv-7h9r-mx3c", + "modified": "2024-05-15T20:55:22Z", + "published": "2024-05-15T20:55:22Z", + "aliases": [ + + ], + "summary": "Drupal Malicious file upload with filenames stating with dot", + "details": "Drupal 8 core's file_save_upload() function does not strip the leading and trailing dot ('.') from filenames, like Drupal 7 did.\n\nUsers with the ability to upload files with any extension in conjunction with contributed modules may be able to use this to upload system files such as .htaccess in order to bypass protections afforded by Drupal's default .htaccess file.\n\nAfter this fix, file_save_upload() now trims leading and trailing dots from filenames.", + "severity": [ + + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.0.0" + }, + { + "fixed": "8.7.11" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.8.0" + }, + { + "fixed": "8.8.1" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/2019-12-18-2.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/drupal/drupal" + }, + { + "type": "WEB", + "url": "https://www.drupal.org/sa-core-2019-010" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-434" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-05-15T20:55:22Z", + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2024/05/GHSA-86xw-vmcx-9mj4/GHSA-86xw-vmcx-9mj4.json b/advisories/github-reviewed/2024/05/GHSA-86xw-vmcx-9mj4/GHSA-86xw-vmcx-9mj4.json new file mode 100644 index 00000000000..b2bc32b3943 --- /dev/null +++ b/advisories/github-reviewed/2024/05/GHSA-86xw-vmcx-9mj4/GHSA-86xw-vmcx-9mj4.json @@ -0,0 +1,77 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-86xw-vmcx-9mj4", + "modified": "2024-05-15T20:53:24Z", + "published": "2024-05-15T20:53:24Z", + "aliases": [ + + ], + "summary": "Drupal Content moderation Access bypass", + "details": "In some conditions, drupal content moderation fails to check a users access to use certain transitions, leading to an access bypass.", + "severity": [ + + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.0.0" + }, + { + "fixed": "8.5.8" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.6.0" + }, + { + "fixed": "8.6.2" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/2018-10-17-1.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/drupal/drupal" + }, + { + "type": "WEB", + "url": "https://www.drupal.org/sa-core-2018-006" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-05-15T20:53:24Z", + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2024/05/GHSA-x6v2-xmrq-574j/GHSA-x6v2-xmrq-574j.json b/advisories/github-reviewed/2024/05/GHSA-x6v2-xmrq-574j/GHSA-x6v2-xmrq-574j.json new file mode 100644 index 00000000000..9a6ddba6cc4 --- /dev/null +++ b/advisories/github-reviewed/2024/05/GHSA-x6v2-xmrq-574j/GHSA-x6v2-xmrq-574j.json @@ -0,0 +1,80 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x6v2-xmrq-574j", + "modified": "2024-05-15T20:54:52Z", + "published": "2024-05-15T20:54:52Z", + "aliases": [ + + ], + "summary": "Drupal Anonymous Open Redirect", + "details": "Drupal core and contributed modules frequently use a \"destination\" query string parameter in URLs to redirect users to a new destination after completing an action on the current page. Under certain circumstances, malicious users can use this parameter to construct a URL that will trick users into being redirected to a 3rd party website, thereby exposing the users to potential social engineering attacks.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.0.0" + }, + { + "fixed": "8.5.8" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "drupal/drupal" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.6.0" + }, + { + "fixed": "8.6.2" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/2018-10-17-3.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/drupal/drupal" + }, + { + "type": "WEB", + "url": "https://www.drupal.org/sa-core-2018-006" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-601" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-05-15T20:54:52Z", + "nvd_published_at": null + } +} \ No newline at end of file