Publish Advisories

GHSA-5227-22f5-m93m GHSA-5688-q84f-ghjr GHSA-8rmf-hhqr-454p GHSA-cv6f-rw49-r829 GHSA-hfwr-76cx-qgg7 GHSA-hrff-h5x9-vqrp GHSA-hv5j-98fx-p9cw GHSA-mf45-qm92-8v76 GHSA-mhj4-9938-5fpw GHSA-p2jc-29qr-48gx GHSA-qfq8-mv2q-hvwp GHSA-qr4v-frmp-3xrc GHSA-r6wv-x735-w2v5
github · Jan 11, 2025 · 27c51ac · 27c51ac
1 parent 320d76d
commit 27c51ac
Show file tree

Hide file tree

Showing 13 changed files with 508 additions and 0 deletions.
diff --git a/advisories/unreviewed/2025/01/GHSA-5227-22f5-m93m/GHSA-5227-22f5-m93m.json b/advisories/unreviewed/2025/01/GHSA-5227-22f5-m93m/GHSA-5227-22f5-m93m.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5227-22f5-m93m",
+  "modified": "2025-01-11T03:30:40Z",
+  "published": "2025-01-11T03:30:40Z",
+  "aliases": [
+    "CVE-2024-42168"
+  ],
+  "details": "HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability.  An attacker can deploy a web server that returns malicious content, and then induce the application to retrieve and process that content.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42168"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-610"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-11T03:15:21Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-5688-q84f-ghjr/GHSA-5688-q84f-ghjr.json b/advisories/unreviewed/2025/01/GHSA-5688-q84f-ghjr/GHSA-5688-q84f-ghjr.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5688-q84f-ghjr",
+  "modified": "2025-01-11T03:30:40Z",
+  "published": "2025-01-11T03:30:40Z",
+  "aliases": [
+    "CVE-2024-12505"
+  ],
+  "details": "The Trackserver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tsmap' shortcode in all versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12505"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/trackserver/trunk/class-trackserver-shortcode.php#L281"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/trackserver/trunk/class-trackserver-shortcode.php#L46"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/trackserver/trunk/class-trackserver-shortcode.php#L57"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3219730%40trackserver&new=3219730%40trackserver&sfp_email=&sfph_mail="
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/63ade911-f9e7-4b1c-87c8-78e7664feff7?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-11T03:15:21Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-8rmf-hhqr-454p/GHSA-8rmf-hhqr-454p.json b/advisories/unreviewed/2025/01/GHSA-8rmf-hhqr-454p/GHSA-8rmf-hhqr-454p.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8rmf-hhqr-454p",
+  "modified": "2025-01-11T03:30:40Z",
+  "published": "2025-01-11T03:30:40Z",
+  "aliases": [
+    "CVE-2024-12472"
+  ],
+  "details": "The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphr_duplicate_post() due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to by duplicating the post.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12472"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3219375%40post-duplicator&new=3219375%40post-duplicator&sfp_email=&sfph_mail="
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3071b2dc-9673-4e30-bd04-7404eb6a1ed9?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-639"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-11T03:15:21Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-cv6f-rw49-r829/GHSA-cv6f-rw49-r829.json b/advisories/unreviewed/2025/01/GHSA-cv6f-rw49-r829/GHSA-cv6f-rw49-r829.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cv6f-rw49-r829",
+  "modified": "2025-01-11T03:30:40Z",
+  "published": "2025-01-11T03:30:40Z",
+  "aliases": [
+    "CVE-2025-0103"
+  ],
+  "details": "An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. This vulnerability also enables attackers to create and read arbitrary files on the Expedition system.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Amber"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0103"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.paloaltonetworks.com/PAN-SA-2025-0001"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-11T03:15:22Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-hfwr-76cx-qgg7/GHSA-hfwr-76cx-qgg7.json b/advisories/unreviewed/2025/01/GHSA-hfwr-76cx-qgg7/GHSA-hfwr-76cx-qgg7.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hfwr-76cx-qgg7",
+  "modified": "2025-01-11T03:30:40Z",
+  "published": "2025-01-11T03:30:40Z",
+  "aliases": [
+    "CVE-2024-42169"
+  ],
+  "details": "HCL MyXalytics is affected by insecure direct object references.  It occurs due to missing access control checks, which fail to verify whether a user should be allowed to access specific data.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42169"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-639"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-11T03:15:21Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-hrff-h5x9-vqrp/GHSA-hrff-h5x9-vqrp.json b/advisories/unreviewed/2025/01/GHSA-hrff-h5x9-vqrp/GHSA-hrff-h5x9-vqrp.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hrff-h5x9-vqrp",
+  "modified": "2025-01-11T03:30:40Z",
+  "published": "2025-01-11T03:30:40Z",
+  "aliases": [
+    "CVE-2024-11327"
+  ],
+  "details": "The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.4.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11327"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/clickwhale/tags/2.3.0/includes/admin/links/Clickwhale_Links_List_Table.php#L384"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3219341%40clickwhale&new=3219341%40clickwhale&sfp_email=&sfph_mail="
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/96c5836f-6d33-4a56-b30b-5e5d95b81b6b?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-11T03:15:19Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-hv5j-98fx-p9cw/GHSA-hv5j-98fx-p9cw.json b/advisories/unreviewed/2025/01/GHSA-hv5j-98fx-p9cw/GHSA-hv5j-98fx-p9cw.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hv5j-98fx-p9cw",
+  "modified": "2025-01-11T03:30:40Z",
+  "published": "2025-01-11T03:30:40Z",
+  "aliases": [
+    "CVE-2024-12627"
+  ],
+  "details": "The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.5 via deserialization of untrusted input from post content passed to the capture_email AJAX action. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12627"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3219466/coupon-x-discount-pop-up/trunk/inc/class-cx-rest.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/468be776-8804-4d2f-8eaf-841bbf598ef9?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-502"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-11T03:15:21Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-mf45-qm92-8v76/GHSA-mf45-qm92-8v76.json b/advisories/unreviewed/2025/01/GHSA-mf45-qm92-8v76/GHSA-mf45-qm92-8v76.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mf45-qm92-8v76",
+  "modified": "2025-01-11T03:30:41Z",
+  "published": "2025-01-11T03:30:41Z",
+  "aliases": [
+    "CVE-2025-0105"
+  ],
+  "details": "An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to delete arbitrary files accessible to the www-data user on the host filesystem.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Green"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0105"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.paloaltonetworks.com/PAN-SA-2025-0001"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-73"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-11T03:15:22Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/01/GHSA-mhj4-9938-5fpw/GHSA-mhj4-9938-5fpw.json b/advisories/unreviewed/2025/01/GHSA-mhj4-9938-5fpw/GHSA-mhj4-9938-5fpw.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mhj4-9938-5fpw",
+  "modified": "2025-01-11T03:30:41Z",
+  "published": "2025-01-11T03:30:41Z",
+  "aliases": [
+    "CVE-2025-0107"
+  ],
+  "details": "An OS command injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls running PAN-OS software.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Green"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0107"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.paloaltonetworks.com/PAN-SA-2025-0001"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-78"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-11T03:15:22Z"
+  }
+}